last executing test programs:

6m27.010359959s ago: executing program 32 (id=2814):
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4001}, 0x1000000)

6m26.837349521s ago: executing program 33 (id=2806):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8005, 0x0, 0xb, 0x1ff, 0xfffffe0000000003, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mlock(&(0x7f0000a93000/0x4000)=nil, 0x4000)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40814}, 0x24008014)
io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}])
ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000f40)=ANY=[@ANYBLOB])
r3 = syz_open_dev$dri(0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3})
write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="9cc3e300", @ANYRES16=r5, @ANYBLOB="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"], 0x79c}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = syz_open_dev$loop(&(0x7f00000016c0), 0x80000000, 0x101100)
ioctl$BLKIOOPT(r7, 0x1279, &(0x7f0000001700))
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
recvmsg(r6, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}, {&(0x7f000000bec0)=""/27, 0x1b}], 0x2}, 0x20)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x2e)

6m26.676754029s ago: executing program 34 (id=2808):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff)
r3 = timerfd_create(0x0, 0x0)
unshare(0xc000400)
r4 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
ppoll(&(0x7f0000000000)=[{r4, 0x4040}], 0x1, 0x0, 0x0, 0x0)
readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1)
fcntl$setsig(r1, 0xa, 0x12)
ppoll(&(0x7f0000000140)=[{r2, 0x8002}], 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x0)
r5 = dup2(r1, r2)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000000614100027bd7000fbdbdf250800010000000000372fb14976dd62c1e3e1cebdd049c631411b604baa8e592eced48de64159f9ddfd811c936bea3b14146d83102fe9a7f403782c855feecfb5dbab6ebc6e4fb97f3da929254c46a206255c54e7162c6e62879d91b22aa63ee89e8886f6d4db92a1ead1ddb8884995c8d42e900b6bb2a308d3bc4ede6108fa76e20c8b1f3b68ec92fe804983"], 0x18}}, 0x48000)
r6 = getpgid(0x0)
fcntl$setown(r1, 0x8, r6)
tkill(r0, 0x13)

6m26.256547548s ago: executing program 35 (id=2815):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(0xffffffffffffffff)
dup(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4'], 0x34}, 0x1, 0x0, 0x0, 0x40d0}, 0x2000c001)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100))
syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r4 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r5=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r5], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1})

6m26.109804756s ago: executing program 36 (id=2813):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) (async)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)={{0x12, 0x1, 0x0, 0x4c, 0x2c, 0x5a, 0x10, 0x45e, 0x775, 0x49f8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xfd, 0x0, 0x0, [{{0x9, 0x4, 0xc7, 0x0, 0x0, 0xe2, 0xe5, 0xc}}]}}]}}, 0x0) (async)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000003f00090000000000000000fd030000000400fd00080008"], 0x20}}, 0x4004080) (async)
sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) (async)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x9, @loopback, 0x2}], 0x4c) (async)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000180)) (async)
r4 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x4, 0x0, 0x2, 0x0, 0x10}) (async)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) (async)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) (async)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v3={0x3000000, [{0x8}, {0x0, 0x4}]}, 0x18, 0x1) (async)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) (async)
mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) (async)
r5 = socket$kcm(0x29, 0x7, 0x0)
sendmsg$kcm(r5, &(0x7f0000001840)={&(0x7f0000000040)=@hci={0x1f, 0x2, 0x2}, 0x80, &(0x7f00000014c0)=[{&(0x7f00000000c0)="5337063f7716e011f774d1fb2050cd4665faa13864384d2cd637fadb40165847a8e29c6301426c7b9d3d4f7de4dc6c13468236c0f6012eb353de58ce5e514bc5ed9dbe4454c9350983cf0dd97154b059232e4a7ddb7977735cc1f85c445254ce2aaa1a1124c0b535e941a4f7b77bf79e3f332c519af247c92c0a22ecb00a89dac13230c0f83208fbb0156b25281ff3cd3b9fbdaeb708ba5c1d2a9e6d69c99d873b3671cb337f15f34261aac7fd6e33609e24e74f944de8ae9e3f667dda818f02eb1fa6ea7ca2cb", 0xc7}, {0x0}, {0x0}, {&(0x7f0000001280)="a2178e645d90fc41e73a83e6ae9681f1945743ad33dd93f108f00c3299783ede6f63562eb042e67aa58972fa1675e90f6ae2a084126b65f6ab285b6873fc512ade77aa85aa8734e227f9bce02c22a9c0a738427a77d3191f16a8c453a561874f2b41f5209d8632827f3b8e5e266935c6027000f9df1b565647889cfdbffe3a53126931ea7e5aba432752364b5220076189f3c660351f16ee7be87e6c2cdc21ec698971e3c5265b6adf3137", 0xab}, {&(0x7f0000001340)="87c22d7f11264381435ecf0f3dfc60875be9cf80a71f30113284ca9583abff263584ca6ae182fe5385553eaa4acc91daa23ebbc7dd97724f9854948cb0f7740a8f2370f15443fe23a3ca1810daf9234ea29257b01542019e4734e0bdbd6c744133a8b4cb6fa808a290ed0ac5ca8473196b9dc97df0bacc1ae9bd3bd4707e47185b34e6893fc2f629d72a0da9cd22c9d9b4e61240c86b2cdfc110578b68ee5dff986c302d7462685db09712ffd4665665e9c44d296c56cc18949c71899d46b349fd50505f0d038c7ffe44f12f9ce9a6a1f15509913c6740c303a7d6036170679c65367a638e7278ec107a29e6ecc9dc79041c8b9f129f04cf88bf3a", 0xfb}, {0x0}], 0x6, &(0x7f0000002000)=ANY=[@ANYBLOB="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"/870], 0x2c8}, 0x40010)
r6 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r6, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

2m32.462842438s ago: executing program 7 (id=3499):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='highspeed', 0x9)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfb3, @loopback, 0x2000003}, 0x1c)
r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x0, 0x0)
mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0)
mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
close(r2)
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
rseq(0x0, 0x0, 0x0, 0x0)
shutdown(r1, 0x1)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_script(r5, &(0x7f0000000000), 0x4)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, &(0x7f0000000fc0))
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000004c0)={'erspan0\x00', <r7=>0x0, 0x700, 0x20, 0xfffffffb, 0x81, {{0x14, 0x4, 0x0, 0x9, 0x50, 0x68, 0x0, 0x1, 0x29, 0x0, @remote, @remote, {[@ssrr={0x89, 0xf, 0x2f, [@dev={0xac, 0x14, 0x14, 0xe}, @remote, @broadcast]}, @timestamp_addr={0x44, 0xc, 0x88, 0x1, 0x0, [{@rand_addr=0x64010101}]}, @rr={0x7, 0x7, 0xbb, [@broadcast]}, @ssrr={0x89, 0x17, 0xd9, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x39}, @broadcast, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})
getsockname$packet(r4, &(0x7f0000000c00)={0x11, 0x0, <r8=>0x0}, &(0x7f0000000c40)=0x14)
sendmmsg$inet(r6, &(0x7f0000002440)=[{{&(0x7f0000000140)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000340)="33c5517629fdbf9e8e9ccc73dc72ca620359b807a271955110a1448a832756a9374060c13d7e600e37208bec05e871244b8cea1aee9149c47d14fda25b1720c168efc0e47072e030215b90f0e7d209061c2722008c6d9cc9771e5bea7123c0d736c22187c74877345d7de5968d3574109702c2850be00fd9706af3f5ba3aff8b53ffb6ae978780bd5dad843d07de9e5312", 0x91}, {&(0x7f0000000180)="4d59dca2d76cfa1cec6422685f5839", 0xf}, {&(0x7f0000000400)="1517fe19bfa89e9d33f22413683294211b3b8f6ca6dd464b2804bcccf248b43c1511767c9d6985c08ff2faf70400d506f4d2bdfb84af0de4e0a79cfd0667a9fe1ef6311c2b64a20c3d4c8d541488755e1734254587efa925505ff603b3d67d57a73486cffe20f32dc1a1d9521404c8693e0b00a7438d74da1bbf17076b6818c6f45747dbea8f075153f6fb1be7451576bb0886b891da7c1ce00a9b91b119faadbd474938", 0xa4}], 0x3, &(0x7f0000000540)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3ff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@lsrr={0x83, 0x27, 0x6c, [@remote, @rand_addr=0x64010100, @remote, @broadcast, @rand_addr=0x64010102, @multicast1, @multicast1, @loopback, @private=0xa010101]}]}}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @empty}}}, @ip_retopts={{0xb8, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3c, 0xb9, 0x3, 0x7, [{@loopback, 0xffff6196}, {@multicast2, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fffffff}, {@remote, 0x3}, {@broadcast, 0x4a0}, {@multicast1, 0x1}, {@local, 0x5290}]}, @cipso={0x86, 0x33, 0x1, [{0x1, 0xf, "c899b87abeaa3bb06cb80e8484"}, {0x2, 0xf, "5ff5795fa9c14ea6b2ebe350be"}, {0x2, 0x3, "d4"}, {0x6, 0xc, "c986f92bee33ec5ae3c4"}]}, @rr={0x7, 0x17, 0xad, [@local, @dev={0xac, 0x14, 0x14, 0xa}, @private=0xa010100, @private=0xa010100, @multicast2]}, @rr={0x7, 0x13, 0x6e, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @empty]}, @timestamp_addr={0x44, 0xc, 0xd3, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x38}, 0x9}]}]}}}], 0x1b8}}, {{&(0x7f00000002c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000700)="cae74a72701982393dd2658f0996cf041af81221254b01be3a961606a89ad5a1a54b4dcfecdbe2f01bf35ba7a0a6ca524e445aeaf6704b922a29031f14dedda562f6210ae568b58605ddcdf3a0e384c821f2520b2452e0c5ceb63383d87e71e3120781d399ec6dd3feb27e68d1d3e9eb9851d95d547c97205e405838b77af1baccc0243803dfd72852cf423aba915fc575397423a645fbe93e6e1f9a2be75b181832414ea43523f77834d305f0dbfadb1827e913259b429edb691217e42a34dac6b2ace3e0f1904749", 0xc9}, {&(0x7f0000000800)="18a61fdcd9f9740d78c5780e250c27dff73f9c2abe8ee9ad59a5bc35f4d5a290bdafed4f8d3e80c7e167ce8fed5cfec53499420c1d719a06c3aec5544d63ad5fc16044bd1d9d7451faa2f57934082341aa9d4c2c8780335a7ea82b52d45d320a8b3a9b379d317c22d1b611dc7d2963436671287823f6de4288191f26734777db", 0x80}, {&(0x7f0000000880)="fc86965c3ae5db19141179274cbb399563144ec05731f8fe6f8a8069d23d93dea6ba25ebd5fef82de411c54789a172083498c4ff0070233c56dd2a65c16da5a643628a4ca901dae334d8812f2de6d9f61a656b2b60002a8856263fce9f977465df53f98e79313f55b28ef2f05dbf1dd8e653e0c0a28de4457e4f4722219c68a949aa5639184f3fe609a7f3a4b627cb92022d983ad29897264986f9b1b23e9bc0eb698815", 0xa4}, {&(0x7f0000000940)="d9a88fd89a43242ddf8a5a960f64c3890f7e1ed3bc6094d557ee0bf39f1a5bb32d84c03a867fab9bd4d8777864d4167e57807e12b41bb9c2376933080564d4f7576f46f5bf1a8c", 0x47}, {&(0x7f00000009c0)="0ff7d6e11d1908367e3188322329f580a54b46acb1f53beff58227678c81946fe3d009cd", 0x24}, {&(0x7f0000000a00)="56e6770931e38a3eaf5b2770e6a232b73806a08711", 0x15}, {&(0x7f0000000a40)="83f208f4d7b0e1e848d86c6ce7306bc55679f2aff570bbb56780e04a799f4a4b093a83953112b761e912a675d0106ba2170cb87750", 0x35}, {&(0x7f0000000a80)="570d59c3a71e085777e6d4cc28669e1354640d5ac231a90971372c3d151e2404a4bea880d99b8e237509ce8e3df8266738d8ea2d5e478791073ca1bce118948064b7a694dc9a9ab3d91eabd7b918fd3f51dd62de8a1f1e09f7b244a935ff0628eae830eba08ac9af1da0b8d67f0becfb776728bb9e26ca78aed2ec85dd9a8f8d7c8da6f2ab5b56edf6f71cb65f0a902d4b45e9867cc979b56e6390bfb748eba9f6927df6bccc663512f23f52095b764a8953a3e2e8c7d13eb10c5822046f4ae1495f0ab8b3ce2fb7c5308f82ef8fce858b9538ab124c094ad2b56e2ac68dc2bd66723cb0d25958e4e84d5735370f8f", 0xef}], 0x8, &(0x7f0000000c80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@noop, @lsrr={0x83, 0xb, 0x21, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4ffc41f1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @dev={0xac, 0x14, 0x14, 0x10}}}}], 0x78}}, {{&(0x7f0000000d00)={0x2, 0x4e23, @local}, 0x10, &(0x7f00000020c0)=[{&(0x7f0000000d40)="c09da8f7045cd773e73719458578320a51880833125a73dad026bff2f5a26a0cdfe269b8cca5460cbf1e74c0d814763f5830471c41577e0c0090a7e339bc23e02caaaaa8040f0573f48341576ac8ca4fdd8b9123544105915aadbc88fb0ac3d9238d849caab62a702c3883c6cb605c142572760599ebce36f456e7e63dcb81545237782c2e5aca8c4f48e096f83c97fa6ed4fb4ed989339303e62d4a7fd8abd65f4873d8b32aa3a96413e32281b2ea6d6ad6bb47552bdfd6b4b2db00e9571a5f8898136f80a11991a85bac0adc", 0xcd}, {&(0x7f0000000e40)="93c667fa905794e52c9d69eec2fcc21a9e0939cb4b0b0995878a4779c56de62fd8287fdb55aeaeebb8b69efcf8f7ff672d6433a77761dc9fd58ba60cc213db9e90f147b1693b891588055c1eea4420b3e4ed162ca91c290117c94c262bcd8c976b276afac0094702eed7b3f42490bb0a1bf3cbfaf5600255c5188de634161f026a4cc9b39f", 0x85}, {&(0x7f0000000f00)="a8f4896a4253f8b5ef68554140f4f9dc116699b8ff63337e784957fc4a7ca3b04dc7c8114359064ec081c963fb90088596fee6143283b407d11bb02e9b91ea89439734898c8bb98eb63b3b3161ccc9859c5f5d77d3d37b8ebf271ab28abf82c5aed35ec56ce1bca3203906730d86ba61c54380618b7f8fc571d4a25e42360f4458361d69704f984358ec1f4ce3ddafc91d3b2d4c1771f37e0ce24d809deba2c81094b512ec29a7d960e2ce4e93bb7b", 0xaf}, {&(0x7f0000000fc0)}, {&(0x7f0000001000)="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", 0x1000}, {&(0x7f0000002000)="065cd92b9bb1b60e34cdea170e1af9faa0940ee66db80efab0dcd3a98e0aa181651b429c2a80b5b4e633247ec62d26b32bcc746cb485f384496b8dfb2e38a3546cd1cfc1b2f1796032126d7f227b456401ee1bde337d1cab8fc68cf3efa220", 0x5f}, {&(0x7f0000002080)}], 0x7, &(0x7f0000002140)}}, {{&(0x7f0000002180)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000002400)=[{&(0x7f00000021c0)="ed892275d6072247890c813e19bc5637674d43b76e106d001b4ee580ffa21e97811e09a6ff491407ea06234ac8ccf58e8ecd8cb3dcdea80b6ab4fb296de648ed16928696df3d2576497fc469f074ec43b499fe55709a4214d5fd10ca61d964f5bf6b734708d31a386af5282413391ea70e4ffd8b4668e681d3b846c560f25a6b86d30adae99e4208826f7249e8c202f56867ec", 0x93}, {&(0x7f0000002280)="d9056e471705d0675bd37d7823405b13e048fb0c1ec9612eb65a354ba0cabf7798d90c2464628e452f5358239ec0736188fad04c6940493de27a2cf92b4a4219f80a918fe48e14cfe1ac7c", 0x4b}, {&(0x7f0000002300)="69342aaebbf77a33ca7ebae8dadd4cfba82d3ed30f63a4487b2130dac1da3b0e317f74e13f7890939055858cd75ce95d9638db8c447156445bc56aa77dab90e72106157778452cf19b6a02b981c9b389d860a7d9", 0x54}, {&(0x7f0000002380)="03448b044ebf1988a36e2612e55b814a36a2bf4a0452001969e9d3ab98e757ae6e1186366b2f0f854a9a14311d92114c14eeaaf144822564a99b627539f727885a7a3d07c2fe5c242c8790deedd5d4437623241c5d9fae9c2db1aa44abd4116cf63aa47251f952e8df95b33ff90752389e7a88ce55a7f8c17d08882b", 0x7c}], 0x4}}], 0x4, 0x4040000)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000000300)=0x5, 0x4)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x612, 0x80, 0x9, 0xfffffff8}, {0x1, 0x7, 0x1, 0x9}, {0x5, 0x4, 0xfa, 0x3}, {0x1, 0x5, 0x0, 0x8}, {0x8, 0xe, 0x4}]}, 0x10)

2m28.855417201s ago: executing program 7 (id=3508):
openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001380)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r4, {0xf2ff}, {}, {0xa, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0xa, 0x3, 0x87)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
socket$kcm(0x29, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
select(0x0, 0x0, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x0, 0xb, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

2m26.889179044s ago: executing program 7 (id=3518):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000060a010400000000000000000a0000010900010073797a31000000001c0004801800018008000100666962000c00028008000240000000010900020073797a320000"], 0x70}, 0x1, 0x0, 0x0, 0x4000854}, 0x20000040)

2m26.745415076s ago: executing program 7 (id=3519):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = open(&(0x7f00000000c0)='.\x00', 0x200000, 0x120)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffff}, [@tail_call={{0x18, 0x2, 0x1, 0x37, r0}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)

2m26.600759556s ago: executing program 7 (id=3521):
r0 = syz_open_dev$video4linux(&(0x7f00000003c0), 0xc8c, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0xfffffffffffffe64)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f00000000c0)=0x8, 0x4)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000040)=0x42000000, 0x4)
recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x45833af92e4bbbfe, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000005c0)={0x0, 0x0, {0x4, 0x2, 0x3014, 0x6, 0xb, 0x7, 0x0, 0x7}})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
alarm(0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x0, 0x7, 0x3, 0xbf56}]})
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x200000000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="20000000000701040000000000000000000000000900010073"], 0x20}, 0x1, 0x0, 0x0, 0x48d5}, 0x8010)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000340)={0xa, 0x3})
sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000000701030000000000010000009f7d000900010073797a3000000000"], 0x20}}, 0x0)
sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="14d70a0000084c030000000000020005008900d0"], 0x14}}, 0x5014)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b000000a0b48b9478f1dc5befb1de6611745df5c4b04beb0b87ade418c79236a1a7f8cc5b7e822f2b6247f2fa1ea429b9784c19fa77a24147377ec6e6124ebdab", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
preadv2(r2, &(0x7f0000000000)=[{&(0x7f0000000180)=""/136, 0x88}], 0x1, 0x5, 0x1, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000280))
pselect6(0x40, &(0x7f0000000100)={0x0, 0x8, 0x2, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1d, 0x2, 0x0, 0x0, 0x1000000802, 0x0, 0x0, 0x6}, 0x0, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1)
syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x40)

2m25.608257563s ago: executing program 7 (id=3523):
syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'})
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000040)={0x8641, 0x1, [{0x1, 0x1}]})
read(r0, &(0x7f0000000040)=""/164, 0xa4)
syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) (async)
syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) (async)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (async)
ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000040)={0x8641, 0x1, [{0x1, 0x1}]}) (async)
read(r0, &(0x7f0000000040)=""/164, 0xa4) (async)

2m15.48948376s ago: executing program 8 (id=3556):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x3a, 0x37, 0x5, 0x20, 0x781, 0x5, 0x5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe6, 0x2, 0x2, 0x5b, 0xbd, 0x97, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000040)={0x20, 0x9}, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000140)={0x40, 0xf, 0x1, '\x00'}, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000780)={0x40, 0x8, 0x1, "ea"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0)
syz_usb_disconnect(r1)
syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x20, 0x22, 0x75, {0x75, 0x21, "074f91ecc95fc840109acdf85308304358e7d5647d75461db0e0e2f606d894bf8745743a0d958251c1995937cf64b376ac091f490f117d2f01434f2e7f9600d3d2b3983d4c8352d509dd1c3126b363d5a5a163eef3476e258fcfbcf8aa7023b8eb2ab37444e195f3ad1ea5cc7c6afd7f235159"}}, &(0x7f0000000480)={0x0, 0x3, 0xf7, @string={0xf7, 0x3, "a820f565891ef5dcd5e60de0f3d5408f9674badb8f54db073ff242aaf635483b5a192babdc09e1c8173728ee1930969af1f3eb4edf6ec6d25821147933dd52961fbb8919666ca40a8effa0d2743d1642e562166c5732e1bee2d74d97eaadbcf9700741011daa5962f361f5cb3b580ec2a5b7a7ae7b03d997516cdde759bd3317c3f612df5c92672438cc3006ebbee1818fbeb2ae2dff51a4929e114415132d7d88cf6c1710f9205b94c68a4a5d9a2dc9f6a922c0cf14ae2a1b3cd4bb5f508d1f97bd1eec4019587dd189f3f0497308e87a260156dd192615b1604ff5f93b7a5ec06b6759dc5fb407769a38ca1ffd0c1f519792a5d5"}}, &(0x7f0000000180)={0x0, 0xf, 0x37, {0x5, 0xf, 0x37, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x40, "a8cbea76056cbde6ccb1cfb394edecc8"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x1, 0x8, 0x2}, @ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0xe24a, 0x0, 0x800, [0x1fe0000, 0x3fcf]}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x19, 0x3, 0xaf, 0x8, "2687ee7d", "64ca2d73"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x60, 0x7e, 0x9, 0x9, 0x3, 0xf}}}, &(0x7f0000000a40)={0x84, &(0x7f0000000380)={0x20, 0xc, 0xb7, "efff3be4d3d3decf25465ba562ef184553dc6ca5da206597febb8e9ea65d0123cd3832011ad6ebb78716e3b4029218dd7de6738eb974ba992e64424d1954c27c8af88e63bb620da30def4bfeb540651bbc00348d987d695053dccdc0aeeef720ee81b9df9b4e2a7c19c60615c1e130c3ee3017894cdc2294ba80f67f17bd61acb3d503f243f51e5ae3bd7f2048fc03f5e67bb28a9c7d8e46f659d084e843b22b016bd30ebc44a5e19b2e4912db3a3f357292a0bde4ba3e"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x6, 0x2}}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x40, 0x39}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000740)={0x40, 0xb, 0x2, "b777"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x660}, &(0x7f0000000840)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000880)={0x40, 0x17, 0x6}, &(0x7f00000008c0)={0x40, 0x19, 0x2, '-@'}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x5b}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0x9}})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x40, 0x5, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001f40)={0x44, &(0x7f0000001cc0)={0x40, 0xc, 0x1, "a0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000e40)={0x44, &(0x7f0000000b40)={0x40, 0x18, 0x1, '1'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000800)={0x34, &(0x7f0000000d40)={0x40, 0x3, 0x1, "9c"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000080)={0x20, 0x12, 0x8, "d71900005783037c"}, 0x0, 0x0})
syz_usb_connect(0x3, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x3a, 0x37, 0x5, 0x20, 0x781, 0x5, 0x5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe6, 0x2, 0x2, 0x5b, 0xbd, 0x97, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000040)={0x20, 0x9}, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000140)={0x40, 0xf, 0x1, '\x00'}, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000780)={0x40, 0x8, 0x1, "ea"}, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) (async)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) (async)
syz_usb_disconnect(r1) (async)
syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x20, 0x22, 0x75, {0x75, 0x21, "074f91ecc95fc840109acdf85308304358e7d5647d75461db0e0e2f606d894bf8745743a0d958251c1995937cf64b376ac091f490f117d2f01434f2e7f9600d3d2b3983d4c8352d509dd1c3126b363d5a5a163eef3476e258fcfbcf8aa7023b8eb2ab37444e195f3ad1ea5cc7c6afd7f235159"}}, &(0x7f0000000480)={0x0, 0x3, 0xf7, @string={0xf7, 0x3, "a820f565891ef5dcd5e60de0f3d5408f9674badb8f54db073ff242aaf635483b5a192babdc09e1c8173728ee1930969af1f3eb4edf6ec6d25821147933dd52961fbb8919666ca40a8effa0d2743d1642e562166c5732e1bee2d74d97eaadbcf9700741011daa5962f361f5cb3b580ec2a5b7a7ae7b03d997516cdde759bd3317c3f612df5c92672438cc3006ebbee1818fbeb2ae2dff51a4929e114415132d7d88cf6c1710f9205b94c68a4a5d9a2dc9f6a922c0cf14ae2a1b3cd4bb5f508d1f97bd1eec4019587dd189f3f0497308e87a260156dd192615b1604ff5f93b7a5ec06b6759dc5fb407769a38ca1ffd0c1f519792a5d5"}}, &(0x7f0000000180)={0x0, 0xf, 0x37, {0x5, 0xf, 0x37, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x40, "a8cbea76056cbde6ccb1cfb394edecc8"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x1, 0x8, 0x2}, @ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0xe24a, 0x0, 0x800, [0x1fe0000, 0x3fcf]}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x19, 0x3, 0xaf, 0x8, "2687ee7d", "64ca2d73"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x60, 0x7e, 0x9, 0x9, 0x3, 0xf}}}, &(0x7f0000000a40)={0x84, &(0x7f0000000380)={0x20, 0xc, 0xb7, "efff3be4d3d3decf25465ba562ef184553dc6ca5da206597febb8e9ea65d0123cd3832011ad6ebb78716e3b4029218dd7de6738eb974ba992e64424d1954c27c8af88e63bb620da30def4bfeb540651bbc00348d987d695053dccdc0aeeef720ee81b9df9b4e2a7c19c60615c1e130c3ee3017894cdc2294ba80f67f17bd61acb3d503f243f51e5ae3bd7f2048fc03f5e67bb28a9c7d8e46f659d084e843b22b016bd30ebc44a5e19b2e4912db3a3f357292a0bde4ba3e"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x6, 0x2}}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x40, 0x39}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000740)={0x40, 0xb, 0x2, "b777"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x660}, &(0x7f0000000840)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000880)={0x40, 0x17, 0x6}, &(0x7f00000008c0)={0x40, 0x19, 0x2, '-@'}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x5b}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0x9}}) (async)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x40, 0x5, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001f40)={0x44, &(0x7f0000001cc0)={0x40, 0xc, 0x1, "a0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000e40)={0x44, &(0x7f0000000b40)={0x40, 0x18, 0x1, '1'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000800)={0x34, &(0x7f0000000d40)={0x40, 0x3, 0x1, "9c"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000080)={0x20, 0x12, 0x8, "d71900005783037c"}, 0x0, 0x0}) (async)

2m12.966484608s ago: executing program 8 (id=3574):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x10b080, 0x0)
fsetxattr(r0, &(0x7f0000000100)=@random={'osx.', '/dev/bus/usb/00#/00#\x00'}, 0x0, 0x0, 0x3)

2m12.300958831s ago: executing program 8 (id=3576):
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400040, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={<r2=>0xffffffffffffffff}, 0x106, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080)=0x1, r2, 0x0, 0x2, 0x4}}, 0x20)
ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000180)={0x9}) (async)
openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={<r3=>0xffffffffffffffff}, 0x106, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000200), 0x3, r3, 0x10, 0x0, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00', 0x80}}}, 0xa0) (async, rerun: 32)
ptrace(0x10, 0xffffffffffffffff) (rerun: 32)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
r4 = socket(0xf, 0x80806, 0x6)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000380), 0x3) (async, rerun: 64)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f00000003c0)) (rerun: 64)
syz_open_dev$char_usb(0xc, 0xb4, 0x4) (async, rerun: 64)
ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000400)={0x0, 0x7fffffffffffffff, 0x881}) (async, rerun: 64)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x105000, 0x0) (async, rerun: 32)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), r0) (rerun: 32)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x4c, r6, 0x101, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f00000009c0)) (async)
socket$inet_udplite(0x2, 0x2, 0x88)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x89b) (async)
sendmsg$kcm(r0, &(0x7f0000002b40)={&(0x7f0000000a00)=@sco={0x1f, @none}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000a80)="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", 0x1000}], 0x1, &(0x7f0000001ac0)=[{0x68, 0x0, 0x80000000, "6d8e3da8b37225c2b7737656485cef2819ee98d1028676b7807546b0bce5a1b9abc17e32e2b8d848d8b2697db657bc67eefcc2a7d452b7833575a2df15bbc2ee8bddfa7bcfd16d652edfcdc299f248f1e2d1"}, {0x1010, 0x119, 0x10, "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"}], 0x1078}, 0x40000) (async)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002b80), 0x2, 0x0)
pselect6(0x40, &(0x7f0000002bc0)={0x7fff, 0x3, 0x0, 0x1, 0x1, 0x7fffffff, 0x0, 0xe6d5}, &(0x7f0000002c00)={0x81, 0x3, 0x3, 0x4, 0x6, 0xffffffff, 0xffff, 0x40}, &(0x7f0000002c40)={0xfffffffffffffffc, 0x2, 0x6, 0x54, 0x4, 0x274, 0x9, 0x4}, &(0x7f0000002c80)={0x0, 0x3938700}, &(0x7f0000002d00)={&(0x7f0000002cc0)={[0x71]}, 0x8}) (async, rerun: 64)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000002d40)=0x3) (rerun: 64)
prctl$PR_SET_IO_FLUSHER(0x39, 0x1) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000002d80), 0x602, 0x0) (async, rerun: 64)
connect$unix(r1, &(0x7f0000002dc0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) (rerun: 64)

2m11.990008836s ago: executing program 8 (id=3577):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
add_key(&(0x7f0000000000)='id_legacy\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000c40)='encrypted\x00', &(0x7f0000000c80)={'syz', 0x0}, &(0x7f0000000cc0)='[,\v]@+\x00', 0x0)
add_key(&(0x7f0000000f80)='encrypted\x00', &(0x7f0000000fc0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0xffff1001, 0x4000})
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2m10.588746362s ago: executing program 8 (id=3580):
r0 = syz_open_dev$dri(0x0, 0x4, 0x107040)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r1, 0x7fff)
setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000000200)=0x7fd, 0x1)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f00000000c0)={0x0, 0x1, <r2=>0xffffffffffffffff})
ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f00000001c0)={0x0, 0x1, r2})
r3 = fsopen(&(0x7f0000000040)='vfat\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbM:', 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="300000001a00010025bd7000fcdbdf250a000000", @ANYRES32=0x0, @ANYBLOB="00009f27f057c20caadf00007b74dd85c9b7f5a9"], 0x30}, 0x1, 0x0, 0x0, 0x20000054}, 0x2400c094)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x8, 0x6, 0xffffffff})
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r5, 0x11, 0xb, &(0x7f0000000700)=0x9, 0x4)
r6 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r7, 0x7a4, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000004000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001708000640ffffff00080003"], 0xf8}}, 0x0)
sendmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000)

2m10.50104757s ago: executing program 37 (id=3523):
syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'})
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000040)={0x8641, 0x1, [{0x1, 0x1}]})
read(r0, &(0x7f0000000040)=""/164, 0xa4)
syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) (async)
syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) (async)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (async)
ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000040)={0x8641, 0x1, [{0x1, 0x1}]}) (async)
read(r0, &(0x7f0000000040)=""/164, 0xa4) (async)

2m10.344133645s ago: executing program 8 (id=3582):
socket$netlink(0x10, 0x3, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464d0, &(0x7f0000000140))
setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301)
ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000180)={{{0x1, 0x1}}, 0xfffffffffffffffb, 0x7, 0x0})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x10000060, 0x8001, 0x3a, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffc}, 0x0)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x141301)
ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045515, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x40, 0x10, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x3], 0x3, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc, 0x5], [0x0, 0x4, 0x0, 0xfffe]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x0)
r7 = getpgrp(0x0)
r8 = syz_pidfd_open(r7, 0x0)
ioctl$FS_IOC_GETVERSION(r8, 0xff06, 0x0)
clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4})
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400040, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x48}}, 0x0)
ioctl$FIONCLEX(r9, 0x5450)

1m54.575074065s ago: executing program 38 (id=3582):
socket$netlink(0x10, 0x3, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464d0, &(0x7f0000000140))
setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301)
ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000180)={{{0x1, 0x1}}, 0xfffffffffffffffb, 0x7, 0x0})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x10000060, 0x8001, 0x3a, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffc}, 0x0)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x141301)
ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045515, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x40, 0x10, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x3], 0x3, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc, 0x5], [0x0, 0x4, 0x0, 0xfffe]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x0)
r7 = getpgrp(0x0)
r8 = syz_pidfd_open(r7, 0x0)
ioctl$FS_IOC_GETVERSION(r8, 0xff06, 0x0)
clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4})
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400040, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x48}}, 0x0)
ioctl$FIONCLEX(r9, 0x5450)

1m47.928566323s ago: executing program 6 (id=3637):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newnexthop={0x40, 0x68, 0x10, 0x70bd2a, 0x25dfdbfd, {0x2, 0x0, 0x1, 0x0, 0x30}, [@NHA_GROUP={0x1c, 0x2, [{0x0, 0x3}, {0x2, 0x36}, {0x1, 0x6}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_BLACKHOLE={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800)
openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400)
ioctl$DRM_IOCTL_DROP_MASTER(r5, 0x641f)
close_range(r4, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(r3, 0x0, 0x40)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x3ec0)
sendmsg(0xffffffffffffffff, 0x0, 0xd231c4f959ad4808)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x4000, 0x6000}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a99b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f8f4ed0b27cedd1c5e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

1m45.42590101s ago: executing program 6 (id=3645):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x2020, 0x8, 0x3, 0x5, 0x1}, 0x8)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000015c0)={&(0x7f0000001580)="388cc252c27bd367cf2034636fec2c8643c0d761e6a383b320bf661d83eca75c6d73e1869da8", 0x26, <r2=>0x0})
r3 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000280), 0x4)
sendmsg$kcm(r3, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="27050200160014000600002fb96dbcf706e10500070088a800008100", 0x1c}, {&(0x7f0000000240)='\x00'/10, 0xa}], 0x2}, 0x8080)
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000001600)={r2})
pivot_root(&(0x7f0000000140)='./cgroup\x00', &(0x7f00000001c0)='./cgroup\x00')
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0)
recvmsg$can_j1939(r4, &(0x7f0000001540)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000001400)=[{&(0x7f0000000080)=""/185, 0xb9}, {&(0x7f0000000200)=""/255, 0xff}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000180)}, {&(0x7f0000001300)=""/189, 0xbd}, {&(0x7f00000013c0)=""/37, 0x25}], 0x6, &(0x7f0000001480)=""/137, 0x89}, 0x20)

1m45.063490072s ago: executing program 6 (id=3648):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x1, 0x288}, 0x0, 0x0)
r4 = socket(0x200000000000011, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'veth1_to_batadv\x00'})
bind$packet(r4, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, 0x0})
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x6700000000000000)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)
semget$private(0x0, 0x2, 0x6a3)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000400000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)

1m45.058062976s ago: executing program 5 (id=3649):
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000000))
r0 = getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, &(0x7f0000000040))
r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x7a3e8192, 0x10001)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f00000000c0)={0x16, 0x18, [0x2, 0x7fffffff, 0x5b089fb1, 0x0, 0x67, 0x4363]})
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=<r2=>0x0)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x8, &(0x7f0000000140)=""/253)
ptrace$ARCH_GET_FS(0x1e, 0xffffffffffffffff, &(0x7f0000000240), 0x1003)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x1405, 0x20, 0x70bd2c, 0x25dfdbfc, "", [{{0x8}, {0x8, 0x3, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xe}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff01}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x20000000)
socket$inet6_sctp(0xa, 0x1, 0x84)
ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r2, &(0x7f00000004c0), 0x4003)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r4=>r1, {<r5=>0xee00, 0xee01}}, './file0\x00'})
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000540), 0x111, 0x8}}, 0x20)
r6 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9)
add_key$user(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x0}, &(0x7f0000000640)="e823cffcc491f660bc9a2ef7afb49d84a63ed8602629981b272ba22531af100800c66d4342f031d23f4bfcce361d0073d3d52dd4329d97bde20beb702a9ae79b4ba054965b5a1ed25343c79b6baae0cbeefea4701fda68081cd9cef9a7f0a93756fdd761a606d5552a00022e3ba9ecc65993be0daf18343e82e671e33a94a24a0ef3916f3aa9a7c60a09b8bf771d65e6b433a3f05883b047d4e828864cdbf4b4caf695e19181118e2eefa243f2fdb771d161ee609293739c264546de1dd97ab616c8b8755d0ad8293aa951c81812dc2d62602f0a86d8b061dab6c9f8df9a0aac36614ef319401e5f9d85db23", 0xec, r6)
quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, r5, &(0x7f00000007c0)={0x6, 0x8000, 0x1, 0x5})
listen(r4, 0x4)
epoll_create1(0x0)
execveat(r4, &(0x7f0000000800)='./file0\x00', &(0x7f0000000a80)={[&(0x7f0000000840)='syz', &(0x7f0000000880)='\x00', &(0x7f00000008c0)=']\x00', &(0x7f0000000900)='syz', &(0x7f0000000940)='@\\\x00', &(0x7f0000000980)='\x00', &(0x7f00000009c0)='syz', &(0x7f0000000a00)='{\'@\x00', &(0x7f0000000a40)=',[}-\x00']}, &(0x7f0000000c80)={[&(0x7f0000000b00)='/dev/snd/controlC#\x00', &(0x7f0000000b40)='/dev/snd/controlC#\x00', &(0x7f0000000b80)='\x00', &(0x7f0000000bc0)='/dev/snd/controlC#\x00', &(0x7f0000000c00)='$-)\x00', &(0x7f0000000c40)=',\\\':\v{+\x8c&\x00']}, 0x1000)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x1000000, 0x40010, r4, 0x0)
r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000007, 0x810, r4, 0x10000000)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000cc0)=@IORING_OP_MADVISE={0x19, 0xc, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15, 0x0, {0x0, r9}})
socket$inet_tcp(0x2, 0x1, 0x0)
r10 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r10, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x48, 0x140c, 0x300, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x20048000)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r4, 0xf504, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000e80)={0x7, 0x0, [{0x80000008, 0x7, 0x4, 0x3, 0x2, 0x3480f194, 0x8}, {0x40000000, 0x2, 0x1, 0x23, 0x0, 0x5e6e, 0x8}, {0xa, 0x0, 0x0, 0x1, 0x6b, 0x1, 0x3}, {0x40000001, 0xfffff17b, 0x4, 0x1000, 0x9, 0xf5, 0xc1}, {0x2, 0x5, 0x1, 0x4275, 0x2, 0xa, 0x10}, {0x80000019, 0x5, 0x0, 0x11, 0x9, 0x7, 0x9}, {0xc0000000, 0x7, 0x8, 0x9, 0x8, 0xae, 0x3}]})

1m44.836860742s ago: executing program 0 (id=3650):
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x74cf, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000280)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0)
rt_sigsuspend(&(0x7f00000000c0)={[0x8]}, 0x8) (fail_nth: 5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000440)={0x8000000000000000, 0x1, 0x1, 0xc05})
ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f)

1m44.655541663s ago: executing program 5 (id=3652):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8)
quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000700, r2, &(0x7f0000000180))
connect$unix(r0, &(0x7f0000000200)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x3, 0x1b0}, &(0x7f00000000c0)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x1f, 0x3}]}, 0x1, 0x1}, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, r3, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}})
r7 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r8, 0x40, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0)

1m43.620329034s ago: executing program 0 (id=3654):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480))
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000000)=0x10000, 0x4)
mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x100000, 0x2, 0x11, r0, 0x100000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x1)
socket$l2tp(0x2, 0x2, 0x73)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000010025bd7000e7dbdf25000000002dcc5aab9b64939812679fbded928473f4d9d3c13fdb22550b4c5e6357fb6f3465c0ae6fec0000000048cd02001e5a03bff008eb9e3014745acf45e0a10b34e31dacbd", @ANYRES32=0x0, @ANYBLOB="1588040003000000050027000500000008000d0003000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)

1m42.822553986s ago: executing program 0 (id=3656):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsopen(0x0, 0x0)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43)
ftruncate(r2, 0x2007ffb)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x100)
r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x3c1002, 0x80)
r5 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x1)
fchdir(r6)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r7, &(0x7f0000000200)={0x2020, 0x0, <r8=>0x0}, 0x2020)
open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
write$FUSE_INIT(r7, &(0x7f0000002300)={0x50, 0x0, r8, {0x7, 0x9, 0x0, 0x31008003, 0xfffe}}, 0x50)
read$FUSE(r7, &(0x7f0000004580)={0x2020, 0x0, <r9=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r7, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r9}, 0x10)
r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup3(r10, r7, 0x0)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r11, 0x0)
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
sendfile(r4, r3, 0x0, 0x7ffff000)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0)

1m42.119224289s ago: executing program 5 (id=3658):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x2020, 0x8, 0x3, 0x5, 0x1}, 0x8)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000015c0)={&(0x7f0000001580)="388cc252c27bd367cf2034636fec2c8643c0d761e6a383b320bf661d83eca75c6d73e1869da8", 0x26, <r2=>0x0})
r3 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000280), 0x4)
sendmsg$kcm(r3, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="27050200160014000600002fb96dbcf706e10500070088a800008100", 0x1c}, {&(0x7f0000000240)='\x00'/10, 0xa}], 0x2}, 0x8080)
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000001600)={r2})
pivot_root(&(0x7f0000000140)='./cgroup\x00', &(0x7f00000001c0)='./cgroup\x00')
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0)
recvmsg$can_j1939(r4, &(0x7f0000001540)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000001400)=[{&(0x7f0000000080)=""/185, 0xb9}, {&(0x7f0000000200)=""/255, 0xff}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000180)}, {&(0x7f0000001300)=""/189, 0xbd}, {&(0x7f00000013c0)=""/37, 0x25}], 0x6, &(0x7f0000001480)=""/137, 0x89}, 0x20)

1m41.917359939s ago: executing program 6 (id=3659):
r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000, 0x11, 0xffffffffffffffff, 0x10000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0)
openat$mice(0xffffffffffffff9c, 0x0, 0x101)
epoll_create(0xff9)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0)
sendfile(r2, r2, 0x0, 0x2000fb)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x4000000009, &(0x7f0000000380)=0x102)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50)
socket(0x1, 0xa, 0x2)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c)
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x294}, 0x1, 0x0, 0x0, 0x4000880}, 0x20049041)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

1m41.823090779s ago: executing program 5 (id=3660):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x108, 0x29, 0x4, {0x4, 0x1e, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x9, "e80ee304ecb784ec46"}]}}}, @hopopts={{0x40, 0x29, 0x36, {0x5e, 0x4, '\x00', [@pad1, @pad1, @generic={0x8}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0x8000]}}, @generic={0x1}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x1d0}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x40, 0xfa, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x9, 0x3, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x4, 0x0, 0xf}}]}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x110, 0x23, 0xf, 0x32, 0x8, 0xc}, 0x2d, &(0x7f0000000300)={0x5, 0xf, 0x2d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x58, "cf70afb666d01cbf747b37a081ae47cd"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "c6c84e8d6edfaa0a0a0712593bc5502e"}]}, 0x4, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xf2b72ef811992ade}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x41b}}, {0xf, &(0x7f0000000540)=@string={0xf, 0x3, "43f8bf86de9dc11103c9d2c258"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x444}}]})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1m38.565502076s ago: executing program 0 (id=3663):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
execve(0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000001180)=0x2000000)
ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000140)) (async)
ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000140))
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})

1m38.387365746s ago: executing program 0 (id=3665):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x10b080, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$radio(0x0, 0x3, 0x2)
ioctl$VIDIOC_QUERYMENU(r4, 0xc02c5625, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000001c0)={{0xdddd1000, 0x1000, 0xe, 0xf0, 0x0, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x10}, {0x2, 0x2000, 0xb, 0x9, 0x8, 0x2, 0x9, 0xa, 0x5, 0xf, 0x3, 0xc7}, {0xd000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x0, 0xc, 0x0, 0x6, 0x3}, {0x8000000, 0x80a0000, 0x8, 0xfc, 0x40, 0x4f, 0x2, 0xd, 0x6, 0x3, 0x4}, {0x2, 0x0, 0x9, 0x1, 0x3, 0x9, 0x9, 0x5, 0x5, 0x44, 0xe, 0x4b}, {0x2, 0xd000, 0x0, 0x9, 0x3, 0x6c, 0x1, 0x8, 0x4, 0x8d, 0x1}, {0x6000, 0x1000, 0x10, 0x9d, 0x3, 0xfe, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0x100000, 0x8000000, 0xd, 0x17, 0x3, 0x2, 0xff, 0x0, 0x14, 0x6, 0x2, 0x7}, {0xeeee8000, 0x5}, {0x2, 0x9}, 0x40010002, 0x0, 0xf000, 0x300, 0x5, 0x2000, 0xeeef0000, [0xffffffffffffff47, 0x401, 0x8, 0x6]})
syz_emit_ethernet(0x5a, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3908004efa004c0066000004069078ac1e0101ac1e0101441c0d93e000000200000004ac1414410000000200000000000400058303c08903c700004e214e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)={0x14, r8, 0x80485dc1c126afb3, 0x0, 0x0, {0x33}}, 0x14}}, 0x0)
ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e", @ANYRES8], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
sendmsg$nl_generic(r5, 0x0, 0x40)
close_range(r1, 0xffffffffffffffff, 0x0)
fsetxattr(r0, &(0x7f0000000100)=@random={'osx.', '/dev/bus/usb/00#/00#\x00'}, 0x0, 0x0, 0x3)

1m38.342776478s ago: executing program 5 (id=3666):
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbdcbbbb0800450000300000000006019078ac1e0001ac1414aa037090780009800145"], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x80000000000000a, 0x800, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[], 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504e8ffff0b000c00010000008b642e56"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000180)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}})
sendto$unix(r0, &(0x7f0000000500)="5edb6e9ea29ff8cd4c45b26781862af99495e1c5d4038551ef7942fe265b18984393eb38c4f8251a080ffe3ca5b8a36a8a0d7d70d54e680a736bc928240548c64c2ff6214a2139c7bdc254fef7537ce6245b02f14cc1d8597dc5964af1cb27", 0x5f, 0x40, &(0x7f0000000580)=@abs={0x2, 0x0, 0x4e20}, 0x6e)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={<r5=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
r6 = socket$netlink(0x10, 0x3, 0x15)
r7 = io_uring_setup(0x3ac7, &(0x7f0000004140)={0x0, 0x800000, 0x40, 0x1, 0x14e})
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xd)
r9 = dup(r8)
write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c)
close_range(r7, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00'})
r10 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000f400cf1077c877d474ca010203010902240001000000000904d800020805010009050abe02100000fa00090582025004"], 0x0)
syz_usb_control_io$uac1(r10, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="f1aa0c898776a5f8f1d869a2f1fc4eb76615c3df28e84d5c929069adca84e82cb339d8cb5114615a494d75dedf75ec83dc6c78cc47a2bc2936bd4c9eb6c19f08873973ed4a5c6261f58455647f209816607c0b09113aec230626"], 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2083010001ec40de77522fb5d535b2f87f2fac5225bafbc96fb82dda922971ab60617029f6405096384df37fa8a1fa3f79d3bb67ff00000000000000009097050b5944ff1020e533bfaa4b449c4c781ed5b4df74e4a91268417584fd2e7eae261dca95e9da9c56a6bccafcbe2a55b1d86e874bc0d907ac9c795f7dc93595e1714949a02ec9beac4184582fcc714ba97fa63cef72f9b6c8fc6c735808318bb75e314ad5d9d3"], 0x0, 0x0})
sendmsg$nl_route(r6, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e22, 0x8, @mcast2, 0xc2cb}}, 0x1, 0x2, 0x614, 0x1, 0xd, 0x7, 0x3}, 0x9c)

1m37.987976648s ago: executing program 6 (id=3668):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r1, 0x5, 0x40fffe, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x20000800)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x4, 0x25dfdc02, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) (async)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0)
r7 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000240)=r7)
ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1, r7})
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
socket$kcm(0x2, 0xa, 0x2) (async)
socket$kcm(0x2, 0xa, 0x2)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x3c)
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) (async)
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_SET_VRING_ERR(r6, 0x4008af22, &(0x7f00000002c0)={0x1, r7})
ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000080)) (async)
ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000080))
socket$netlink(0x10, 0x3, 0x0) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c00010000000000000000a007000000", @ANYRES32=r9, @ANYBLOB="400096040a000200aaaaaaaaaa0c00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c00010000000000000000a007000000", @ANYRES32=r9, @ANYBLOB="400096040a000200aaaaaaaaaa0c00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)

1m37.247739747s ago: executing program 6 (id=3671):
socket$netlink(0x10, 0x3, 0x4)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x56003, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x800)
io_setup(0x20083, &(0x7f0000000080)=<r2=>0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x301)
ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000180)={0xa3, 0xd, 0x4, 0xff, 0x0, 0xfeff, 0x0})
io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000100)='O', 0x1, 0x3, 0x0, 0x2}])

1m34.659204619s ago: executing program 0 (id=3675):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
tee(r1, r0, 0x1649, 0xa)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYRESOCT=r4, @ANYRES64=<r5=>r4, @ANYRES32=r4, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRESDEC=r3, @ANYRESDEC=r3, @ANYRESHEX=r1, @ANYRESOCT=r3, @ANYRESOCT], 0x118}}, 0x4c67de7b2082fec)
sendmsg(r3, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x6, 0x9, 0xc2, 0x0, 0x2d83, 0x9, 0x100, 0x0, 0x7}, 0x0)
r6 = getpid()
sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0x7)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000240)=ANY=[@ANYRESDEC=r6, @ANYRES16=r6, @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES32=r5, @ANYBLOB="9c76e16f3396848103f6d61a4bfd94c197a13b59ed79be41470b97d23436104e91ea07b1352f472a0bce44", @ANYRES32=r1, @ANYRESDEC=0x0], 0x0)
r7 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xffff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
io_setup(0xffb, &(0x7f0000000040)=<r10=>0x0)
io_submit(r10, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x1}])
write(r8, 0x0, 0x0)
recvmmsg$unix(r8, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x180, 0x0)
connect$unix(r9, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="ab11046c60021633140000001000010000000000000000000000000a20000000000a010201000000003dea7ec44b89c6e5f2a84b461eec8e000000010000000900010073797a3000000000000000001d0a010700000000c6606608765033167c081e3a10cd3bfef0c965211ba39a1f6531401208028d5732cf9e1c5c4c59004fb76fc7cb3267c4cfbe90935decbb7f875abb7f10"], 0x2dc}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
r12 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x440000, 0x0)
ioctl$TCSETSW2(r12, 0x402c542c, 0x0)

1m33.876381089s ago: executing program 5 (id=3677):
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f0000000680)={{0x0, 0x3938700}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006a000d0b00000000000000000300000200000000088b92248cffffff7262005ce3281ef1b2931d919aa825fc1d6a23ab99db15f129a51376874ff12cdc5fae1ccba0f273"], 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x6c014)
r3 = socket$inet6(0xa, 0x3, 0x84)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x56, 0x4e21, 0x0, 0x2}, {0x7, 0x0, 0x0, 0x2, 0xfe00000000000000, 0x2000000, 0x1}, {0x5, 0x0, 0x4}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@loopback, 0x0, 0x2b}, 0xa, @in6=@private0, 0x3507, 0x4, 0x1, 0x0, 0xffffffff, 0x1, 0x6}}, 0xe8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}}, 0x1c)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000efd160ab920006000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/28], 0x50)
socket$alg(0x26, 0x5, 0x0)
capset(0x0, &(0x7f0000000040)={0x6, 0x6, 0x2, 0x83, 0xffbfffff, 0x400006})
socket$netlink(0x10, 0x3, 0x10)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
eventfd(0xffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x10000004, 0x100, 0x0, 0xfffffffffffffffb, 0xb, 0x7ff, 0x0, 0x5}, 0x0)
r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000000780)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72f3ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a3436cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})
ioctl$USBDEVFS_CLEAR_HALT(r7, 0xc0105502, 0x0)

1m22.0402896s ago: executing program 39 (id=3671):
socket$netlink(0x10, 0x3, 0x4)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x56003, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x800)
io_setup(0x20083, &(0x7f0000000080)=<r2=>0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x301)
ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000180)={0xa3, 0xd, 0x4, 0xff, 0x0, 0xfeff, 0x0})
io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000100)='O', 0x1, 0x3, 0x0, 0x2}])

1m19.104342437s ago: executing program 40 (id=3675):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
tee(r1, r0, 0x1649, 0xa)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYRESOCT=r4, @ANYRES64=<r5=>r4, @ANYRES32=r4, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRESDEC=r3, @ANYRESDEC=r3, @ANYRESHEX=r1, @ANYRESOCT=r3, @ANYRESOCT], 0x118}}, 0x4c67de7b2082fec)
sendmsg(r3, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x6, 0x9, 0xc2, 0x0, 0x2d83, 0x9, 0x100, 0x0, 0x7}, 0x0)
r6 = getpid()
sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0x7)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000240)=ANY=[@ANYRESDEC=r6, @ANYRES16=r6, @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES32=r5, @ANYBLOB="9c76e16f3396848103f6d61a4bfd94c197a13b59ed79be41470b97d23436104e91ea07b1352f472a0bce44", @ANYRES32=r1, @ANYRESDEC=0x0], 0x0)
r7 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xffff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
io_setup(0xffb, &(0x7f0000000040)=<r10=>0x0)
io_submit(r10, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x1}])
write(r8, 0x0, 0x0)
recvmmsg$unix(r8, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x180, 0x0)
connect$unix(r9, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="ab11046c60021633140000001000010000000000000000000000000a20000000000a010201000000003dea7ec44b89c6e5f2a84b461eec8e000000010000000900010073797a3000000000000000001d0a010700000000c6606608765033167c081e3a10cd3bfef0c965211ba39a1f6531401208028d5732cf9e1c5c4c59004fb76fc7cb3267c4cfbe90935decbb7f875abb7f10"], 0x2dc}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
r12 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x440000, 0x0)
ioctl$TCSETSW2(r12, 0x402c542c, 0x0)

1m18.82062005s ago: executing program 41 (id=3677):
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f0000000680)={{0x0, 0x3938700}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006a000d0b00000000000000000300000200000000088b92248cffffff7262005ce3281ef1b2931d919aa825fc1d6a23ab99db15f129a51376874ff12cdc5fae1ccba0f273"], 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x6c014)
r3 = socket$inet6(0xa, 0x3, 0x84)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x56, 0x4e21, 0x0, 0x2}, {0x7, 0x0, 0x0, 0x2, 0xfe00000000000000, 0x2000000, 0x1}, {0x5, 0x0, 0x4}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@loopback, 0x0, 0x2b}, 0xa, @in6=@private0, 0x3507, 0x4, 0x1, 0x0, 0xffffffff, 0x1, 0x6}}, 0xe8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}}, 0x1c)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000efd160ab920006000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/28], 0x50)
socket$alg(0x26, 0x5, 0x0)
capset(0x0, &(0x7f0000000040)={0x6, 0x6, 0x2, 0x83, 0xffbfffff, 0x400006})
socket$netlink(0x10, 0x3, 0x10)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
eventfd(0xffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x10000004, 0x100, 0x0, 0xfffffffffffffffb, 0xb, 0x7ff, 0x0, 0x5}, 0x0)
r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000000780)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72f3ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a3436cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})
ioctl$USBDEVFS_CLEAR_HALT(r7, 0xc0105502, 0x0)

9.972760842s ago: executing program 3 (id=3889):
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x200074cf, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000280)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0)
rt_sigsuspend(&(0x7f00000000c0)={[0x8]}, 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000440)={0x8000000000000000, 0x1, 0x1, 0xc05})
ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r8, {}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5})
socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'})

8.355522381s ago: executing program 1 (id=3891):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0xd, 0xa0a00)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r2, 0x0, 0xd, &(0x7f0000000140)=0xffffffff, 0x4)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c)
io_uring_setup(0x4fee, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x1000, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', <r5=>0x0, 0x4, 0x7, 0x2, 0x7f, 0xd7a6c2774e096e62, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, 0x10, 0x40, 0x3, 0x8}})
clock_gettime(0x0, &(0x7f0000000280)={<r6=>0x0, <r7=>0x0})
clock_gettime(0x0, &(0x7f00000002c0)={<r8=>0x0, <r9=>0x0})
sendmsg$can_bcm(r4, &(0x7f0000000400)={&(0x7f0000000240)={0x1d, r5}, 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x24, 0x4, {r6, r7/1000+60000}, {r8, r9/1000+10000}, {0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x18, 0x2, 0x0, 0x0, "4503ffb412a1da361d5d043555e4a3e243f67512a648e370e7a9c5462bf7750c4401cf4d06eaa0ca50ca394ccb4932720cc2bbebe2a987573c1dfde8d1482c40"}}, 0x80}, 0x1, 0x0, 0x0, 0x4008080}, 0x880)
syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000009881da07ed7786dd6100000000383a0020010000000000000000000000000002ff0200000000000000000000000000010200907800000005663a794500020000ff02000000000000000000000000ff0200000000000000000000000000018029335287b7a0810000"], 0x0)

8.259971881s ago: executing program 9 (id=3892):
socketpair(0x0, 0xa, 0x3, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040))
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0)
ioctl$SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304) (async)
read$FUSE(r1, &(0x7f0000000100)={0x2020, 0x0, 0x0, <r3=>0x0}, 0x2020)
quotactl_fd$Q_QUOTAON(r1, 0x0, r3, &(0x7f0000002140)='./file0\x00')
r4 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000002180)={0xffffffffffffffff, 0x0, 0x8000, 0xfffff000})
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000021c0)={<r5=>0x0, 0x6, 0x6, 0x1})
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f00000025c0)={r5, 0x7f3, 0x0, [0x7, 0x7fffffff, 0x1, 0x6, 0x8], [0x72, 0x6, 0x9, 0x74, 0x3, 0x9, 0x3, 0x7fffffff, 0x810a, 0xb2c7, 0x21, 0x8, 0x1, 0x8, 0x5, 0xe, 0x58ce, 0x4, 0x8, 0x5, 0x0, 0x400, 0x80000001, 0x454, 0x9, 0xc6f, 0x8, 0xffffffff, 0x8000, 0xffffffffffffffff, 0x2, 0xfffffffffffffffc, 0x7, 0xe870, 0x3, 0x9, 0x8000000000000000, 0x1, 0x0, 0x3ec, 0x7fffffffffffffff, 0x0, 0x9, 0x9, 0x5, 0xffffffffffffcb2a, 0x4, 0x1000, 0x852, 0x3, 0x7, 0x8, 0xfffffffffffffffe, 0x1, 0x6, 0x3, 0x3ff, 0xa9, 0x1, 0x8, 0xc452, 0x7, 0x2450, 0x2, 0x9, 0x4, 0x3, 0x8, 0x2, 0x4, 0x0, 0x4, 0x7, 0x0, 0x2e, 0x6, 0x9, 0x94, 0x8, 0x1, 0x30d5, 0xffffffffffffff80, 0x5, 0x7, 0x1, 0xffff, 0xfffffffffffffff3, 0x7, 0x66, 0x2, 0x3, 0x1, 0x3, 0x8, 0x2, 0x6, 0x10001, 0x13479a41, 0x9, 0x1, 0xa, 0x8000000000000001, 0x7, 0x6, 0x8000, 0x9, 0x0, 0x9, 0xdb0, 0x4, 0xe000000000, 0x0, 0x8, 0x7, 0x1, 0x71b7, 0xa6fe, 0x7523e112, 0xffffffffffffffff, 0x1, 0x6]})
recvmsg$can_j1939(r0, &(0x7f0000003040)={&(0x7f0000002a00)=@pppol2tpin6={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a80)=""/238, 0xee}, {&(0x7f0000002b80)=""/243, 0xf3}, {&(0x7f0000002c80)=""/52, 0x34}, {&(0x7f0000002cc0)=""/240, 0xf0}, {&(0x7f0000002dc0)=""/103, 0x67}, {&(0x7f0000002e40)=""/182, 0xb6}], 0x6, &(0x7f0000002f80)=""/138, 0x8a}, 0x10162)
r7 = syz_open_dev$rtc(&(0x7f0000003080), 0x1fffe00000000, 0x1)
ioctl$RTC_AIE_OFF(r7, 0x7002)
flock(r7, 0x6) (async)
r8 = dup3(r4, r4, 0x0) (async)
sendmsg$key(r0, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)={0x2, 0x6, 0x5, 0x9, 0xb, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_filter={0x5, 0x1a, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@mcast1, 0x22, 0x14, 0x10}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_sa={0x2, 0x1, 0x4d2, 0x1, 0xb4, 0x3e, 0x3, 0x80000001}, @sadb_x_nat_t_type={0x1}]}, 0x58}}, 0x0) (async)
r9 = dup(0xffffffffffffffff)
write$P9_RLERROR(r9, &(0x7f00000031c0)={0x9, 0x7, 0x2}, 0x9) (async)
write$P9_RSYMLINK(r9, &(0x7f0000003200)={0x14, 0x11, 0x2, {0x10, 0x4, 0x7}}, 0x14) (async)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000003300)={&(0x7f0000003240), 0xc, &(0x7f00000032c0)={&(0x7f0000003280)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800c}, 0x800) (async)
getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000003340)=""/30, &(0x7f0000003380)=0x1e) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003400)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_WIPHY(r9, &(0x7f00000034c0)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003480)={&(0x7f0000003440)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x8}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x8011)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r9, 0x80045530, &(0x7f0000003500)=""/155) (async)
ioctl$AUTOFS_IOC_PROTOSUBVER(r8, 0x80049367, &(0x7f00000035c0))
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003640), r6)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r6, &(0x7f0000003700)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000036c0)={&(0x7f0000003680)={0x14, r11, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) (async)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000003740)={0xc}) (async)
sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000003b00)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003ac0)={&(0x7f00000037c0)={0x2d4, r11, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x6, 0xf}}}}, [@NL80211_ATTR_FRAME_MATCH={0xf8, 0x5b, "13ce12a73811cdff493d74e22e115592689a3227204f0f2a020a62232f9de18042be4d613c830d53351b57893332f03a4a9f4b2d7204ffab963bf59c3eb70650fdd98fa7842679348390bdddbb0b082530db4364856566f76cadc24b08d2ec1e33567cba1fed98a9f124cfd5489febd761e888a7e81775c6ae60812223a5193677a95ba8bfd456f1f900211aabeb456efc947db2c774f8f16bd7715a5c35c45feb5b484cd93b4772769d7e4c1f0645a2c939c1566abbb82e946f5ee8e8d136d7ea4407f8c23e93d91b99d679776a8b25bcad2cebd2fc837ad8116e4c5d0e0a4d67b8e6f5a400246833aa37a1863c19ff15138810"}, @NL80211_ATTR_FRAME_MATCH={0x9a, 0x5b, "8864c3f53c8d11edbbde8cc8888c0c2c62a44e88f7586ce2f641908e84f29706646d64d179d593d9687f12f8e22291337f2a9d421df6d09374d7b73adfcaad3977122549d23ff36551b6b9ba15b16e636acb34dc4724921348be9a61d10b7182cc442b0fd82f9c2fe77eb3c098905aa190d5a4b76c7f172bff3ce16a64556b20c0ac59ea4c608bcab8da9f40e53b12647928b9d570d3"}, @NL80211_ATTR_FRAME_MATCH={0x27, 0x5b, "606bd6c2ca67094df252be0c1beb6b5416538dc83b93b8aaf68a13ca08132d5414819f"}, @NL80211_ATTR_FRAME_MATCH={0xed, 0x5b, "0d547f5f37ccb38f20020ebe2c3b58c987403790d1803511aa6b65ce163d1835debfab01741a6a06bfde51535a2d9ab163c06178a7f86f140f02d7ae17e17f4b4fddfb1b01d2fc76ee5f46905221d81449af7d24fe51913294c88fd563ddf2aae01e47f324849481dea6fe455033de9399b8a1d94bab02c9c316de358a995a8a55fe554ecd28d371d115af8a936c00b422d5a5cf516094d311350536e867add15af3a4ba81d067611a49e665fa5581a240cace5707cdc2eb9b9abcc5bf728538ae3d648d3bbfefbd9a70c2aaf3df4a2496ffd6f72ade9fec7c760801b8e0c0266daca78ab9f97158e3"}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x50}, 0x44080) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000005800)={&(0x7f0000003b40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000057c0)={&(0x7f0000003b80)={0x1c0c, r11, 0x502, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}], @NL80211_ATTR_CSA_IES={0x18, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x9, 0xffff, 0x0, 0x0, 0x0, 0x6, 0x0]}]}, @NL80211_ATTR_CSA_IES={0x10, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x44d, 0x0, 0x5, 0x1]}]}, @NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_CSA_IES={0x1b88, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x400, 0x7, 0x9, 0x7, 0x0, 0x9, 0x3]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x6e, 0x0, 0xd]}, @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x1298, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x2c, 0x3, "a723666fd7720641fdcd75f38ac7f4d6453e8e28c91dff66e83ad2e3655a867c0d67c81cdaa6f7c1"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x21, 0x3, "394cab2d191ceb6bd1eddff0351f89f51c4e8ed6b3fcb547650247d711"}, @NL80211_FTM_RESP_ATTR_LCI={0xcc, 0x2, "edab446f783d11a1ec5bcb4790ee5fde6dd31c65613b1101379a83883827728adf14f8ef35269df23e43358ed5ed4c7de96f13fb87771b3f2386310e6ae09133fff866fe86a85f680fd7f37ef96cc973fc5b04a480bd8ce5795d907f6417e870cf1a5e7c41d0f1d45fbdcba3ed46b906866015c93be26782d85c3b75368b7de5c6b0ccc22d4d388b0ddea91c4ee64d85fd62eb51973d33816244e21c8c554f008c2bd158fb64b0cab2a80cd9956675b0f394a3b28dabddb0d44fad206949cbea3d916cfc669c3a17"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xa0, 0x3, "688367384f154a0923b05d9decf01da0a4fe66f135a6b1db85522b52bb30255fb38a2cb14bffbdc0602e108c156e2fcc435939633476b7cbec34bb156e58a95f8b9a5f3d58f4ff6a37ae61f4081c29d0d0ea8beef7e983885c2689d7ec0946c3527de89e4471138dd69b81f5b81ccbb9589aab887960c9f18f81cd6fb9f73073efeb241442095dc4d35abbaf6e72cac9d8c6e14adbc06b32172c4d00"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "d86c2eac05ea5eb7e5ef4126bcd66799441e0a9a3a9ae8a6bfc24286858be577077303958ffda46da5402c131dfeccca5317494e5328b93bc3148026922b0fbad47400a196adeec7c60335bebe8ab6d090d468d848b4909631c9b5d23c34c69551066a3892b0df496a18c7d39264ff0ea8f95c07101c2e03063e6a538283bb0e25cb0e5032e58d5766d90982b95adc3f2c265d36b600e8085277fcede1360e4126af56be3daca13272493d3876a9c573d53121bd4f86e744152911e3c32191536090b781278bbdd2bb71ae0942926e80970589af42006cc6d1a07eae3919482f4ea73dc0c5cb3866925d2f0626583bdc966883bb466e66bfb686f6ff602aa8469afeaf3cfc7c334fc7d189fce4ee8c77cbd05c64d2a2dc9cfa1b7e171409545108571a921155da0c2cf1d1ac6616bee46f6d718a3def65b34498bf2680e771c82558bbc90ce00d32995393e53e7a9bded532f0427188824d8592a6230577903d30a59da4bbaf3669f26c3feb5eba1a8c451dc89885ca3bec27143515badfe9fd71944bf445439e9048e95af6a9d284473af7240ab5e2af3f0073b39fe82f0bd0d4cfd9ebe194b0bd5700986536ac204cd393abbc5b77c4a5792179b8d4de2c2dab24476bc7723745e202192e836820f7459637685caddde82476a1d369f61d9a31e204466fa32f7d53e70fae7a7d738292821df58bb200f47b01b6d865b2f39b19ee5d82267d1cc7b4bfa220cf3114333492e833c559a3bd26b3dbd0bf376c74150f416ff1a83e5e92b33849d06ca3ffd981b7e383a1d6a87be5e8011f5501e3f8b276cf4f11492162b30a89ef58ad5312011926fc240c5b335d100fe6d631744b04def52cd03f683dc7b963fa6c10d45c3b40d73fa355f62c34f2c576433221ff49b258952937e02d5427521386aa3d14bbe29e1cfe7f61a4c810ed21b88d58bb3a98bab7a3aa7643363272299fff9ba43da8219f722ae2870cd2d49afd4271523dcb3d6d3ac12ebe41f40b1cd3edd526082c5788f5753d834c569cb23e7646c353e6694dea0444c22ef95b2e453549c18f19bb4658ab81f44fd4f0e488bf9a31e9405ba22de5723eb9392c812a25c8cd3aacac080dc232f1c6a26641608475c4ec130fbf832c5e2fd4bd1e622eb7037a9fbf84705e6e10fe11617163199bf1a717427dafbc076906aaeb0e5a5b31984c7c6ebd3eb6d1ffa759b26bb3979e4851c23e15a33073d32dbd5af4fd724efc44a768b198096d3a83bcdecd6d4ebe192c77cd522c1aaf81e7fde159db3528a28e71d4f047fbdd7c79ec7aa739854ed096d084ee7e2a3118b537ae4e67bd96628bac7d0a433af12f08ea5937eabadd304141e163d1d6dc1d4fc6f8308fb489878e1bd55008a927e942f356aeeb06d05e6972fd729b2685bd27de43ff6e3686b03de75d9b4bfd2a05b876cde28b39150a199a7afb50f71602818db50b9d04d4922ddda69bd366d25e94b8710e0bae57d1ed14a6731e3f52a4350bf526ce6258c90bfb5470bd9c6b51d5d0a8261480c8e8e67fe62e27a0dbc2f70ebfdcefd79b2e74c50ccd30afb0836bbc8251c14df64b87a9fe943b5b7d86be4a79819cc8cbd3da39f6036f47ed9a86088d192b69e7640b86175a59d667ffeebb05af3a104e989be35b51f303c22a67cfff01aedd18215405412402911c403084756a00e7d961d1aff781128b866576c54794259932e1676aa1aadb82a22ff7c24e53a4fb8e396b8219210726cc0852428b6f74c1d589d141736a79408a543d6a466a359543e5194c101a711a87298637cb65b7fc8f41ebd6a2153ff5736d3beae8f6828ad5ba47c2bc1a6d7bd99d0f54624f08df7627cff81b13d69495909f88c38ee1f8837eda1a6c2e68947dd6f18ba7a76444a81b1df165a25ac1e12e7fce2cd66c4aca8977ff3a2c87d221d012cbffa465ae71cd17b520affa1522ee3da5e9047be615c385335607a1fd8d6f4c61b0bbe2203d8fbfed49b5869ba61c6f4426f048e36d6203ca0a88b8c8e66611502d69c8d602f5afdd610a0dfb6dc8d553de595ce076659dc3c27fdad491c499e3ef29019e2f2a240fc59ab1865eb323d0ba440773957689cf1b3ab348bd25ebd68fbba16214bab039d5463bb6a8b406339b67a49c6363fba632bb6656bc0341b81280f08465dab59e3a8f44a3333d61348633224e5f1aee68e1e54f31257c589522d2b05fbb17fc29268ef04a9829630784f10392670442a54923bdfe7dd884f637af94b257edf0d88c0754ee52a4b4348a16deeaf5e6037a8cb0a084c79aa44cb1b7108254e324f2fa8b249dd4a35dc7d79ca93a409faabd50f315cd74b6a6afb3f4b2d3b803d82ba77547f4a2c37a41877f1d3aea498b145d0652f2ec7bed176a3a7010cb53e1e9f93128948add74d02c1d41640477babcaa92babe7fd98557a49fa6532bfd0f9c57fdda585a4f0e12658bf2cc7209641a1334e29f20e5bcb0eae6aeefd7a1fda02974101b47abe1f186c9ccf0faaf9e0b8ac849fde1108405344945bdbdb8683cca354c8296ed87b7221268c9e53789ac1f4d1bcb08a902a9c9abcc5530c6849012bc68f1601d3ea6e8c6cd3f99279a154a2db4bd52ea6bef76f8b3d81b3946b610c3634752bb42cb616c44d897703901f2fd21dc18d8dc7f9942126d2ce0bda58fcca614f203858c433342e63c9ba6e10c6806fe3ae3f7bf17e07c1f611098c6d12788ab5e143f6a3d95ed3652931d445a1009c5ca934e22e9ecc3c655073af0b7b8c833216c4a1aeed7853a9a43531c16810349649ca9737592cbb2311b2cdb6ba5a7dcacbc7e6e5c2086bc17b13165a3f9fb68c7a6b1bfcd47ac305b32f7aecf9ad088bc8f2ae2a132c91b51db6c0829e23cf78259fb0f5a4e9fcee5a98d001698c4b7c6b663625f912abb225a7c2bbca409de4630d077e024b197f40a464e47d1d37a7e2b79bdedd11f61cbb9959fcac60425174cf3ce628a29e2fa49606f5b85e35d72591d06571b95163c17df78717619204a9374544c52f0aab24d0f749137a0551a7a0d63b3bc9072871a499e8bdffdcc904b98a75ff492fefe38c4cc6ffdb29e279eeb7cb11a72e424a4b6e1e98e250683e20b7619d2474423436ba94caffe5c697fc8d938c7d6b9ad5882c7a0573d90cdc5b8fbd2fe5ad91ebf364da73b1ed8ecc26481101ecc0c51dbd97ccf81721c93536b32630ef33fbfefddd9daebee9e2b42e8383eeb829779e74654b5218dbd04aaa7951d1243956e32c465395176c7d5f62a282c9bb3a446a0663892d15643904b0e080205e455b931f6d32997fc632d55423502d3f023a158245a832970f4603bdc64a39cc0f602c95abf14dae14cd0f83d79972e7a23929955eb38a583c56df65f52509dd952cfa554aaadbef9b00dd24a9666b41bd6e13cf92fc1ac02a9fe1d23d70f7f11c0380cab5c5af3d05ee9cff2816e2d332b25984e0ff924bb0589928e627464f38e1e6a5ac7a44dd578c2c6ae6ce35eabdfb55c455da76e8b173446ff611c4b35039a6afe1293476b2f935352fb2e14e59775c5a043b6ad3958bce4817b618d3d2e1de9a2aaa4582cd030d2bda9c7514446d2dc3337e9e4b0b8317a64d12402b1d79eb4d7fe0c7e55ae294ec4956ca24dded9c24fdbe63d9bda647f6a9fbaf74ee4bf727cd2dd3aad02000fba6a2888c2fc07eb979acd25ffc40adf14107daf044c559807f4f553b12d848a1d7e966db711d26ed183a151d263a5cc0798c837fd60cd1f9a6c83fc5c4a7bd158bee47a58fbac4bd1104eb79c40e0de492bba184b0fe0288a4100952681d578da11a82ee1dd7aceab75235e19e7aadd9e540c970f2e758607a995dd812d5ea799e57d0a7b30a5fee3cb3ebe6e200c361afabfd3095d2cc4d0d79548c3a59142a9b21eadbdbc1ee3088af19114fc7b2cfab1f0c113e3d039911040684c61f7a8603295d37261d2d3cb8c38c95eb0b33b48d77b0f95688a3d8680e6e8401a38f9549d99fbbb5e30207c7855490e2374e1499794c67c6c9d0f0ff6160516889cc8007bbd8704a0c099ef4b53505641556b421e791cc781ebe4c47285bbc32b06f21752fbff467e339cedbc168210b5d72b1f3b90da02264496d40bd51718a75acff434347bdb430133572c3dd940ed958ada5ac4c9d0122da31ffaa74b1aca9523144cffab3bed6805820d6a718986bcb1dc7dad6925e3a7d48ebf5005abeae0e757358386baa2c8cb71404e18a3ef23bdfae982565c4bd5f9a8918a376f7cf356cd81aedaaaea9a26f3928397f2c1c2b519b832306df6c8c940637ec2effdcc6dad68de23ec387c1e498b34fb6ed5f3850ad597896190cc2c9b6fd90e42207662a82c3627ef4bc5cf9b2eee72007560385b70e8ceff55c92f3310bfc179a276c6dd78ac795df1313e52c6a4505ed26c1e436109fbb6218a624393a48020871313150a6fbe639a5e1f1cae563574f5a56ac43b55add7e5320a9af93a6b3139049cc08bdeddb8dbe89472bb4970f27c26c56eae2c825f9bb57d053567ebdb40fc50f502e386c5d7fec43dec1fa70f25a9aa3391fc03f791856ff978601c9e0e11da2f73ea657af75278582f11226950b6e8801f6d80e787c16237f43cab621ec17c7cde64db520896a60af6482678505a3d828799faea8b132467f427aa19c73a9dc7c2e7130de8c4743e64c197aa99db6ac1b9ffee5262be83c7de69b629cc7d8c6b88df12b9078eaff8d92e482e4e57915c67003f841c0f95a63076b11891b80aea7a1da68b1d39d1b924a1d3bef4ce7178cd39bf5d2d2bc34e932ef1b1557acc51d9357b5c88f555ee7c5d0230d4c35ceb90190426edd8e49f0297974faceefa075d37100b0806af82f043488fa51b4e3355525a4955ebf88a88c05ff88f4526412c3630231f34a4c95985be2c31ac3e6e6e1fab08b0bcc236c2a8e2d21518c0fd2f9143812b2d722c0ffa71d276393016c04ded8cbf8e27832d4729c9c41fab1cb49b49c4e8bb198f74cd7d98f8a99bd740a734ee7fabb6a1b24163f10d736e8a8133d5e853909631d266b131d579161b752b0cf7b4bd52348f696d828a8132a04440ba901a2d2fc316f60ca54c8a7776eedf3b5d8f01364082119dc422a424120b42aa291e4203282ac86973db47d2c21daa8b9c54e77a3437e691d18a627cd956f126f7d94c744f838f9dc7a4db85a1e862960c29b590c5c88b9f23a7366b8821b7094febbd74128d75970dafe54a6af02b3666d43739bf42b2bdeb066bf9c6e0cfb04b7b943ebe2fd81f3264ad88884a27ec51ad8278386ddaa6453f45c148dd2c824667d0d9718df71cd8777fdcfc52dc6828b435c86c667b2babd613fabcf49d05c9755300e3cc9e39a6f0898e5a4837fae47966c14ef65fa9be95489e9dbac76d0cec44e9a3c15950889ab8a70086852a666ec3890e92ee04bf42b0a88a06daa6044a2d158245b1d2bd387301510dc52841527d642300c1592b67c90655daca3144f4360b2d89a989ed1e5f27acac062d353d43aaf84fd5e130ad780e94aa30b87361c826def6cf902bacf42436d9454489b65d1452b839b86a4431460d81fb1c9e9bd8ad69f310baed7b3893d388603c255f8164a4893f8d29c5b9cfc48896b6549fa6f15d611670b2b977e4c7009f2dde763ee3d1ed208974ac31fe62bdc68475460370f595700b7b099b305262e2536f1e4b6fdb082547c9c671873a3363e7712e64b8b8b0af0ad1c72447500f4fe75bb46ede88a42c96c9ec17cbba90795a1a191e301bd4b58bda6bd4b70cbd66cf1ec9af7b"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xc4, 0x2, "7bf973c669d7f367669271b143ca6f7b97dde490b6ec578910fd6b0cd8f17e5a52d402a046fd0eb8b1f0abd7bd6fec9a97608de9a9df81ee80c6d3757c5e0107b7a9c49383c0b7276d30b4fdb54763511bacde94697693d55fb6e6212a49c5df05f4bba735ecbc59ab9fd219307a90d4dc929f4a9f16338a5b6763a98e6df2b36970987ced6f13330b3b19db2844f3e8fa1436513ab92797062aeb8d66618ae72e4f31d3e7c554d2ad2ad7c838803594b2b27524520a6b323f2d925efd51a032"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE={0x141, 0x2a, [@random_vendor={0xdd, 0xdd, "eb271fbf9a62eff32d0e61c35efb76749f16e27dca089c92579ef57bfaca202d1d95393fac36eea22009a3677ca3e57c5807b2f9f2bc8c5b4d561334af978ff42fbb07ddbcddba93547ee104166b216b3ed8ede73c0377bfba03389a3cef9b73a05b0d6b1ba4f6d94e9817bf75344f088d702e0ae75c434fe1086b63c14a67524e995e66bb719a463643661a218a8fae30a22e9ed527dc1b0a21eca2f146cefb1181ff1e004de2abffa3d9037df33bba4cf6a54369c79f125bf9644e2360e17e2c271d278794d362f8d2f8d51e94ef386c2a80feb04d643e3d46a019f5"}, @mesh_chsw={0x76, 0x6, {0x17, 0x6, 0x30, 0x3ff}}, @tim={0x5, 0x54, {0xfe, 0xad, 0x0, "8512da1f54882188ecc74c9e11a1d3c51a2eeb370b2d75d75ddc66f2110b0d87ed0f00f60466517f7f778cafcb825e7e292eea3143156db68c6a9a6a21204514fd051e0576bbd6443e0aee39714b981cf9"}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x5c, 0x7f, [@tim={0x5, 0x50, {0x2, 0xfb, 0xe2, "dd89e4547184993c4225159004de1e3a36607b3d32e8e90c2bdebbbd2dbb268cc5cd4ee34b8901b2e2b2fe6e1f641cfab8afd292e8f4fba046f5c6486e410f90b7cff1f8b9696e8f749ade8025"}}, @chsw_timing={0x68, 0x4, {0x1400, 0x5}}]}, @NL80211_ATTR_PROBE_RESP={0x5cd, 0x91, "de4594b849d118403649f1cb7384a1e3bd555d67348569860c7f1ee9e807cb2b103c8d92409f08ba4c1c17b5af35e45fe03da3f8f56a20a5dbf04839902d6b45784127fa823fc30a78fad5338ad95c42135e53c8fc2f3926a51619873d005d9cb1af131ce9d4450722a3b3a8798aa38aebaacbdc5de15bcfca61e0df54f1e41cf63457138944407e6ba02f4237a7fe64fea451286478a77dbc097343772202084c1d519ee77946cf0ab38e95d4e0e7b99c6e137787757a2701b8e50b92e80c90182cf2ecd68b88fc1ebcc36dafede8c30349a387e238ca6b05c94ed36aadf7520436bc27924deb2c96dc369039e8ca4f7aac5cc5ca4752802e04a8e9e70d9592365ff0067f7c1df91dbcb66c1f730e60539ab62eff80147f5a57d3807aa327cf82927c39823ea65529fdc6ece4f989ca49118a6f3e3f43e2beca0f526ffb2c89a24905430a516484f3ff5029b8bd54886d00d6fb5d7a11bbe0968fc46bf703dc40c4acb7073a76d93f9a42791d7c54407da41d99f429908e4245b29eedc13756d27c3c8c6d95c998ae935a915e2b56f239b59cbaae4ec953598af5b764c093c5b19cb6f3fc2993d568f414a0b94e7fde6e3e2e5cac6f6755d000b7f5e654605f454b3996d5059ea91132fcfa784974772b834d1331eb898e1b24337f44f42cf3b13cbbee20fe3174e3d2cbd1bf917c499a068cdecf6cdca3f00b84fae2b8468b2d0491b0374ee08fc3541a39eec52ccfc897da2d3968652925fc77739adb9a9b2620e89a7a8881c7610c56429fdec0218831650f227739469c1ec30e5b26091a8219028329a7aed25659a89078d327a51d6679a058990b5ff0f9cc759ebaaa32ce01b81fcc75ba4704d16202480ddac1319d2ce03c70c182595e842b81e8a8657c0b365d39fde4dcaa59fb62d3d2211794767432f68d3aa588f7cdeabfc971cf3461af1ff97159424d2ebe7f90c002a7230465b322354f39ec827b51a116ea318e825b1731f17689f883a8307f8adf4c0a1128977731d5690af21250ec5d666aab8297d6577269f42e4a666b2642592a9703651f67c77bed7d561643f3c19ac867eba57458153ce6577fa159dbca72e2fa417c1825b276e148a860ac21fb5644fbbb84b1b9c16584e6e96a2761839e9de5c9a7cad244f48690afe0c1ef9731c4584458f75d0ea3cf23d3affcf7257684c6dfdfcdca7b28ddd7ff43909e0d655e040d6df81c7593281ba666ebe9ad1afdcc8530b7a0e1f4159fd752dca570dd5c54aed7ae1ee3c6eb801f4b69250bb3f177067a759d7ce0a2a6baac6a5d005cc3609ab97f845b122ea4d92085a81352decf0a5d0c990a2c39d9dcf32a77939c436cd0bb6ced990f8fd42ffc98cdf65668d5ab1c4f41c17fb9cfab2196f2b7e0b2c8479d952c41ca84fc6484707c434f9f1f483c452521c5c37f2301ca2bba070ac74ef76149fb9ce4e192f7cf9173a00807964851e3bf6a0ce70e7488ae3c2ab72e33d7521ec45b881444a3d9f5967281c849ceb69c425080a81968ae1c8d7650daa0b8c8c804b9d7595c809f526be1cccbe422286439b194dba8cd91b53db1a3885890161caa0beb32f1383155cadc2ef5df3ba661829fb924931900c78349411eb51fab4021a85522f51af1bb6691658eb9bef925582a630a442ea78f2e25360b7a8aa31c4c4f36fc4f4b243d84a5792ada3a11188fba0227704fbf40524620df882a2a825452310b3bdf3c375155cee098b0f8ddae1c69ed585a7d81765bd3730b09564d259e2a12ca0ef56913ce74283d7a942367e7527bc94f4339ed128401cf6736b67e6413f23da3918b2e612b0f2d011a97993489665de398e67ca42e8b62ae7a435a496390903ef4128e8834c956ca4f83f32d667b269590365b001e045f1f262906367eca0f848ef175b80e5440c0208f44f2372e6f9f7461ec3448b771597b3da02008137c02a85c2820ace40570b6c9928c5394929e5a2cac0fd8e97a91f468c60785a28eba7b8465212e0ac680f2ef35a8380502b70989ec2be9a9e7b11b07c9274d36b94126cc05b2ec15ea47541f452a27363fdfe932a3e3aa8797d35786acb8d6a8"}, @NL80211_ATTR_IE_ASSOC_RESP={0xc, 0x80, [@ssid={0x0, 0x6, @default_ap_ssid}]}, @NL80211_ATTR_IE_PROBE_RESP={0x14d, 0x7f, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @perr={0x84, 0xd6, {0x1, 0xe, [{{}, @broadcast, 0xed24, @void, 0xe}, {{0x0, 0x1}, @broadcast, 0x200, @value=@device_b, 0xc}, {{}, @device_b, 0x0, @void, 0x28}, {{}, @broadcast, 0x3, @void, 0x1f}, {{}, @device_a, 0x9, @void, 0x30}, {{}, @broadcast, 0x1, @void, 0x37}, {{0x0, 0x1}, @device_a, 0x25c, @value=@broadcast, 0x5}, {{0x0, 0x1}, @broadcast, 0x1ff, @value=@broadcast, 0x3f}, {{0x0, 0x1}, @device_b, 0x1, @value=@device_b, 0x1b}, {{}, @device_a, 0x7, @void, 0x13}, {{0x0, 0x1}, @device_a, 0x7, @value=@device_b, 0x2d}, {{}, @broadcast, 0x14, @void, 0xc}, {{}, @device_a, 0x4, @void, 0x19}, {{}, @device_b, 0x80000001, @void, 0x2d}]}}, @chsw_timing={0x68, 0x4, {0x7fff, 0x4}}, @mesh_id={0x72, 0x6}, @random_vendor={0xdd, 0x56, "af6b734d64929df42264c49430e472f09b3f010949f3d58eaa38bdfc7c5c904a9dacab6ab9885e559414c479cf219f6d7af55266acc3779dcf10166212e07727eb115785e4fe0015d9ed26e31da790447a67688ef5fc"}, @ssid={0x0, 0x6, @default_ibss_ssid}]}]]}]}, 0x1c0c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000880)
ioctl$EVIOCGKEY(r8, 0x80404518, &(0x7f0000005840)=""/142)

8.164422814s ago: executing program 4 (id=3893):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x0, 0x800, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8014}, 0x20040001)
r2 = socket$inet6(0xa, 0x3, 0x3c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000001240)=ANY=[@ANYBLOB="09283f3876104eac27f783d7a34e700000008000050001000400660403000100"], 0x16)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffde, 0xfffffffc}, 0x0)
sendmsg(r1, 0x0, 0x0)
set_mempolicy(0x8006, &(0x7f0000000180)=0xfff, 0x7ff)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
unshare(0x22020600)
fchown(0xffffffffffffffff, 0x0, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r6 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2)
ftruncate(r6, 0x10000)
fcntl$addseals(r6, 0x409, 0x7)
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000080)=0x1)
close_range(r5, 0xffffffffffffffff, 0x0)

7.926920102s ago: executing program 1 (id=3894):
r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
read$watch_queue(r0, &(0x7f0000001280)=""/4096, 0x1000)
r1 = socket$packet(0x11, 0x2, 0x300)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8, @ANYRES64=r1], 0x0)

7.660564388s ago: executing program 2 (id=3895):
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="2b00008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x806}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000200)={@rand_addr=0x64010100, @multicast2=0xe0000300, 0x0, "02e698451697efe40b11ee1db06e9264f7d866b1970548fc3c7b00", 0x8000, 0x6, 0x1, 0x7fff}, 0x3c)
write$binfmt_misc(r0, &(0x7f0000000040), 0xe09)
r1 = syz_open_dev$loop(&(0x7f0000000140), 0x9, 0x40000)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000000000000000000dabe00", "2809e8dbe108598948224ad54afac11d87539e01177d3d458dd4992861ac00", "f4bd00000080190000000000000800", [0x0, 0x2000000000001]}})

7.477628763s ago: executing program 3 (id=3896):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1002, 0xffffffffffffffff, 0x4}, 0x38)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0x8000000, 0x141200})
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000280)={@private=0xa010102, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae", 0x0, 0x0, 0xfffffffd, 0x4}, 0x3c)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x29, 0x0, 0x0)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000080)={0x6000, 0x0, 0x1})
epoll_create1(0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe)
pselect6(0x40, &(0x7f0000000100)={0x8, 0x3, 0x4, 0x4, 0x800, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0xfffffffffffffffd, 0x8}, 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff)
sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
eventfd2(0x4, 0x80000)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
accept4$alg(r6, 0x0, 0x0, 0x0)
io_setup(0x20000000001005, &(0x7f0000000880))
shutdown(r0, 0x1)

7.321139082s ago: executing program 2 (id=3897):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xe472, 0x2, 0x0, 0x25a}, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x401, r3}, 0x38)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r2, 0x0, 0x20000000)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, 0x0, &(0x7f00000000c0))
openat$mice(0xffffffffffffff9c, &(0x7f0000002d40), 0x4000)
r5 = socket(0x840000000002, 0x3, 0xfa)
getsockname$inet(r5, 0x0, 0x0)
lstat(&(0x7f0000000240)='./file0\x00', 0x0)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0xff, r7, 0x0, 0x3, 0x1}}, 0x20)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100021de24a208304341285520102030109021200010000f2000904ca00009c961700"], 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000200)={0xfffffffe, 0x3, 0x4})
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50)
unshare(0x62040200)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_proto_private(r8, 0x8924, &(0x7f0000000000)="d84450a4bf55990ef9b33a")
recvmmsg(r8, &(0x7f0000003500)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, 0x80, &(0x7f0000000340)=[{&(0x7f00000004c0)=""/197, 0xc5}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/18, 0x12}, {&(0x7f00000001c0)=""/2, 0x2}, {&(0x7f00000015c0)=""/143, 0x8f}, {&(0x7f00000002c0)=""/15, 0xf}, {&(0x7f0000001680)=""/197, 0xc5}], 0x7, &(0x7f0000001780)=""/48, 0x30}, 0x2}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f00000017c0)=""/3, 0x3}, {&(0x7f0000001800)=""/226, 0xe2}, {&(0x7f0000001900)=""/122, 0x7a}, {&(0x7f0000001980)=""/53, 0x35}, {&(0x7f00000019c0)=""/42, 0x2a}, {0x0}], 0x6, &(0x7f0000001ac0)=""/204, 0xcc}, 0x9}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001bc0)=""/86, 0x56}], 0x1, &(0x7f0000001c80)=""/75, 0x4b}, 0xffff}, {{&(0x7f0000001d00)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001d80)=""/229, 0xe5}, {0x0}], 0x2, &(0x7f0000001f40)=""/116, 0x74}, 0x6}, {{&(0x7f0000001fc0)=@can, 0x80, &(0x7f0000002280)=[{&(0x7f0000002040)=""/205, 0xcd}, {&(0x7f0000002140)=""/150, 0x96}, {&(0x7f0000002200)=""/115, 0x73}], 0x3, &(0x7f00000022c0)=""/220, 0xdc}, 0xf1}, {{&(0x7f00000023c0)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000002580)=[{&(0x7f0000002440)=""/132, 0x84}, {&(0x7f0000002500)=""/72, 0x48}], 0x2, &(0x7f00000025c0)=""/206, 0xce}, 0x4}, {{0x0, 0x0, &(0x7f0000002b40), 0x0, &(0x7f0000002bc0)=""/125, 0x7d}, 0x400}, {{&(0x7f0000002c40)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000003200)=[{&(0x7f0000002cc0)=""/119, 0x77}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/182, 0xb6}, {&(0x7f0000002e40)=""/197, 0xc5}, {&(0x7f0000002f40)=""/207, 0xcf}, {&(0x7f0000003040)=""/63, 0x3f}, {&(0x7f0000003080)=""/84, 0x54}, {&(0x7f0000003100)=""/86, 0x56}, {&(0x7f0000003180)=""/83, 0x53}], 0x9, &(0x7f00000032c0)=""/251, 0xfb}, 0x22}, {{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f00000033c0)=""/102, 0x66}, {&(0x7f0000003440)=""/126, 0x7e}], 0x2}, 0x8}], 0x9, 0x120, &(0x7f0000003740)={0x77359400})
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x1, 0x70bd2b, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'ip6gre0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x3ff}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4048000}, 0x800)

7.173160991s ago: executing program 9 (id=3898):
socket$kcm(0x10, 0x2, 0x0)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) (async)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/softnet_stat\x00')
lseek(r0, 0x6, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e0010008188e04710008e405e14060200000000000200000000", 0x1a}, {&(0x7f0000000100)="c40ad3", 0x3}], 0x2}, 0x48051)

6.785609516s ago: executing program 9 (id=3899):
faccessat(0xffffffffffffffff, 0x0, 0x44)
lsm_set_self_attr(0x67, &(0x7f00000000c0)=ANY=[@ANYBLOB="006700000000000000000000000400"/32], 0x20, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc4d4, 0xfffd}, 0x8)
sendto$inet6(r0, &(0x7f0000001240)="b6", 0x1, 0x24000000, &(0x7f0000000280)={0xa, 0x4e22, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x85}, 0x1c)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000001c0), &(0x7f0000000200)=0x8)
syz_clone3(&(0x7f00000004c0)={0xe12d480, &(0x7f0000000480), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000000)={0x2c5, 0xe000, 0x2, 0xffffffffffffffff, 0xd})

6.13465714s ago: executing program 3 (id=3900):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gre0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x60, 0x10, 0x421, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x10000}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @gre={{0x8}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x3ff}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x60}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x51a23}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @loopback}, @IFLA_GRE_REMOTE={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000014)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d04, 0x0, 0x200}]})
r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00')
read$FUSE(r7, &(0x7f0000003940)={0x2020, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x2020)
preadv(r7, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/93, 0x5d}], 0x1, 0x8, 0x8)
r9 = fsopen(&(0x7f0000000600)='devpts\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0)
r10 = fsmount(r9, 0x1, 0x1)
fchdir(r10)
open(&(0x7f0000000080)='.\x00', 0x480, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mount$fuseblk(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x1151400, 0x0)
read$FUSE(r7, &(0x7f0000005980)={0x2020, 0x0, <r11=>0x0}, 0xc4a)
r12 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10)
sendto$inet(r12, 0x0, 0x0, 0x8804, &(0x7f0000001240)={0x2, 0x4e21, @empty}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @fd=r13}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r11, @ANYRESDEC=r8, @ANYBLOB="80005e0e0a18fd03a7966a21bfa180ff0000000000000000009654b604b40b13e63d21f6091bb852a84a22f64a2dc0556d12182679f07c3c5b0fd4ee73c31c958e2b782d27c5562c0827f5b8587cc8bbe7a8a3202da9dbc58c3a5217550a62cefad212b1a0feec6ba3d249adfe3d9bdbdf8b36b2a6f12be47c076cdd20fdfc211041b4acd48e439e4ec0b14101fc54b84640f8ddeee39f2764d44f6f9ddb25", @ANYRES16=0x0], 0x28}, 0x1, 0x0, 0x0, 0x40040a5}, 0x40000)

5.51298511s ago: executing program 1 (id=3901):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x1, 0xffffffffffffffff, 0x0, 0x1, @in6={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x60}}}, 0xa0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r1, 0x29, 0x4b, 0x0, 0x0)

5.415797163s ago: executing program 4 (id=3902):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = dup(r0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r4})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r6, 0x0, &(0x7f0000000040)="05", 0x1, 0xfffffffd})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r6, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0xffffffff80000001})
ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r6, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r6, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7})
ioctl$IOMMU_IOAS_UNMAP(r5, 0x3b86, &(0x7f0000000240)={0x18, r6, 0x14c0, 0x80000000})
ioctl$IOMMU_IOAS_IOVA_RANGES(r3, 0x3b84, &(0x7f0000000180)={0x20, r6, 0x1, 0x0, &(0x7f00000001c0)=[{}]})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x2, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.414587856s ago: executing program 9 (id=3903):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x8, 0xffffffffffffffff, 0x20})
syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x5c, 0x7f, 0x40, 0x547, 0x201, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xcd, 0xd2}}]}}]}}, 0x0)
modify_ldt$write(0x1, &(0x7f0000001a80)={0x200, 0x1000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1}, 0x10)
modify_ldt$write(0x1, &(0x7f0000000000)={0x10000, 0x101000, 0x4000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10)
modify_ldt$write2(0x11, &(0x7f0000001b80)={0x0, 0x20000800, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10)

5.350145913s ago: executing program 1 (id=3904):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
fcntl$setlease(r3, 0x400, 0x1)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x28, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
r4 = socket(0x10, 0x2, 0x0)
write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4080, 0xff0}], 0x1, 0x0, 0x0, 0x0)
dup(r4)
r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001ac0)={r7, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}})
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb00000000000000000000000000000000ffff20000a0080000000", @ANYRES32=0x0, @ANYRES16=r0], 0x23c}}, 0x0)

5.074235379s ago: executing program 3 (id=3905):
socket$inet_tcp(0x2, 0x1, 0x0) (async)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) (async, rerun: 32)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) (async, rerun: 32)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x20, 0x1e, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x145f}, [@ldst={0x2, 0x0, 0x2, 0x4, 0xb, 0xffffffffffffffff, 0xfffffffffffffffc}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x5f}, @call={0x85, 0x0, 0x0, 0xc6}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r5, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, &(0x7f0000001200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) (async)
openat$dma_heap(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c081, 0x0)
symlink(0x0, 0x0) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r7, 0x0)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
accept(r6, 0x0, 0x0) (async)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r9, 0x29, 0x10, 0x0, 0x0)

5.021356527s ago: executing program 4 (id=3906):
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x200074cf, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000280)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0)
rt_sigsuspend(&(0x7f00000000c0)={[0x8]}, 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000440)={0x8000000000000000, 0x1, 0x1, 0xc05})
ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r8, {}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5})
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'})

4.455580352s ago: executing program 3 (id=3907):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000000)=0xfffffff3, 0x4)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = dup(r2)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, &(0x7f0000000100)="0f20c035000001000f22c0660f383deff3a766b80c008ee066b882000f0866b8cc000f00d8788fa4ba00000f00d866ba200066b8340c66ef64360f78190f0119", 0x40}], 0x1, 0x19, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000000)=0xfffffff3, 0x4) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
dup(r2) (async)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, &(0x7f0000000100)="0f20c035000001000f22c0660f383deff3a766b80c008ee066b882000f0866b8cc000f00d8788fa4ba00000f00d866ba200066b8340c66ef64360f78190f0119", 0x40}], 0x1, 0x19, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)

3.699059901s ago: executing program 3 (id=3908):
timer_create(0x0, &(0x7f0000000480)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000080)={{0x0, 0x1}, {0xe}, 0x2, 0xee39868a3532d8e7, 0x2e})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x9)
munmap(&(0x7f0000003000/0x3000)=nil, 0x3000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats})
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x7800, 0x8, 0x5000, 0x8, {{0x26, 0x4, 0x1, 0x4, 0x98, 0x68, 0x0, 0x2e, 0x29, 0x0, @multicast1, @private=0xa010100, {[@timestamp_addr={0x44, 0x2c, 0x33, 0x1, 0x8, [{@rand_addr=0x64010102, 0x2}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x5}, {@rand_addr=0x64010102, 0x3}, {@loopback, 0x4883a0d6}, {@loopback, 0x59}]}, @generic={0x88, 0x12, "3afe52fc9814a1708b41bb17375c46c2"}, @generic={0x94, 0x4, "2cef"}, @generic={0x44, 0x12, "d30a3e8fd24d3271b258a4312a834fd3"}, @rr={0x7, 0x23, 0xe7, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @local, @multicast1, @local, @remote, @local]}, @timestamp_prespec={0x44, 0xc, 0x8, 0x3, 0x4, [{@private=0xa010101, 0x3}]}]}}}}})
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc060, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MODE={0x5}]}}}]}, 0x44}}, 0x0)
sendfile(r4, r6, 0x0, 0x7fffffffffffffff)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r8=>0xffffffffffffffff})
pipe(&(0x7f0000002480)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
splice(r8, 0x0, r10, 0x0, 0x7, 0x9)
read(r9, &(0x7f0000032440)=""/102364, 0x18fdc)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004080}, 0x8ae257a062cc3564)
write$P9_RAUTH(r10, &(0x7f0000000a00)={0x14, 0x67, 0x2, {0x4}}, 0x14)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
syz_clone3(&(0x7f00000003c0)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=<r12=>0x0, {0x28}, &(0x7f00000001c0)=""/170, 0xaa, &(0x7f0000000280)=""/90, &(0x7f0000000340)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6, {r9}}, 0x58)
ptrace$ARCH_SHSTK_STATUS(0x1e, r12, &(0x7f0000000440), 0x5005)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

3.289076587s ago: executing program 9 (id=3909):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f00000000c0)="0f21b034000f21c9440f20c03507000000440f22c066bad00466b8af0066ef66b85b0066b83d018e9bf0f0b887008ee867360f062e0f09", 0x37}], 0x1, 0x8, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket(0x23, 0x5, 0x5)
syz_open_dev$tty20(0xc, 0x4, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
syz_emit_ethernet(0x2ce, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6ef5c98000282901fec0ffff000000000000ffffe0000001fe8000000000000000000000000000aa"], 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r6, 0x0, r5, 0x0, 0x6, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x4000150}, 0x0)
connect$unix(r4, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x10)
r7 = socket$inet6(0xa, 0x1, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0xc840}, 0x4000840)
r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f0000000040)={0x53, 0xa, 0x3, "b25cb9fbaf0500040000ba28840000200000000000000000004000800500", 0x40464c7d})
ioctl$VIDIOC_TRY_FMT(r9, 0xc0d05640, &(0x7f0000000240)={0x2, @sdr={0x38303553, 0x2}})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

3.087027436s ago: executing program 2 (id=3910):
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
io_uring_enter(0xffffffffffffffff, 0x47bc, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r0 = inotify_init1(0x800)
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x40000000)
inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x40000000)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1ff, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}})
r3 = dup(r2)
write$UHID_INPUT(r3, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38)

2.457510884s ago: executing program 9 (id=3911):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
write$P9_RSTATu(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f000"], 0x232)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000001900)={{0x12, 0x1, 0x200, 0x2, 0xcd, 0x77, 0x10, 0x403, 0xb8d8, 0x30bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xde, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd0, 0x76, 0xd8, 0xe}}]}}]}}, 0x0)

1.893055507s ago: executing program 4 (id=3912):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x800, 0x1400)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffd, 0x82, 0x1, @buffer={0x0, 0xd1, &(0x7f00000001c0)=""/209}, &(0x7f00000002c0)="f8d5da548211749f3f23c7f0655fac54847d93dd60fc660ddfdb39c791abb54f2058edfcc3a62c5f72c929ac1c5630770bade4824f5a5593822a726e5bea97c69773d91df93c261c56119486d06a37495ba39a5ce44b25b0c18f127c7fd843432df28f03fa323e421f5c20abff04adcc6a2f6386aed9b6d04fc0a9fcf43a13649298", &(0x7f0000000040)=""/23, 0x2, 0x21, 0xffffffffffffffff, &(0x7f00000000c0)})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000d240)=@newtaction={0x4c, 0x1e, 0x109, 0x100, 0x25dfdbfe, {}, [{0x38, 0x1, [@m_simple={0x34, 0xa, 0x0, 0x0, {{0xb}, {0x4}, {0x8, 0x6, "82afd8c5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x10000084)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0)
r4 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r4, 0x2c93a000)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1})
r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}})
ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800})
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=ANY=[@ANYBLOB="38010000100001002bbd700000000000fc010000000000000000000000000000fc0200000000000000000000000000000000ecdf00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000003c0000000000000000fa00000000000000000001feffffffffffffff0000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000575d0000000000000008400000000000000000000000000000000000000000000100000000000000000000000000000000000000020004002c006fe644c3b7a0860000000000004800020063626328616573290000000000000000000000000000000000f2000000000000000000000000000000000400"/240], 0x138}}, 0x4050)

1.832626089s ago: executing program 2 (id=3913):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x0, 0x800, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8014}, 0x20040001)
r2 = socket$inet6(0xa, 0x3, 0x3c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000001240)=ANY=[@ANYBLOB="09283f3876104eac27f783d7a34e700000008000050001000400660403000100"], 0x16)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffde, 0xfffffffc}, 0x0)
sendmsg(r1, 0x0, 0x0)
set_mempolicy(0x8006, &(0x7f0000000180)=0xfff, 0x7ff)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
unshare(0x22020600)
fchown(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r7 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2)
ftruncate(r7, 0x10000)
r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000100)={r7, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000080)=0x1)
close_range(r5, 0xffffffffffffffff, 0x0)

1.830403973s ago: executing program 1 (id=3914):
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x1, 0x20000, 0x0, 0x0, 0x0, 0xfffffffe})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x6)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x2f61)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0xfffffffffffffffe)
ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f00000002c0)={0x6, 0x4, 0x305e, 0x7fffffffffffffff, 0xa4})
r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x1, 0x2)
ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800})
listen(r2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r6, 0xa7ba)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402", @ANYRESOCT=0x0], 0x0)
listen(r8, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r9, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1)
r11 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ppoll(&(0x7f00000000c0)=[{r11, 0x8}, {r11, 0x3048}], 0x2, 0x0, 0x0, 0x0)

1.302165884s ago: executing program 4 (id=3915):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48)

986.102839ms ago: executing program 4 (id=3916):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4048004)
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001180000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
pwritev(r1, &(0x7f0000000840)=[{&(0x7f0000000580)="0c223e0b1ec333ba09b53488cff92b561621cdd1c8731bb3dc4889018000005a860689", 0x23}], 0x1, 0x5, 0xb2)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
syz_usb_connect$uac1(0x3, 0x88, &(0x7f0000000880)=ANY=[@ANYBLOB="12011001000000206b1d01014000350203170902763f4b57fc7344955ba82f94c4e600030101a0090904000000010100000a24010200d30201020904010000010200000904010101010200000c2402010f01f800000000050109ff03060507072501000705000904020000010200006e80742f1f11c441280353426f0904020101010200000b240272d0560600d630cbf4e5a44903"], &(0x7f00000006c0)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x300, 0xf7, 0x5, 0x0, 0x10, 0x1}, 0x41, &(0x7f0000000f80)={0x5, 0xf, 0x41, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x53, "e149263d4898e6cad7ebc441d219e086"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "4fc1eb0c1c8380c6f797b6ce8cde5def"}, @generic={0x3, 0x10, 0xb}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x6, 0xd6, 0x46cc}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x8, 0x8}]}, 0x1, [{0x5b, &(0x7f00000007c0)=@string={0x5b, 0x3, "40b6683c5545601bf0b39c1f0f3740192995b1c1c7b146cb02e1320909bd1ed13fc85ca10e704d727d3bd78eb54e354b5c0b5edac0574e402a2443c4e70662b7000507187a5e0d0804c32f97d9a84a7dadb85fec84cd6a3994"}}]})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_usb_control_io$rtl8150(r0, &(0x7f0000000240)={0x14, &(0x7f00000003c0)={0x40, 0xa, 0xa3, {0xa3, 0x22, "cd1ceb50fc773baad7444f585a97f225f693cc3099d139157dfdaffa8a4985e3a18575402636fc15683fb24a0a52c44bca11e72767a5d9b8b7e0323ea042d4a96fdcf7c5242d684e5a1b54d0024e8d51d3a892e51f87439e145e27e222aca7c2a51e32fb5e26a2a4bf2152fe541a510c3afb194d5360bb15d9d39edbe37ee9c1606f60c6b2f915b8f02fc5f2b5bdf30d6ce42f7c6dba08caaf85e058bda8646388"}}, &(0x7f0000000180)=ANY=[@ANYBLOB]}, &(0x7f0000000680)={0x2c, &(0x7f0000000480)=ANY=[@ANYBLOB="40314800000073ddbd2f11536759120378633edbeffd6a8787951c56f7943ef16cdca6701dc7aa92909cb380295111b376ed83c076de24ce4e650400000035e5d2de4522e0b07958a5eb003228da"], &(0x7f0000000500)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001000)=ANY=[@ANYBLOB="c00503000000dcd103b9ae006eed0869078ddb962576c08695a55aeb90bab1bd69ca5c27a14e0c289a4782aed3cdfa35230689aef6a13f9daa8fe40b97df30183dbb1c47cf949dd1b8b29a8b8e745cb763d369d63a797c6207f41a6aa6f221ec79737406a8bb6766af2aff340e04f5c55aaa8ab1d34f40d43584b3902d44b39b"], &(0x7f0000000e40)=ANY=[@ANYBLOB="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"]})

250.038217ms ago: executing program 2 (id=3917):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x7ffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x5, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x7fff, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0xd5, 0x80000001, 0x6, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff44, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0xffffff00, 0x3, 0x2, 0x7, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0x7, 0x0, 0x743, 0x5, 0x3, 0x7, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x1, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x5a, 0x2302, 0xffff, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x401, 0x10001, 0x512d, 0x1, 0xe, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e9, 0x48, 0x9, 0x3, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x6, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x4, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0x7, 0x6e8, 0x8, 0x0, 0x80000000, 0x6, 0x9, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0xf0f029, 0x4})
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc})
ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f0000000100)={0xc})
ioctl$IOMMU_VFIO_IOAS$CLEAR(r3, 0x3b88, &(0x7f0000000140)={0xc})
ioctl$IOMMU_VFIO_CHECK_EXTENSION(r3, 0x3b65, 0x9)
r4 = inotify_init1(0x80800)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000002000/0x1000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, &(0x7f000002d000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000574000/0x4000)=nil, &(0x7f00001fd000/0x3000)=nil, &(0x7f00001a3000/0x4000)=nil, &(0x7f0000162000/0x1000)=nil, &(0x7f0000000200)="3249d585f5f534717fd2f2909c18672aa7816840675ce42a01808d6f119a592a0d0918400f0249c47add1f1b386995f924eb66f5a668f6518929a4d771a2f26077083da1d58b7dfdf375f0efb7294872a87ae5947fbc7e3c758bfda05ac5dbd0f83f850fdf3089dac0fb0eb18c9a51", 0x6f, r4}, 0x68)
ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r3, 0x3b71, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40004)

148.757253ms ago: executing program 1 (id=3918):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x11, 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)
r9 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
r10 = accept4$inet6(r9, &(0x7f00000001c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000200)=0x1c, 0x80800)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'dvmrp0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r11, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
close_range(r1, 0xffffffffffffffff, 0x0)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x3c, r12, 0x205, 0x0, 0x2, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x10}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}]}, 0x3c}}, 0x4000)

0s ago: executing program 2 (id=3919):
syz_emit_ethernet(0x4e, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0)
openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}}, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0)
ioctl$FBIOBLANK(r4, 0x4611, 0x3)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0)
ioprio_get$uid(0x3, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00')
pread64(r6, &(0x7f0000001600)=""/4103, 0x1007, 0x97)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r7, 0x0, 0x814)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x20, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a3100000000ba46a382d82af476209adb5c000480588e92134b1a4f698461726765740000480002802c0003009ac420000461afb9fdd672bad09dfb78c7699c74e891a0c7fffffffffffffff50000000000000000080002400000000e00010049444c4554494d45520000000900020073797a3200000000140000001100010000000000000000000100000a00"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)

kernel console output (not intermixed with test programs):

4.890434][T20206] Bluetooth: hci9: Opcode 0x0c1a failed: -4
[ 1134.896525][T20206] Bluetooth: hci9: Error when powering off device on rfkill (-4)
[ 1134.925485][T20206] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1134.932999][T20206] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[ 1136.162206][T20250] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3614'.
[ 1136.171893][T20250] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1136.231821][T20255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1136.256091][T20255] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1136.523454][T20250] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1136.567876][T11371] usb 10-1: new high-speed USB device number 46 using dummy_hcd
[ 1137.708876][T20272] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3619'.
[ 1137.808454][T20275] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3619'.
[ 1137.848812][T16501] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1137.885570][T16501] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1137.896816][T16501] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1137.910695][T16501] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1137.920646][T16501] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1137.944027][T14277] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1137.952277][T14277] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1137.961369][T14277] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1137.971780][T14277] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1137.980203][T14277] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1138.207411][T20287] IPVS: set_ctl: invalid protocol: 50 10.1.1.2:8188
[ 1138.432310][T20294] FAULT_INJECTION: forcing a failure.
[ 1138.432310][T20294] name failslab, interval 1, probability 0, space 0, times 0
[ 1138.485627][T20294] CPU: 1 UID: 0 PID: 20294 Comm: syz.6.3622 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1138.485653][T20294] Tainted: [L]=SOFTLOCKUP
[ 1138.485659][T20294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1138.485669][T20294] Call Trace:
[ 1138.485676][T20294]  <TASK>
[ 1138.485683][T20294]  dump_stack_lvl+0xe8/0x150
[ 1138.485708][T20294]  should_fail_ex+0x414/0x560
[ 1138.485727][T20294]  should_failslab+0xa8/0x100
[ 1138.485748][T20294]  kmem_cache_alloc_noprof+0x88/0x710
[ 1138.485773][T20294]  ? mas_alloc_nodes+0x291/0x350
[ 1138.485792][T20294]  mas_alloc_nodes+0x291/0x350
[ 1138.485810][T20294]  mas_preallocate+0x2e0/0x670
[ 1138.485831][T20294]  ? __pfx_mas_preallocate+0x10/0x10
[ 1138.485856][T20294]  ? __mas_set_range+0x12f/0x3c0
[ 1138.485881][T20294]  __split_vma+0x2fa/0xa00
[ 1138.485908][T20294]  ? __pfx___split_vma+0x10/0x10
[ 1138.485937][T20294]  ? mas_find+0xb0e/0xd30
[ 1138.485958][T20294]  vms_gather_munmap_vmas+0x4c6/0x12f0
[ 1138.485991][T20294]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[ 1138.486018][T20294]  ? mas_find+0xa7d/0xd30
[ 1138.486039][T20294]  mmap_region+0x729/0x1d10
[ 1138.486061][T20294]  ? __lock_acquire+0x6b6/0x2cf0
[ 1138.486086][T20294]  ? __pfx_mmap_region+0x10/0x10
[ 1138.486113][T20294]  ? __lock_acquire+0x6b6/0x2cf0
[ 1138.486164][T20294]  ? __lock_acquire+0x6b6/0x2cf0
[ 1138.486191][T20294]  ? __lock_acquire+0x6b6/0x2cf0
[ 1138.486206][T20294]  ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10
[ 1138.486246][T20294]  ? get_pid_task+0x20/0x1f0
[ 1138.486267][T20294]  ? cap_mmap_addr+0xb0/0x100
[ 1138.486285][T20294]  ? bpf_lsm_mmap_addr+0x9/0x20
[ 1138.486301][T20294]  ? security_mmap_addr+0x71/0x270
[ 1138.486319][T20294]  ? shmem_mapping+0xd/0x50
[ 1138.486336][T20294]  ? memfd_check_seals_mmap+0xc5/0x200
[ 1138.486360][T20294]  do_mmap+0xc45/0x10d0
[ 1138.486390][T20294]  ? __pfx_do_mmap+0x10/0x10
[ 1138.486416][T20294]  ? down_write_killable+0x178/0x230
[ 1138.486439][T20294]  ? __pfx_down_write_killable+0x10/0x10
[ 1138.486459][T20294]  ? common_file_perm+0x1b5/0x220
[ 1138.486485][T20294]  vm_mmap_pgoff+0x2a6/0x4d0
[ 1138.486511][T20294]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 1138.486531][T20294]  ? __fget_files+0x2a/0x420
[ 1138.486554][T20294]  ? __fget_files+0x3a0/0x420
[ 1138.486573][T20294]  ? __fget_files+0x2a/0x420
[ 1138.486595][T20294]  ksys_mmap_pgoff+0x51f/0x760
[ 1138.486622][T20294]  do_syscall_64+0xec/0xf80
[ 1138.486640][T20294]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1138.486655][T20294]  ? trace_irq_disable+0x37/0x100
[ 1138.486675][T20294]  ? clear_bhb_loop+0x60/0xb0
[ 1138.486694][T20294]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1138.486709][T20294] RIP: 0033:0x7f8fb138f749
[ 1138.486724][T20294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1138.486737][T20294] RSP: 002b:00007f8faf5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1138.486753][T20294] RAX: ffffffffffffffda RBX: 00007f8fb15e5fa0 RCX: 00007f8fb138f749
[ 1138.486765][T20294] RDX: 0000000001000002 RSI: 0000000000400000 RDI: 0000200000000000
[ 1138.486776][T20294] RBP: 00007f8faf5f6090 R08: 0000000000000003 R09: 0000000000000000
[ 1138.486786][T20294] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001
[ 1138.486796][T20294] R13: 00007f8fb15e6038 R14: 00007f8fb15e5fa0 R15: 00007f8fb170fa28
[ 1138.486820][T20294]  </TASK>
[ 1139.176162][T20279] chnl_net:caif_netlink_parms(): no params data found
[ 1139.342025][T20309] libceph: resolve '0..' (ret=-3): failed
[ 1139.449925][T20279] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1139.482871][T20279] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1139.503573][T20279] bridge_slave_0: entered allmulticast mode
[ 1139.517813][T11375] usb 10-1: new high-speed USB device number 47 using dummy_hcd
[ 1139.542419][T20279] bridge_slave_0: entered promiscuous mode
[ 1139.581014][T20279] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1139.599939][T20279] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1139.617561][T20279] bridge_slave_1: entered allmulticast mode
[ 1139.640284][T20279] bridge_slave_1: entered promiscuous mode
[ 1139.687784][T11375] usb 10-1: Using ep0 maxpacket: 8
[ 1139.694912][T11375] usb 10-1: config 162 has an invalid interface number: 116 but max is 0
[ 1139.709905][T20279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1139.728570][T11375] usb 10-1: config 162 has no interface number 0
[ 1139.735066][T11375] usb 10-1: config 162 interface 116 has no altsetting 0
[ 1139.737054][T20279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1139.764304][T11375] usb 10-1: New USB device found, idVendor=0499, idProduct=13b3, bcdDevice=f0.d3
[ 1139.787821][T11375] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1139.796049][T11375] usb 10-1: Product: syz
[ 1139.807798][T11377] usb 7-1: new high-speed USB device number 58 using dummy_hcd
[ 1139.815571][T11375] usb 10-1: Manufacturer: syz
[ 1139.821721][T11375] usb 10-1: SerialNumber: syz
[ 1139.890963][T20279] team0: Port device team_slave_0 added
[ 1139.901891][T20279] team0: Port device team_slave_1 added
[ 1139.948665][T11377] usb 7-1: device descriptor read/64, error -71
[ 1139.958404][T20279] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1139.976917][T20279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1140.016969][T20279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1140.034634][T20279] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1140.045127][T20304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1140.053977][T14277] Bluetooth: hci2: command tx timeout
[ 1140.067940][T20304] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1140.082555][T20279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1140.109598][T20279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1140.189545][T11377] usb 7-1: new high-speed USB device number 59 using dummy_hcd
[ 1140.201160][T11375] usb 10-1: USB disconnect, device number 47
[ 1140.256109][T16805] udevd[16805]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:162.116/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1140.256554][T20279] hsr_slave_0: entered promiscuous mode
[ 1140.327812][T20279] hsr_slave_1: entered promiscuous mode
[ 1140.338047][T11377] usb 7-1: device descriptor read/64, error -71
[ 1140.340319][T20279] debugfs: 'hsr0' already exists in 'hsr'
[ 1140.362888][T20279] Cannot create hsr debugfs directory
[ 1140.449053][T11377] usb usb7-port1: attempt power cycle
[ 1140.741609][T20338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1140.789508][T20338] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1140.804680][T11377] usb 7-1: new high-speed USB device number 60 using dummy_hcd
[ 1140.858650][T11377] usb 7-1: device descriptor read/8, error -71
[ 1140.989015][T11393] usb 10-1: new high-speed USB device number 48 using dummy_hcd
[ 1141.118939][T11377] usb 7-1: new high-speed USB device number 61 using dummy_hcd
[ 1141.149655][T11393] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1141.159700][T11377] usb 7-1: device descriptor read/8, error -71
[ 1141.180773][T11393] usb 10-1: config 220 has 1 interface, different from the descriptor's value: 3
[ 1141.191275][T11393] usb 10-1: too many endpoints for config 220 interface 0 altsetting 63: 48, using maximum allowed: 30
[ 1141.205101][T11393] usb 10-1: config 220 interface 0 altsetting 63 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[ 1141.221165][T11393] usb 10-1: config 220 interface 0 has no altsetting 0
[ 1141.255636][T11393] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1141.265042][T11393] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1141.272291][T11377] usb usb7-port1: unable to enumerate USB device
[ 1141.288197][T11393] usb 10-1: Product: syz
[ 1141.292990][T11393] usb 10-1: Manufacturer: syz
[ 1141.301079][T11393] usb 10-1: SerialNumber: syz
[ 1141.587237][T20279] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1141.627277][T20279] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1141.642788][T20279] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1141.666534][T11393] usb 10-1: USB disconnect, device number 48
[ 1141.687660][T20279] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1141.914349][T20279] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1141.952458][T20279] 8021q: adding VLAN 0 to HW filter on device team0
[ 1141.969326][T10269] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1141.976555][T10269] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1142.023042][T16921] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1142.030340][T16921] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1142.128266][T14277] Bluetooth: hci2: command tx timeout
[ 1142.148549][T11393] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[ 1142.164761][T20279] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1142.244845][T20279] veth0_vlan: entered promiscuous mode
[ 1142.282099][T20279] veth1_vlan: entered promiscuous mode
[ 1142.307815][T11393] usb 6-1: Using ep0 maxpacket: 16
[ 1142.317467][T11393] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1142.338452][T11393] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1142.357148][T20279] veth0_macvtap: entered promiscuous mode
[ 1142.363509][T11393] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1142.381208][T20279] veth1_macvtap: entered promiscuous mode
[ 1142.389732][T11393] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1142.407134][T11393] usb 6-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[ 1142.428136][T11393] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1142.444286][T20279] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1142.454245][T11393] usb 6-1: config 0 descriptor??
[ 1142.483317][T20380] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3633'.
[ 1142.610604][T20279] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1142.690543][T16758] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1142.740545][T16758] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1142.796524][T16758] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1142.828073][ T3909] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1143.010133][   T24] usb 7-1: new low-speed USB device number 62 using dummy_hcd
[ 1143.117322][T10270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1143.140802][T10270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1143.218833][T20392] libceph: resolve '0..' (ret=-3): failed
[ 1143.323280][T10269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1143.373268][T10269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1143.481796][T11393] usbhid 6-1:0.0: can't add hid device: -71
[ 1143.492723][T20398] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3636'.
[ 1143.527238][T11393] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1143.594436][T11393] usb 6-1: USB disconnect, device number 38
[ 1143.719992][T20403] FAULT_INJECTION: forcing a failure.
[ 1143.719992][T20403] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1143.809437][T20403] CPU: 0 UID: 0 PID: 20403 Comm: syz.1.3617 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1143.809474][T20403] Tainted: [L]=SOFTLOCKUP
[ 1143.809489][T20403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1143.809499][T20403] Call Trace:
[ 1143.809506][T20403]  <TASK>
[ 1143.809513][T20403]  dump_stack_lvl+0xe8/0x150
[ 1143.809539][T20403]  should_fail_ex+0x414/0x560
[ 1143.809558][T20403]  _copy_from_user+0x2d/0xb0
[ 1143.809580][T20403]  __x64_sys_rt_sigsuspend+0xce/0x150
[ 1143.809604][T20403]  ? __pfx___x64_sys_rt_sigsuspend+0x10/0x10
[ 1143.809630][T20403]  ? do_syscall_64+0xb0/0xf80
[ 1143.809650][T20403]  do_syscall_64+0xec/0xf80
[ 1143.809667][T20403]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1143.809682][T20403]  ? trace_irq_disable+0x37/0x100
[ 1143.809702][T20403]  ? clear_bhb_loop+0x60/0xb0
[ 1143.809721][T20403]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1143.809736][T20403] RIP: 0033:0x7f3144d8f749
[ 1143.809750][T20403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1143.809764][T20403] RSP: 002b:00007f3145b92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000082
[ 1143.809781][T20403] RAX: ffffffffffffffda RBX: 00007f3144fe6090 RCX: 00007f3144d8f749
[ 1143.809793][T20403] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 00002000000000c0
[ 1143.809803][T20403] RBP: 00007f3145b92090 R08: 0000000000000000 R09: 0000000000000000
[ 1143.809813][T20403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1143.809822][T20403] R13: 00007f3144fe6128 R14: 00007f3144fe6090 R15: 00007f314510fa28
[ 1143.809846][T20403]  </TASK>
[ 1144.229436][T14277] Bluetooth: hci2: command tx timeout
[ 1144.791157][T20410] netlink: 'syz.9.3638': attribute type 5 has an invalid length.
[ 1144.928240][   T24] usb 10-1: new high-speed USB device number 49 using dummy_hcd
[ 1144.950940][T20422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1145.021819][T20422] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1145.073738][T20422] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3639'.
[ 1145.117809][   T24] usb 10-1: Using ep0 maxpacket: 32
[ 1145.118233][T20422] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1145.144206][   T24] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1145.168205][T11371] usb 6-1: new full-speed USB device number 39 using dummy_hcd
[ 1145.173203][   T24] usb 10-1: config 127 has an invalid interface number: 158 but max is 0
[ 1145.221811][   T24] usb 10-1: config 127 has no interface number 0
[ 1145.254721][   T24] usb 10-1: config 127 interface 158 has no altsetting 0
[ 1145.286377][   T24] usb 10-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=36.f5
[ 1145.313276][   T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1145.336496][   T24] usb 10-1: Product: syz
[ 1145.349477][   T24] usb 10-1: Manufacturer: syz
[ 1145.362134][   T24] usb 10-1: SerialNumber: syz
[ 1145.381280][T11371] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1145.406460][T11371] usb 6-1: config 0 has no interface number 0
[ 1145.439522][T11371] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[ 1145.471643][T11371] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1145.502251][T20434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3642'.
[ 1145.503082][T11371] usb 6-1: Product: syz
[ 1145.541451][T11371] usb 6-1: Manufacturer: syz
[ 1145.552120][T11371] usb 6-1: SerialNumber: syz
[ 1145.566438][T20440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3643'.
[ 1145.566928][T20434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3642'.
[ 1145.605215][T11371] usb 6-1: config 0 descriptor??
[ 1145.613419][T20438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3643'.
[ 1145.630161][T11371] usb 6-1: selecting invalid altsetting 1
[ 1145.650319][T11371] dvb_ttusb_budget: ttusb_init_controller: error
[ 1145.678869][T20438] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[ 1145.687875][T11371] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1145.746500][   T24] comedi comedi5: could not switch to alternate setting 1
[ 1145.782285][   T24] usbduxfast 10-1:127.158: driver 'usbduxfast' failed to auto-configure device.
[ 1145.857024][   T24] usb 10-1: USB disconnect, device number 49
[ 1145.910361][T11371] DVB: Unable to find symbol stv0299_attach()
[ 1146.016368][T11371] DVB: Unable to find symbol tda8083_attach()
[ 1146.023406][T11371] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[ 1146.064373][T11371] usb 6-1: USB disconnect, device number 39
[ 1146.298441][ T1143] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1146.349844][T14277] Bluetooth: hci2: command tx timeout
[ 1146.359740][ T1143] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1146.380942][T16823] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1146.408853][T16823] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1146.440581][T20456] libceph: resolve '0..' (ret=-3): failed
[ 1146.875777][T20476] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3648'.
[ 1147.084169][T20481] FAULT_INJECTION: forcing a failure.
[ 1147.084169][T20481] name failslab, interval 1, probability 0, space 0, times 0
[ 1147.098373][T20481] CPU: 1 UID: 0 PID: 20481 Comm: syz.0.3650 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1147.098402][T20481] Tainted: [L]=SOFTLOCKUP
[ 1147.098409][T20481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1147.098420][T20481] Call Trace:
[ 1147.098427][T20481]  <TASK>
[ 1147.098435][T20481]  dump_stack_lvl+0xe8/0x150
[ 1147.098462][T20481]  should_fail_ex+0x414/0x560
[ 1147.098485][T20481]  should_failslab+0xa8/0x100
[ 1147.098508][T20481]  kmem_cache_alloc_node_noprof+0x8c/0x720
[ 1147.098537][T20481]  ? dup_task_struct+0x57/0x9a0
[ 1147.098560][T20481]  dup_task_struct+0x57/0x9a0
[ 1147.098580][T20481]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1147.098600][T20481]  copy_process+0x4ea/0x3950
[ 1147.098617][T20481]  ? stack_depot_save_flags+0x33/0x810
[ 1147.098641][T20481]  ? create_io_worker+0xac/0x5c0
[ 1147.098664][T20481]  ? io_wq_enqueue+0x62c/0x850
[ 1147.098684][T20481]  ? io_poll_task_func+0xa28/0xd10
[ 1147.098707][T20481]  ? io_handle_tw_list+0x263/0x550
[ 1147.098726][T20481]  ? tctx_task_work+0x3f/0x90
[ 1147.098747][T20481]  ? task_work_run+0x1d4/0x260
[ 1147.098770][T20481]  ? arch_do_signal_or_restart+0x9a/0x7a0
[ 1147.098794][T20481]  ? exit_to_user_mode_loop+0x87/0x4e0
[ 1147.098810][T20481]  ? do_syscall_64+0x2c1/0xf80
[ 1147.098829][T20481]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1147.098850][T20481]  ? __pfx_copy_process+0x10/0x10
[ 1147.098873][T20481]  ? __pfx_io_wq_worker+0x10/0x10
[ 1147.098897][T20481]  ? __pfx_io_wq_worker+0x10/0x10
[ 1147.098922][T20481]  create_io_thread+0xca/0x120
[ 1147.098942][T20481]  ? __pfx_create_io_thread+0x10/0x10
[ 1147.098970][T20481]  ? __pfx_io_wq_worker+0x10/0x10
[ 1147.099010][T20481]  ? __raw_spin_lock_init+0x45/0x100
[ 1147.099035][T20481]  ? __init_swait_queue_head+0xa9/0x150
[ 1147.099059][T20481]  ? create_io_worker+0x27/0x5c0
[ 1147.099083][T20481]  create_io_worker+0x182/0x5c0
[ 1147.099110][T20481]  io_wq_enqueue+0x62c/0x850
[ 1147.099132][T20481]  ? __pfx_io_wq_work_match_item+0x10/0x10
[ 1147.099160][T20481]  io_poll_task_func+0xa28/0xd10
[ 1147.099184][T20481]  ? percpu_ref_get_many+0x21/0x1e0
[ 1147.099211][T20481]  ? __pfx_io_poll_task_func+0x10/0x10
[ 1147.099242][T20481]  ? percpu_ref_get_many+0x18c/0x1e0
[ 1147.099262][T20481]  ? __pfx_io_poll_task_func+0x10/0x10
[ 1147.099288][T20481]  io_handle_tw_list+0x263/0x550
[ 1147.099313][T20481]  tctx_task_work_run+0x55/0x2c0
[ 1147.099335][T20481]  tctx_task_work+0x3f/0x90
[ 1147.099355][T20481]  task_work_run+0x1d4/0x260
[ 1147.099382][T20481]  ? __pfx_task_work_run+0x10/0x10
[ 1147.099416][T20481]  get_signal+0x11ec/0x1340
[ 1147.099441][T20481]  ? __pfx___schedule+0x10/0x10
[ 1147.099464][T20481]  arch_do_signal_or_restart+0x9a/0x7a0
[ 1147.099489][T20481]  ? schedule+0x91/0x360
[ 1147.099506][T20481]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1147.099547][T20481]  exit_to_user_mode_loop+0x87/0x4e0
[ 1147.099565][T20481]  ? rcu_is_watching+0x15/0xb0
[ 1147.099590][T20481]  do_syscall_64+0x2c1/0xf80
[ 1147.099611][T20481]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1147.099627][T20481]  ? trace_irq_disable+0x37/0x100
[ 1147.099650][T20481]  ? clear_bhb_loop+0x60/0xb0
[ 1147.099671][T20481]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1147.099688][T20481] RIP: 0033:0x7f7d87b8f749
[ 1147.099706][T20481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1147.099724][T20481] RSP: 002b:00007f7d88950038 EFLAGS: 00000246 ORIG_RAX: 0000000000000082
[ 1147.099745][T20481] RAX: fffffffffffffdfe RBX: 00007f7d87de6090 RCX: 00007f7d87b8f749
[ 1147.099758][T20481] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 00002000000000c0
[ 1147.099769][T20481] RBP: 00007f7d88950090 R08: 0000000000000000 R09: 0000000000000000
[ 1147.099780][T20481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1147.099790][T20481] R13: 00007f7d87de6128 R14: 00007f7d87de6090 R15: 00007f7d87f0fa28
[ 1147.099817][T20481]  </TASK>
[ 1147.918616][T20496] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1148.389483][T20502] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3654'.
[ 1149.685526][T20518] libceph: resolve '0..' (ret=-3): failed
[ 1149.788008][T11371] usb 10-1: new high-speed USB device number 50 using dummy_hcd
[ 1149.969614][T11371] usb 10-1: Using ep0 maxpacket: 32
[ 1149.980822][T11371] usb 10-1: config 0 has an invalid interface number: 132 but max is 0
[ 1150.006014][T11371] usb 10-1: config 0 has no interface number 0
[ 1150.028271][T11371] usb 10-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1150.351183][T11371] usb 10-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 1150.448066][T11371] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1150.487361][T11371] usb 10-1: Product: syz
[ 1150.497153][T11371] usb 10-1: Manufacturer: syz
[ 1150.520932][T11371] usb 10-1: SerialNumber: syz
[ 1150.597916][T11393] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[ 1150.651027][T11371] usb 10-1: config 0 descriptor??
[ 1150.693802][T11371] em28xx 10-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 1150.735701][T11371] em28xx 10-1:0.132: Video interface 132 found:
[ 1150.768797][T11393] usb 6-1: Using ep0 maxpacket: 16
[ 1150.783404][T11393] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 1024
[ 1150.819605][T11393] usb 6-1: config 1 interface 0 has no altsetting 0
[ 1150.845234][T11393] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40
[ 1150.877498][T11393] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1151.095798][T11371] em28xx 10-1:0.132: unknown em28xx chip ID (0)
[ 1151.237867][T11377] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[ 1151.477772][T11377] usb 2-1: Using ep0 maxpacket: 8
[ 1151.667868][T11377] usb 2-1: config 10 has an invalid interface number: 193 but max is 0
[ 1151.687616][T11377] usb 2-1: config 10 has no interface number 0
[ 1151.959037][T11377] usb 2-1: New USB device found, idVendor=1bda, idProduct=0129, bcdDevice=be.93
[ 1152.031959][T11377] usb 2-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3
[ 1152.065925][T11393] usb 6-1: Product: 蚿鷞ᇁ줃싒
[ 1152.071869][T11393] usb 6-1: Manufacturer: Л
[ 1152.076504][T11393] usb 6-1: SerialNumber: ф
[ 1152.089268][T11371] em28xx 10-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 1152.103431][T20527] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[ 1152.117802][T11371] em28xx 10-1:0.132: board has no eeprom
[ 1152.147658][T11377] usb 2-1: Product: syz
[ 1152.216778][T11377] usb 2-1: Manufacturer: syz
[ 1152.222060][T11377] usb 2-1: SerialNumber: syz
[ 1152.269457][T11371] em28xx 10-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 1152.303971][T11371] em28xx 10-1:0.132: analog set to bulk mode.
[ 1152.392237][T16486] em28xx 10-1:0.132: Registering V4L2 extension
[ 1152.406162][T11393] usblp0: Disabling reads from problematic bidirectional printer
[ 1152.451481][T11371] usb 10-1: USB disconnect, device number 50
[ 1152.472139][T11393] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 3 proto 1 vid 0x03F0 pid 0x0004
[ 1152.527076][T11371] em28xx 10-1:0.132: Disconnecting em28xx
[ 1152.585149][T11393] usb 6-1: USB disconnect, device number 40
[ 1152.636916][T11393] usblp0: removed
[ 1152.904460][T11377] usb 2-1: USB disconnect, device number 17
[ 1153.151391][   T30] audit: type=1326 audit(1768602494.129:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20561 comm="syz.0.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d87b8f749 code=0x7ffc0000
[ 1153.223502][   T30] audit: type=1326 audit(1768602494.129:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20561 comm="syz.0.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f7d87b8f749 code=0x7ffc0000
[ 1153.327572][T16486] em28xx 10-1:0.132: Config register raw data: 0xffffffed
[ 1153.329545][   T30] audit: type=1326 audit(1768602494.129:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20561 comm="syz.0.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d87b8f749 code=0x7ffc0000
[ 1153.378357][T16486] em28xx 10-1:0.132: AC97 chip type couldn't be determined
[ 1153.385636][T16486] em28xx 10-1:0.132: No AC97 audio processor
[ 1153.410477][T20566] netlink: 'syz.9.3664': attribute type 11 has an invalid length.
[ 1153.504710][   T30] audit: type=1326 audit(1768602494.129:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20561 comm="syz.0.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d87b8f749 code=0x7ffc0000
[ 1153.534474][T16486] usb 10-1: Decoder not found
[ 1153.609472][T16486] em28xx 10-1:0.132: failed to create media graph
[ 1153.616002][T16486] em28xx 10-1:0.132: V4L2 device video103 deregistered
[ 1153.621927][   T30] audit: type=1326 audit(1768602494.129:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20561 comm="syz.0.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d87b8f749 code=0x7ffc0000
[ 1153.665703][T16486] em28xx 10-1:0.132: Remote control support is not available for this card.
[ 1153.878306][T20582] netlink: 'syz.5.3666': attribute type 12 has an invalid length.
[ 1153.886492][   T30] audit: type=1326 audit(1768602494.129:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20561 comm="syz.0.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d87b8f749 code=0x7ffc0000
[ 1153.888563][T11371] em28xx 10-1:0.132: Closing input extension
[ 1154.043346][T11371] em28xx 10-1:0.132: Freeing device
[ 1154.154166][   T30] audit: type=1326 audit(1768602494.129:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20561 comm="syz.0.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d87b8f749 code=0x7ffc0000
[ 1154.386846][T20598] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3669'.
[ 1154.425232][   T30] audit: type=1326 audit(1768602494.129:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20561 comm="syz.0.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d87b8f749 code=0x7ffc0000
[ 1154.555544][T20601] libceph: resolve '0..' (ret=-3): failed
[ 1154.621107][   T30] audit: type=1326 audit(1768602494.129:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20561 comm="syz.0.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d87b8f749 code=0x7ffc0000
[ 1154.678428][   T24] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[ 1154.693212][   T30] audit: type=1326 audit(1768602494.129:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20561 comm="syz.0.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7d87b8f749 code=0x7ffc0000
[ 1154.987789][   T24] usb 6-1: Using ep0 maxpacket: 16
[ 1154.998491][   T24] usb 6-1: config 0 has an invalid interface number: 216 but max is 0
[ 1155.028007][   T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1155.047769][   T24] usb 6-1: config 0 has no interface number 0
[ 1155.053917][   T24] usb 6-1: config 0 interface 216 altsetting 0 endpoint 0xA has invalid maxpacket 4098, setting to 1024
[ 1155.240238][   T24] usb 6-1: config 0 interface 216 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024
[ 1155.277563][   T24] usb 6-1: config 0 interface 216 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1155.342223][   T24] usb 6-1: New USB device found, idVendor=c877, idProduct=d477, bcdDevice=ca.74
[ 1155.380639][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1155.422541][   T24] usb 6-1: Product: syz
[ 1155.441689][   T24] usb 6-1: Manufacturer: syz
[ 1155.455695][   T24] usb 6-1: SerialNumber: syz
[ 1155.502188][   T24] usb 6-1: config 0 descriptor??
[ 1155.525332][T20571] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 1155.544425][   T24] usb-storage 6-1:0.216: USB Mass Storage device detected
[ 1156.785086][T20626] input: syz0 as /devices/virtual/input/input78
[ 1157.347862][T16486] usb 10-1: new high-speed USB device number 51 using dummy_hcd
[ 1157.574510][   T24] usb 6-1: USB disconnect, device number 41
[ 1157.590990][T16486] usb 10-1: config index 0 descriptor too short (expected 1572, got 36)
[ 1157.612759][T16486] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1157.644598][T16486] usb 10-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40
[ 1157.658258][T16486] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1157.666638][T16486] usb 10-1: Product: syz
[ 1157.671806][T16486] usb 10-1: Manufacturer: syz
[ 1157.676754][T16486] usb 10-1: SerialNumber: syz
[ 1157.715020][T16486] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/input/input79
[ 1157.836348][T20648] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3677'.
[ 1157.905624][ T5189] bcm5974 10-1:1.0: could not read from device
[ 1157.934008][T16486] bcm5974 10-1:1.0: could not read from device
[ 1157.983102][ T5189] bcm5974 10-1:1.0: could not read from device
[ 1158.004321][T16486] input: failed to attach handler mousedev to device input79, error: -5
[ 1158.045176][ T5189] bcm5974 10-1:1.0: could not read from device
[ 1158.056382][T16486] usb 10-1: USB disconnect, device number 51
[ 1158.065402][ T5189] bcm5974 10-1:1.0: could not read from device
[ 1158.107221][T20660] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3678'.
[ 1158.870715][T20679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1158.929267][T20679] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1159.127810][T16484] usb 10-1: new high-speed USB device number 52 using dummy_hcd
[ 1159.669117][T20703] libceph: resolve '0..' (ret=-3): failed
[ 1159.716787][T20705] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[ 1159.874310][T20710] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1160.081601][T20720] netlink: 72 bytes leftover after parsing attributes in process `syz.9.3687'.
[ 1161.257820][T11375] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[ 1161.321483][   T30] kauditd_printk_skb: 7 callbacks suppressed
[ 1161.321504][   T30] audit: type=1326 audit(1768602502.299:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20737 comm="syz.9.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e718f749 code=0x7ffc0000
[ 1161.397955][   T30] audit: type=1326 audit(1768602502.329:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20737 comm="syz.9.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f27e718f749 code=0x7ffc0000
[ 1161.447868][   T30] audit: type=1326 audit(1768602502.329:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20737 comm="syz.9.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e718f749 code=0x7ffc0000
[ 1161.473768][T11375] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1161.484469][T11375] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1161.521075][T11375] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[ 1161.521086][   T30] audit: type=1326 audit(1768602502.329:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20737 comm="syz.9.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f27e718f749 code=0x7ffc0000
[ 1161.521159][   T30] audit: type=1326 audit(1768602502.329:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20737 comm="syz.9.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e718f749 code=0x7ffc0000
[ 1161.623167][   T30] audit: type=1326 audit(1768602502.329:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20737 comm="syz.9.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f27e718f749 code=0x7ffc0000
[ 1161.632823][T11375] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1161.704093][T11375] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1161.712460][   T30] audit: type=1326 audit(1768602502.329:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20737 comm="syz.9.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e718f749 code=0x7ffc0000
[ 1161.713274][T11375] usb 2-1: Product: syz
[ 1161.770287][   T30] audit: type=1326 audit(1768602502.329:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20737 comm="syz.9.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f27e718f749 code=0x7ffc0000
[ 1161.852648][   T30] audit: type=1326 audit(1768602502.329:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20737 comm="syz.9.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e718f749 code=0x7ffc0000
[ 1161.906203][   T30] audit: type=1326 audit(1768602502.329:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20737 comm="syz.9.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f27e718f749 code=0x7ffc0000
[ 1161.966931][T11375] usb 2-1: Manufacturer: syz
[ 1161.972796][T11375] usb 2-1: SerialNumber: syz
[ 1162.153942][T11375] usb 2-1: config 0 descriptor??
[ 1162.169442][T20734] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1162.177427][T20734] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1162.191864][T11375] usb 2-1: ucan: probing device on interface #0
[ 1162.847349][T20734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1162.871325][T20734] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1162.939641][T11375] ucan 2-1:0.0: probe with driver ucan failed with error -71
[ 1162.965366][T11375] usb 2-1: USB disconnect, device number 18
[ 1163.549497][T20788] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048)
[ 1163.684961][T20792] netlink: 'syz.1.3694': attribute type 29 has an invalid length.
[ 1163.700810][T20792] netlink: 'syz.1.3694': attribute type 29 has an invalid length.
[ 1163.755718][T20797] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3695'.
[ 1163.835790][T20804] libceph: resolve '0..' (ret=-3): failed
[ 1164.413390][T20829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3701'.
[ 1164.422713][T20828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3701'.
[ 1164.645915][T20842] loop9: detected capacity change from 0 to 7
[ 1164.670027][T20842] Dev loop9: unable to read RDB block 7
[ 1164.675689][T20842]  loop9: unable to read partition table
[ 1164.688358][T20842] loop9: partition table beyond EOD, truncated
[ 1164.708138][T20842] loop_reread_partitions: partition scan of loop9 (�被x������ ) failed (rc=-5)
[ 1165.780829][T20877] libceph: resolve '0..' (ret=-3): failed
[ 1168.932277][T20944] delete_channel: no stack
[ 1169.696264][T20955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1169.709899][T20955] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1169.802221][T16501] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1169.812836][T16501] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1169.821563][T16501] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1169.829845][T16501] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1169.860243][T16501] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1169.928156][T11375] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[ 1169.958217][T16895] usb 10-1: new high-speed USB device number 53 using dummy_hcd
[ 1170.127937][T16895] usb 10-1: Using ep0 maxpacket: 16
[ 1170.140353][T16895] usb 10-1: config index 0 descriptor too short (expected 9, got 0)
[ 1170.167917][T16895] usb 10-1: can't read configurations, error -22
[ 1170.255140][T20959] chnl_net:caif_netlink_parms(): no params data found
[ 1170.317852][T16895] usb 10-1: new high-speed USB device number 54 using dummy_hcd
[ 1170.449929][T20959] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1170.457258][T20959] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1170.465597][T20959] bridge_slave_0: entered allmulticast mode
[ 1170.473992][T20959] bridge_slave_0: entered promiscuous mode
[ 1170.485158][T20959] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1170.493272][T20959] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1170.500671][T16895] usb 10-1: Using ep0 maxpacket: 16
[ 1170.506946][T20959] bridge_slave_1: entered allmulticast mode
[ 1170.514623][T16895] usb 10-1: config index 0 descriptor too short (expected 9, got 0)
[ 1170.524650][T20959] bridge_slave_1: entered promiscuous mode
[ 1170.531323][T16895] usb 10-1: can't read configurations, error -22
[ 1170.538856][T16895] usb usb10-port1: attempt power cycle
[ 1170.579735][T20959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1170.595332][T20959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1170.651544][T20959] team0: Port device team_slave_0 added
[ 1170.663696][T20959] team0: Port device team_slave_1 added
[ 1170.710667][T20959] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1170.718865][T20959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1170.745744][T20959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1170.759475][T20959] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1170.769913][T20959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1170.799557][T20959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1170.848418][T20959] hsr_slave_0: entered promiscuous mode
[ 1170.855245][T20959] hsr_slave_1: entered promiscuous mode
[ 1170.862059][T20959] debugfs: 'hsr0' already exists in 'hsr'
[ 1170.868758][T20959] Cannot create hsr debugfs directory
[ 1170.907965][T16895] usb 10-1: new high-speed USB device number 55 using dummy_hcd
[ 1170.939034][T16895] usb 10-1: Using ep0 maxpacket: 16
[ 1170.947465][T16895] usb 10-1: config index 0 descriptor too short (expected 9, got 0)
[ 1170.956546][T16895] usb 10-1: can't read configurations, error -22
[ 1171.018785][T11375] usb 2-1: device descriptor read/64, error -71
[ 1171.088084][T16895] usb 10-1: new high-speed USB device number 56 using dummy_hcd
[ 1171.118535][T16895] usb 10-1: Using ep0 maxpacket: 16
[ 1171.132206][T16895] usb 10-1: config index 0 descriptor too short (expected 9, got 0)
[ 1171.147850][T16895] usb 10-1: can't read configurations, error -22
[ 1171.163515][T16895] usb usb10-port1: unable to enumerate USB device
[ 1171.258606][T11375] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[ 1171.445336][T11375] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1171.489587][T11375] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1171.507371][T11375] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1171.517736][T11375] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1171.529656][T11375] usb 2-1: config 0 descriptor??
[ 1171.646429][T20959] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1171.670121][T20959] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1171.688821][T20959] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1171.701949][T20959] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1171.743202][T11375] usbhid 2-1:0.0: can't add hid device: -71
[ 1171.762631][T11375] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1171.783787][T11375] usb 2-1: USB disconnect, device number 20
[ 1171.861519][T20959] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1171.891707][T16501] Bluetooth: hci3: command tx timeout
[ 1171.904153][T20959] 8021q: adding VLAN 0 to HW filter on device team0
[ 1171.925371][T10271] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1171.932597][T10271] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1171.954551][T16735] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1171.961878][T16735] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1172.081317][T20959] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1172.148327][T20959] veth0_vlan: entered promiscuous mode
[ 1172.165006][T20959] veth1_vlan: entered promiscuous mode
[ 1172.226756][T20959] veth0_macvtap: entered promiscuous mode
[ 1172.241912][T20959] veth1_macvtap: entered promiscuous mode
[ 1172.270969][T20959] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1172.293872][T11375] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[ 1172.310357][T20959] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1172.332562][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1172.345826][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1172.371033][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1172.391303][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1172.480453][T11375] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1172.521532][T11375] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1172.549736][T11375] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1172.575633][T11375] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1172.612363][T11375] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1172.623460][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1172.642605][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1172.661652][T11375] usb 2-1: config 0 descriptor??
[ 1172.760710][T16745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1172.795096][T16745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1172.998761][T14277] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1173.021697][T14277] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1173.030361][T14277] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1173.042239][T14277] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1173.053234][T14277] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1173.120154][T11375] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[ 1173.176602][T21010] netlink: 'syz.9.3721': attribute type 61 has an invalid length.
[ 1173.457099][T16501] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1173.476737][T16501] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1173.485540][T16501] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1173.506848][T16501] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1173.515938][T16501] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1173.608871][T21027] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3722'.
[ 1173.743968][T21033] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1173.838368][    C1] plantronics 0003:047F:FFFF.0040: hid_field_extract() called with n (132) > 32! (syz-executor)
[ 1173.979346][T14277] Bluetooth: hci3: command tx timeout
[ 1174.488444][T11377] usb 2-1: reset high-speed USB device number 21 using dummy_hcd
[ 1174.749071][T21014] chnl_net:caif_netlink_parms(): no params data found
[ 1175.168480][T21056] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3724'.
[ 1175.177510][T14277] Bluetooth: hci4: command tx timeout
[ 1175.525607][T21030] chnl_net:caif_netlink_parms(): no params data found
[ 1175.540613][T21065] input: syz0 as /devices/virtual/input/input81
[ 1175.568431][T14277] Bluetooth: hci5: command tx timeout
[ 1175.609935][T21014] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1175.628396][T21014] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1175.649218][T21014] bridge_slave_0: entered allmulticast mode
[ 1175.670819][T21014] bridge_slave_0: entered promiscuous mode
[ 1175.793094][T21014] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1175.861434][T21014] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1175.869138][T21014] bridge_slave_1: entered allmulticast mode
[ 1175.877137][T21014] bridge_slave_1: entered promiscuous mode
[ 1176.047905][T14277] Bluetooth: hci3: command tx timeout
[ 1176.061905][T11375] usb 2-1: USB disconnect, device number 21
[ 1176.171168][T21014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1176.222065][T21014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1176.348550][   T24] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[ 1176.461758][T21014] team0: Port device team_slave_0 added
[ 1176.469157][T21030] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1176.487580][T21030] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1176.505407][T21030] bridge_slave_0: entered allmulticast mode
[ 1176.527515][T21030] bridge_slave_0: entered promiscuous mode
[ 1176.534473][   T24] usb 3-1: Using ep0 maxpacket: 8
[ 1176.549150][   T24] usb 3-1: config index 0 descriptor too short (expected 6427, got 27)
[ 1176.567974][T11393] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[ 1176.575588][T21030] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1176.575784][T21030] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1176.587802][   T24] usb 3-1: config 0 has an invalid interface number: 21 but max is 0
[ 1176.607774][   T24] usb 3-1: config 0 has no interface number 0
[ 1176.633825][   T24] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1176.639748][T21030] bridge_slave_1: entered allmulticast mode
[ 1176.666294][   T24] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1176.692645][   T24] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1176.713771][T21030] bridge_slave_1: entered promiscuous mode
[ 1176.735388][   T24] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[ 1176.749229][T21014] team0: Port device team_slave_1 added
[ 1176.757840][   T24] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[ 1176.772939][T11393] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1176.785074][T11393] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1176.809084][   T24] usb 3-1: Product: syz
[ 1176.825034][T11393] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1176.844145][   T24] usb 3-1: config 0 descriptor??
[ 1176.875072][T21080] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1176.883804][T11393] usb 2-1: config 0 descriptor??
[ 1176.999717][T21097] binder: 21096:21097 ioctl c0306201 2000000003c0 returned -14
[ 1177.026305][T21014] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1177.045953][T21014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1177.088558][T21014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1177.118800][   T24] usb 3-1: USB disconnect, device number 31
[ 1177.119345][T21030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1177.151902][T21014] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1177.177819][T21014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1177.215630][T21014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1177.232081][T21030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1177.250020][T14277] Bluetooth: hci4: command tx timeout
[ 1177.287808][T11375] usb 10-1: new high-speed USB device number 57 using dummy_hcd
[ 1177.315942][T21087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1177.357501][T21087] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1177.394577][T21030] team0: Port device team_slave_0 added
[ 1177.437984][T11375] usb 10-1: device descriptor read/64, error -71
[ 1177.446751][T21014] hsr_slave_0: entered promiscuous mode
[ 1177.454839][T21014] hsr_slave_1: entered promiscuous mode
[ 1177.462331][T21014] debugfs: 'hsr0' already exists in 'hsr'
[ 1177.468389][T21014] Cannot create hsr debugfs directory
[ 1177.476508][T21030] team0: Port device team_slave_1 added
[ 1177.588580][T21030] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1177.595689][T21030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1177.625806][T21030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1177.648292][T14277] Bluetooth: hci5: command tx timeout
[ 1177.684917][T21030] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1177.692343][T11375] usb 10-1: new high-speed USB device number 58 using dummy_hcd
[ 1177.700907][T21030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1177.747949][T21030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1177.857773][T11375] usb 10-1: device descriptor read/64, error -71
[ 1177.971517][T11375] usb usb10-port1: attempt power cycle
[ 1177.983851][T21110] loop9: detected capacity change from 0 to 7
[ 1178.013363][T21110] Dev loop9: unable to read RDB block 7
[ 1178.031859][T21110]  loop9: unable to read partition table
[ 1178.041477][T21030] hsr_slave_0: entered promiscuous mode
[ 1178.050487][T21110] loop9: partition table beyond EOD, truncated
[ 1178.064679][T21030] hsr_slave_1: entered promiscuous mode
[ 1178.071445][T21030] debugfs: 'hsr0' already exists in 'hsr'
[ 1178.077334][T21030] Cannot create hsr debugfs directory
[ 1178.078627][T21110] loop_reread_partitions: partition scan of loop9 (�被x������ ) failed (rc=-5)
[ 1178.128846][T14277] Bluetooth: hci3: command tx timeout
[ 1178.330777][T11375] usb 10-1: new high-speed USB device number 59 using dummy_hcd
[ 1178.380043][T11375] usb 10-1: device descriptor read/8, error -71
[ 1178.627940][T11375] usb 10-1: new high-speed USB device number 60 using dummy_hcd
[ 1178.658636][T11375] usb 10-1: device descriptor read/8, error -71
[ 1178.702340][T21014] bond0: (slave netdevsim0): Releasing backup interface
[ 1178.770838][T11375] usb usb10-port1: unable to enumerate USB device
[ 1179.185617][T21014] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1179.297861][T11375] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[ 1179.328237][T14277] Bluetooth: hci4: command tx timeout
[ 1179.346287][T21014] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1179.402885][T11393] usbhid 2-1:0.0: can't add hid device: -71
[ 1179.425125][T11393] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1179.461433][T11393] usb 2-1: USB disconnect, device number 22
[ 1179.465703][T11375] usb 3-1: config index 0 descriptor too short (expected 9, got 0)
[ 1179.502322][T11375] usb 3-1: can't read configurations, error -22
[ 1179.526041][T21014] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1179.567557][T21014] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1179.653720][T11375] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[ 1179.728092][T14277] Bluetooth: hci5: command tx timeout
[ 1179.822912][T11375] usb 3-1: config index 0 descriptor too short (expected 9, got 0)
[ 1179.838071][T11375] usb 3-1: can't read configurations, error -22
[ 1179.850974][T11375] usb usb3-port1: attempt power cycle
[ 1179.904742][T21151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3737'.
[ 1180.076597][T21030] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1180.145650][T21014] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1180.158361][T21030] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1180.187000][T21030] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1180.202765][T11375] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[ 1180.235267][T21030] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1180.243308][T11375] usb 3-1: config index 0 descriptor too short (expected 9, got 0)
[ 1180.285222][T11375] usb 3-1: can't read configurations, error -22
[ 1180.316300][T21014] 8021q: adding VLAN 0 to HW filter on device team0
[ 1180.385073][ T3909] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1180.392437][ T3909] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1180.437925][T11375] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[ 1180.491567][T11375] usb 3-1: config index 0 descriptor too short (expected 9, got 0)
[ 1180.504340][T11375] usb 3-1: can't read configurations, error -22
[ 1180.523550][T11375] usb usb3-port1: unable to enumerate USB device
[ 1180.529134][  T177] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1180.537067][  T177] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1180.884325][T21014] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1180.926169][T21030] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1181.029783][T21030] 8021q: adding VLAN 0 to HW filter on device team0
[ 1181.083172][T10272] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1181.090366][T10272] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1181.151670][T10272] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1181.158856][T10272] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1181.227519][T21014] veth0_vlan: entered promiscuous mode
[ 1181.319348][T21014] veth1_vlan: entered promiscuous mode
[ 1181.411549][T14277] Bluetooth: hci4: command tx timeout
[ 1181.522917][T21014] veth0_macvtap: entered promiscuous mode
[ 1181.557469][T21014] veth1_macvtap: entered promiscuous mode
[ 1181.597162][T21030] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1181.685596][T21014] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1181.764042][T21014] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1181.802013][T16921] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1181.811338][T14277] Bluetooth: hci5: command tx timeout
[ 1181.828381][T16921] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1181.851310][T16921] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1181.860843][T16921] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1182.026839][T21030] veth0_vlan: entered promiscuous mode
[ 1182.066475][T21030] veth1_vlan: entered promiscuous mode
[ 1182.222887][T16823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1182.264912][T21200] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3743'.
[ 1182.265933][T16823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1182.388103][T21030] veth0_macvtap: entered promiscuous mode
[ 1182.433140][T16823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1182.456400][T21030] veth1_macvtap: entered promiscuous mode
[ 1182.479626][T16823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1182.531378][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1182.538059][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1182.693315][T21030] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1182.718653][T21030] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1182.780839][ T1097] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1182.833554][ T1097] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1182.855336][ T1097] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1182.867164][T21216] fuse: Invalid rootmode
[ 1182.896908][ T1097] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1183.253039][T16823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1183.376640][T16823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1183.565898][T16823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1183.584954][T16823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1183.718115][T11377] usb 4-1: new high-speed USB device number 118 using dummy_hcd
[ 1183.799585][T21231] geneve2: entered promiscuous mode
[ 1183.906048][T11377] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1183.939322][T11377] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1183.947387][T11377] usb 4-1: Product: syz
[ 1184.015724][T11377] usb 4-1: Manufacturer: syz
[ 1184.030862][T11377] usb 4-1: SerialNumber: syz
[ 1184.053951][T11377] usb 4-1: config 0 descriptor??
[ 1184.197945][ T5920] usb 3-1: new low-speed USB device number 36 using dummy_hcd
[ 1184.379717][ T5920] usb 3-1: config 13 has an invalid interface number: 100 but max is 1
[ 1184.399323][   T30] kauditd_printk_skb: 22 callbacks suppressed
[ 1184.399344][   T30] audit: type=1326 audit(1768602525.319:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21240 comm="syz.4.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0038f749 code=0x7ffc0000
[ 1184.435455][ T5920] usb 3-1: config 13 has no interface number 1
[ 1184.454014][ T5920] usb 3-1: config 13 interface 100 altsetting 250 endpoint 0xC has invalid maxpacket 264, setting to 8
[ 1184.476631][ T5920] usb 3-1: config 13 interface 100 altsetting 250 endpoint 0x6 has invalid maxpacket 32, setting to 8
[ 1184.509697][T11377] usb 4-1: Firmware version (0.0) predates our first public release.
[ 1184.521686][T11377] usb 4-1: Please update to version 0.2 or newer
[ 1184.528541][   T30] audit: type=1326 audit(1768602525.319:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21240 comm="syz.4.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0038f749 code=0x7ffc0000
[ 1184.552038][ T5920] usb 3-1: config 13 interface 100 has no altsetting 0
[ 1184.559230][   T30] audit: type=1326 audit(1768602525.319:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21240 comm="syz.4.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f2e0038f749 code=0x7ffc0000
[ 1184.589621][ T5920] usb 3-1: string descriptor 0 read error: -71
[ 1184.604180][ T5920] usb 3-1: New USB device found, idVendor=0408, idProduct=ea05, bcdDevice=2c.a8
[ 1184.663385][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1184.698386][   T30] audit: type=1326 audit(1768602525.319:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21240 comm="syz.4.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0038f749 code=0x7ffc0000
[ 1184.758483][ T5920] usb 3-1: can't set config #13, error -71
[ 1184.780807][ T5920] usb 3-1: USB disconnect, device number 36
[ 1184.854055][   T30] audit: type=1326 audit(1768602525.319:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21240 comm="syz.4.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e0038f749 code=0x7ffc0000
[ 1184.919830][   T30] audit: type=1326 audit(1768602525.319:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21240 comm="syz.4.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0038f749 code=0x7ffc0000
[ 1185.022422][   T30] audit: type=1326 audit(1768602525.319:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21240 comm="syz.4.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2e0038f749 code=0x7ffc0000
[ 1185.129754][   T30] audit: type=1326 audit(1768602525.329:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21240 comm="syz.4.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0038f749 code=0x7ffc0000
[ 1185.239467][   T30] audit: type=1326 audit(1768602525.329:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21240 comm="syz.4.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2e0038f749 code=0x7ffc0000
[ 1185.368937][T21250] program syz.2.3751 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1185.373414][   T30] audit: type=1326 audit(1768602525.329:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21240 comm="syz.4.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0038f749 code=0x7ffc0000
[ 1185.413781][T16895] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[ 1185.620736][T16895] usb 5-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config
[ 1185.682088][T16895] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1185.704626][T16895] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1185.788059][T16895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1185.822425][T16895] usb 5-1: SerialNumber: syz
[ 1186.019194][ T5927] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[ 1186.177852][ T5927] usb 2-1: Using ep0 maxpacket: 16
[ 1186.186345][ T5927] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1186.196467][ T5927] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1186.265057][T16895] usb 5-1: 0:2 : does not exist
[ 1186.275749][ T5927] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1186.328375][ T5927] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1186.364141][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1186.464110][ T5920] usb 4-1: USB disconnect, device number 118
[ 1186.473061][T16895] usb 5-1: USB disconnect, device number 13
[ 1186.514702][ T5927] usb 2-1: Product: syz
[ 1186.532849][ T5927] usb 2-1: Manufacturer: syz
[ 1186.552975][ T5927] usb 2-1: SerialNumber: syz
[ 1186.563296][T21278] fuse: Invalid rootmode
[ 1186.695533][T16805] udevd[16805]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1187.090090][T21296] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[ 1187.118008][T21296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3758'.
[ 1187.192789][ T5927] usb 2-1: 0:2 : does not exist
[ 1188.727354][ T5927] usb 2-1: USB disconnect, device number 23
[ 1189.568538][ T5927] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[ 1189.782972][ T5927] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[ 1189.794630][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1189.815251][ T5927] usb 2-1: Product: syz
[ 1189.827585][ T5927] usb 2-1: Manufacturer: syz
[ 1189.850663][ T5927] usb 2-1: SerialNumber: syz
[ 1189.885240][ T5927] hub 2-1:24.0: bad descriptor, ignoring hub
[ 1189.913601][ T5927] hub 2-1:24.0: probe with driver hub failed with error -5
[ 1190.087221][ T5927] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware
[ 1190.149815][T21322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1190.193936][ T5927] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[ 1190.218551][T21322] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1190.279798][ T5927] dib0700: firmware download failed at 7 with -22
[ 1190.349183][ T5927] usb 2-1: USB disconnect, device number 24
[ 1191.565391][T16486] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1191.658549][T11377] usb 4-1: new high-speed USB device number 119 using dummy_hcd
[ 1191.818022][T11371] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1191.829510][T11377] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[ 1191.868354][T11377] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1191.889950][T11377] usb 4-1: config 0 descriptor??
[ 1192.118016][T21040] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1192.178108][T11393] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[ 1192.307474][T21365] fuse: Invalid rootmode
[ 1192.317070][T11377] hackrf 4-1:0.0: Board ID: 00
[ 1192.325650][T11377] hackrf 4-1:0.0: Firmware version: 
[ 1192.378494][T11393] usb 3-1: Using ep0 maxpacket: 16
[ 1192.397639][T11393] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1192.426845][T11377] hackrf 4-1:0.0: Registered as swradio24
[ 1192.454743][T11377] videodev: could not get a free minor
[ 1192.459021][T11393] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1192.469936][T21368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1192.487900][T11377] hackrf 4-1:0.0: Failed to register as video device (-23)
[ 1192.522346][T11377] hackrf 4-1:0.0: probe with driver hackrf failed with error -23
[ 1192.522867][T11393] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[ 1192.575183][T21368] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1192.589566][T11393] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1192.594908][T21373] loop7: detected capacity change from 0 to 7
[ 1192.642792][   T11] blk_print_req_error: 25 callbacks suppressed
[ 1192.642813][   T11] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1192.662235][T11393] usb 3-1: config 0 descriptor??
[ 1192.733551][T11393] usbhid 3-1:0.0: can't add hid device: -22
[ 1192.776667][T11393] usbhid 3-1:0.0: probe with driver usbhid failed with error -22
[ 1192.857817][T11377] usb 10-1: new high-speed USB device number 61 using dummy_hcd
[ 1192.947764][T16746] usb 2-1: new full-speed USB device number 25 using dummy_hcd
[ 1192.957308][T21373] Dev loop7: unable to read RDB block 7
[ 1192.963620][T21373]  loop7: unable to read partition table
[ 1192.970106][T21373] loop7: partition table beyond EOD, truncated
[ 1192.987827][T21373] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[ 1193.130169][T16746] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1193.173842][T10274] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1193.188178][T16746] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1193.197113][T16746] usb 2-1: config 1 has no interface number 0
[ 1193.205133][T10274] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1193.278005][T16746] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1193.326595][T21391] gtp0: entered promiscuous mode
[ 1193.349523][T16746] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1193.387757][T21391] gtp0: entered allmulticast mode
[ 1193.394577][T16746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1193.403395][T21393] syzkaller1: entered promiscuous mode
[ 1193.429466][T16746] usb 2-1: Product: syz
[ 1193.433886][T16746] usb 2-1: Manufacturer: syz
[ 1193.458224][T16746] usb 2-1: SerialNumber: syz
[ 1193.464798][T21393] syzkaller1: entered allmulticast mode
[ 1193.491872][T16746] cdc_ncm 2-1:1.1: NCM or ECM functional descriptors missing
[ 1193.517845][T16746] cdc_ncm 2-1:1.1: bind() failure
[ 1193.588058][T16486] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1193.692884][T16486] usb 2-1: USB disconnect, device number 25
[ 1194.085720][T21413] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3773'.
[ 1194.466101][T11371] usb 4-1: USB disconnect, device number 119
[ 1194.488209][T11377] usb 10-1: new high-speed USB device number 62 using dummy_hcd
[ 1194.717803][T11375] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[ 1194.836978][T21429] netlink: 'syz.4.3776': attribute type 19 has an invalid length.
[ 1194.885783][T11377] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1194.909534][T11375] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1194.924593][T11377] usb 10-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[ 1194.948231][T11375] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1194.977880][T11377] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1194.999644][T11375] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[ 1195.009158][T11371] usb 4-1: new high-speed USB device number 120 using dummy_hcd
[ 1195.060599][T11377] usb 10-1: config 0 descriptor??
[ 1195.073114][T16484] usb 3-1: USB disconnect, device number 37
[ 1195.087496][T11375] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1195.126182][T11377] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[ 1195.174284][T11375] usb 2-1: config 0 descriptor??
[ 1195.213101][T11371] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[ 1195.276111][T11371] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1195.374381][T11371] usb 4-1: Product: syz
[ 1195.401945][T21435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1195.417009][T21435] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1195.431849][T11371] usb 4-1: Manufacturer: syz
[ 1195.440142][T11375] cp2112 0003:10C4:EA90.0041: item fetching failed at offset 5/7
[ 1195.456401][T11371] usb 4-1: SerialNumber: syz
[ 1195.469791][T11375] cp2112 0003:10C4:EA90.0041: parse failed
[ 1195.486624][T11371] hub 4-1:24.0: bad descriptor, ignoring hub
[ 1195.495482][T11375] cp2112 0003:10C4:EA90.0041: probe with driver cp2112 failed with error -22
[ 1195.512615][T11371] hub 4-1:24.0: probe with driver hub failed with error -5
[ 1195.609102][T16484] usb 2-1: USB disconnect, device number 26
[ 1195.687600][T11371] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware
[ 1195.697107][T21425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1195.738464][T21425] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1195.747264][T11371] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[ 1195.812099][T11371] dib0700: firmware download failed at 7 with -22
[ 1195.859313][T11371] usb 4-1: USB disconnect, device number 120
[ 1196.117869][T11377] usb 2-1: new full-speed USB device number 27 using dummy_hcd
[ 1196.288790][T11377] usb 2-1: not running at top speed; connect to a high speed hub
[ 1196.318031][T11377] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1196.337226][T11377] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1196.391503][T11377] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1196.422100][T11377] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1196.454995][T11377] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1196.481274][T11377] usb 2-1: Product: ᐉ
[ 1196.497063][T11377] usb 2-1: Manufacturer: ᮧƫ㏓〢羿ﯣ᪉翲奄ၱ念棸桞ᶢᜀ뷭傮瘌҆⭯쟄펌㇟⥠瑺뎪뼯畿熮诹䂎ꣴ颈໾茷㤹ⵦߔ贪贞닜᭦朶ꇡ㎘繅볌Ō꿾ẘ놺䄂ꗲ쭝虄㮜ሔ銵⼜ꘒ桀㯾㹸轤ᵽ蔱嗅毪ꆬ磬ஔ⢬壼댶
[ 1196.583279][T11377] usb 2-1: SerialNumber: 늌歗걕禀袏絬콆둦歯帄担鿨贴ᨦ烈‎몯슬෻嬮磁莎橯쮐㵿ら᪰뽟⼄Ն䚘랟嚫㥕䩎ᔣᐗ⪶ꎐ鴟둈뫺ᵱߗꦚ짱醇⊇ᯠ椔頄釴
[ 1196.913341][T11377] usb 2-1: 0:2 : does not exist
[ 1197.007922][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1197.038124][T11377] usb 2-1: USB disconnect, device number 27
[ 1197.351683][T16484] usb 10-1: USB disconnect, device number 62
[ 1197.863178][T21474] program syz.1.3783 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1198.444027][T11377] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0
[ 1198.463073][T11377] hid-generic 0000:0000:0000.0042: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1198.521265][T11371] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[ 1198.588622][T11375] usb 4-1: new high-speed USB device number 121 using dummy_hcd
[ 1198.698973][T11371] usb 2-1: Using ep0 maxpacket: 16
[ 1198.725132][T11371] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1198.782704][T11375] usb 4-1: device descriptor read/64, error -71
[ 1198.796618][T11371] usb 2-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config
[ 1198.865420][T11371] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1198.976213][T11371] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1199.101770][T11375] usb 4-1: new high-speed USB device number 122 using dummy_hcd
[ 1199.119233][T11371] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1199.176930][T11371] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1199.228531][T11371] usb 2-1: Product: syz
[ 1199.257781][T11375] usb 4-1: device descriptor read/64, error -71
[ 1199.278191][T11371] usb 2-1: Manufacturer: syz
[ 1199.297022][T11371] usb 2-1: SerialNumber: syz
[ 1199.368160][T11375] usb usb4-port1: attempt power cycle
[ 1200.291720][T21522] loop2: detected capacity change from 0 to 7
[ 1200.308418][T11375] usb usb4-port1: Cannot enable. Maybe the USB cable is bad?
[ 1200.340161][T21522]  loop2: p1
[ 1200.364547][T21522] loop2: partition table partially beyond EOD, truncated
[ 1200.425686][T21522] loop2: p1 size 1919251295 extends beyond EOD, truncated
[ 1200.449710][T11375] usb 4-1: new high-speed USB device number 124 using dummy_hcd
[ 1200.474878][T21524] program syz.2.3788 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1200.515449][T11375] usb 4-1: too many configurations: 9, using maximum allowed: 8
[ 1200.547038][T21522] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3788'.
[ 1200.570719][T11375] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1200.583294][T11375] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1200.627330][T11375] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1200.649655][T11375] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1200.685668][T11375] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1200.731461][T11375] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1200.760096][T11375] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1200.801142][T11375] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1200.857935][T11375] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1200.887949][T11375] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1200.916455][T11375] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1200.960300][T11375] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1200.982460][T11375] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1201.051973][T11375] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1201.088810][T11375] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1201.137046][T11375] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1201.155541][T16805] udevd[16805]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[ 1201.247928][T11375] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1201.280879][T11375] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1201.305968][T11375] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1201.365807][T11375] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1201.449154][T11375] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1201.486296][T11375] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1201.547914][T11375] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1201.638039][T11371] usb 2-1: USB disconnect, device number 28
[ 1201.647201][T11375] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1201.667457][T11375] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 1201.723520][T11375] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 1201.812274][T11375] usb 4-1: Product: syz
[ 1201.839242][T11375] usb 4-1: Manufacturer: syz
[ 1201.843866][T11375] usb 4-1: SerialNumber: syz
[ 1201.880027][T11375] usb 4-1: config 0 descriptor??
[ 1201.982175][T11375] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0
[ 1202.208151][T11371] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[ 1202.414114][T11371] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[ 1202.429797][T11371] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1202.439165][T11371] usb 2-1: Product: syz
[ 1202.443413][T11371] usb 2-1: Manufacturer: syz
[ 1202.448761][T11371] usb 2-1: SerialNumber: syz
[ 1202.480798][T11371] hub 2-1:24.0: bad descriptor, ignoring hub
[ 1202.486927][T11371] hub 2-1:24.0: probe with driver hub failed with error -5
[ 1202.673521][T11371] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware
[ 1202.686243][T21538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1202.748292][T21538] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1202.776870][T11371] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[ 1202.817512][T11371] dib0700: firmware download failed at 7 with -22
[ 1202.871495][T11371] usb 2-1: USB disconnect, device number 29
[ 1203.940236][T21568] syzkaller0: entered promiscuous mode
[ 1203.957100][   T24] usb 4-1: USB disconnect, device number 124
[ 1203.967149][T21568] syzkaller0: entered allmulticast mode
[ 1204.035416][   T24] yurex 4-1:0.0: USB YUREX #0 now disconnected
[ 1204.288052][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1204.705443][T21585] overlayfs: missing 'lowerdir'
[ 1206.286547][   T30] kauditd_printk_skb: 35 callbacks suppressed
[ 1206.286569][   T30] audit: type=1804 audit(1768602547.259:1058): pid=21599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3802" name="/newroot/11/file1" dev="fuse" ino=1 res=1 errno=0
[ 1210.478642][T21621] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3807'.
[ 1210.520892][T21621] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3807'.
[ 1210.532910][T21621] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3807'.
[ 1210.545171][T21621] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3807'.
[ 1210.579028][T21621] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3807'.
[ 1210.621183][T21621] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3807'.
[ 1210.644210][T21621] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3807'.
[ 1210.666482][T21621] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3807'.
[ 1210.704341][T21621] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3807'.
[ 1210.714157][T21621] ip6gre0: left promiscuous mode
[ 1210.760198][T21621] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3807'.
[ 1210.828478][T21621] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1211.027866][T21622] geneve2: entered allmulticast mode
[ 1213.907839][   T24] usb 4-1: new high-speed USB device number 125 using dummy_hcd
[ 1214.186994][   T24] usb 4-1: no configurations
[ 1214.336450][   T24] usb 4-1: can't read configurations, error -22
[ 1215.057854][   T24] usb 4-1: new high-speed USB device number 126 using dummy_hcd
[ 1215.714506][T21711] __nla_validate_parse: 11 callbacks suppressed
[ 1215.714528][T21711] netlink: 1080 bytes leftover after parsing attributes in process `syz.2.3824'.
[ 1215.732217][   T24] usb 4-1: no configurations
[ 1215.753185][   T24] usb 4-1: can't read configurations, error -22
[ 1215.776069][   T24] usb usb4-port1: attempt power cycle
[ 1216.257823][   T24] usb 4-1: new high-speed USB device number 127 using dummy_hcd
[ 1216.280296][   T24] usb 4-1: no configurations
[ 1216.306915][   T24] usb 4-1: can't read configurations, error -22
[ 1216.847869][   T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 1217.549839][T21735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3828'.
[ 1217.947853][T16895] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[ 1217.961575][T21739] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[ 1217.989566][T21740] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[ 1218.154783][   T24] usb 4-1: device descriptor read/8, error -71
[ 1218.158209][T16895] usb 3-1: Using ep0 maxpacket: 8
[ 1218.212835][T16895] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1218.257577][T16895] usb 3-1: config 9 has an invalid interface number: 252 but max is 3
[ 1218.270646][T11371] usb 10-1: new high-speed USB device number 63 using dummy_hcd
[ 1218.298638][   T24] usb usb4-port1: unable to enumerate USB device
[ 1218.320887][T16895] usb 3-1: config 9 has an invalid interface number: 251 but max is 3
[ 1218.359691][T16895] usb 3-1: config 9 has an invalid interface number: 122 but max is 3
[ 1218.383778][T16895] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[ 1218.414711][T16895] usb 3-1: config 9 has no interface number 0
[ 1218.421124][T11371] usb 10-1: device descriptor read/64, error -71
[ 1218.428584][T21743] syz.1.3831: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1218.429655][T16895] usb 3-1: config 9 has no interface number 2
[ 1218.468789][T16895] usb 3-1: config 9 has no interface number 3
[ 1218.475157][T16895] usb 3-1: config 9 interface 252 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[ 1218.498312][T21743] CPU: 1 UID: 0 PID: 21743 Comm: syz.1.3831 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1218.498349][T21743] Tainted: [L]=SOFTLOCKUP
[ 1218.498359][T21743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1218.498374][T21743] Call Trace:
[ 1218.498383][T21743]  <TASK>
[ 1218.498394][T21743]  dump_stack_lvl+0xe8/0x150
[ 1218.498432][T21743]  warn_alloc+0x214/0x310
[ 1218.498458][T21743]  ? stack_trace_save+0x9c/0xe0
[ 1218.498496][T21743]  ? __pfx_warn_alloc+0x10/0x10
[ 1218.498529][T21743]  ? kasan_save_track+0x4f/0x80
[ 1218.498551][T21743]  ? kasan_save_track+0x3e/0x80
[ 1218.498572][T21743]  ? __kasan_kmalloc+0x93/0xb0
[ 1218.498594][T21743]  ? __kmalloc_cache_noprof+0x3e2/0x700
[ 1218.498616][T21743]  ? xskq_create+0x56/0x170
[ 1218.498637][T21743]  ? xsk_setsockopt+0x4dc/0x8d0
[ 1218.498669][T21743]  ? do_sock_setsockopt+0x17c/0x1b0
[ 1218.498695][T21743]  ? __x64_sys_setsockopt+0x13f/0x1b0
[ 1218.498721][T21743]  ? do_syscall_64+0xec/0xf80
[ 1218.498751][T21743]  __vmalloc_node_range_noprof+0x134/0x16a0
[ 1218.498808][T21743]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1218.498839][T21743]  ? __kasan_kmalloc+0x93/0xb0
[ 1218.498870][T21743]  vmalloc_user_noprof+0xad/0xf0
[ 1218.498893][T21743]  ? xskq_create+0xbf/0x170
[ 1218.498916][T21743]  xskq_create+0xbf/0x170
[ 1218.498940][T21743]  xsk_init_queue+0xb0/0x110
[ 1218.498978][T21743]  xsk_setsockopt+0x4dc/0x8d0
[ 1218.499014][T21743]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1218.499055][T21743]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1218.499089][T21743]  ? aa_sock_opt_perm+0xff/0x1a0
[ 1218.499124][T21743]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[ 1218.499156][T21743]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1218.499192][T21743]  do_sock_setsockopt+0x17c/0x1b0
[ 1218.499226][T21743]  __x64_sys_setsockopt+0x13f/0x1b0
[ 1218.499261][T21743]  do_syscall_64+0xec/0xf80
[ 1218.499286][T21743]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1218.499308][T21743]  ? trace_irq_disable+0x37/0x100
[ 1218.499337][T21743]  ? clear_bhb_loop+0x60/0xb0
[ 1218.499365][T21743]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1218.499388][T21743] RIP: 0033:0x7f3144d8f749
[ 1218.499410][T21743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1218.499431][T21743] RSP: 002b:00007f3145bb3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1218.499455][T21743] RAX: ffffffffffffffda RBX: 00007f3144fe5fa0 RCX: 00007f3144d8f749
[ 1218.499472][T21743] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[ 1218.499486][T21743] RBP: 00007f3144e13f91 R08: 0000000000000004 R09: 0000000000000000
[ 1218.499501][T21743] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1218.499516][T21743] R13: 00007f3144fe6038 R14: 00007f3144fe5fa0 R15: 00007f314510fa28
[ 1218.499550][T21743]  </TASK>
[ 1218.500159][T21745] veth0_to_team: entered promiscuous mode
[ 1218.500670][T21743] Mem-Info:
[ 1218.530237][T16895] usb 3-1: config 9 interface 252 altsetting 7 bulk endpoint 0xB has invalid maxpacket 16
[ 1218.820692][T21743] active_anon:21173 inactive_anon:0 isolated_anon:0
[ 1218.820692][T21743]  active_file:21407 inactive_file:4733 isolated_file:0
[ 1218.820692][T21743]  unevictable:768 dirty:118 writeback:0
[ 1218.820692][T21743]  slab_reclaimable:7556 slab_unreclaimable:150506
[ 1218.820692][T21743]  mapped:63836 shmem:11615 pagetables:1689
[ 1218.820692][T21743]  sec_pagetables:0 bounce:0
[ 1218.820692][T21743]  kernel_misc_reclaimable:0
[ 1218.820692][T21743]  free:1196588 free_pcp:16126 free_cma:0
[ 1218.870913][T21743] Node 0 active_anon:84692kB inactive_anon:0kB active_file:85596kB inactive_file:18796kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:255344kB dirty:472kB writeback:0kB shmem:44924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15580kB pagetables:6612kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1218.912587][T21743] Node 1 active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1218.944364][T21743] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1218.978001][T16484] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 1218.986475][T21743] lowmem_reserve[]: 0 2499 2501 2501 2501
[ 1218.992390][T21743] Node 0 DMA32 free:897120kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:84864kB inactive_anon:0kB active_file:85596kB inactive_file:18796kB unevictable:1536kB writepending:456kB zspages:0kB present:3129332kB managed:2559480kB mlocked:0kB bounce:0kB free_pcp:36792kB local_pcp:21296kB free_cma:0kB
[ 1219.025949][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1219.037837][T11371] usb 10-1: new high-speed USB device number 64 using dummy_hcd
[ 1219.056190][T21743] lowmem_reserve[]: 0 0 1 1 1
[ 1219.066291][T16895] usb 3-1: config 9 interface 252 altsetting 7 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[ 1219.073635][T21743] Node 0 
[ 1219.087581][T16895] usb 3-1: config 9 interface 252 altsetting 7 endpoint 0xE has invalid maxpacket 552, setting to 64
[ 1219.090540][T21743] Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1219.091031][T21743] lowmem_reserve[]: 0 0 0 0 0
[ 1219.145491][T16895] usb 3-1: config 9 interface 251 altsetting 233 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1219.173701][T21743] Node 1 Normal free:3873872kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:136kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:27616kB local_pcp:10336kB free_cma:0kB
[ 1219.226177][T11371] usb 10-1: device descriptor read/64, error -71
[ 1219.233470][T16895] usb 3-1: too many endpoints for config 9 interface 1 altsetting 4: 147, using maximum allowed: 30
[ 1219.245311][T16484] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1219.276661][T16484] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1219.276856][T16895] usb 3-1: config 9 interface 1 altsetting 4 endpoint 0xA has invalid maxpacket 1023, setting to 64
[ 1219.308438][T21743] lowmem_reserve[]: 0 0 0 0 0
[ 1219.309291][T16484] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1219.313749][T21743] Node 0 
[ 1219.321858][T16895] usb 3-1: config 9 interface 1 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 147
[ 1219.349109][T11371] usb usb10-port1: attempt power cycle
[ 1219.359076][T21743] DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1219.365678][T16484] usb 4-1: config 0 descriptor??
[ 1219.392316][T16484] pwc: Askey VC010 type 2 USB webcam detected.
[ 1219.399019][T16895] usb 3-1: config 9 interface 122 altsetting 7 has a duplicate endpoint with address 0x4, skipping
[ 1219.429916][T21743] Node 0 DMA32: 3206*4kB (UME) 4625*8kB (UME) 2551*16kB (UME) 459*32kB (UME) 245*64kB (UME) 109*128kB (UME) 243*256kB (UME) 123*512kB (UME) 76*1024kB (UME) 1*2048kB (E) 136*4096kB (UM) = 897072kB
[ 1219.460908][T16895] usb 3-1: config 9 interface 122 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[ 1219.477883][T16895] usb 3-1: config 9 interface 252 has no altsetting 0
[ 1219.484903][T21743] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1219.499538][T16895] usb 3-1: config 9 interface 251 has no altsetting 0
[ 1219.506492][T16895] usb 3-1: config 9 interface 1 has no altsetting 0
[ 1219.518952][T21743] Node 1 Normal: 204*4kB (UM) 60*8kB (UME) 52*16kB (UME) 176*32kB (UME) 50*64kB (UME) 11*128kB (UME) 8*256kB (UME) 6*512kB (UME) 2*1024kB (UM) 4*2048kB (UME) 939*4096kB (UM) = 3873872kB
[ 1219.547273][T16895] usb 3-1: config 9 interface 122 has no altsetting 0
[ 1219.554985][T21743] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1219.568234][T16895] usb 3-1: New USB device found, idVendor=12d1, idProduct=c567, bcdDevice=5b.93
[ 1219.590024][T16895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1219.599250][T16895] usb 3-1: Product: 겷떾ᒪꔘ伕킆ꆧꬩᤙ좂籚⛠Ȇ蛭鴔珻༝矛놟ᚻ촏ἱ㘎光뜝綴拹吽䷲넨服瓦騭纹؎엵尮♈홴싧뛒䥸ᴡ谹ڣ눑渌퀹凒锻๽겹룱媰尌䫊㋂鲻峛藗迍㑥ᣯ硖쎵뫿薩ⸯ擔࡞漀鶢剰땆Ṛｚ彎悓踯獬퉩趻櫣ᛎ쨞难핱愐䝽氀⟄ᖿⷩ햔⼌
[ 1219.634438][T21743] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1219.652931][T21743] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1219.666032][T21743] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1219.687425][T21743] 37751 total pagecache pages
[ 1219.707921][T11371] usb 10-1: new high-speed USB device number 65 using dummy_hcd
[ 1219.726944][T21743] 0 pages in swap cache
[ 1219.731865][T16895] usb 3-1: Manufacturer: 졅䮉뢳劈쭮ﾛ唐ꯪ왲駈극녇姦݈腂伍ₖ᎛섃ﹺ蓉襱좯촑␾慤櫪쮗羽쎋厄ꮘ徊玾₧쇸᠟Ԁ៚䊟了쳨猰Ḻ傊没픽╪뷭ꥍෂ훹睶⾛櫤恭쮡ᚺ謅鰏ⲉ턍痜ᦩ曘ޱ谡捧凯悔燩墸檋ᴜ䇿䈓椢肕꣄倢▛跠䜏宽锽罟⭍䊑琉
[ 1219.765111][T11371] usb 10-1: device descriptor read/8, error -71
[ 1219.777940][T21743] Free swap  = 124996kB
[ 1219.782154][T21743] Total swap = 124996kB
[ 1219.788054][T21743] 2097051 pages RAM
[ 1219.791942][T21743] 0 pages HighMem/MovableOnly
[ 1219.816094][T16484] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1219.817433][T21743] 425091 pages reserved
[ 1219.839588][T21743] 0 pages cma reserved
[ 1219.839969][T16895] usb 3-1: SerialNumber: ѕ
[ 1219.868945][T21734] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1220.008969][T11371] usb 10-1: new high-speed USB device number 66 using dummy_hcd
[ 1220.028748][T11371] usb 10-1: device descriptor read/8, error -71
[ 1220.031408][T16484] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1220.060772][T16484] pwc: recv_control_msg error -32 req 04 val 1000
[ 1220.070377][T16484] pwc: recv_control_msg error -32 req 04 val 1300
[ 1220.078669][T16484] pwc: recv_control_msg error -32 req 04 val 1400
[ 1220.085777][T16484] pwc: recv_control_msg error -32 req 02 val 2000
[ 1220.092750][T16895] option 3-1:9.252: GSM modem (1-port) converter detected
[ 1220.147330][T11371] usb usb10-port1: unable to enumerate USB device
[ 1220.212647][T21769] netlink: 'syz.1.3834': attribute type 10 has an invalid length.
[ 1220.221634][T21769] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3834'.
[ 1220.231661][T21769] batadv0: entered promiscuous mode
[ 1220.237596][T21769] batadv0: entered allmulticast mode
[ 1220.249147][T21769] bridge0: port 3(batadv0) entered blocking state
[ 1220.256090][T21769] bridge0: port 3(batadv0) entered disabled state
[ 1220.268676][T21769] bridge0: port 3(batadv0) entered blocking state
[ 1220.275361][T21769] bridge0: port 3(batadv0) entered forwarding state
[ 1220.302501][T16735] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[ 1220.312434][T16735] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[ 1220.403474][T16895] usb 3-1: USB disconnect, device number 38
[ 1220.418431][T16895] option 3-1:9.252: device disconnected
[ 1220.608159][T21773] netlink: 1080 bytes leftover after parsing attributes in process `syz.4.3836'.
[ 1220.754176][T21776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3837'.
[ 1220.886329][T21776] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3837'.
[ 1221.075177][T21784] loop9: detected capacity change from 0 to 7
[ 1221.099271][T21784] Dev loop9: unable to read RDB block 7
[ 1221.216862][T21784]  loop9: unable to read partition table
[ 1221.242251][T21784] loop9: partition table beyond EOD, truncated
[ 1221.331076][T21784] loop_reread_partitions: partition scan of loop9 (�被x������ ) failed (rc=-5)
[ 1221.359492][T16895] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[ 1221.517824][  T977] usb 10-1: new high-speed USB device number 67 using dummy_hcd
[ 1221.527487][T16484] pwc: recv_control_msg error -71 req 02 val 2100
[ 1221.560925][T16484] pwc: recv_control_msg error -71 req 04 val 1500
[ 1221.598200][T16484] pwc: recv_control_msg error -71 req 02 val 2500
[ 1221.634684][T16484] pwc: recv_control_msg error -71 req 02 val 2400
[ 1221.638133][T16895] usb 5-1: Using ep0 maxpacket: 8
[ 1221.670151][T16484] pwc: recv_control_msg error -71 req 02 val 2600
[ 1221.693933][T16484] pwc: recv_control_msg error -71 req 02 val 2900
[ 1221.712356][T16895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[ 1221.732948][T16484] pwc: recv_control_msg error -71 req 02 val 2800
[ 1221.746377][T16895] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1221.759116][  T977] usb 10-1: Using ep0 maxpacket: 16
[ 1221.766894][  T977] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1221.786104][T16484] pwc: recv_control_msg error -71 req 04 val 1100
[ 1221.802939][  T977] usb 10-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[ 1221.821326][T16484] pwc: recv_control_msg error -71 req 04 val 1200
[ 1221.835915][T16895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1221.862065][  T977] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1221.864247][T16484] pwc: Registered as video103.
[ 1221.871383][T16895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1221.908205][  T977] usb 10-1: config 0 descriptor??
[ 1221.920126][T16484] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input83
[ 1221.938181][T16895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[ 1221.978885][T16895] usb 5-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f
[ 1221.993259][T16895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1222.020015][T16484] usb 4-1: USB disconnect, device number 3
[ 1222.026124][T16895] usb 5-1: Product: syz
[ 1222.057351][T16895] usb 5-1: Manufacturer: syz
[ 1222.072639][T16895] usb 5-1: SerialNumber: syz
[ 1222.108157][T16895] usb 5-1: config 0 descriptor??
[ 1222.139241][T16895] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -8
[ 1222.351552][T16484] usb 5-1: USB disconnect, device number 14
[ 1222.619599][  T977] hid (null): unknown global tag 0xd
[ 1222.637851][  T977] hid (null): unknown global tag 0xe9
[ 1222.647167][  T977] hid (null): report_id 727497987 is invalid
[ 1222.657304][  T977] hid (null): unknown global tag 0xe
[ 1222.664968][  T977] hid (null): unknown global tag 0xe
[ 1222.670953][  T977] hid (null): invalid report_count 1801483965
[ 1222.681738][  T977] hid (null): unknown global tag 0xd
[ 1222.764406][  T977] hid (null): unknown global tag 0xd
[ 1222.779210][  T977] hid (null): global environment stack underflow
[ 1222.789008][  T977] hid (null): unknown global tag 0x7e
[ 1222.915180][  T977] input: HID 0458:5013 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5013.0043/input/input85
[ 1223.054290][  T977] input: HID 0458:5013 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5013.0043/input/input86
[ 1223.172452][  T977] kye 0003:0458:5013.0043: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.9-1/input0
[ 1223.310540][T21817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3843'.
[ 1224.300379][T21749] usb 10-1: USB disconnect, device number 67
[ 1224.475942][T21836] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1224.697810][  T977] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 1224.868089][  T977] usb 4-1: Using ep0 maxpacket: 32
[ 1224.910392][  T977] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[ 1224.948105][  T977] usb 4-1: config 0 has no interface number 0
[ 1224.954295][  T977] usb 4-1: config 0 interface 184 has no altsetting 0
[ 1225.038362][  T977] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1225.066941][  T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1225.087309][  T977] usb 4-1: Product: syz
[ 1225.097486][  T977] usb 4-1: Manufacturer: syz
[ 1225.127731][  T977] usb 4-1: SerialNumber: syz
[ 1225.156953][  T977] usb 4-1: config 0 descriptor??
[ 1225.200962][  T977] smsc75xx v1.0.0
[ 1225.300317][T11397] usb 10-1: new high-speed USB device number 68 using dummy_hcd
[ 1225.512756][T11397] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1225.529442][T11397] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1225.587990][T11397] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1225.697443][T11397] usb 10-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[ 1225.698556][  T977] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[ 1225.782685][T11397] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1225.814206][T11397] usb 10-1: config 0 descriptor??
[ 1225.832347][  T977] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1226.153953][  T977] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71
[ 1226.201326][  T977] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71
[ 1226.295815][  T977] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[ 1226.376346][T11397] acrux 0003:1A34:0802.0044: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.9-1/input0
[ 1226.424310][  T977] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71
[ 1226.467853][T11397] acrux 0003:1A34:0802.0044: no inputs found
[ 1226.476805][  T977] usb 4-1: USB disconnect, device number 4
[ 1226.571137][T11397] acrux 0003:1A34:0802.0044: Failed to enable force feedback support, error: -19
[ 1226.704515][T16895] usb 10-1: USB disconnect, device number 68
[ 1226.967800][T11397] usb 2-1: new full-speed USB device number 30 using dummy_hcd
[ 1227.123022][T21877] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3853'.
[ 1227.132836][T21877] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3853'.
[ 1227.148851][T11397] usb 2-1: device descriptor read/64, error -71
[ 1227.184187][T21876] libceph: resolve '0..' (ret=-3): failed
[ 1227.387782][T11397] usb 2-1: new full-speed USB device number 31 using dummy_hcd
[ 1227.528541][T11397] usb 2-1: device descriptor read/64, error -71
[ 1227.619021][   T24] usb 10-1: new high-speed USB device number 69 using dummy_hcd
[ 1227.639019][T11397] usb usb2-port1: attempt power cycle
[ 1227.777783][   T24] usb 10-1: Using ep0 maxpacket: 16
[ 1227.785605][   T24] usb 10-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1227.808812][T21890] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1227.817035][   T24] usb 10-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1227.840758][   T24] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1227.868160][   T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1227.978640][T11397] usb 2-1: new full-speed USB device number 32 using dummy_hcd
[ 1228.008419][T11397] usb 2-1: device descriptor read/8, error -71
[ 1228.342519][T11397] usb 2-1: new full-speed USB device number 33 using dummy_hcd
[ 1228.419019][T11397] usb 2-1: device descriptor read/8, error -71
[ 1228.430007][   T24] usbhid 10-1:128.0: can't add hid device: -71
[ 1228.457962][   T24] usbhid 10-1:128.0: probe with driver usbhid failed with error -71
[ 1228.469592][   T24] usb 10-1: USB disconnect, device number 69
[ 1228.538218][T11397] usb usb2-port1: unable to enumerate USB device
[ 1229.318319][  T977] usb 10-1: new high-speed USB device number 70 using dummy_hcd
[ 1229.467777][  T977] usb 10-1: Using ep0 maxpacket: 32
[ 1229.507301][  T977] usb 10-1: config 0 has an invalid interface number: 202 but max is 0
[ 1229.516189][  T977] usb 10-1: config 0 has no interface number 0
[ 1229.530765][  T977] usb 10-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=52.85
[ 1229.540106][  T977] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1229.548531][  T977] usb 10-1: Product: syz
[ 1229.553986][  T977] usb 10-1: Manufacturer: syz
[ 1229.558956][  T977] usb 10-1: SerialNumber: syz
[ 1229.569888][T21919] binder: 21915:21919 ioctl 400c620e 200000000100 returned -22
[ 1229.653937][  T977] usb 10-1: config 0 descriptor??
[ 1229.781946][T21926] @: renamed from vlan0 (while UP)
[ 1230.589628][T21935] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3865'.
[ 1230.872194][T21937] ip6gre0: entered promiscuous mode
[ 1231.017909][T16895] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[ 1231.207927][T16895] usb 3-1: Using ep0 maxpacket: 32
[ 1231.216808][T16895] usb 3-1: config 0 has an invalid interface number: 188 but max is 0
[ 1231.225909][T16895] usb 3-1: config 0 has no interface number 0
[ 1231.311629][T16895] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 1231.363679][T16895] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[ 1231.373606][T16895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1231.426922][T16895] usb 3-1: Product: syz
[ 1231.436950][T16895] usb 3-1: Manufacturer: syz
[ 1231.442217][T16895] usb 3-1: SerialNumber: syz
[ 1231.557796][T16895] usb 3-1: config 0 descriptor??
[ 1231.577526][T21935] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1232.466339][  T977] usb_8dev 10-1:0.202 can0: sending command message failed
[ 1232.494659][  T977] usb_8dev 10-1:0.202 can0: can't get firmware version
[ 1232.716130][  T977] usb_8dev 10-1:0.202: probe with driver usb_8dev failed with error -22
[ 1232.760219][  T977] usb 10-1: USB disconnect, device number 70
[ 1233.037591][T21953] netlink: 'syz.9.3868': attribute type 2 has an invalid length.
[ 1233.468636][  T977] usb 10-1: new high-speed USB device number 71 using dummy_hcd
[ 1233.667785][  T977] usb 10-1: Using ep0 maxpacket: 32
[ 1233.754806][  T977] usb 10-1: config 0 has an invalid interface number: 51 but max is 0
[ 1233.784332][  T977] usb 10-1: config 0 has no interface number 0
[ 1233.806077][  T977] usb 10-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1233.845623][  T977] usb 10-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1233.959605][  T977] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1234.015746][  T977] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1234.081030][  T977] usb 10-1: Product: syz
[ 1234.102170][  T977] usb 10-1: Manufacturer: syz
[ 1234.128775][T21958] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3869'.
[ 1234.147258][  T977] usb 10-1: SerialNumber: syz
[ 1234.199222][  T977] usb 10-1: config 0 descriptor??
[ 1234.279041][  T977] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1234.317100][T16895] asix 3-1:0.188: probe with driver asix failed with error -71
[ 1234.430872][T16895] usb 3-1: USB disconnect, device number 39
[ 1234.508037][  T977] usb 10-1: qt2_setup_urbs - submit read urb failed -90
[ 1234.529281][  T977] quatech2 10-1:0.51: probe with driver quatech2 failed with error -90
[ 1234.771861][T21953] use of bytesused == 0 is deprecated and will be removed in the future,
[ 1234.780803][T21953] use the actual size instead.
[ 1234.795445][T21965] bridge1: entered promiscuous mode
[ 1235.841242][T21988] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3871'.
[ 1235.905205][T21972] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3871'.
[ 1235.953896][   T24] usb 10-1: USB disconnect, device number 71
[ 1236.497564][T21970] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3871'.
[ 1237.539979][T21998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3876'.
[ 1238.429924][T16484] usb 10-1: new high-speed USB device number 72 using dummy_hcd
[ 1238.552391][T22014] binder: 22010:22014 ioctl c0306201 200000000dc0 returned -14
[ 1238.597813][T16484] usb 10-1: Using ep0 maxpacket: 32
[ 1238.618882][T16484] usb 10-1: config 0 has an invalid interface number: 202 but max is 0
[ 1238.648358][T16484] usb 10-1: config 0 has no interface number 0
[ 1238.694861][T16484] usb 10-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=52.85
[ 1238.726531][T16484] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1238.760867][T16484] usb 10-1: Product: syz
[ 1238.765196][T16484] usb 10-1: Manufacturer: syz
[ 1238.787253][T21945] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[ 1238.813825][T16484] usb 10-1: SerialNumber: syz
[ 1238.835471][T16484] usb 10-1: config 0 descriptor??
[ 1238.971435][T21945] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1238.999990][T21945] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[ 1239.040631][T21945] usb 4-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28
[ 1239.053480][T21945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1239.079629][T21945] usb 4-1: Product: syz
[ 1239.257930][T21945] usb 4-1: Manufacturer: syz
[ 1239.268484][T21945] usb 4-1: SerialNumber: syz
[ 1239.283674][T21945] usb 4-1: config 0 descriptor??
[ 1239.328829][T22013] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 1239.358558][T22013] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 1239.376511][T21945] option 4-1:0.0: GSM modem (1-port) converter detected
[ 1239.392606][T21945] usb 4-1: GSM modem (1-port) converter now attached to ttyUSB0
[ 1239.608352][T22025] loop9: detected capacity change from 0 to 7
[ 1239.619443][T16805] Dev loop9: unable to read RDB block 7
[ 1239.625307][T16805]  loop9: unable to read partition table
[ 1239.641957][T16805] loop9: partition table beyond EOD, truncated
[ 1239.846387][T22025] Dev loop9: unable to read RDB block 7
[ 1239.852618][T22025]  loop9: unable to read partition table
[ 1239.858767][T22025] loop9: partition table beyond EOD, truncated
[ 1239.865208][T22025] loop_reread_partitions: partition scan of loop9 (�被x������ ) failed (rc=-5)
[ 1240.298460][T22017] usb 2-1: new full-speed USB device number 34 using dummy_hcd
[ 1240.460431][T22017] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1240.585970][T22017] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1240.748233][T22017] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1240.757428][T22017] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1240.765920][T22017] usb 2-1: Product: syz
[ 1240.772122][T22017] usb 2-1: Manufacturer: syz
[ 1240.782276][T22017] usb 2-1: SerialNumber: syz
[ 1240.837002][T22017] usb 2-1: config 0 descriptor??
[ 1241.089014][T22017] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 1241.155046][T22037] binder: 22029:22037 ioctl c018620b 200000000240 returned -14
[ 1241.236031][T16484] usb_8dev 10-1:0.202 can0: sending command message failed
[ 1241.246275][T16484] usb_8dev 10-1:0.202 can0: can't get firmware version
[ 1241.273767][T22037] binder: 22029:22037 ioctl ae01 0 returned -22
[ 1241.333131][T16484] usb_8dev 10-1:0.202: probe with driver usb_8dev failed with error -22
[ 1241.357831][T21945] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[ 1241.396251][T16484] usb 10-1: USB disconnect, device number 72
[ 1241.517810][T21945] usb 3-1: Using ep0 maxpacket: 8
[ 1241.540706][T21945] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13
[ 1241.567904][T21945] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[ 1241.577350][T21945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1241.585971][T21945] usb 3-1: Product: syz
[ 1241.590721][T21945] usb 3-1: Manufacturer: syz
[ 1241.598902][T21945] usb 3-1: SerialNumber: syz
[ 1241.604715][   T24] usb 4-1: USB disconnect, device number 5
[ 1241.640264][T21945] usb 3-1: config 0 descriptor??
[ 1241.694581][   T24] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0
[ 1241.695693][T21945] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[ 1241.752734][   T24] option 4-1:0.0: device disconnected
[ 1241.874189][T21945] gspca_zc3xx: reg_w_i err -71
[ 1242.343043][T22050] input: syz0 as /devices/virtual/input/input87
[ 1242.467804][T21945] gspca_zc3xx: Unknown sensor - set to TAS5130C
[ 1242.474399][T21945] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71
[ 1242.527504][T21945] usb 3-1: USB disconnect, device number 40
[ 1243.173387][T21896] usb 2-1: USB disconnect, device number 34
[ 1243.546454][T22061] sctp: [Deprecated]: syz.1.3891 (pid 22061) Use of int in max_burst socket option.
[ 1243.546454][T22061] Use struct sctp_assoc_value instead
[ 1243.743576][T22067] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1243.858007][T22067] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1243.917995][T22067] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1243.933283][T22067] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1243.971434][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1243.978771][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1244.014737][T22067] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1244.045776][T22067] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1244.078679][T22067] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1244.089642][T22067] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1244.185072][T22078] loop9: detected capacity change from 0 to 7
[ 1244.192215][T22078] Dev loop9: unable to read RDB block 7
[ 1244.203810][T22078]  loop9: unable to read partition table
[ 1244.215177][T22078] loop9: partition table beyond EOD, truncated
[ 1244.223418][T22067] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1244.234342][T22078] loop_reread_partitions: partition scan of loop9 (�被x������ ) failed (rc=-5)
[ 1244.259074][T22067] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1244.278316][T22067] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 1244.306356][T22067] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 1244.577844][T21945] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[ 1244.769936][T21945] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1244.793318][T21945] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1244.813998][T21945] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1244.947835][T21945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1244.955984][T21945] usb 2-1: SerialNumber: syz
[ 1245.028519][T22017] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[ 1245.187758][T22017] usb 3-1: Using ep0 maxpacket: 32
[ 1245.209800][T22017] usb 3-1: config 0 has an invalid interface number: 202 but max is 0
[ 1245.226751][T22017] usb 3-1: config 0 has no interface number 0
[ 1245.246134][T21945] usb 2-1: 0:2 : does not exist
[ 1245.288301][T22017] usb 3-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=52.85
[ 1245.313739][T22017] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1245.324260][T21945] usb 2-1: USB disconnect, device number 35
[ 1245.361367][T22017] usb 3-1: Product: syz
[ 1245.373762][T22017] usb 3-1: Manufacturer: syz
[ 1245.386923][T22017] usb 3-1: SerialNumber: syz
[ 1245.427493][T22017] usb 3-1: config 0 descriptor??
[ 1245.889389][T14277] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1245.968056][T14277] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1246.022787][T22104] ip6gre0: entered promiscuous mode
[ 1246.102213][T22099] raw_sendmsg: syz.3.3900 forgot to set AF_INET. Fix it!
[ 1246.139386][T14277] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1246.298314][T14277] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1246.747350][T21945] usb 10-1: new full-speed USB device number 73 using dummy_hcd
[ 1246.889206][T22116] loop6: detected capacity change from 0 to 524288000
[ 1246.930786][T21945] usb 10-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[ 1246.954980][T21945] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1246.964921][T21945] usb 10-1: Product: syz
[ 1246.970139][T21945] usb 10-1: Manufacturer: syz
[ 1246.978158][T21945] usb 10-1: SerialNumber: syz
[ 1247.004630][T21945] usb 10-1: config 0 descriptor??
[ 1247.018034][T21945] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[ 1247.032576][T21945] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 1247.134350][T21945] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19)
[ 1247.146874][T22131] netlink: 388 bytes leftover after parsing attributes in process `syz.1.3904'.
[ 1247.167858][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1247.236941][T21945] usb 10-1: USB disconnect, device number 73
[ 1247.438915][T22117] bond1: option ad_user_port_key: invalid value (61617)
[ 1247.546881][T22117] bond1: option ad_user_port_key: allowed values 0 - 1023
[ 1247.650970][T22117] bond1 (unregistering): Released all slaves
[ 1247.968022][T14277] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1248.048622][T14277] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1248.213193][T14277] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1248.370752][T14277] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1248.487506][T22017] usb_8dev 3-1:0.202 can0: sending command message failed
[ 1248.535499][T22017] usb_8dev 3-1:0.202 can0: can't get firmware version
[ 1248.719694][T22150] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3909'.
[ 1248.746244][T22017] usb_8dev 3-1:0.202: probe with driver usb_8dev failed with error -22
[ 1248.813544][T22017] usb 3-1: USB disconnect, device number 41
[ 1248.861062][T22151] loop6: detected capacity change from 0 to 2640
[ 1248.878328][T22151] buffer_io_error: 80 callbacks suppressed
[ 1248.878349][T22151] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1248.931305][T22151] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1248.941455][T22151] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1248.951820][T22151] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1248.994825][T22151] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1249.078535][T22151] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1249.105863][T22151] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1249.164946][T22151] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1249.218456][T22151] ldm_validate_partition_table(): Disk read failed.
[ 1249.237940][T22151] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1249.308089][T22151] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1249.400024][T22151] Dev loop6: unable to read RDB block 0
[ 1249.462821][   T30] audit: type=1326 audit(1768602590.439:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22157 comm="syz.9.3911" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27e718f749 code=0x0
[ 1249.489265][T22151]  loop6: unable to read partition table
[ 1249.546665][T22151] loop_reread_partitions: partition scan of loop6 (3�����) failed (rc=-5)
[ 1249.874030][T22168] netlink: 'syz.4.3912': attribute type 6 has an invalid length.
[ 1249.885598][T22168] netlink: 'syz.4.3912': attribute type 7 has an invalid length.
[ 1249.907332][T22168] netlink: 'syz.4.3912': attribute type 8 has an invalid length.
[ 1249.972131][T22170] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3912'.
[ 1250.047777][T14277] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1250.128212][T14277] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1250.155039][T22017] usb 10-1: new high-speed USB device number 74 using dummy_hcd
[ 1250.237776][T16895] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[ 1250.287837][T14277] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1250.339559][T22017] usb 10-1: Using ep0 maxpacket: 16
[ 1250.362025][T22017] usb 10-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb
[ 1250.372534][T22017] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1250.395394][T22017] usb 10-1: Product: syz
[ 1250.410396][T22017] usb 10-1: Manufacturer: syz
[ 1250.416845][T16895] usb 2-1: config 0 has an invalid interface number: 64 but max is 0
[ 1250.425062][T16895] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[ 1250.430584][T22017] usb 10-1: SerialNumber: syz
[ 1250.440181][T16895] usb 2-1: config 0 has no interface number 0
[ 1250.446333][T16895] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[ 1250.459171][T14277] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1250.465404][T16895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1250.480859][T16895] usb 2-1: Product: syz
[ 1250.489088][T16895] usb 2-1: Manufacturer: syz
[ 1250.493743][T16895] usb 2-1: SerialNumber: syz
[ 1250.508821][T16895] usb 2-1: config 0 descriptor??
[ 1250.524564][T16895] uvcvideo 2-1:0.64: probe with driver uvcvideo failed with error -22
[ 1250.784235][ T5923] usb 2-1: USB disconnect, device number 36
[ 1250.997789][T16484] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[ 1251.154370][T16484] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[ 1251.168450][T16484] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1251.186981][T16484] usb 5-1: Product: syz
[ 1251.199521][T16484] usb 5-1: Manufacturer: syz
[ 1251.208656][T16484] usb 5-1: SerialNumber: syz
[ 1251.229964][T16484] hub 5-1:24.0: bad descriptor, ignoring hub
[ 1251.245422][T16484] hub 5-1:24.0: probe with driver hub failed with error -5
[ 1251.435125][T16484] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware
[ 1251.450921][T16484] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[ 1251.462119][T16484] dib0700: firmware download failed at 7 with -22
[ 1251.536583][T22179] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1251.545324][T22179] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1251.590491][T22181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3918'.
[ 1251.648671][   T31] INFO: task kworker/1:3:19687 blocked for more than 143 seconds.
[ 1251.656602][   T31]       Tainted: G             L      syzkaller #0
[ 1251.680904][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1251.709563][T22176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1251.721304][   T31] task:kworker/1:3     state:D stack:22112 pid:19687 tgid:19687 ppid:2      task_flags:0x4208060 flags:0x00080000
[ 1251.748148][T22176] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1251.764748][   T31] Workqueue: usb_hub_wq hub_event
[ 1251.771881][   T31] Call Trace:
[ 1251.775470][   T31]  <TASK>
[ 1251.793713][   T31]  __schedule+0x149b/0x4fd0
[ 1251.798643][   T31]  ? bus_for_each_drv+0x251/0x2e0
[ 1251.803898][   T31]  ? device_initial_probe+0xa1/0xd0
[ 1251.811996][   T31]  ? usb_generic_driver_probe+0x8d/0x150
[ 1251.819235][   T31]  ? bus_for_each_drv+0x251/0x2e0
[ 1251.824389][   T31]  ? device_initial_probe+0xa1/0xd0
[ 1251.832105][   T31]  ? __pfx___schedule+0x10/0x10
[ 1251.837087][   T31]  ? schedule+0x91/0x360
[ 1251.841734][   T31]  schedule+0x165/0x360
[ 1251.846079][   T31]  schedule_timeout+0x9a/0x270
[ 1251.857729][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[ 1251.863198][   T31]  ? do_raw_spin_lock+0x121/0x290
[ 1251.901020][ T5923] usb 5-1: USB disconnect, device number 15
[ 1251.919611][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1251.928017][   T31]  ? wait_for_completion+0x267/0x5d0
[ 1251.936386][   T31]  wait_for_completion+0x2bf/0x5d0
[ 1251.945212][   T31]  ? __pfx_wait_for_completion+0x10/0x10
[ 1251.951350][   T31]  i2c_del_adapter+0x591/0x760
[ 1251.956215][   T31]  ? __pfx_i2c_del_adapter+0x10/0x10
[ 1251.964332][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1251.975143][   T31]  ? dvb_usb_adapter_exit+0xd7/0x240
[ 1252.001957][T22187] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3919'.
[ 1252.015282][   T31]  ? kfree+0x4d/0x660
[ 1252.019561][   T31]  dvb_usb_i2c_exit+0x64/0xb0
[ 1252.041755][   T31]  dvb_usb_device_exit+0x1be/0x350
[ 1252.084918][   T31]  ? __pfx_dvb_usb_device_exit+0x10/0x10
[ 1252.101500][   T31]  cxusb_probe+0x603/0x700
[ 1252.109421][   T31]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1252.121944][   T31]  ? __pfx_cxusb_probe+0x10/0x10
[ 1252.131184][   T31]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1252.141841][   T31]  ? __pm_runtime_set_status+0x785/0xa50
[ 1252.152530][   T31]  usb_probe_interface+0x668/0xc90
[ 1252.165768][   T31]  ? __pfx_usb_probe_interface+0x10/0x10
[ 1252.176295][   T31]  really_probe+0x26d/0xad0
[ 1252.187098][   T31]  __driver_probe_device+0x18c/0x320
[ 1252.201113][   T31]  driver_probe_device+0x4f/0x240
[ 1252.210686][   T31]  __device_attach_driver+0x279/0x430
[ 1252.221779][   T31]  bus_for_each_drv+0x251/0x2e0
[ 1252.232170][   T31]  ? __pfx___device_attach_driver+0x10/0x10
[ 1252.242252][   T31]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 1252.252663][   T31]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1252.261506][   T31]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1252.279312][   T31]  __device_attach+0x2b8/0x430
[ 1252.284314][   T31]  ? __pfx___device_attach+0x10/0x10
[ 1252.361956][   T31]  ? _raw_spin_unlock+0x28/0x50
[ 1252.371139][T22017] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[ 1252.395178][   T31]  device_initial_probe+0xa1/0xd0
[ 1252.418573][   T31]  bus_probe_device+0x12a/0x220
[ 1252.430519][   T31]  ? device_add+0x726/0xb80
[ 1252.440127][   T31]  device_add+0x7b6/0xb80
[ 1252.457054][   T31]  usb_set_configuration+0x1a87/0x2110
[ 1252.469969][T22017] snd-usb-audio 10-1:222.0: probe with driver snd-usb-audio failed with error -71
[ 1252.480446][   T31]  usb_generic_driver_probe+0x8d/0x150
[ 1252.492525][   T31]  usb_probe_device+0x1c4/0x3c0
[ 1252.510757][   T31]  ? __pfx_usb_probe_device+0x10/0x10
[ 1252.524585][T22017] usb 10-1: USB disconnect, device number 74
[ 1252.531624][   T31]  really_probe+0x26d/0xad0
[ 1252.540446][   T31]  __driver_probe_device+0x18c/0x320
[ 1252.554134][   T31]  driver_probe_device+0x4f/0x240
[ 1252.564289][   T31]  __device_attach_driver+0x279/0x430
[ 1252.573636][   T31]  bus_for_each_drv+0x251/0x2e0
[ 1252.583180][   T31]  ? __pfx___device_attach_driver+0x10/0x10
[ 1252.622142][   T31]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 1252.633847][   T31]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1252.730194][   T31]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1252.736084][   T31]  __device_attach+0x2b8/0x430
[ 1252.742381][   T31]  ? __pfx___device_attach+0x10/0x10
[ 1252.752384][   T31]  ? _raw_spin_unlock+0x28/0x50
[ 1252.762979][   T31]  device_initial_probe+0xa1/0xd0
[ 1252.778629][   T31]  bus_probe_device+0x12a/0x220
[ 1252.787596][   T31]  ? device_add+0x726/0xb80
[ 1252.795757][   T31]  device_add+0x7b6/0xb80
[ 1252.804324][   T31]  usb_new_device+0xa39/0x1720
[ 1252.818493][   T31]  ? __pfx_usb_new_device+0x10/0x10
[ 1252.823781][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1252.837405][   T31]  hub_event+0x29b1/0x4ef0
[ 1252.851378][   T31]  ? __pfx_hub_event+0x10/0x10
[ 1252.861503][   T31]  ? process_scheduled_works+0x9ef/0x1770
[ 1252.867563][   T31]  ? process_scheduled_works+0x9ef/0x1770
[ 1252.873745][   T31]  ? process_scheduled_works+0x9ef/0x1770
[ 1252.879695][   T31]  process_scheduled_works+0xad1/0x1770
[ 1252.885430][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1252.892319][   T31]  ? do_raw_spin_lock+0x121/0x290
[ 1252.897494][   T31]  worker_thread+0x8a0/0xda0
[ 1252.902880][   T31]  ? __kthread_parkme+0x7b/0x200
[ 1252.908292][   T31]  kthread+0x711/0x8a0
[ 1252.915388][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 1252.921940][   T31]  ? __pfx_kthread+0x10/0x10
[ 1252.926673][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1252.933048][   T31]  ? __pfx_kthread+0x10/0x10
[ 1252.938016][   T31]  ret_from_fork+0x510/0xa50
[ 1252.942901][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1252.951806][   T31]  ? __switch_to+0xc9e/0x1480
[ 1252.956560][   T31]  ? __pfx_kthread+0x10/0x10
[ 1252.962736][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1252.967859][   T31]  </TASK>
[ 1252.971012][   T31] INFO: task syz.7.3523:19823 blocked for more than 144 seconds.
[ 1252.981754][   T31]       Tainted: G             L      syzkaller #0
[ 1252.997421][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1253.006524][   T31] task:syz.7.3523      state:D stack:27576 pid:19823 tgid:19822 ppid:16499  task_flags:0x400040 flags:0x00080002
[ 1253.021950][   T31] Call Trace:
[ 1253.025298][   T31]  <TASK>
[ 1253.028556][   T31]  __schedule+0x149b/0x4fd0
[ 1253.033434][   T31]  ? __pfx___schedule+0x10/0x10
[ 1253.039023][   T31]  ? schedule+0x91/0x360
[ 1253.043600][   T31]  schedule+0x165/0x360
[ 1253.048486][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1253.054231][   T31]  __mutex_lock+0x7e6/0x1350
[ 1253.059483][   T31]  ? __mutex_lock+0x5bb/0x1350
[ 1253.064470][   T31]  ? usbdev_open+0x16e/0x760
[ 1253.069374][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1253.074452][   T31]  ? bus_find_device+0x273/0x2b0
[ 1253.150282][   T31]  ? __pfx_bus_find_device+0x10/0x10
[ 1253.160713][   T31]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[ 1253.173151][   T31]  ? usbdev_open+0xa7/0x760
[ 1253.181916][   T31]  usbdev_open+0x16e/0x760
[ 1253.189843][   T31]  ? kobject_get_unless_zero+0x161/0x1f0
[ 1253.205714][   T31]  ? __pfx_usbdev_open+0x10/0x10
[ 1253.214338][   T31]  ? do_raw_spin_unlock+0x122/0x240
[ 1253.227491][   T31]  chrdev_open+0x4cc/0x5e0
[ 1253.235587][   T31]  ? __pfx_chrdev_open+0x10/0x10
[ 1253.244091][   T31]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[ 1253.255191][   T31]  ? __pfx_chrdev_open+0x10/0x10
[ 1253.263911][   T31]  do_dentry_open+0x7ce/0x1420
[ 1253.272921][   T31]  vfs_open+0x3b/0x340
[ 1253.281384][   T31]  ? path_openat+0x33f3/0x3dd0
[ 1253.291148][   T31]  path_openat+0x340e/0x3dd0
[ 1253.300566][   T31]  ? __pfx_stack_trace_save+0x10/0x10
[ 1253.316107][   T31]  ? kmem_cache_alloc_noprof+0x37d/0x710
[ 1253.334881][   T31]  ? getname_flags+0xb8/0x540
[ 1253.343141][   T31]  ? __pfx_path_openat+0x10/0x10
[ 1253.353105][   T31]  ? __lock_acquire+0x6b6/0x2cf0
[ 1253.364241][   T31]  do_filp_open+0x1fa/0x410
[ 1253.373444][   T31]  ? __pfx_do_filp_open+0x10/0x10
[ 1253.384955][   T31]  ? _raw_spin_unlock+0x28/0x50
[ 1253.395122][   T31]  ? alloc_fd+0x64c/0x6c0
[ 1253.405452][   T31]  do_sys_openat2+0x121/0x200
[ 1253.416562][   T31]  ? __se_sys_futex+0x36f/0x400
[ 1253.433871][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1253.443714][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1253.452562][   T31]  __x64_sys_openat+0x138/0x170
[ 1253.457759][   T31]  do_syscall_64+0xec/0xf80
[ 1253.465034][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1253.478290][   T31]  ? clear_bhb_loop+0x60/0xb0
[ 1253.486655][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1253.499364][   T31] RIP: 0033:0x7f39ef58df90
[ 1253.503832][   T31] RSP: 002b:00007f39f047cb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 1253.524130][   T31] RAX: ffffffffffffffda RBX: 0000000000101301 RCX: 00007f39ef58df90
[ 1253.545661][   T31] RDX: 0000000000101301 RSI: 00007f39f047cc10 RDI: 00000000ffffff9c
[ 1253.559144][   T31] RBP: 00007f39f047cc10 R08: 0000000000000000 R09: 0000000000000000
[ 1253.575129][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd
[ 1253.588869][   T31] R13: 00007f39ef7e6038 R14: 00007f39ef7e5fa0 R15: 00007f39ef90fa28
[ 1253.603516][   T31]  </TASK>
[ 1253.609754][   T31] INFO: task syz.7.3523:19831 blocked for more than 145 seconds.
[ 1253.647074][   T31]       Tainted: G             L      syzkaller #0
[ 1253.667270][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1253.700115][   T31] task:syz.7.3523      state:D stack:28184 pid:19831 tgid:19822 ppid:16499  task_flags:0x400040 flags:0x00080002
[ 1253.735836][   T31] Call Trace:
[ 1253.743859][   T31]  <TASK>
[ 1253.748924][   T31]  __schedule+0x149b/0x4fd0
[ 1253.753546][   T31]  ? preempt_schedule_notrace+0x57/0x90
[ 1253.771629][   T31]  ? __pfx___schedule+0x10/0x10
[ 1253.776554][   T31]  ? schedule+0x91/0x360
[ 1253.788204][   T31]  schedule+0x165/0x360
[ 1253.795426][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1253.805129][   T31]  __mutex_lock+0x7e6/0x1350
[ 1253.819513][   T31]  ? __mutex_lock+0x5bb/0x1350
[ 1253.833406][   T31]  ? usbdev_open+0x16e/0x760
[ 1253.839606][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1253.844773][   T31]  ? bus_find_device+0x273/0x2b0
[ 1253.850652][   T31]  ? __pfx_bus_find_device+0x10/0x10
[ 1253.857110][   T31]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[ 1253.863842][   T31]  ? usbdev_open+0xa7/0x760
[ 1253.870899][   T31]  usbdev_open+0x16e/0x760
[ 1253.875825][   T31]  ? kobject_get_unless_zero+0x161/0x1f0
[ 1253.883899][   T31]  ? __pfx_usbdev_open+0x10/0x10
[ 1253.890225][   T31]  ? do_raw_spin_unlock+0x122/0x240
[ 1253.896173][   T31]  chrdev_open+0x4cc/0x5e0
[ 1253.900735][   T31]  ? __pfx_chrdev_open+0x10/0x10
[ 1253.905722][   T31]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[ 1253.912315][   T31]  ? __pfx_chrdev_open+0x10/0x10
[ 1253.917293][   T31]  do_dentry_open+0x7ce/0x1420
[ 1253.922256][   T31]  vfs_open+0x3b/0x340
[ 1253.926406][   T31]  ? path_openat+0x33f3/0x3dd0
[ 1253.931352][   T31]  path_openat+0x340e/0x3dd0
[ 1253.939331][   T31]  ? __pfx_stack_trace_save+0x10/0x10
[ 1253.944820][   T31]  ? kmem_cache_alloc_noprof+0x37d/0x710
[ 1253.950659][   T31]  ? getname_flags+0xb8/0x540
[ 1253.955383][   T31]  ? __pfx_path_openat+0x10/0x10
[ 1253.960765][   T31]  ? __lock_acquire+0x6b6/0x2cf0
[ 1253.965806][   T31]  do_filp_open+0x1fa/0x410
[ 1253.970846][   T31]  ? __pfx_do_filp_open+0x10/0x10
[ 1253.975984][   T31]  ? _raw_spin_unlock+0x28/0x50
[ 1253.981067][   T31]  ? alloc_fd+0x64c/0x6c0
[ 1253.985482][   T31]  do_sys_openat2+0x121/0x200
[ 1253.990459][   T31]  ? __se_sys_futex+0x36f/0x400
[ 1253.996347][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1254.001788][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1254.006613][   T31]  __x64_sys_openat+0x138/0x170
[ 1254.011572][   T31]  do_syscall_64+0xec/0xf80
[ 1254.016125][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1254.022321][   T31]  ? trace_irq_disable+0x37/0x100
[ 1254.027407][   T31]  ? clear_bhb_loop+0x60/0xb0
[ 1254.032243][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1254.041713][   T31] RIP: 0033:0x7f39ef58df90
[ 1254.046258][   T31] RSP: 002b:00007f39f043ab70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 1254.054861][   T31] RAX: ffffffffffffffda RBX: 0000000000101301 RCX: 00007f39ef58df90
[ 1254.063091][   T31] RDX: 0000000000101301 RSI: 00007f39f043ac10 RDI: 00000000ffffff9c
[ 1254.071480][   T31] RBP: 00007f39f043ac10 R08: 0000000000000000 R09: 0000000000000000
[ 1254.079704][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd
[ 1254.087782][   T31] R13: 00007f39ef7e6218 R14: 00007f39ef7e6180 R15: 00007f39ef90fa28
[ 1254.095810][   T31]  </TASK>
[ 1254.103600][   T31] 
[ 1254.103600][   T31] Showing all locks held in the system:
[ 1254.111690][   T31] 1 lock held by khungtaskd/31:
[ 1254.116585][   T31]  #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1254.126625][   T31] 3 locks held by kworker/u8:10/2989:
[ 1254.132190][   T31]  #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[ 1254.154351][   T31]  #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[ 1254.165922][   T31]  #2: ffff8880b87260d8 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x8ee/0xf30
[ 1254.188931][   T31] 2 locks held by klogd/5193:
[ 1254.193750][   T31]  #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140
[ 1254.227793][   T31]  #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[ 1254.237788][   T31] 2 locks held by getty/5589:
[ 1254.252046][   T31]  #0: ffff88802fe860a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1254.269797][   T31]  #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460
[ 1254.280325][   T31] 4 locks held by udevd/16533:
[ 1254.286422][   T31]  #0: ffff8880346b11c8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe20
[ 1254.299237][   T31]  #1: ffff88805c4fe088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420
[ 1254.322794][   T31]  #2: ffff888078e9b5a8 (kn->active#19){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420
[ 1254.352538][   T31]  #3: ffff88807e0f8198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0
[ 1254.376815][   T31] 5 locks held by kworker/1:3/19687:
[ 1254.384485][   T31]  #0: ffff88823be1cf48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[ 1254.396303][   T31]  #1: ffffc9000bf37bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[ 1254.409823][   T31]  #2: ffff888028529198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0
[ 1254.420356][   T31]  #3: ffff88807e0f8198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430
[ 1254.431178][   T31]  #4: ffff88807832f160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430
[ 1254.440683][   T31] 1 lock held by syz.7.3523/19823:
[ 1254.450127][   T31]  #0: ffff888028529198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760
[ 1254.459354][   T31] 1 lock held by syz.7.3523/19831:
[ 1254.464900][   T31]  #0: ffff888028529198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760
[ 1254.474386][   T31] 1 lock held by syz.8.3582/20021:
[ 1254.479938][   T31]  #0: ffff888028529198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760
[ 1254.490712][   T31] 1 lock held by syz.8.3582/20027:
[ 1254.495935][   T31]  #0: ffff888028529198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760
[ 1254.505181][   T31] 1 lock held by syz.6.3671/20604:
[ 1254.510663][   T31]  #0: ffff888028529198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760
[ 1254.521127][   T31] 1 lock held by syz.0.3675/20635:
[ 1254.526352][   T31]  #0: ffff888028529198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760
[ 1254.537071][   T31] 1 lock held by syz.5.3677/20661:
[ 1254.542702][   T31]  #0: ffff888028529198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760
[ 1254.556097][   T31] 1 lock held by syz.1.3918/22181:
[ 1254.561606][   T31]  #0: ffffffff8df474c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[ 1254.571908][   T31] 
[ 1254.574380][   T31] =============================================
[ 1254.574380][   T31] 
[ 1254.583264][   T31] NMI backtrace for cpu 0
[ 1254.583284][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1254.583312][   T31] Tainted: [L]=SOFTLOCKUP
[ 1254.583320][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1254.583334][   T31] Call Trace:
[ 1254.583344][   T31]  <TASK>
[ 1254.583353][   T31]  dump_stack_lvl+0xe8/0x150
[ 1254.583387][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[ 1254.583420][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1254.583458][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1254.583495][   T31]  sys_info+0x135/0x170
[ 1254.583523][   T31]  watchdog+0xf95/0xfe0
[ 1254.583559][   T31]  ? watchdog+0x20a/0xfe0
[ 1254.583604][   T31]  kthread+0x711/0x8a0
[ 1254.583644][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1254.583673][   T31]  ? __pfx_kthread+0x10/0x10
[ 1254.583705][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1254.583727][   T31]  ? __pfx_kthread+0x10/0x10
[ 1254.583756][   T31]  ret_from_fork+0x510/0xa50
[ 1254.583781][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1254.583800][   T31]  ? __switch_to+0xc9e/0x1480
[ 1254.583835][   T31]  ? __pfx_kthread+0x10/0x10
[ 1254.583864][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1254.583908][   T31]  </TASK>
[ 1254.583918][   T31] Sending NMI from CPU 0 to CPUs 1:
[ 1254.713946][    C1] NMI backtrace for cpu 1
[ 1254.713968][    C1] CPU: 1 UID: 0 PID: 16484 Comm: kworker/1:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1254.713993][    C1] Tainted: [L]=SOFTLOCKUP
[ 1254.714000][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1254.714013][    C1] Workqueue: events_power_efficient gc_worker
[ 1254.714040][    C1] RIP: 0010:match_held_lock+0x15/0xb0
[ 1254.714064][    C1] Code: cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 56 53 bb 01 00 00 00 48 39 77 10 74 6a 81 7f 20 00 00 20 00 <72> 5f 48 8b 46 08 48 85 c0 75 17 31 db 49 89 fe 48 89 f7 31 f6 e8
[ 1254.714081][    C1] RSP: 0018:ffffc90004f07878 EFLAGS: 00000083
[ 1254.714096][    C1] RAX: 0000000000000002 RBX: 0000000000000001 RCX: 0000000000000046
[ 1254.714107][    C1] RDX: 0000000000000000 RSI: ffffffff8df41b60 RDI: ffff88801c38c858
[ 1254.714120][    C1] RBP: 00000000ffffffff R08: ffffffff8f823177 R09: 1ffffffff1f0462e
[ 1254.714134][    C1] R10: dffffc0000000000 R11: fffffbfff1f0462f R12: 0000000000000246
[ 1254.714152][    C1] R13: ffff88801c38bd00 R14: ffffffff8df41b60 R15: 0000000000000001
[ 1254.714166][    C1] FS:  0000000000000000(0000) GS:ffff888125f1c000(0000) knlGS:0000000000000000
[ 1254.714181][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1254.714194][    C1] CR2: 00002000003e4030 CR3: 00000000772cc000 CR4: 00000000003526f0
[ 1254.714210][    C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[ 1254.714222][    C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1254.714235][    C1] Call Trace:
[ 1254.714244][    C1]  <TASK>
[ 1254.714253][    C1]  lock_is_held_type+0x8a/0x150
[ 1254.714276][    C1]  __might_resched+0x86/0x4d0
[ 1254.714299][    C1]  gc_worker+0xbbe/0x1380
[ 1254.714323][    C1]  ? gc_worker+0x264/0x1380
[ 1254.714353][    C1]  ? __pfx_gc_worker+0x10/0x10
[ 1254.714375][    C1]  ? process_scheduled_works+0x9ef/0x1770
[ 1254.714393][    C1]  ? process_scheduled_works+0x9ef/0x1770
[ 1254.714411][    C1]  process_scheduled_works+0xad1/0x1770
[ 1254.714444][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1254.714461][    C1]  ? do_raw_spin_lock+0x121/0x290
[ 1254.714493][    C1]  worker_thread+0x8a0/0xda0
[ 1254.714517][    C1]  ? __kthread_parkme+0x7b/0x200
[ 1254.714541][    C1]  kthread+0x711/0x8a0
[ 1254.714564][    C1]  ? __pfx_worker_thread+0x10/0x10
[ 1254.714582][    C1]  ? __pfx_kthread+0x10/0x10
[ 1254.714607][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1254.714625][    C1]  ? __pfx_kthread+0x10/0x10
[ 1254.714648][    C1]  ret_from_fork+0x510/0xa50
[ 1254.714666][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1254.714681][    C1]  ? __switch_to+0xc9e/0x1480
[ 1254.714708][    C1]  ? __pfx_kthread+0x10/0x10
[ 1254.714731][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1254.714763][    C1]  </TASK>
[ 1255.016698][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1255.023640][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1255.034458][   T31] Tainted: [L]=SOFTLOCKUP
[ 1255.038833][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1255.048926][   T31] Call Trace:
[ 1255.052251][   T31]  <TASK>
[ 1255.055223][   T31]  vpanic+0x1e0/0x670
[ 1255.059267][   T31]  panic+0xb9/0xc0
[ 1255.063041][   T31]  ? __pfx_panic+0x10/0x10
[ 1255.067682][   T31]  ? preempt_schedule_thunk+0x16/0x30
[ 1255.073099][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[ 1255.079310][   T31]  watchdog+0xfdf/0xfe0
[ 1255.083532][   T31]  ? watchdog+0x20a/0xfe0
[ 1255.087919][   T31]  kthread+0x711/0x8a0
[ 1255.092036][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1255.096763][   T31]  ? __pfx_kthread+0x10/0x10
[ 1255.101496][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1255.106747][   T31]  ? __pfx_kthread+0x10/0x10
[ 1255.111387][   T31]  ret_from_fork+0x510/0xa50
[ 1255.116023][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1255.121182][   T31]  ? __switch_to+0xc9e/0x1480
[ 1255.125930][   T31]  ? __pfx_kthread+0x10/0x10
[ 1255.130571][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1255.135399][   T31]  </TASK>
[ 1255.139049][   T31] Kernel Offset: disabled
[ 1255.143387][   T31] Rebooting in 86400 seconds..