last executing test programs:

20.36078866s ago: executing program 2 (id=2637):
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'tunl0\x00'})
syz_open_dev$vbi(0x0, 0x3, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11}, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r3 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f0000000400)=ANY=[], 0x1df)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})
r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2)
write$FUSE_INIT(r5, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x4008, 0x7, 0x7, 0x80000001, 0x1, 0x0, 0x0, 0x100, 0x3}}, 0x50)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r6 = io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0xb688, 0x1c803, 0x1, 0x20002f7, 0x0, r4})
io_uring_enter(r6, 0x6250, 0x366, 0x30, 0x0, 0x0)
sendfile(0xffffffffffffffff, r3, &(0x7f0000000080)=0x5, 0x9)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000"/190], 0x119)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
userfaultfd(0x801)

20.212276772s ago: executing program 0 (id=2638):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0)
ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x101)
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000002c0)={0x0, 0x10, 0x70b6})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x88}}, 0x0)
sendmsg$rds(r3, &(0x7f0000001380)={&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_map={0x2c, 0x10c, 0x3, {{0x0}, 0x0, 0x10}}, @cswp={0x58, 0x114, 0x7, {{0x7ff80000, 0x101}, 0x0, 0x0, 0x89, 0x4, 0xeb, 0x10000000008a, 0x22, 0x77}}], 0x84}, 0x0)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x80000001}, 0x50)
r5 = socket$kcm(0x29, 0x2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000640)={0x28, r7, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xf2}]}]}, 0x28}}, 0x40040)

15.477593102s ago: executing program 3 (id=2642):
r0 = userfaultfd(0x801)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
close(0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$dsp1(0xffffffffffffff9c, 0x0, 0x361082, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x810, r0, 0x57c68000)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\n\x83\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\xed\x8eS\xaeX\x93\x7f\xd3\xb9\x84Q\x9c\"\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x8c\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x90\x1f\x94\x01M.\x16\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\xabJ^c\xf7\x19\xb4\xd8\xe4\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1\x00\x10\x00\x00\x00\x00\x00\x00\x82\x13\xb2\xa9\xef\xa5\xf8\x8bk\xb3\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)\x1b\xe2\xd6\b\x94b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|$k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf8\xa4O\xb4\xef\xc8\xccH\xd1=\xbe\xbex\xb5-\x05\x01\x11\xfa\xcf\x1dm\xb5X\xe9\xb5O\x15\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xf7\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\xc6C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17\xe6\xcauM\xe3\x05)\xe2\x03\xe2j$F1n@\xde\n9t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5\xa4\x05#\x7f\xa8\x01\x00\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebh\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x85\x1b8OE\x04\x9a\xd8\x80\x10x\xbf\n0\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\xba\x8b\x14\x9a?\x8e\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96{\xc0e\xa1\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!)\xf4\x9b\x1dI\x9ex;\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\xe6k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xecZ`\xa4\xa0(\xf9\x98B\xaf\xde*\x91\xddk\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\x00C\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x14\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcaQ\xdf\x87\xbdjp\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd0k\\\x92\x19a6Sv\x05%{\xe2\xe9\xf1\xddRB$8\xb0q9\xa1g&\x17\xe5P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\x1b\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dti\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x90\xaf1\x86b\x81J\xb7E\xb0\xe2\xd6\x93S\xb3\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O<g\x06~\x12W\x86\x06\xba\x15#\xa7Q\xffa\x926>\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe)
ftruncate(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @random="10200500c54d", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "b3e480a7613088fd71106c027deb3b11"}]}}}}}}}, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000140)={0x4, {0x1, 0x1, 0x9, 0x4, 0x8, 0x52}})
shutdown(r4, 0x1)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
r6 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b///o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5309, 0x0)

15.43232174s ago: executing program 0 (id=2643):
r0 = userfaultfd(0x801)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close(0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$dsp1(0xffffffffffffff9c, 0x0, 0x361082, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x810, r0, 0x57c68000)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\n\x83\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\xed\x8eS\xaeX\x93\x7f\xd3\xb9\x84Q\x9c\"\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x8c\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x90\x1f\x94\x01M.\x16\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\xabJ^c\xf7\x19\xb4\xd8\xe4\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1\x00\x10\x00\x00\x00\x00\x00\x00\x82\x13\xb2\xa9\xef\xa5\xf8\x8bk\xb3\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)\x1b\xe2\xd6\b\x94b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|$k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf8\xa4O\xb4\xef\xc8\xccH\xd1=\xbe\xbex\xb5-\x05\x01\x11\xfa\xcf\x1dm\xb5X\xe9\xb5O\x15\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xf7\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\xc6C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17\xe6\xcauM\xe3\x05)\xe2\x03\xe2j$F1n@\xde\n9t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5\xa4\x05#\x7f\xa8\x01\x00\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebh\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x85\x1b8OE\x04\x9a\xd8\x80\x10x\xbf\n0\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\xba\x8b\x14\x9a?\x8e\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96{\xc0e\xa1\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!)\xf4\x9b\x1dI\x9ex;\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\xe6k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xecZ`\xa4\xa0(\xf9\x98B\xaf\xde*\x91\xddk\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\x00C\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x14\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcaQ\xdf\x87\xbdjp\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd0k\\\x92\x19a6Sv\x05%{\xe2\xe9\xf1\xddRB$8\xb0q9\xa1g&\x17\xe5P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\x1b\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dti\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x90\xaf1\x86b\x81J\xb7E\xb0\xe2\xd6\x93S\xb3\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O<g\x06~\x12W\x86\x06\xba\x15#\xa7Q\xffa\x926>\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe)
ftruncate(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @random="10200500c54d", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "b3e480a7613088fd71106c027deb3b11"}]}}}}}}}, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
shutdown(r4, 0x1)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
r5 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b///o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5309, 0x0)

14.721473528s ago: executing program 2 (id=2646):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500)
socket$nl_netfilter(0x10, 0x3, 0xc)
lsm_set_self_attr(0x65, 0x0, 0x20, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000140)={'icmp\x00'}, &(0x7f0000000240)=0x1e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0)
syz_open_dev$usbfs(0x0, 0x76, 0x101301)
r2 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea})
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2)
close_range(r2, 0xffffffffffffffff, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101)
r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
ioctl$SOUND_MIXER_READ_DEVMASK(r7, 0x80044dfe, &(0x7f00000000c0))
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

13.317315966s ago: executing program 4 (id=2647):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500)
socket$nl_netfilter(0x10, 0x3, 0xc)
lsm_set_self_attr(0x65, 0x0, 0x20, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000140)={'icmp\x00'}, &(0x7f0000000240)=0x1e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0)
syz_open_dev$usbfs(0x0, 0x76, 0x101301)
r2 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea})
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2)
close_range(r2, 0xffffffffffffffff, 0x0)
r7 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
ioctl$SOUND_MIXER_READ_DEVMASK(r7, 0x80044dfe, &(0x7f00000000c0))
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000df000000bfa300000000000007030000f0ffffff720af0fff8ffffff71a4f0ff000000005d040200000000001d400500000000004704000001ed000062030000000000003f440000000000007a0a00fe00ffffffd704000020000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe29330821"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)

12.67022254s ago: executing program 1 (id=2648):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x58, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_bridge\x00'}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040804}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)
r5 = syz_open_dev$radio(&(0x7f0000000280), 0x2, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x80, 0xfa000, 0x8})
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x86}}}, 0x48)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
pread64(0xffffffffffffffff, &(0x7f0000001c00)=""/4108, 0x100c, 0x3)
ioctl$BLKDISCARDZEROES(0xffffffffffffffff, 0x127c, &(0x7f0000000000))
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xac}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x84, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x4}]}, 0x84}}, 0x0)

12.574047924s ago: executing program 2 (id=2649):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
recvmmsg(0xffffffffffffffff, &(0x7f0000004600)=[{{&(0x7f00000003c0)=@nfc_llcp, 0x80, &(0x7f0000000240)=[{0x0}, {&(0x7f0000001600)=""/151, 0x97}, {&(0x7f00000016c0)=""/214, 0xd6}], 0x3}, 0x2}, {{&(0x7f0000001ec0)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0x7ff}], 0x3, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TCSETSW2(r2, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff})
r3 = socket$inet6(0xa, 0x3, 0x7)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
prctl$PR_GET_FPEXC(0x45, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r7 = dup(r6)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000008000098000040"])
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0)
r8 = fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0)
close_range(r8, 0xffffffffffffffff, 0x0)

12.422588679s ago: executing program 3 (id=2650):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f0000000200)={0x74, 0x0, 0x10})
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
setfsuid(0xffffffffffffffff)
r5 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16=r7, @ANYBLOB="01032757c38d085641a7260000000c00018008"], 0x20}, 0x1, 0x0, 0x0, 0x24048055}, 0x0)
wait4(r5, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
mincore(&(0x7f00001b0000/0x3000)=nil, 0x3000, &(0x7f0000000480)=""/153)
syz_usb_connect(0x3, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0)

12.34206666s ago: executing program 0 (id=2651):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_linger(r2, 0x1, 0xd, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r5, 0x0, 0x20000023896)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x9}}, 0x20)
syz_clone(0x93f0b91, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = dup(r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c010000100013070000000000000000200100000000000000000000000000000000000000000000000000000000000000000000000000000a0000006c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d032000000ac141400000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000004000000000000000000000000000000ffffffffffffffff00000040000000000000000000000000000002000200000000000000000000000800000000000000000000000000000000000000010000000000000002000400000000004800020063686163686132302d61726d00000000000000000000000041ce19760000"], 0x13c}, 0x1, 0x0, 0x0, 0x20000011}, 0x0)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff038}, {0x2}, {0x6, 0x0, 0x0, 0x2}]}, 0x8)
sendmmsg(r7, &(0x7f0000001c00), 0x400000000000159, 0x40840)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r6, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4804)
sendfile(r6, r6, 0x0, 0xffffffff)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)

10.547198581s ago: executing program 1 (id=2652):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, 0x0, 0x0}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a00)=@generic={&(0x7f00000009c0)='./file0\x00', 0x0, 0x8}, 0x18)
connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
shutdown(r2, 0x0)
unshare(0x60000480)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r5, @ANYRES64=r0], 0x118)
r6 = socket(0x1000000000000010, 0x80802, 0x0)
sendmsg(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)="5500000018007fd500fe01b2a4a280930a46000000a843089100fe801100080008000c00085540002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x20000004)
ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x4)
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x30, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1000}, @NFULA_CFG_MODE={0xa, 0x2, {0x7ff, 0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4048aecb, &(0x7f0000000040))

10.546620841s ago: executing program 4 (id=2653):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x18)
connect$inet(r3, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0xa1a)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c)
r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r4, 0xc008551b, &(0x7f0000000000)=ANY=[@ANYBLOB="050076cb08ecffff7effffff0101c000"])
pipe(&(0x7f0000000040))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00', @ANYRES16, @ANYBLOB="310329bd7000ffffffff09000000", @ANYRES32=r6, @ANYBLOB="080006000209"], 0x24}}, 0x4000)
fanotify_init(0x200, 0x0)
keyctl$read(0xb, 0x0, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2)
unshare(0x68040200)
clock_gettime(0x0, &(0x7f0000000240)={<r7=>0x0, <r8=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0xe, 0x3, 0x5, 0x0, 0xd79, 0x9, 0x6, 0x7}, &(0x7f0000000100)={0xd7c, 0xf, 0x7fff, 0x2, 0x4, 0x1, 0x1000, 0x1ff}, 0x0, &(0x7f00000002c0)={r7, r8+10000000}, &(0x7f0000000340)={&(0x7f0000000300)={[0x10, 0x7]}, 0x8})

9.944063929s ago: executing program 0 (id=2654):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet6(0xa, 0x80002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0)
add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000104)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x8911, &(0x7f0000000140)={0xa, 0xfffc, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r5 = dup(r4)
shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffc000/0x4000)=nil)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
write$binfmt_aout(r5, 0x0, 0xffffffdb)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000040)=0x13e)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

9.883274707s ago: executing program 2 (id=2655):
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = syz_open_dev$video(&(0x7f0000000140), 0x1d24, 0x0)
r3 = syz_open_dev$media(&(0x7f0000000040), 0x5, 0x141800)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000100))
poll(0x0, 0x0, 0x9)
ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, 0x0)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0)
syz_open_procfs$pagemap(0x0, &(0x7f0000000240))
r4 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCGARP(r4, 0x89a3, &(0x7f0000000340)={{0x3a, 0x0, @private}, {0x0, @multicast}, 0x0, {0x2, 0x0, @remote}})
r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r6, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'macvlan0\x00', {0xfffffffd}, 0x7})

8.713218975s ago: executing program 4 (id=2656):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x18)
connect$inet(r3, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0xa1a)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c)
r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r4, 0xc008551b, &(0x7f0000000000)=ANY=[@ANYBLOB="050076cb08ecffff7effffff0101c000"])
pipe(&(0x7f0000000040))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16, @ANYBLOB="310329bd7000ffffffff09000000", @ANYRES32=r6, @ANYBLOB="080006000209"], 0x24}}, 0x4000)
fanotify_init(0x200, 0x0)
keyctl$read(0xb, 0x0, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2)
unshare(0x68040200)
clock_gettime(0x0, &(0x7f0000000240)={<r7=>0x0, <r8=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0xe, 0x3, 0x5, 0x0, 0xd79, 0x9, 0x6, 0x7}, &(0x7f0000000100)={0xd7c, 0xf, 0x7fff, 0x2, 0x4, 0x1, 0x1000, 0x1ff}, 0x0, &(0x7f00000002c0)={r7, r8+10000000}, &(0x7f0000000340)={&(0x7f0000000300)={[0x10, 0x7]}, 0x8})

8.330756841s ago: executing program 1 (id=2657):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x58, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_bridge\x00'}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040804}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)
r5 = syz_open_dev$radio(&(0x7f0000000280), 0x2, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x80, 0xfa000, 0x8})
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x86}}}, 0x48)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
pread64(0xffffffffffffffff, &(0x7f0000001c00)=""/4108, 0x100c, 0x3)
ioctl$BLKDISCARDZEROES(0xffffffffffffffff, 0x127c, &(0x7f0000000000))
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xac}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x80}}, 0x0)

8.020530693s ago: executing program 3 (id=2658):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macvlan1\x00', <r3=>0x0})
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14)
setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote, r3}, 0x14)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r5, &(0x7f0000000000)=[{0x9, 0x0, 0x0, 0x0, @tick=0x9, {0x2}, {}, @raw32={[0x400000]}}], 0x1c)
r6 = socket$rxrpc(0x21, 0x2, 0xa)
listen(r6, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, 0x0)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
write$sndseq(r7, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x9, 0x4}, {}, {}, @result}], 0x1c)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="19"], 0x48)
modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10)
modify_ldt$read(0x0, &(0x7f0000001100)=""/4130, 0x48)
socket(0x840000000002, 0x3, 0xff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
lremovexattr(0x0, &(0x7f0000000000)=@random={'trusted.', '}{\xac){@]\\\x00'})

6.402543512s ago: executing program 4 (id=2659):
socket$inet6_sctp(0xa, 0x801, 0x84)
r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0)
socket$inet(0x2, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="050025bd7000fbdbdf251c000000180001801400020069703667726574617030000000000000"], 0x2c}}, 0x40006)
r5 = memfd_create(&(0x7f0000000000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\x04\x00\x00\x00\x00\x00\x00\x00\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xb0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c<L\xaa\x87A\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xbf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\t\x9f\x96\rN\xc9\x90\xbe\xedZd\x14\xc9\x0f\x14v\xb6\x04\xf2U\xb4\xf6\xbe\xddT\xcb\x00\x00\x00\x00\x00\x00\xe9\x00\x00\x00\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe2\x0fT\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xf8\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc#\v\x00\x00\x00\x00\x00\x00\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&dw\xdf]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~\xa5\x0f\xbf\xd8l\x96`\x0f\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\x14\x16\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd75\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\xa2K\xa1\xb3\xce\x1e\x96{%\xa8\xc7\x93\xdb\x80v+o\xb8\xe8\x1b\x06\xfbwb\x11\xb7\x9fu\xf3\xd3\x7f\x04k\xa0B\xa5\xc9\xb1\xec\xb1\xf6\x11\xc1O\xecG\xe6q5\x97u\x0fl\x90\x9b\x9f\xaf\xfb\xdf\x12^\xc9\x92|\x11\"\xd7\xb5\xf0\xdc\\\f\xec\xfd\xa1\xfdVZ*\xeb\xde\x14\xe0\x8b\x1c\x820b\x89\xbd\xd7\x0e\x9b\xf2\xe9A\xfb\x89\xc6\x84\x14b\xd4\x7f\xdf.\x05\x00S\xf5\x19\xb4fE\x87\xd4E\xc8>\x8f\x05Bg\x15\xe1\x8c\x94ERT\xac\xb4\x00\x00\x00\x00\x00\x00\x00\xc4\x0f\xc1\x9e\xf6#f\x03\xb0\xe4\xb6\xf5\x04z+Pa\xbc\x12a7z\xad6\xf7\xeb\xa7\x88\"\xcf\xf6\xcfP\x12\a;h\x95\x90\x83\x06\xdf\xbd}.\xa6$2D\xf1T\xc9\x8aG\x12\xe51', 0x7)
fcntl$addseals(r5, 0x409, 0xe)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r5, 0x0)
ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x0, 0x5002)
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000300)={{@host, 0xd}, 0x1})
r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00')
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r7, 0xe03, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000810)
read$FUSE(r6, &(0x7f0000000240)={0x2020}, 0x2020)
epoll_wait(r6, &(0x7f0000002280)=[{}, {}, {}], 0x3, 0x8)
pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x100008)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cbba25083b0904a10100010203010902120001000020000904"], 0x0)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102000000083a09028040000102030109022400010102b7cd0813f8830587010209092108000501226709090581032000030901"], &(0x7f0000000480)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x200, 0xf, 0x34, 0xa, 0x10, 0x6}, 0x23, &(0x7f0000002500)={0x5, 0xf, 0x23, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "3f3626df5d0a3881524eeb39c22d3e9d"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x7, 0x2, 0x62a5}]}, 0x5, [{0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x42d}}, {0xea, &(0x7f0000002340)=ANY=[@ANYBLOB="ea039dbd9c0a62b5010467824b22b5168e723dd99c20c11c5ced1a3dca4bd06dce7b8c626276570cb0bdb57a2206d1b803bdd94064f297c263703f748916d2c68894a1ce2ef3e2fc700e9bd21434af8645d39b36bb313155a3b7e8399b6af4bfa01d292baf6f10cd11db329c5b16d5dae18357f39422347e91b4c14716758b938fba23e32c68a6780cd95210cc0d000cade32d1fa8451c1a0f14be9ef7b20063cb8beb65895908cf122530e46cfc4ac72706155b47af70b98198933d2cce324b5d488955bcb00e161ed40529a4c679f931d4245f80f2ede254000000000000"]}, {0x34, &(0x7f00000022c0)=ANY=[@ANYBLOB="3403eb2b468f93d820184eaa4cc5b7925501962fb28a3eeea424c69316a40664151d3632f93c72fd04806ec6c4f16cdb7635d228c176f0faec3541ceec8f2102193dc563f1ecd591af4f9619c157c382b86ba873b8782735321cad8a2c74f0396d6b28bbf64267b59969ae77435a35ab93af64aaaf7d90e327372720f5"]}]})

6.397018219s ago: executing program 2 (id=2660):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000300)={0xb, @sdr={0x34565559, 0x2}})
bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0)
poll(&(0x7f0000000100), 0x0, 0x8)
r4 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto(r5, &(0x7f0000000100)="51bf7336f6cdf0ca6c13c866d6bc7b55f2d501845841bb2c078a988b7eb38f11a326083cf884920013fbae4a3a5d9c8ea7ea86669fb6212da0b5c82136d9519daeb17c9f96ad78cccef50ab4eabcafbc1a18735359cd7329816984d180735476f901401079349dfbe2e614f51a07c00544d90a594972ba60e1b497f88dcdc1e45dd28c0678d803638e7bd70a8638136e52c5e932c4111d3c917fb22583198b00707e3a2e001260cbc206759c245451686164eff751e4df8995", 0xb9, 0x20000000, &(0x7f0000000280)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80)
bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f0000000000))
sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1a000}}, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x80000000, 0x0, 0x0, 0xb71}, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001a000010000000001c140000fd02000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xc080)
copy_file_range(r5, 0x0, r0, &(0x7f0000000400), 0xbbe, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_SET_REGS(r7, 0x4090ae82, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

6.311989693s ago: executing program 3 (id=2661):
r0 = userfaultfd(0x801)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
close(0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$dsp1(0xffffffffffffff9c, 0x0, 0x361082, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x810, r0, 0x57c68000)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\n\x83\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\xed\x8eS\xaeX\x93\x7f\xd3\xb9\x84Q\x9c\"\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x8c\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x90\x1f\x94\x01M.\x16\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\xabJ^c\xf7\x19\xb4\xd8\xe4\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1\x00\x10\x00\x00\x00\x00\x00\x00\x82\x13\xb2\xa9\xef\xa5\xf8\x8bk\xb3\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)\x1b\xe2\xd6\b\x94b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|$k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf8\xa4O\xb4\xef\xc8\xccH\xd1=\xbe\xbex\xb5-\x05\x01\x11\xfa\xcf\x1dm\xb5X\xe9\xb5O\x15\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xf7\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\xc6C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17\xe6\xcauM\xe3\x05)\xe2\x03\xe2j$F1n@\xde\n9t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5\xa4\x05#\x7f\xa8\x01\x00\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebh\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x85\x1b8OE\x04\x9a\xd8\x80\x10x\xbf\n0\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\xba\x8b\x14\x9a?\x8e\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96{\xc0e\xa1\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!)\xf4\x9b\x1dI\x9ex;\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\xe6k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xecZ`\xa4\xa0(\xf9\x98B\xaf\xde*\x91\xddk\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\x00C\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x14\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcaQ\xdf\x87\xbdjp\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd0k\\\x92\x19a6Sv\x05%{\xe2\xe9\xf1\xddRB$8\xb0q9\xa1g&\x17\xe5P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\x1b\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dti\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x90\xaf1\x86b\x81J\xb7E\xb0\xe2\xd6\x93S\xb3\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O<g\x06~\x12W\x86\x06\xba\x15#\xa7Q\xffa\x926>\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe)
ftruncate(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @random="10200500c54d", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "b3e480a7613088fd71106c027deb3b11"}]}}}}}}}, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000140)={0x4, {0x1, 0x1, 0x9, 0x4, 0x8, 0x52}})
shutdown(r4, 0x1)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
r6 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b///o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5309, 0x0)

5.873621405s ago: executing program 0 (id=2662):
r0 = userfaultfd(0x801)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close(0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$dsp1(0xffffffffffffff9c, 0x0, 0x361082, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x810, r0, 0x57c68000)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\n\x83\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\xed\x8eS\xaeX\x93\x7f\xd3\xb9\x84Q\x9c\"\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x8c\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x90\x1f\x94\x01M.\x16\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\xabJ^c\xf7\x19\xb4\xd8\xe4\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1\x00\x10\x00\x00\x00\x00\x00\x00\x82\x13\xb2\xa9\xef\xa5\xf8\x8bk\xb3\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)\x1b\xe2\xd6\b\x94b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|$k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf8\xa4O\xb4\xef\xc8\xccH\xd1=\xbe\xbex\xb5-\x05\x01\x11\xfa\xcf\x1dm\xb5X\xe9\xb5O\x15\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xf7\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\xc6C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17\xe6\xcauM\xe3\x05)\xe2\x03\xe2j$F1n@\xde\n9t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5\xa4\x05#\x7f\xa8\x01\x00\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebh\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x85\x1b8OE\x04\x9a\xd8\x80\x10x\xbf\n0\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\xba\x8b\x14\x9a?\x8e\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96{\xc0e\xa1\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!)\xf4\x9b\x1dI\x9ex;\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\xe6k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xecZ`\xa4\xa0(\xf9\x98B\xaf\xde*\x91\xddk\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\x00C\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x14\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcaQ\xdf\x87\xbdjp\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd0k\\\x92\x19a6Sv\x05%{\xe2\xe9\xf1\xddRB$8\xb0q9\xa1g&\x17\xe5P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\x1b\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dti\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x90\xaf1\x86b\x81J\xb7E\xb0\xe2\xd6\x93S\xb3\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O<g\x06~\x12W\x86\x06\xba\x15#\xa7Q\xffa\x926>\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe)
ftruncate(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @random="10200500c54d", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "b3e480a7613088fd71106c027deb3b11"}]}}}}}}}, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000140)={0x4, {0x1, 0x1, 0x9, 0x4, 0x8, 0x52}})
shutdown(r4, 0x1)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
r6 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b///o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5309, 0x0)

5.699209623s ago: executing program 1 (id=2663):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x58, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_bridge\x00'}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040804}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)
r5 = syz_open_dev$radio(&(0x7f0000000280), 0x2, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x80, 0xfa000, 0x8})
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x86}}}, 0x48)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
pread64(0xffffffffffffffff, &(0x7f0000001c00)=""/4108, 0x100c, 0x3)
ioctl$BLKDISCARDZEROES(0xffffffffffffffff, 0x127c, &(0x7f0000000000))
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xac}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x50}}, 0x0)

3.264756762s ago: executing program 4 (id=2664):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r3, &(0x7f0000004100)={0x2020}, 0x2020)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r7=>0x0})
socket(0x400000000010, 0x3, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
read$FUSE(r8, &(0x7f0000002640)={0x2020}, 0x2020)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r7, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@remote, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

3.263299904s ago: executing program 1 (id=2674):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500)
socket$nl_netfilter(0x10, 0x3, 0xc)
lsm_set_self_attr(0x65, 0x0, 0x20, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000140)={'icmp\x00'}, &(0x7f0000000240)=0x1e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0)
syz_open_dev$usbfs(0x0, 0x76, 0x101301)
r2 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea})
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2)
close_range(r2, 0xffffffffffffffff, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101)
r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
ioctl$SOUND_MIXER_READ_DEVMASK(r7, 0x80044dfe, &(0x7f00000000c0))
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

3.253131741s ago: executing program 2 (id=2665):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
recvmmsg(0xffffffffffffffff, &(0x7f0000004600)=[{{&(0x7f00000003c0)=@nfc_llcp, 0x80, &(0x7f0000000240)=[{0x0}, {&(0x7f0000001600)=""/151, 0x97}, {&(0x7f00000016c0)=""/214, 0xd6}], 0x3}, 0x2}, {{&(0x7f0000001ec0)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0x7ff}], 0x3, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TCSETSW2(r2, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff})
r3 = socket$inet6(0xa, 0x3, 0x7)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
prctl$PR_GET_FPEXC(0x45, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r7 = dup(r6)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000008000098000040"])
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0)
r8 = fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0)
close_range(r8, 0xffffffffffffffff, 0x0)

3.152484116s ago: executing program 3 (id=2666):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0xa, 0x3, 0x3a)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000000), 0x4)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000340)={'pim6reg\x00', 0x2})
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc)
syz_emit_ethernet(0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0), 0xa00, 0x0)
r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x10000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x4004804)
ioctl$BLKTRACESTART(r5, 0x1274, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000740)={'#! ', './file0', [], 0xa, "feb8283e0671202ee85e438a7870d7cd6f1026a6ad3e8b8d19d597434180c37464df070ebc3e2b9c8f1de4167699ad595f591fa29c520c7279a189099ec925d4ecf1a0d26292f3c91f321a0668c903bcc73bab77cc96ba79e0647bf3184095f5331bc4e1c0d520710248ec6c5c7cbbadab58857c6aa7ad18ce2ea76c2cfda88054687a182417ea0dd2e40d44bf17fd04ee887b0603f17f8829c07cd3299e12a609e352117d6e1a513ab3434672d1b7559a4c6ade4a31059d596c7c1d4a6f1a87f2fb58665f4e8490dbbb1978500f3a4459ce54bb35436fc76ddcc074dd9a964980a25877ff0a5041d8ecfcb8f64451818ea56f4dd65841cfeab941d727fc289f98e8c98b27840230972e02f1d33883c428fdb64a66cb542edb35d2605cf795e331fda92f3fc0076f20ec8274ab85c89b34b7"}, 0x13d)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"})
r8 = epoll_create(0x8)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, 0x0)

1.919191629s ago: executing program 0 (id=2667):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$sock_int(r2, 0x1, 0x10, 0x0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='sessionid\x00')
r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2)
ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f00000007c0)={0x0, 0x0, '\x00', @raw_data=[0x800b, 0x10, 0x6, 0x1, 0xffff, 0xebf, 0xfffff001, 0x7, 0xd7a, 0x3, 0xfff, 0x80, 0xffff207c, 0x7, 0xc, 0xee9, 0x2, 0x30, 0x5, 0x5, 0x3, 0x6, 0x3479, 0x4, 0x9, 0x3, 0xf, 0x4, 0xffff, 0x3, 0x100, 0x400]})
write$6lowpan_control(r4, &(0x7f0000000080)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000200)='cmdline\x00')
preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000500)=""/146, 0x92}, {0x0}], 0x3a, 0xdffff62d, 0x0)
socket$kcm(0x2d, 0x2, 0x0)
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r10=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[<r11=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r8, 0xc03064b7, &(0x7f00000001c0)={r10, 0x0, r11, 0x8000, 0x20, 0x10001, 0x1, 0x8001, 0x2, 0xff, 0x2, 0x6})
epoll_create(0x4)
ioctl$VHOST_SET_VRING_CALL(r7, 0x4008af21, &(0x7f0000000040))
close_range(r1, 0xffffffffffffffff, 0x0)

1.341902779s ago: executing program 4 (id=2668):
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r3 = openat$uhid(0xffffff9c, &(0x7f0000000100), 0x802, 0x0)
r4 = dup2(r3, r2)
read$FUSE(r4, &(0x7f0000004d80)={0x2020}, 0x2020)
ptrace(0x10, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x4000040)
socket(0xb, 0x3, 0x0)
inotify_init1(0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r7=>0x0})
close(r6)
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7fffffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x6}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000)
syz_clone3(&(0x7f0000000380)={0x80, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03"], 0x34}}, 0x0)

276.826717ms ago: executing program 1 (id=2669):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0xc, 0x8, 0x4, 0x3}, 0x0)
r2 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0)
r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
lseek(r3, 0xffffffffffffffff, 0x1)
fsmount(r3, 0x1, 0xfc)
fsopen(&(0x7f00000003c0)='nilfs2\x00', 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x403, 0x0)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0xff}, 0x48)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xf, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2})
ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0x2c0)
ioctl$UI_DEV_CREATE(r4, 0x5501)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB])
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x4, 0x0, 'queue0\x00'})
ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc01c7c02, &(0x7f0000000300)={0x80000000, &(0x7f0000000040), &(0x7f0000000280)=[{}, {{}, {<r6=>0x80000000}}]})
ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000100)={r6, 0x0, &(0x7f0000000200)})
r7 = add_key$user(&(0x7f0000000200), 0x0, &(0x7f0000000340), 0x0, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={0x0, r7, r7}, 0x0, 0x0, 0x0)
keyctl$read(0xb, r7, 0x0, 0x0)

0s ago: executing program 3 (id=2670):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x18)
connect$inet(r3, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0xa1a)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c)
r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r4, 0xc008551b, &(0x7f0000000000)=ANY=[@ANYBLOB="050076cb08ecffff7effffff0101c000"])
pipe(&(0x7f0000000040))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16, @ANYBLOB="310329bd7000ffffffff09000000", @ANYRES32=r6, @ANYBLOB="080006000209"], 0x24}}, 0x4000)
fanotify_init(0x200, 0x0)
keyctl$read(0xb, 0x0, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2)
unshare(0x68040200)
clock_gettime(0x0, &(0x7f0000000240)={<r7=>0x0, <r8=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0xe, 0x3, 0x5, 0x0, 0xd79, 0x9, 0x6, 0x7}, &(0x7f0000000100)={0xd7c, 0xf, 0x7fff, 0x2, 0x4, 0x1, 0x1000, 0x1ff}, 0x0, &(0x7f00000002c0)={r7, r8+10000000}, &(0x7f0000000340)={&(0x7f0000000300)={[0x10, 0x7]}, 0x8})

kernel console output (not intermixed with test programs):

 new low-speed USB device number 2 using vhci_hcd
[ 1049.586319][T15002] vhci_hcd: connection reset by peer
[ 1049.593324][   T70] vhci_hcd: stop threads
[ 1049.599515][   T70] vhci_hcd: release socket
[ 1049.609728][   T70] vhci_hcd: disconnect device
[ 1050.886544][   T30] kauditd_printk_skb: 20 callbacks suppressed
[ 1050.886564][   T30] audit: type=1326 audit(1763325356.646:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15016 comm="syz.4.1725" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 1050.974556][   T30] audit: type=1326 audit(1763325356.646:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15016 comm="syz.4.1725" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 1051.038830][   T30] audit: type=1326 audit(1763325356.676:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15016 comm="syz.4.1725" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 1051.284690][   T30] audit: type=1326 audit(1763325356.676:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15016 comm="syz.4.1725" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 1051.306775][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1051.351279][T15032] netlink: 'syz.1.1727': attribute type 10 has an invalid length.
[ 1051.558366][   T30] audit: type=1326 audit(1763325356.676:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15016 comm="syz.4.1725" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 1053.641772][   T30] audit: type=1326 audit(1763325356.676:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15016 comm="syz.4.1725" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 1053.851777][   T30] audit: type=1326 audit(1763325356.676:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15016 comm="syz.4.1725" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 1053.943891][   T30] audit: type=1326 audit(1763325356.676:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15016 comm="syz.4.1725" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 1054.173592][   T30] audit: type=1326 audit(1763325356.686:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15016 comm="syz.4.1725" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 1054.250097][   T30] audit: type=1326 audit(1763325356.686:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15016 comm="syz.4.1725" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 1054.394874][T15040] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[ 1054.459472][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.465989][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.525100][ T5912] vhci_hcd: vhci_device speed not set
[ 1055.092598][T15048] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1729'.
[ 1055.606946][T15053] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1055.803607][T15053] vim2m vim2m.0: vidioc_s_fmt queue busy
[ 1058.218985][T15085] netlink: 'syz.0.1738': attribute type 10 has an invalid length.
[ 1064.574242][T15146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1749'.
[ 1064.752439][T15149] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1750'.
[ 1065.064012][T15154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1751'.
[ 1067.122860][T15164] netlink: 'syz.4.1753': attribute type 10 has an invalid length.
[ 1067.705040][T15177] syzkaller0: entered promiscuous mode
[ 1067.710599][T15177] syzkaller0: entered allmulticast mode
[ 1070.312541][T15193] binder: 15186:15193 ioctl c018620c 80000100 returned -1
[ 1070.700781][T15197] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6
[ 1071.280129][T15202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1760'.
[ 1071.411891][T15203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1761'.
[ 1073.393205][T15218] netlink: 'syz.3.1764': attribute type 10 has an invalid length.
[ 1074.447886][T15231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1767'.
[ 1076.871342][ T5912] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[ 1077.054371][ T5912] usb 3-1: Using ep0 maxpacket: 16
[ 1077.070112][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10
[ 1077.099212][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32770, setting to 1024
[ 1077.128162][ T5912] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00
[ 1077.184481][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1077.299508][ T5912] usb 3-1: config 0 descriptor??
[ 1077.713511][ T5912] bigben 0003:146B:0902.0014: unexpected rdesc, please submit for review
[ 1077.727852][ T5912] bigben 0003:146B:0902.0014: unknown main item tag 0x0
[ 1077.744596][ T5912] bigben 0003:146B:0902.0014: unknown main item tag 0x0
[ 1077.753231][ T5912] bigben 0003:146B:0902.0014: unknown main item tag 0x0
[ 1077.992731][T15266] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1078.018561][T15266] openvswitch: netlink: IP tunnel dst address not specified
[ 1078.063827][ T5912] bigben 0003:146B:0902.0014: unknown main item tag 0x0
[ 1078.078063][ T5912] bigben 0003:146B:0902.0014: item fetching failed at offset 4/5
[ 1078.129871][T15265] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1773'.
[ 1078.280666][ T5912] bigben 0003:146B:0902.0014: parse failed
[ 1078.340210][ T5912] bigben 0003:146B:0902.0014: probe with driver bigben failed with error -22
[ 1078.367340][ T5912] usb 3-1: USB disconnect, device number 39
[ 1078.444374][T10406] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[ 1079.050568][T10406] usb 4-1: Using ep0 maxpacket: 8
[ 1079.061266][T10406] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[ 1079.084557][T10406] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1080.022512][T10406] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1080.064136][T10406] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1080.084736][T10406] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1080.137171][T10406] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1080.330307][T10406] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1080.615110][T10406] usb 4-1: GET_CAPABILITIES returned 0
[ 1080.624077][T10406] usbtmc 4-1:16.0: can't read capabilities
[ 1081.297452][T15265] usbtmc 4-1:16.0: usb_control_msg returned -71
[ 1081.299034][ T5912] usb 4-1: USB disconnect, device number 33
[ 1083.751408][T15318] hub 9-0:1.0: USB hub found
[ 1083.764517][T15318] hub 9-0:1.0: 1 port detected
[ 1086.985002][T15357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1790'.
[ 1091.659668][T15408] input: syz0 as /devices/virtual/input/input58
[ 1096.085702][T15455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1808'.
[ 1098.114397][T10406] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[ 1098.284410][T10406] usb 3-1: Using ep0 maxpacket: 8
[ 1098.329397][T10406] usb 3-1: config 0 has no interfaces?
[ 1098.398750][T10406] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee
[ 1098.408689][T10406] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1098.417406][T10406] usb 3-1: Product: syz
[ 1098.421715][T10406] usb 3-1: Manufacturer: syz
[ 1098.431397][T10406] usb 3-1: SerialNumber: syz
[ 1098.450029][T10406] usb 3-1: config 0 descriptor??
[ 1100.324749][ T5912] usb 3-1: USB disconnect, device number 40
[ 1101.160835][T15488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1811'.
[ 1101.379461][T15473] usb usb8: usbfs: process 15473 (syz.3.1811) did not claim interface 0 before use
[ 1106.798558][T15549] syzkaller0: entered promiscuous mode
[ 1106.809429][T15549] syzkaller0: entered allmulticast mode
[ 1108.477800][T15584] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1833'.
[ 1108.515939][T15585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1834'.
[ 1112.729168][T15467] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[ 1113.023691][T15467] usb 3-1: Using ep0 maxpacket: 8
[ 1113.293565][T15467] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11
[ 1113.415117][T15467] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16
[ 1113.425442][T15467] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32
[ 1114.174376][ T5912] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[ 1114.557289][ T5912] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 10601, setting to 1024
[ 1114.860048][ T5912] usb 2-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 1024
[ 1115.123802][ T5912] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1115.398451][ T5912] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1115.432850][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1115.548776][ T5912] usb 2-1: Product: syz
[ 1115.644496][ T5912] usb 2-1: Manufacturer: syz
[ 1115.664551][ T5912] usb 2-1: SerialNumber: syz
[ 1115.729543][T15467] usb 3-1: string descriptor 0 read error: -71
[ 1115.746169][T15467] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1115.784339][T15467] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1115.854948][ T5912] usb 2-1: config 0 descriptor??
[ 1115.855183][T15467] usb 3-1: can't set config #1, error -71
[ 1115.900835][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.907347][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1115.928779][T15467] usb 3-1: USB disconnect, device number 41
[ 1116.746134][T15650] netlink: 'syz.0.1845': attribute type 10 has an invalid length.
[ 1116.767331][T15650] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1845'.
[ 1116.814503][T15650] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1117.061540][ T5912] usb 2-1: can't set config #0, error -71
[ 1117.093970][ T5912] usb 2-1: USB disconnect, device number 44
[ 1117.844419][ T5912] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[ 1118.064380][ T5912] usb 2-1: Using ep0 maxpacket: 16
[ 1118.085274][ T5912] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[ 1118.117400][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1118.125950][ T5912] usb 2-1: Product: syz
[ 1118.130419][ T5912] usb 2-1: Manufacturer: syz
[ 1118.136417][ T5912] usb 2-1: SerialNumber: syz
[ 1118.148165][ T5912] usb 2-1: config 0 descriptor??
[ 1118.178204][ T5912] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[ 1118.503842][ T5912] ssu100 2-1:0.0: probe with driver ssu100 failed with error -110
[ 1118.553367][T15668] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1852'.
[ 1121.010970][T15680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1854'.
[ 1121.044793][T15682] openvswitch: netlink: Message has 1 unknown bytes.
[ 1121.051980][T15682] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1121.236080][T15467] usb 2-1: USB disconnect, device number 45
[ 1121.596914][T15690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1856'.
[ 1124.205244][T10406] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[ 1124.387694][T10406] usb 4-1: Using ep0 maxpacket: 8
[ 1124.558506][T10406] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1124.655693][T10406] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[ 1124.666843][T10406] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1124.841063][T10406] usb 4-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[ 1124.891084][T10406] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1125.003446][T10406] usb 4-1: Product: syz
[ 1125.010765][T10406] usb 4-1: Manufacturer: syz
[ 1125.022042][T10406] usb 4-1: SerialNumber: syz
[ 1125.170234][T10406] usb 4-1: config 0 descriptor??
[ 1125.351415][T10406] radioshark 4-1:0.0: Invalid radioSHARK device
[ 1125.358256][T10406] radioshark 4-1:0.0: probe with driver radioshark failed with error -22
[ 1125.367131][T10406] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1125.491469][ T5912] usb 4-1: USB disconnect, device number 34
[ 1129.634779][T15762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1872'.
[ 1130.949512][T15773] input: syz0 as /devices/virtual/input/input64
[ 1137.531340][T15843] openvswitch: netlink: Message has 1 unknown bytes.
[ 1137.539086][T15843] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1137.827854][T15847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1888'.
[ 1144.566659][T15920] openvswitch: netlink: Message has 1 unknown bytes.
[ 1144.574361][T15920] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1144.667617][T15923] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1903'.
[ 1145.929143][T15932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1904'.
[ 1150.688346][T15978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1912'.
[ 1152.100353][T15994] pim6reg0: tun_chr_ioctl cmd 1074812118
[ 1154.373478][T16013] program syz.0.1920 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1155.077394][T16017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1921'.
[ 1159.044972][T16056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1926'.
[ 1163.544916][T10406] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[ 1163.907633][T10406] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 10601, setting to 1024
[ 1163.990625][T10406] usb 4-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 1024
[ 1164.069723][T10406] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1164.343354][T10406] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1164.353529][T10406] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1164.362661][T10406] usb 4-1: Product: syz
[ 1164.368574][T10406] usb 4-1: Manufacturer: syz
[ 1164.518034][T10406] usb 4-1: SerialNumber: syz
[ 1164.645049][T10406] usb 4-1: config 0 descriptor??
[ 1164.701698][T16098] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1164.777023][T10406] usb 4-1: selecting invalid altsetting 0
[ 1165.600146][T16122] netlink: 'syz.1.1939': attribute type 1 has an invalid length.
[ 1166.256069][T16095] snd-usb-audio 4-1:0.0: Runtime PM usage count underflow!
[ 1166.285088][T10406] usb 4-1: USB disconnect, device number 35
[ 1168.196273][T16139] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1942'.
[ 1168.676743][T16139] libceph: resolve '0..' (ret=-3): failed
[ 1169.173443][T16154] hub 9-0:1.0: USB hub found
[ 1169.178637][T16154] hub 9-0:1.0: 1 port detected
[ 1171.248725][T16175] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[ 1173.959276][   T30] kauditd_printk_skb: 40 callbacks suppressed
[ 1173.959299][   T30] audit: type=1326 audit(1763325479.706:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16176 comm="syz.0.1951" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000
[ 1174.284348][   T30] audit: type=1326 audit(1763325479.706:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16176 comm="syz.0.1951" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000
[ 1176.587151][T16223] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1959'.
[ 1176.853392][T16223] libceph: resolve '0..' (ret=-3): failed
[ 1177.338849][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.345802][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.750960][T16230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1960'.
[ 1179.745299][T16253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1965'.
[ 1181.374961][T16264] openvswitch: netlink: Message has 1 unknown bytes.
[ 1181.381899][T16264] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1184.354556][T16299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1973'.
[ 1184.792882][   T30] audit: type=1326 audit(1763325490.446:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16292 comm="syz.2.1974" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000
[ 1185.055723][   T30] audit: type=1326 audit(1763325490.446:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16292 comm="syz.2.1974" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000
[ 1185.438780][T16308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1975'.
[ 1187.311156][T16327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1979'.
[ 1188.459600][T16334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1980'.
[ 1189.612225][T16345] netlink: 'syz.4.1982': attribute type 10 has an invalid length.
[ 1189.642796][T16345] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1982'.
[ 1189.714471][T16345] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1191.981426][T16365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1987'.
[ 1192.806260][   T30] audit: type=1326 audit(1763325498.426:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16358 comm="syz.4.1985" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 1192.960172][   T30] audit: type=1326 audit(1763325498.426:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16358 comm="syz.4.1985" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 1193.065769][T16376] tipc: Started in network mode
[ 1193.070999][T16376] tipc: Node identity 3a2343b9e2b9, cluster identity 4711
[ 1193.306126][T16377] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1989'.
[ 1193.342121][   T30] audit: type=1326 audit(1763325498.426:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16358 comm="syz.4.1985" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 1193.364905][T16376] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1193.698426][   T30] audit: type=1326 audit(1763325498.426:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16358 comm="syz.4.1985" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 1193.880776][   T30] audit: type=1326 audit(1763325498.426:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16358 comm="syz.4.1985" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 1194.085120][   T30] audit: type=1326 audit(1763325498.426:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16358 comm="syz.4.1985" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 1194.240186][   T30] audit: type=1326 audit(1763325498.426:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16358 comm="syz.4.1985" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 1194.339266][   T30] audit: type=1326 audit(1763325498.426:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16358 comm="syz.4.1985" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 1194.364427][T15254] tipc: Node number set to 3633988537
[ 1194.524371][T16387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1990'.
[ 1194.641767][   T30] audit: type=1326 audit(1763325498.436:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16358 comm="syz.4.1985" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 1194.666026][   T30] audit: type=1326 audit(1763325498.436:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16358 comm="syz.4.1985" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 1194.705096][T16389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1992'.
[ 1196.719697][T16413] block device autoloading is deprecated and will be removed.
[ 1197.965379][T16422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1997'.
[ 1198.757870][T16431] delete_channel: no stack
[ 1200.559809][T16442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2001'.
[ 1202.770899][T16465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2005'.
[ 1203.816979][   T30] kauditd_printk_skb: 32 callbacks suppressed
[ 1203.817003][   T30] audit: type=1326 audit(1763325509.356:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16471 comm="syz.2.2007" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000
[ 1203.915858][   T30] audit: type=1326 audit(1763325509.356:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16471 comm="syz.2.2007" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000
[ 1204.442747][   T30] audit: type=1326 audit(1763325509.356:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16471 comm="syz.2.2007" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7fd3539 code=0x7ffc0000
[ 1204.464785][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1204.584449][   T30] audit: type=1326 audit(1763325509.356:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16471 comm="syz.2.2007" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000
[ 1204.664333][   T30] audit: type=1326 audit(1763325509.356:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16471 comm="syz.2.2007" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000
[ 1204.744602][   T30] audit: type=1326 audit(1763325509.356:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16471 comm="syz.2.2007" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fd3539 code=0x7ffc0000
[ 1204.794575][   T30] audit: type=1326 audit(1763325509.356:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16471 comm="syz.2.2007" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000
[ 1204.816838][   T30] audit: type=1326 audit(1763325509.356:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16471 comm="syz.2.2007" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fd3539 code=0x7ffc0000
[ 1204.839376][   T30] audit: type=1326 audit(1763325509.356:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16471 comm="syz.2.2007" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000
[ 1204.944362][   T30] audit: type=1326 audit(1763325509.356:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16471 comm="syz.2.2007" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000
[ 1205.340281][T16489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2010'.
[ 1208.654776][T16518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2015'.
[ 1209.439667][T16528] binder: 16520:16528 ioctl c018620c 80000380 returned -22
[ 1211.348103][T16544] netlink: 'syz.4.2020': attribute type 1 has an invalid length.
[ 1212.336588][T16548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2021'.
[ 1213.092892][T16565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2025'.
[ 1215.194347][T16568] tipc: Resetting bearer <eth:syzkaller0>
[ 1215.911526][T16591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2029'.
[ 1216.982690][T16597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2030'.
[ 1218.353473][T16609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2033'.
[ 1218.743056][T16616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2034'.
[ 1220.104562][T16073] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[ 1220.305897][T16634] fuse: Bad value for 'fd'
[ 1220.492094][T16073] usb 2-1: Using ep0 maxpacket: 16
[ 1223.510153][T16073] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1223.695329][T16073] usb 2-1: unable to read config index 0 descriptor/start: -71
[ 1223.707725][T16073] usb 2-1: can't read configurations, error -71
[ 1223.727791][T16661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2041'.
[ 1223.832662][T16661] hub 9-0:1.0: USB hub found
[ 1223.840058][T16661] hub 9-0:1.0: 1 port detected
[ 1225.337411][T16670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2044'.
[ 1226.442809][T16679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2046'.
[ 1227.946283][T16699] syz.0.2050 (16699): drop_caches: 2
[ 1228.038658][T16699] syz.0.2050 (16699): drop_caches: 2
[ 1230.987706][   T30] kauditd_printk_skb: 23 callbacks suppressed
[ 1230.987726][   T30] audit: type=1326 audit(1763325536.676:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16728 comm="syz.4.2055" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 1231.185983][   T30] audit: type=1326 audit(1763325536.676:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16728 comm="syz.4.2055" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 1231.654514][   T30] audit: type=1326 audit(1763325536.686:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16728 comm="syz.4.2055" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 1231.994692][   T30] audit: type=1326 audit(1763325536.686:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16728 comm="syz.4.2055" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 1232.035967][   T30] audit: type=1326 audit(1763325536.696:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16728 comm="syz.4.2055" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 1232.061701][   T30] audit: type=1326 audit(1763325536.696:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16728 comm="syz.4.2055" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 1232.211248][   T30] audit: type=1326 audit(1763325536.696:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16728 comm="syz.4.2055" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 1232.509363][   T30] audit: type=1326 audit(1763325536.696:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16728 comm="syz.4.2055" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 1232.574300][   T30] audit: type=1326 audit(1763325536.726:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16728 comm="syz.4.2055" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 1232.814380][   T30] audit: type=1326 audit(1763325536.726:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16728 comm="syz.4.2055" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 1232.994388][T16753] fuse: Unknown parameter 'fsmagic'
[ 1234.328943][T16763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2060'.
[ 1235.166300][T16769] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[ 1236.579259][T16788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2063'.
[ 1237.701045][T16792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2066'.
[ 1238.855139][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.861451][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1239.263849][T16812] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2068'.
[ 1242.771785][T16843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2076'.
[ 1244.100250][T16858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2081'.
[ 1244.523900][T16860] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[ 1244.531694][T16860] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1247.037887][T16885] netlink: 'syz.0.2086': attribute type 3 has an invalid length.
[ 1247.389670][T16881] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 1247.849792][T16895] netlink: 'syz.1.2088': attribute type 1 has an invalid length.
[ 1247.888045][T16895] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2088'.
[ 1252.397859][T16936] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2095'.
[ 1253.077127][T16945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2097'.
[ 1257.849288][T16985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2104'.
[ 1258.244525][T16074] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[ 1258.420812][T16074] usb 3-1: Using ep0 maxpacket: 8
[ 1258.433124][T16074] usb 3-1: config 6 has an invalid interface number: 2 but max is 0
[ 1258.443828][T16074] usb 3-1: config 6 has no interface number 0
[ 1258.457762][T16074] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[ 1258.482881][T16074] usb 3-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1258.513158][T16074] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1258.559935][T16074] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1258.680274][T16074] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[ 1258.699918][T16074] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1258.937693][T16074] usb 3-1: Product: syz
[ 1259.047851][T16074] usb 3-1: Manufacturer: syz
[ 1259.054503][T16074] usb 3-1: SerialNumber: syz
[ 1259.169857][T16074] hso 3-1:6.2: Failed to find BULK IN ep
[ 1260.279004][T17010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2110'.
[ 1261.371008][T16074] usb 3-1: USB disconnect, device number 42
[ 1262.712107][T16066] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[ 1262.884501][T16066] usb 2-1: Using ep0 maxpacket: 16
[ 1262.911693][T16066] usb 2-1: config 0 has an invalid interface number: 255 but max is 0
[ 1263.513385][T16066] usb 2-1: config 0 has no interface number 0
[ 1263.546275][T16066] usb 2-1: config 0 interface 255 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[ 1263.635006][T16066] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid maxpacket 4672, setting to 1024
[ 1263.653889][T16066] usb 2-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[ 1263.668861][T16066] usb 2-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=bb.ee
[ 1263.681782][T16066] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1263.695128][T16066] usb 2-1: Product: syz
[ 1263.703803][T16066] usb 2-1: Manufacturer: syz
[ 1263.713042][T16066] usb 2-1: SerialNumber: syz
[ 1263.733583][T16066] usb 2-1: config 0 descriptor??
[ 1263.742092][T17019] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1263.984770][T17019] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1264.810337][T17019] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1264.817974][T17019] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1264.952317][T17043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2116'.
[ 1266.773228][T16066] asix 2-1:0.255 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[ 1266.822949][T16066] asix 2-1:0.255: probe with driver asix failed with error -71
[ 1266.944572][T16066] usb 2-1: USB disconnect, device number 48
[ 1267.314915][T17063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2120'.
[ 1267.328081][T17063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2120'.
[ 1267.889748][T17069] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1269.884137][T17094] random: crng reseeded on system resumption
[ 1270.253942][T17075] ALSA: mixer_oss: invalid OSS volume ''
[ 1272.201408][T17101] fuse: Bad value for 'fd'
[ 1276.190727][T17144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2136'.
[ 1276.737831][T17154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2137'.
[ 1276.737869][T17154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2137'.
[ 1278.844998][T17175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2142'.
[ 1281.894467][T17207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2146'.
[ 1282.172224][T17212] fuse: Unknown parameter 'fsmagic'
[ 1282.282793][T17214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2148'.
[ 1284.056966][T17228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2150'.
[ 1284.725392][T17234] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2152'.
[ 1285.332946][   T30] kauditd_printk_skb: 24 callbacks suppressed
[ 1285.332967][   T30] audit: type=1326 audit(1763325591.076:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17235 comm="syz.3.2153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000
[ 1285.434266][   T30] audit: type=1326 audit(1763325591.076:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17235 comm="syz.3.2153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000
[ 1285.606028][   T30] audit: type=1326 audit(1763325591.076:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17235 comm="syz.3.2153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7fe3539 code=0x7ffc0000
[ 1285.712433][   T30] audit: type=1326 audit(1763325591.076:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17235 comm="syz.3.2153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000
[ 1285.804357][   T30] audit: type=1326 audit(1763325591.076:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17235 comm="syz.3.2153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fe3539 code=0x7ffc0000
[ 1285.884355][   T30] audit: type=1326 audit(1763325591.076:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17235 comm="syz.3.2153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000
[ 1285.980084][   T30] audit: type=1326 audit(1763325591.076:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17235 comm="syz.3.2153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000
[ 1286.027303][T17243] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 1286.134774][   T30] audit: type=1326 audit(1763325591.076:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17235 comm="syz.3.2153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fe3539 code=0x7ffc0000
[ 1286.194430][   T30] audit: type=1326 audit(1763325591.076:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17235 comm="syz.3.2153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000
[ 1286.361619][   T30] audit: type=1326 audit(1763325591.076:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17235 comm="syz.3.2153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf7fe3539 code=0x7ffc0000
[ 1287.563164][T17251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2155'.
[ 1288.484400][T16073] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[ 1288.634291][T16073] usb 4-1: Using ep0 maxpacket: 32
[ 1288.742296][T16073] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1288.766661][T16073] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1288.790271][T16073] usb 4-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00
[ 1288.873609][T16073] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1288.898120][T16073] usb 4-1: config 0 descriptor??
[ 1289.328564][T16073] kye 0003:0458:501B.0015: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[ 1289.350962][T16073] kye 0003:0458:501B.0015: unknown main item tag 0x0
[ 1289.358618][T16073] kye 0003:0458:501B.0015: unknown main item tag 0x0
[ 1289.373008][T16073] kye 0003:0458:501B.0015: hidraw0: USB HID v0.04 Device [HID 0458:501b] on usb-dummy_hcd.3-1/input0
[ 1289.386304][T16073] kye 0003:0458:501B.0015: tablet-enabling feature report not found
[ 1289.395057][T16073] kye 0003:0458:501B.0015: tablet enabling failed
[ 1290.025516][T17288] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2161'.
[ 1291.057777][T17298] program syz.2.2164 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1291.212983][T17299] program syz.2.2164 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1291.670931][T16073] usb 4-1: USB disconnect, device number 36
[ 1292.953676][T17316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2167'.
[ 1293.289734][T17309] binder: 17308:17309 ioctl c018620c 800002c0 returned -1
[ 1294.937415][T17333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2172'.
[ 1295.605930][T17338] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1296.917062][T17355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2175'.
[ 1298.192329][T17365] syzkaller1: entered promiscuous mode
[ 1298.198192][T17365] syzkaller1: entered allmulticast mode
[ 1300.086530][T17384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2182'.
[ 1300.219134][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.225629][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1301.409819][T17399] tipc: Started in network mode
[ 1301.415057][T17399] tipc: Node identity e0000002, cluster identity 4711
[ 1301.422609][T17399] tipc: New replicast peer: 0.0.0.0
[ 1301.428752][T17399] tipc: Enabled bearer <udp:syz1>, priority 10
[ 1302.544350][T16074] tipc: Node number set to 3758096386
[ 1303.650930][T17424] fuse: Bad value for 'fd'
[ 1306.089362][T16074] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[ 1306.274544][T16074] usb 3-1: Using ep0 maxpacket: 8
[ 1306.305838][T16074] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[ 1306.323704][T16074] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1306.341552][T16074] usb 3-1: Product: syz
[ 1306.358482][T16074] usb 3-1: Manufacturer: syz
[ 1306.662432][T16074] usb 3-1: SerialNumber: syz
[ 1306.842103][T16074] usb 3-1: config 0 descriptor??
[ 1306.918797][T17454] vim2m vim2m.0: vidioc_s_fmt queue busy
[ 1306.977345][T16074] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[ 1307.034509][T16074] dvb-usb: bulk message failed: -22 (2/0)
[ 1307.050941][T17452] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1307.085523][T17452] 8021q: adding VLAN 0 to HW filter on device team0
[ 1307.136106][T16074] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1307.197962][T16074] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[ 1307.234285][T16074] usb 3-1: media controller created
[ 1307.304663][T17452] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1307.411513][T17459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1307.421670][T17459] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1307.459063][T16074] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1308.609229][T16074] cxusb: set interface failed
[ 1308.614003][T16074] dvb-usb: bulk message failed: -22 (1/0)
[ 1309.063878][T16074] DVB: Unable to find symbol mt352_attach()
[ 1309.072595][T16074] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[ 1309.628233][T16074] rc_core: IR keymap rc-dvico-portable not found
[ 1309.651202][T16074] Registered IR keymap rc-empty
[ 1309.676005][T16074] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[ 1309.724601][T16074] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input76
[ 1309.750677][T16074] dvb-usb: schedule remote query interval to 100 msecs.
[ 1309.760052][T16074] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[ 1309.866946][T16073] dvb-usb: bulk message failed: -22 (1/0)
[ 1309.878101][T16074] usb 3-1: USB disconnect, device number 43
[ 1310.439625][T16074] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[ 1310.824585][T17496] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1311.868971][T17514] fuse: Unknown parameter 'fsmagic'
[ 1314.536860][T17542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2212'.
[ 1319.030112][T17569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2217'.
[ 1321.470042][T17589] hub 9-0:1.0: USB hub found
[ 1321.476504][T17589] hub 9-0:1.0: 1 port detected
[ 1321.698976][T17605] No memory to map
[ 1323.839947][T17611] binder: BINDER_SET_CONTEXT_MGR already set
[ 1323.846138][T17611] binder: 17608:17611 ioctl 4018620d 80000040 returned -16
[ 1324.725880][T17611] syz.2.2225 (17611): drop_caches: 2
[ 1326.018523][T17635] veth3: entered promiscuous mode
[ 1326.048280][T17635] veth3: entered allmulticast mode
[ 1327.263455][T17649] fuse: Unknown parameter 'fsmagic'
[ 1331.189719][T17700] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2240'.
[ 1331.223727][T17700] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2240'.
[ 1331.234131][T17700] netlink: 'syz.4.2240': attribute type 3 has an invalid length.
[ 1331.299587][T17700] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2240'.
[ 1331.874745][T17700] 
: renamed from bridge_slave_0
[ 1333.328436][T17727] loop9: detected capacity change from 0 to 7
[ 1333.340297][T17727]  loop9: [CUMANA/ADFS] p1 [ADFS] p1
[ 1333.346188][T17727] loop9: partition table partially beyond EOD, truncated
[ 1333.354828][T17727] loop9: p1 size 2437361653 extends beyond EOD, truncated
[ 1333.441124][T17728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1333.450194][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1335.593460][T17754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2250'.
[ 1337.352242][T17768] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2253'.
[ 1337.507276][T17768] syz.2.2253 (17768): drop_caches: 2
[ 1338.636611][T17781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2255'.
[ 1339.246973][T17789] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2256'.
[ 1340.758739][T17795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2258'.
[ 1342.952571][T17817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1344.169374][T17827] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2264'.
[ 1344.562110][T17837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2265'.
[ 1344.846237][T17827] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[ 1344.858431][T17843] program syz.1.2266 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1345.818236][T17853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1345.826698][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1346.116762][T17855] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2269'.
[ 1346.467226][T17843] program syz.1.2266 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1346.850458][T17855] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2269'.
[ 1348.048832][T17877] kernel profiling enabled (shift: 63)
[ 1348.056036][T17877] profiling shift: 63 too large
[ 1348.512917][T17879] netlink: 'syz.0.2274': attribute type 10 has an invalid length.
[ 1348.634720][T17879] syz_tun: entered promiscuous mode
[ 1348.650207][T17879] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[ 1349.768741][T17899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2278'.
[ 1349.900787][T17902] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2277'.
[ 1351.701709][T17916] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1354.082131][T17959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1354.124530][T17959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1354.142417][T17959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1354.452336][T17960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1354.499222][T17960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1354.714585][T17960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1354.723126][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1354.731925][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1354.740208][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1354.748430][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1357.074310][T16073] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[ 1357.567414][T16073] usb 2-1: Using ep0 maxpacket: 32
[ 1357.634830][T16073] usb 2-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=10.06
[ 1357.643926][T16073] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1357.684226][T16073] usb 2-1: Product: syz
[ 1357.688464][T16073] usb 2-1: Manufacturer: syz
[ 1357.693088][T16073] usb 2-1: SerialNumber: syz
[ 1357.718785][T16073] usb 2-1: config 0 descriptor??
[ 1357.737259][T16073] ums_eneub6250 2-1:0.0: USB Mass Storage device detected
[ 1357.935067][T16073] usb 2-1: USB disconnect, device number 49
[ 1359.338431][T18022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2301'.
[ 1359.786423][T18027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2302'.
[ 1361.578855][T18045] program syz.3.2306 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1361.661547][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.669440][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1362.144623][T18045] program syz.3.2306 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1362.404403][T18054] binder: BINDER_SET_CONTEXT_MGR already set
[ 1362.410654][T18054] binder: 18049:18054 ioctl 4018620d 80000040 returned -16
[ 1362.607062][T18054] syz.0.2308 (18054): drop_caches: 2
[ 1364.580055][T18070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2322'.
[ 1365.896570][T18083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2314'.
[ 1366.601896][T18089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2315'.
[ 1367.467127][T18101] hub 9-0:1.0: USB hub found
[ 1367.473603][T18101] hub 9-0:1.0: 1 port detected
[ 1369.099057][T18114] 8021q: adding VLAN 0 to HW filter on device team0
[ 1369.151735][T18114] net_ratelimit: 1300 callbacks suppressed
[ 1369.151785][T18114] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1369.951480][T18124] delete_channel: no stack
[ 1370.126848][T18124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1370.135398][T18124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1370.166098][T18124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1370.193142][T18124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1370.201718][T18124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1370.210157][T18124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1370.218593][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1370.226822][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1370.235204][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1370.648611][T18128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2324'.
[ 1371.460223][T18135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2335'.
[ 1374.164450][T18157] net_ratelimit: 1441 callbacks suppressed
[ 1374.164473][T18157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1374.190275][T18157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1374.205947][T18157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1374.233124][T18157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1374.261719][T18157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1374.270927][T18157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1374.280249][T18157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1374.290333][T18157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1374.423216][T18157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1374.431713][T18157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1374.672348][T18165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2330'.
[ 1375.252618][T18169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2331'.
[ 1375.875326][T18179] fuse: Unknown parameter '000000000000000000030x0000000000000009'
[ 1376.159133][T18182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2333'.
[ 1378.183736][T18204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2339'.
[ 1378.738741][T18209] syz_tun: entered allmulticast mode
[ 1379.134021][T18213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2341'.
[ 1379.560913][T18205] syz_tun: left allmulticast mode
[ 1379.795096][T18215] netdevsim netdevsim2: Direct firmware load for .
[ 1379.795096][T18215]  failed with error -2
[ 1379.814345][T18215] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[ 1379.814345][T18215] 
[ 1380.510505][T18222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2342'.
[ 1381.192947][T18226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2343'.
[ 1381.909483][T18236] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2345'.
[ 1382.081077][T18236] bond1: option resend_igmp: invalid value (511)
[ 1382.089601][T18236] bond1: option resend_igmp: allowed values 0 - 255
[ 1382.430970][T18236] bond1 (unregistering): Released all slaves
[ 1382.648058][T18250] net_ratelimit: 1101 callbacks suppressed
[ 1382.648075][T18250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1382.663022][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1382.686320][T18252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1382.695678][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1382.845006][T18252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1382.853177][T18250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1382.862440][ T3565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1382.904455][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1382.959178][T18254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2356'.
[ 1383.158159][T18255] kernel profiling enabled (shift: 63)
[ 1383.200021][T18255] profiling shift: 63 too large
[ 1386.494513][T18289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2353'.
[ 1386.812151][   T30] kauditd_printk_skb: 21 callbacks suppressed
[ 1386.812167][   T30] audit: type=1326 audit(1763325692.556:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18290 comm="syz.3.2355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000
[ 1386.840445][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1387.104307][   T30] audit: type=1326 audit(1763325692.556:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18290 comm="syz.3.2355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000
[ 1387.154349][   T30] audit: type=1326 audit(1763325692.556:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18290 comm="syz.3.2355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fe3539 code=0x7ffc0000
[ 1387.215022][   T30] audit: type=1326 audit(1763325692.556:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18290 comm="syz.3.2355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000
[ 1387.268973][   T30] audit: type=1326 audit(1763325692.556:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18290 comm="syz.3.2355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000
[ 1387.483336][   T30] audit: type=1326 audit(1763325692.556:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18290 comm="syz.3.2355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe3539 code=0x7ffc0000
[ 1387.587089][   T30] audit: type=1326 audit(1763325692.556:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18290 comm="syz.3.2355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000
[ 1387.614660][   T30] audit: type=1326 audit(1763325692.556:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18290 comm="syz.3.2355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000
[ 1387.714393][   T30] audit: type=1326 audit(1763325692.556:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18290 comm="syz.3.2355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf7fe3539 code=0x7ffc0000
[ 1387.851597][   T30] audit: type=1326 audit(1763325692.556:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18290 comm="syz.3.2355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000
[ 1388.103129][T18300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2367'.
[ 1388.116589][T18286] binder_alloc: 18273: binder_alloc_buf, no vma
[ 1388.143174][T18286] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2352'.
[ 1390.514382][T18330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1392.734549][T18341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2363'.
[ 1393.356247][T18356] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2364'.
[ 1394.204370][T16074] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[ 1394.385312][T18371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2368'.
[ 1394.708597][T16074] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1395.112329][T16074] usb 3-1: config 0 has no interfaces?
[ 1395.120797][T16074] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1395.144194][T16074] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1395.214278][T16074] usb 3-1: config 0 descriptor??
[ 1395.902191][T16066] usb 3-1: USB disconnect, device number 44
[ 1396.509885][T18390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1396.519481][T18390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1396.528378][T18390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1396.537271][T18390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1396.575249][T18390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1396.584361][T18390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1396.593267][T18390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1396.681515][T18395] ipip0: entered promiscuous mode
[ 1396.686708][T18395] ipip0: entered allmulticast mode
[ 1396.771914][T18395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2372'.
[ 1396.786876][T18395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2372'.
[ 1396.801184][T18395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2372'.
[ 1396.880082][T18390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1396.903279][T18390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1396.924772][T18396] vhci_hcd vhci_hcd.0: port 0 already used
[ 1397.229558][T18390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1397.261091][T18396] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(16)
[ 1397.267924][T18396] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1397.293543][T18399] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(13)
[ 1397.300184][T18399] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1397.363913][T18399] vhci_hcd vhci_hcd.0: Device attached
[ 1397.373271][T18405] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(19)
[ 1397.379895][T18405] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1397.942636][T18396] vhci_hcd vhci_hcd.0: Device attached
[ 1398.013451][T18405] vhci_hcd vhci_hcd.0: Device attached
[ 1398.067165][T18396] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(21)
[ 1398.073798][T18396] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1398.084470][T18396] vhci_hcd vhci_hcd.0: Device attached
[ 1398.124771][T18408] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(15)
[ 1398.131401][T18408] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1398.168195][T18408] vhci_hcd vhci_hcd.0: Device attached
[ 1398.185616][T18396] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1398.215389][T18399] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1398.267532][T18396] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1398.459898][T18396] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(31)
[ 1398.466544][T18396] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1398.510840][T18396] vhci_hcd vhci_hcd.0: Device attached
[ 1398.634508][T18411] vhci_hcd: connection closed
[ 1398.636242][   T70] vhci_hcd: stop threads
[ 1398.647073][T18409] vhci_hcd: connection closed
[ 1398.648775][T18400] vhci_hcd: connection closed
[ 1398.657636][   T70] vhci_hcd: release socket
[ 1398.694547][   T70] vhci_hcd: disconnect device
[ 1398.719641][T18403] vhci_hcd: connection closed
[ 1398.729956][T18406] vhci_hcd: connection closed
[ 1398.730088][   T70] vhci_hcd: stop threads
[ 1398.764476][   T70] vhci_hcd: release socket
[ 1398.769883][   T70] vhci_hcd: disconnect device
[ 1398.782009][   T70] vhci_hcd: stop threads
[ 1398.791944][   T70] vhci_hcd: release socket
[ 1398.986678][T18426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2376'.
[ 1399.064301][   T70] vhci_hcd: disconnect device
[ 1399.194635][   T70] vhci_hcd: stop threads
[ 1399.287709][T18417] vhci_hcd: connection closed
[ 1399.306182][   T70] vhci_hcd: release socket
[ 1399.340804][   T70] vhci_hcd: disconnect device
[ 1399.359434][   T70] vhci_hcd: stop threads
[ 1399.368542][   T70] vhci_hcd: release socket
[ 1399.389347][   T70] vhci_hcd: disconnect device
[ 1399.400026][   T70] vhci_hcd: stop threads
[ 1399.411130][   T70] vhci_hcd: release socket
[ 1399.431800][   T70] vhci_hcd: disconnect device
[ 1401.573573][T18423] net_ratelimit: 1282 callbacks suppressed
[ 1401.573590][T18423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1402.739109][T18465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2382'.
[ 1405.595266][T18493] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2387'.
[ 1405.678016][T18493] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2387'.
[ 1407.036524][T18504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1407.045855][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1408.555905][T18530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2393'.
[ 1410.611673][T18551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2397'.
[ 1411.777856][T18556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1411.794630][T18556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1411.825953][T18560] binder: 18553:18560 ioctl c018620c 80000380 returned -22
[ 1411.901139][T18556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1411.960305][T18556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1412.077244][T18556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1412.101534][T18556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1412.185137][T18556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1412.247961][T18556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1412.335612][T18556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1412.401012][T18556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1412.465671][T18556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1412.481956][T18556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1412.491757][T18556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1412.502066][T18556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1413.363052][T18575] sch_tbf: burst 19866 is lower than device lo mtu (11337746) !
[ 1413.474280][T16074] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[ 1413.657368][T16074] usb 4-1: config 0 has no interfaces?
[ 1413.679132][T16074] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1413.704350][T16074] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1413.775744][T16074] usb 4-1: Product: syz
[ 1413.844923][T16074] usb 4-1: Manufacturer: syz
[ 1413.859705][T16074] usb 4-1: SerialNumber: syz
[ 1413.945914][T18579] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1413.990351][T18579] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2404'.
[ 1414.112555][T16074] usb 4-1: config 0 descriptor??
[ 1414.121942][T18579] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2404'.
[ 1414.818236][T18581] tun0: tun_chr_ioctl cmd 1074025675
[ 1414.823578][T18581] tun0: persist enabled
[ 1414.828937][T18581] tun0: tun_chr_ioctl cmd 1074025675
[ 1414.874266][T18581] tun0: persist disabled
[ 1414.880178][T18581] netlink: 'syz.2.2405': attribute type 1 has an invalid length.
[ 1414.888080][T18581] netlink: 'syz.2.2405': attribute type 2 has an invalid length.
[ 1415.297177][T15467] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[ 1415.664297][T15467] usb 3-1: config 86 has an invalid interface number: 125 but max is 1
[ 1415.691701][T15467] usb 3-1: config 86 has an invalid interface descriptor of length 5, skipping
[ 1415.868629][T15467] usb 3-1: config 86 has 1 interface, different from the descriptor's value: 2
[ 1415.886800][T15467] usb 3-1: config 86 has no interface number 0
[ 1415.893256][T15467] usb 3-1: config 86 interface 125 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 13
[ 1415.927337][T15467] usb 3-1: config 86 interface 125 has no altsetting 0
[ 1415.942673][T15467] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a44, bcdDevice= a.45
[ 1415.968134][T15467] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1415.991747][T15467] usb 3-1: Product: 쟣�驢趫噑놵秷묮年⧲凉섢�晒籨膿Ꭵ熡穆밒⬫ର⸣�襥ᛤ⛡璺墫攘Ɯ�箰쇊㵒
[ 1416.341179][T15467] usb 3-1: Manufacturer: 笌��밠��贩㨟⧨Ꭳ녢錙텋꫎뵸﹈鎠렊│₷骑㦤㹘뎩⪲ﺊꞄ��㼘랾
[ 1416.441141][T15467] usb 3-1: SerialNumber: 뇩䭕넞붙벻輭Ȃ䓊蜎샄�엂Ꮅ錅暑웟쓅㌢陋�훇鰴谻⾭꧉��굒㮑匷績둴ᨽ�㮺ﾊ
[ 1416.832264][T15467] usb 3-1: USB disconnect, device number 45
[ 1416.908101][T16074] usb 4-1: USB disconnect, device number 37
[ 1417.124360][    C1] net_ratelimit: 1273 callbacks suppressed
[ 1417.124382][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1417.139436][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1417.574442][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1417.872561][T18617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2411'.
[ 1418.454253][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1418.462830][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1419.429223][T18597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1419.605835][T18631] binder: BINDER_SET_CONTEXT_MGR already set
[ 1419.612090][T18631] binder: 18624:18631 ioctl 4018620d 80000040 returned -16
[ 1419.701694][T18631] syz.3.2414 (18631): drop_caches: 2
[ 1421.152236][T18647] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2419'.
[ 1421.168911][T18647] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2419'.
[ 1422.347885][T18661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1422.379820][T18661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1422.551734][T18661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1422.577096][T18661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1422.606293][T18666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1422.616492][T18666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1422.668908][T18666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1422.699540][T18666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1422.744639][T18666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1422.765464][T18666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1423.308819][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.315225][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1424.518570][T18678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2423'.
[ 1425.481500][   T30] kauditd_printk_skb: 31 callbacks suppressed
[ 1425.481520][   T30] audit: type=1326 audit(1763325731.116:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18685 comm="syz.0.2425" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000
[ 1425.743227][   T30] audit: type=1326 audit(1763325731.116:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18685 comm="syz.0.2425" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000
[ 1426.164317][   T30] audit: type=1326 audit(1763325731.126:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18685 comm="syz.0.2425" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709d558 code=0x7ffc0000
[ 1426.237913][   T30] audit: type=1326 audit(1763325731.126:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18685 comm="syz.0.2425" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000
[ 1426.304378][   T30] audit: type=1326 audit(1763325731.226:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18685 comm="syz.0.2425" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709d558 code=0x7ffc0000
[ 1426.384274][   T30] audit: type=1326 audit(1763325731.226:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18685 comm="syz.0.2425" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709d558 code=0x7ffc0000
[ 1426.474487][   T30] audit: type=1326 audit(1763325731.226:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18685 comm="syz.0.2425" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709d558 code=0x7ffc0000
[ 1426.505032][   T30] audit: type=1326 audit(1763325731.226:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18685 comm="syz.0.2425" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709d558 code=0x7ffc0000
[ 1426.556335][   T30] audit: type=1326 audit(1763325731.226:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18685 comm="syz.0.2425" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709d558 code=0x7ffc0000
[ 1426.684372][   T30] audit: type=1326 audit(1763325731.226:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18685 comm="syz.0.2425" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709d558 code=0x7ffc0000
[ 1426.919292][T18701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2427'.
[ 1428.688118][T18720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2442'.
[ 1430.057658][T18730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2435'.
[ 1430.247673][T18735] net_ratelimit: 138 callbacks suppressed
[ 1430.247691][T18735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1430.262166][T18735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1430.270573][T18735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1430.278965][T18735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1430.287467][T18735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1430.295930][T18735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1430.305331][T18735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1430.313909][T18735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1430.322470][T18735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1430.332970][T18735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1430.649510][T18736] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2434'.
[ 1430.694936][T18736] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2434'.
[ 1433.559084][T18769] loop9: detected capacity change from 0 to 7
[ 1433.584304][T18769]  loop9: [CUMANA/ADFS] p1 [ADFS] p1
[ 1433.594248][T18769] loop9: partition table partially beyond EOD, truncated
[ 1433.614416][T18769] loop9: p1 size 2437361653 extends beyond EOD, truncated
[ 1434.972958][T18772] udevd[18772]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[ 1435.178819][T18770] ipip0: entered promiscuous mode
[ 1435.250705][T18770] ipip0: entered allmulticast mode
[ 1435.527736][T18781] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2446'.
[ 1435.548374][T18770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2444'.
[ 1435.664400][T18770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2444'.
[ 1435.694423][T18770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2444'.
[ 1436.111838][T18791] binder: BINDER_SET_CONTEXT_MGR already set
[ 1436.118253][T18791] binder: 18788:18791 ioctl 4018620d 80000040 returned -16
[ 1436.173416][T18791] syz.1.2448 (18791): drop_caches: 2
[ 1437.628901][T18806] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2451'.
[ 1439.010617][T18815] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2453'.
[ 1439.023725][T18815] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2453'.
[ 1439.368060][T18818] tipc: Started in network mode
[ 1439.378668][T18818] tipc: Node identity 3e5c23e20927, cluster identity 4711
[ 1439.400079][T18818] tipc: Enabled bearer <eth:batadv0>, priority 10
[ 1440.523602][T16073] tipc: Node number set to 930816994
[ 1441.202320][T18838] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2458'.
[ 1441.214484][T18838] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2458'.
[ 1441.807723][T18839] net_ratelimit: 1258 callbacks suppressed
[ 1441.807747][T18839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1441.822468][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1443.073323][T18843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2459'.
[ 1443.687986][T18851] ipip0: entered promiscuous mode
[ 1443.693152][T18851] ipip0: entered allmulticast mode
[ 1443.767409][T18855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2460'.
[ 1443.784257][T18855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2460'.
[ 1443.796397][T18855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2460'.
[ 1444.841954][T18862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2463'.
[ 1450.045753][T18913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2474'.
[ 1451.155228][T18919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2475'.
[ 1451.175218][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1451.302994][T18923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2477'.
[ 1451.799812][T15467] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[ 1452.124501][T15467] usb 2-1: Using ep0 maxpacket: 32
[ 1452.294271][T15467] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1452.702122][T15467] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1452.739241][T15467] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[ 1453.061658][T18949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2479'.
[ 1453.177305][T15467] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1453.206413][T15467] usb 2-1: config 0 descriptor??
[ 1453.819174][T18945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2480'.
[ 1454.664572][T18958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1454.724508][T18958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1454.735485][T18958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1454.746532][T18960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1454.755558][T18960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1454.763815][T18960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1454.792572][T18960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1454.801139][T18960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1454.842595][T18960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1456.146932][T15467] usb 2-1: string descriptor 0 read error: -71
[ 1456.166517][T15467] usbhid 2-1:0.0: can't add hid device: -71
[ 1456.189071][T15467] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1456.275469][T15467] usb 2-1: USB disconnect, device number 50
[ 1457.072835][T18989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2490'.
[ 1458.562909][T18999] netlink: 'syz.4.2491': attribute type 10 has an invalid length.
[ 1458.579484][T18999] team0: Port device netdevsim0 added
[ 1458.608081][T18999] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2491'.
[ 1458.697222][   T30] kauditd_printk_skb: 157 callbacks suppressed
[ 1458.697242][   T30] audit: type=1326 audit(1763325764.376:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18993 comm="syz.4.2491" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x0
[ 1459.505959][T19008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2493'.
[ 1459.856614][T19013] netlink: 2020 bytes leftover after parsing attributes in process `syz.0.2486'.
[ 1459.894475][T19013] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2486'.
[ 1460.876780][T19024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2494'.
[ 1461.336238][T19029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2495'.
[ 1463.871355][T19060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2503'.
[ 1464.654873][   T30] audit: type=1326 audit(1763325770.326:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19064 comm="syz.1.2504" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000
[ 1464.654926][   T30] audit: type=1326 audit(1763325770.326:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19064 comm="syz.1.2504" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000
[ 1464.654958][   T30] audit: type=1326 audit(1763325770.326:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19064 comm="syz.1.2504" exe="/root/syz-executor" sig=0 arch=40000003 syscall=195 compat=1 ip=0xf702d539 code=0x7ffc0000
[ 1464.654989][   T30] audit: type=1326 audit(1763325770.326:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19064 comm="syz.1.2504" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000
[ 1464.655019][   T30] audit: type=1326 audit(1763325770.326:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19064 comm="syz.1.2504" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf702d539 code=0x7ffc0000
[ 1464.655050][   T30] audit: type=1326 audit(1763325770.326:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19064 comm="syz.1.2504" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000
[ 1464.655080][   T30] audit: type=1326 audit(1763325770.326:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19064 comm="syz.1.2504" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf702d539 code=0x7ffc0000
[ 1464.655110][   T30] audit: type=1326 audit(1763325770.326:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19064 comm="syz.1.2504" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000
[ 1464.655142][   T30] audit: type=1326 audit(1763325770.326:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19064 comm="syz.1.2504" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702d539 code=0x7ffc0000
[ 1465.059640][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1465.394804][   T30] audit: type=1326 audit(1763325771.156:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19064 comm="syz.1.2504" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000
[ 1466.035972][T19091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2509'.
[ 1466.081049][T19092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2508'.
[ 1466.451605][T19091] Page cache invalidation failure on direct I/O.  Possible data corruption due to collision with buffered I/O!
[ 1466.463785][T19091] File: /dev/nullb0 PID: 19091 Comm: syz.3.2509
[ 1466.704359][T19096] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2507'.
[ 1468.067861][T19107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2512'.
[ 1469.006384][T19102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2510'.
[ 1469.786157][T19112] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2513'.
[ 1470.766363][T19119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2514'.
[ 1471.051169][T19122] net_ratelimit: 593 callbacks suppressed
[ 1471.051189][T19122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1471.074367][T19122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1471.084315][T19122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1471.092702][T19122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1471.103372][T19122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1471.115032][T19122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1471.145671][T19122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1471.156053][T19122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1471.165696][T19122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1471.198730][T19122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1473.731436][T19150] netlink: 'syz.2.2520': attribute type 1 has an invalid length.
[ 1474.100504][T19150] bond4: entered promiscuous mode
[ 1474.105862][T19150] bond4: entered allmulticast mode
[ 1474.112199][T19150] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1476.858140][T19169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2524'.
[ 1477.204275][T16073] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[ 1477.364444][T16073] usb 4-1: Using ep0 maxpacket: 8
[ 1477.380221][T16073] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1477.521883][T16073] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1477.554511][T16073] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[ 1477.570868][T16073] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1477.589183][T16073] usb 4-1: Product: syz
[ 1477.596517][T16073] usb 4-1: Manufacturer: syz
[ 1477.608637][T16073] usb 4-1: SerialNumber: syz
[ 1477.680178][T16073] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[ 1477.720130][T16073] usbtest 4-1:1.0: couldn't get endpoints, -22
[ 1477.737319][T16073] usbtest 4-1:1.0: probe with driver usbtest failed with error -22
[ 1477.920676][T15467] usb 4-1: USB disconnect, device number 38
[ 1479.414770][T19194] syz.4.2526 (19194): drop_caches: 2
[ 1479.580967][T19192] netlink: 'syz.2.2528': attribute type 4 has an invalid length.
[ 1480.557872][T19191] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2529'.
[ 1482.130176][T19217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2532'.
[ 1484.627577][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1484.634002][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1484.794582][T16571] usb 3-1: new full-speed USB device number 46 using dummy_hcd
[ 1484.996326][T16571] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1485.008169][T16571] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[ 1485.039689][T16571] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1485.068085][T16571] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1485.241699][T19235] net_ratelimit: 1260 callbacks suppressed
[ 1485.241722][T19235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1485.258176][T19235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1485.267081][T19235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1485.275945][T19235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1485.284918][T19235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1485.299783][T19235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1485.310701][T19235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1485.339420][T16571] usb 3-1: config 0 descriptor??
[ 1485.346274][T19235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1485.356158][T19231] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1485.366349][T16571] hub 3-1:0.0: USB hub found
[ 1485.383975][T19235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1485.405312][T19235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1485.583339][T16571] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19)
[ 1485.987797][T19239] fuse: Bad value for 'fd'
[ 1486.008625][T16073] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0
[ 1486.088386][T16073] hid-generic 0000:0000:0000.0016: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1486.405248][T16571] usbhid 3-1:0.0: can't add hid device: -32
[ 1486.416662][T16571] usbhid 3-1:0.0: probe with driver usbhid failed with error -32
[ 1487.080163][T19252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2542'.
[ 1487.912639][T19259] binder: BINDER_SET_CONTEXT_MGR already set
[ 1487.918941][T19259] binder: 19258:19259 ioctl 4018620d 80000040 returned -16
[ 1487.957665][T19259] syz.1.2543 (19259): drop_caches: 2
[ 1488.263747][T19266] trusted_key: encrypted_key: insufficient parameters specified
[ 1488.316519][T19266] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2544'.
[ 1488.494530][T16571] usb 3-1: USB disconnect, device number 46
[ 1488.666303][   T30] kauditd_printk_skb: 1 callbacks suppressed
[ 1488.666319][   T30] audit: type=1326 audit(1763325794.406:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19268 comm="syz.2.2545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000
[ 1488.914255][   T30] audit: type=1326 audit(1763325794.406:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19268 comm="syz.2.2545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000
[ 1489.091910][   T30] audit: type=1326 audit(1763325794.406:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19268 comm="syz.2.2545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fd3539 code=0x7ffc0000
[ 1489.719162][   T30] audit: type=1326 audit(1763325794.406:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19268 comm="syz.2.2545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000
[ 1489.741449][   T30] audit: type=1326 audit(1763325794.406:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19268 comm="syz.2.2545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000
[ 1489.763537][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1489.784235][   T30] audit: type=1326 audit(1763325794.406:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19268 comm="syz.2.2545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd3539 code=0x7ffc0000
[ 1489.806710][   T30] audit: type=1326 audit(1763325794.406:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19268 comm="syz.2.2545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000
[ 1489.829703][   T30] audit: type=1326 audit(1763325794.406:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19268 comm="syz.2.2545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf7fd3539 code=0x7ffc0000
[ 1489.851935][   T30] audit: type=1326 audit(1763325794.416:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19268 comm="syz.2.2545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000
[ 1490.079169][   T30] audit: type=1326 audit(1763325794.416:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19268 comm="syz.2.2545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd3539 code=0x7ffc0000
[ 1490.101180][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1491.058601][T19290] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1491.239314][T19288] netlink: 'syz.2.2547': attribute type 1 has an invalid length.
[ 1491.247737][T19288] netlink: 'syz.2.2547': attribute type 1 has an invalid length.
[ 1491.284575][T19288] netlink: 'syz.2.2547': attribute type 1 has an invalid length.
[ 1492.350272][T19295] net_ratelimit: 1258 callbacks suppressed
[ 1492.350293][T19295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1492.405237][T19295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1492.415354][T19295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1492.434137][T19295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1492.444851][T19295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1492.454202][T19295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1492.463675][T19295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1492.472178][T19295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1492.480573][T19295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1492.489065][T19295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1493.639497][T19307] ipip0: entered promiscuous mode
[ 1493.644793][T19307] ipip0: entered allmulticast mode
[ 1493.675416][T19307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2551'.
[ 1493.690455][T19307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2551'.
[ 1493.703453][T19307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2551'.
[ 1495.860968][T19321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2556'.
[ 1496.826935][T19325] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2558'.
[ 1497.391835][   T30] kauditd_printk_skb: 32 callbacks suppressed
[ 1497.391863][   T30] audit: type=1326 audit(1763325803.126:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19330 comm="syz.4.2561" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 1497.429108][   T30] audit: type=1326 audit(1763325803.126:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19330 comm="syz.4.2561" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 1497.524357][T16571] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[ 1497.605117][T19342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2560'.
[ 1497.616757][T19342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2560'.
[ 1498.108243][   T30] audit: type=1326 audit(1763325803.126:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19330 comm="syz.4.2561" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 1498.194303][   T30] audit: type=1326 audit(1763325803.126:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19330 comm="syz.4.2561" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 1498.226888][T16571] usb 3-1: Using ep0 maxpacket: 8
[ 1498.228155][   T30] audit: type=1326 audit(1763325803.126:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19330 comm="syz.4.2561" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 1498.704021][   T30] audit: type=1326 audit(1763325803.136:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19330 comm="syz.4.2561" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 1498.744245][   T30] audit: type=1326 audit(1763325803.136:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19330 comm="syz.4.2561" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 1498.777131][   T30] audit: type=1326 audit(1763325803.136:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19330 comm="syz.4.2561" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 1498.927034][   T30] audit: type=1326 audit(1763325803.136:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19330 comm="syz.4.2561" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 1499.036858][T16571] usb 3-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01
[ 1499.084256][T16571] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1499.084268][   T30] audit: type=1326 audit(1763325803.136:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19330 comm="syz.4.2561" exe="/root/syz-executor" sig=0 arch=40000003 syscall=230 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 1499.114903][T16571] usb 3-1: Product: syz
[ 1499.114925][T16571] usb 3-1: Manufacturer: syz
[ 1499.114941][T16571] usb 3-1: SerialNumber: syz
[ 1499.135878][T16571] usb 3-1: config 0 descriptor??
[ 1499.150495][T16571] go7007 3-1:0.0: probe with driver go7007 failed with error -12
[ 1499.389939][T19336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1499.399958][T19336] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1499.932841][T19358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2564'.
[ 1500.815795][T19369] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1501.002438][T19365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2566'.
[ 1501.674975][T16073] usb 3-1: USB disconnect, device number 47
[ 1501.819378][T19379] net_ratelimit: 1258 callbacks suppressed
[ 1501.819399][T19379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1501.833824][T19379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1501.842284][T19379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1501.850725][T19379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1501.859251][T19379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1501.887006][T19379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1501.895704][T19379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1501.904153][T19379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1501.912482][T19379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1501.921023][T19379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1504.165924][T19399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2572'.
[ 1506.829022][T19430] netlink: 'syz.3.2578': attribute type 11 has an invalid length.
[ 1506.849984][T19430] xt_hashlimit: size too large, truncated to 1048576
[ 1506.902815][T19430] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD
[ 1506.976896][T19429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2579'.
[ 1507.414291][T16571] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[ 1507.744162][T16571] usb 2-1: Using ep0 maxpacket: 32
[ 1507.752360][T16571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1507.768004][T16571] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[ 1507.782126][T16571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1507.798687][T16571] usb 2-1: config 0 descriptor??
[ 1508.323742][T16571] magicmouse 0003:05AC:0265.0017: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.1-1/input0
[ 1508.434602][T19438] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2581'.
[ 1508.543062][T19446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2581'.
[ 1508.721293][T19447] netlink: 'syz.1.2579': attribute type 2 has an invalid length.
[ 1508.729214][T19447] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2579'.
[ 1508.864602][T16074] usb 4-1: new full-speed USB device number 39 using dummy_hcd
[ 1509.026840][T16074] usb 4-1: config 0 has an invalid interface number: 46 but max is 0
[ 1509.044434][T16074] usb 4-1: config 0 has no interface number 0
[ 1509.052883][T16074] usb 4-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1509.131405][T16074] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[ 1509.148680][T16074] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1509.169199][T16074] usb 4-1: Product: syz
[ 1509.179544][T16074] usb 4-1: Manufacturer: syz
[ 1509.190413][T16074] usb 4-1: SerialNumber: syz
[ 1509.217531][T16074] usb 4-1: config 0 descriptor??
[ 1509.266806][T16074] ums-karma 4-1:0.46: USB Mass Storage device detected
[ 1509.467146][T16074] ums-karma 4-1:0.46: probe with driver ums-karma failed with error -5
[ 1509.523244][T19454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2584'.
[ 1510.387680][T16074] usb 2-1: USB disconnect, device number 51
[ 1510.598651][T16073] usb 4-1: USB disconnect, device number 39
[ 1512.110426][T19485] netlink: 37 bytes leftover after parsing attributes in process `syz.4.2590'.
[ 1512.937756][T16571] usb 3-1: new full-speed USB device number 48 using dummy_hcd
[ 1513.596919][T19495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2592'.
[ 1513.650196][T16571] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 1513.662543][T16571] usb 3-1: config 0 has no interface number 0
[ 1513.680578][T16571] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[ 1513.690178][T19499] net_ratelimit: 1260 callbacks suppressed
[ 1513.690191][T19499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1513.704396][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1513.723484][T16571] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1513.769022][T16571] usb 3-1: config 0 descriptor??
[ 1513.788053][T16571] usb 3-1: selecting invalid altsetting 1
[ 1513.825153][T16571] dvb_ttusb_budget: ttusb_init_controller: error
[ 1513.898120][T16571] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1514.032862][T19502] netlink: 'syz.3.2594': attribute type 1 has an invalid length.
[ 1514.079431][T19491] loop8: detected capacity change from 0 to 7
[ 1514.109441][    C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1514.118934][    C1] Buffer I/O error on dev loop8, logical block 0, async page read
[ 1514.128179][    C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1514.137410][    C1] Buffer I/O error on dev loop8, logical block 0, async page read
[ 1514.145883][    C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1514.155091][    C1] Buffer I/O error on dev loop8, logical block 0, async page read
[ 1514.165503][    C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1514.174724][    C0] Buffer I/O error on dev loop8, logical block 0, async page read
[ 1514.183506][    C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1514.192752][    C0] Buffer I/O error on dev loop8, logical block 0, async page read
[ 1514.201248][T16571] DVB: Unable to find symbol cx22700_attach()
[ 1514.211658][    C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1514.220895][    C1] Buffer I/O error on dev loop8, logical block 0, async page read
[ 1514.229899][    C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1514.239118][    C0] Buffer I/O error on dev loop8, logical block 0, async page read
[ 1514.247075][T18930] ldm_validate_partition_table(): Disk read failed.
[ 1514.284212][    C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1514.293442][    C0] Buffer I/O error on dev loop8, logical block 0, async page read
[ 1514.301896][    C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1514.311213][    C0] Buffer I/O error on dev loop8, logical block 0, async page read
[ 1514.325465][    C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1514.334682][    C1] Buffer I/O error on dev loop8, logical block 0, async page read
[ 1514.342913][T18930] Dev loop8: unable to read RDB block 0
[ 1514.349927][T18930]  loop8: unable to read partition table
[ 1514.356055][T18930] loop8: partition table beyond EOD, truncated
[ 1514.383022][T19491] ldm_validate_partition_table(): Disk read failed.
[ 1514.391908][T19491] Dev loop8: unable to read RDB block 0
[ 1514.404372][T19491]  loop8: unable to read partition table
[ 1514.427374][T19491] loop8: partition table beyond EOD, truncated
[ 1514.453645][T19491] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1514.511782][T19502] bond1: entered promiscuous mode
[ 1514.642428][T19502] bond1: entered allmulticast mode
[ 1514.752628][T16571] DVB: Unable to find symbol tda10046_attach()
[ 1514.758978][T16571] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[ 1514.774721][T19502] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1514.791468][T19504] vlan2: entered allmulticast mode
[ 1515.766167][T15467] usb 3-1: USB disconnect, device number 48
[ 1515.885428][T19524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2598'.
[ 1517.330739][T19537] input: syz0 as /devices/virtual/input/input96
[ 1518.197492][T19532] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2600'.
[ 1518.623134][T19552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1518.641996][T19552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1518.650737][T19552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1518.659191][T19552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1518.667653][T19552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1518.703538][T19552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1518.722501][T19552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1518.778776][T19552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1518.804855][T19552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1518.886289][T19557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2606'.
[ 1518.936243][T19552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1519.484782][T19552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1519.574327][T19552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1519.672507][T19552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1519.706500][T19552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1519.858161][T19552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1521.360097][T19573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2607'.
[ 1522.499182][T19588] hub 1-0:1.0: USB hub found
[ 1522.505802][T19588] hub 1-0:1.0: 1 port detected
[ 1523.784293][    C1] net_ratelimit: 1272 callbacks suppressed
[ 1523.784318][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1523.798994][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1523.979910][   T30] kauditd_printk_skb: 25 callbacks suppressed
[ 1523.979932][   T30] audit: type=1326 audit(1763325829.586:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19600 comm="syz.1.2614" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000
[ 1524.232173][T19608] ptrace attach of "./syz-executor exec"[5855] was attempted by "./syz-executor exec"[19608]
[ 1524.242796][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1524.393999][T19608] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2613'.
[ 1524.755427][   T30] audit: type=1326 audit(1763325829.586:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19600 comm="syz.1.2614" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702d539 code=0x7ffc0000
[ 1524.820186][   T30] audit: type=1326 audit(1763325829.596:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19600 comm="syz.1.2614" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000
[ 1524.890216][T19614] pimreg: entered allmulticast mode
[ 1524.902014][T19614] pimreg: left allmulticast mode
[ 1524.930970][   T30] audit: type=1326 audit(1763325829.596:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19600 comm="syz.1.2614" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf702d539 code=0x7ffc0000
[ 1525.094221][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1525.102567][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1525.111280][   T30] audit: type=1326 audit(1763325829.596:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19600 comm="syz.1.2614" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000
[ 1525.141447][   T30] audit: type=1326 audit(1763325829.596:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19600 comm="syz.1.2614" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf702d539 code=0x7ffc0000
[ 1525.192058][   T30] audit: type=1326 audit(1763325829.596:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19600 comm="syz.1.2614" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000
[ 1525.285678][   T30] audit: type=1326 audit(1763325829.596:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19600 comm="syz.1.2614" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf702d539 code=0x7ffc0000
[ 1525.326774][   T30] audit: type=1326 audit(1763325829.606:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19600 comm="syz.1.2614" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000
[ 1525.426583][   T30] audit: type=1326 audit(1763325829.606:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19600 comm="syz.1.2614" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf702d539 code=0x7ffc0000
[ 1526.601812][T19626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2618'.
[ 1526.715625][T19589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1527.377716][T19638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2620'.
[ 1527.483463][T19635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2619'.
[ 1529.686833][T19667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2626'.
[ 1529.866336][T19665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1529.875019][T19665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1529.900622][T19665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1530.052315][T19668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1530.074311][T19668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1530.082597][T19668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1530.090901][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1530.099070][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1530.107348][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1530.115569][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1530.643963][T19678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2627'.
[ 1531.179965][T19681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2628'.
[ 1531.320859][T19679] kvm: Disabled LAPIC found during irq injection
[ 1531.636855][T19688] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2629'.
[ 1532.066444][T19695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2631'.
[ 1532.107923][T19695] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2631'.
[ 1533.542642][T19709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2633'.
[ 1534.225760][T19715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2635'.
[ 1534.899442][T19713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2634'.
[ 1535.747900][T19727] program syz.0.2638 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1537.021863][T19728] syz.2.2637: vmalloc error: size 17715200, failed to allocated page array size 34600, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1537.053432][T19728] CPU: 1 UID: 0 PID: 19728 Comm: syz.2.2637 Not tainted syzkaller #0 PREEMPT(full) 
[ 1537.053484][T19728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1537.053502][T19728] Call Trace:
[ 1537.053512][T19728]  <TASK>
[ 1537.053521][T19728]  dump_stack_lvl+0x189/0x250
[ 1537.053563][T19728]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1537.053593][T19728]  ? __pfx__printk+0x10/0x10
[ 1537.053615][T19728]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1537.053646][T19728]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1537.053677][T19728]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[ 1537.053710][T19728]  warn_alloc+0x214/0x310
[ 1537.053749][T19728]  ? __pfx_warn_alloc+0x10/0x10
[ 1537.053792][T19728]  ? __get_vm_area_node+0x28f/0x300
[ 1537.053822][T19728]  ? vb2_vmalloc_alloc+0xef/0x340
[ 1537.053852][T19728]  __vmalloc_node_range_noprof+0x690/0x12d0
[ 1537.053915][T19728]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1537.053957][T19728]  ? __kasan_kmalloc+0x93/0xb0
[ 1537.053996][T19728]  vmalloc_user_noprof+0xad/0xf0
[ 1537.054022][T19728]  ? vb2_vmalloc_alloc+0xef/0x340
[ 1537.054041][T19728]  vb2_vmalloc_alloc+0xef/0x340
[ 1537.054066][T19728]  ? __pfx_vb2_vmalloc_alloc+0x10/0x10
[ 1537.054090][T19728]  __vb2_queue_alloc+0x9c2/0x15a0
[ 1537.054137][T19728]  vb2_core_reqbufs+0xc31/0x1420
[ 1537.054157][T19728]  ? kasan_save_track+0x4f/0x80
[ 1537.054199][T19728]  ? __pfx_vb2_core_reqbufs+0x10/0x10
[ 1537.054226][T19728]  ? vb2_verify_memory_type+0x1fc/0x570
[ 1537.054247][T19728]  vb2_ioctl_reqbufs+0x4c0/0x830
[ 1537.054289][T19728]  __video_do_ioctl+0xa59/0xc10
[ 1537.054333][T19728]  ? __pfx___video_do_ioctl+0x10/0x10
[ 1537.054364][T19728]  video_usercopy+0x82d/0x1450
[ 1537.054392][T19728]  ? __pfx___video_do_ioctl+0x10/0x10
[ 1537.054423][T19728]  ? __pfx_video_usercopy+0x10/0x10
[ 1537.054456][T19728]  ? __fget_files+0x2a/0x420
[ 1537.054474][T19728]  v4l2_ioctl+0x18d/0x1e0
[ 1537.054495][T19728]  v4l2_compat_ioctl32+0x1d7/0x260
[ 1537.054524][T19728]  __ia32_compat_sys_ioctl+0x543/0x840
[ 1537.054548][T19728]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 1537.054575][T19728]  ? __se_sys_futex_time32+0x360/0x3e0
[ 1537.054591][T19728]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1537.054615][T19728]  ? rcu_is_watching+0x15/0xb0
[ 1537.054636][T19728]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[ 1537.054663][T19728]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1537.054688][T19728]  __do_fast_syscall_32+0xb6/0x2b0
[ 1537.054709][T19728]  do_fast_syscall_32+0x34/0x80
[ 1537.054723][T19728]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1537.054751][T19728] RIP: 0023:0xf7fd3539
[ 1537.054772][T19728] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1537.054787][T19728] RSP: 002b:00000000f548455c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 1537.054806][T19728] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000c0145608
[ 1537.054818][T19728] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000
[ 1537.054828][T19728] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1537.054837][T19728] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1537.054848][T19728] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1537.054872][T19728]  </TASK>
[ 1537.617377][T19728] Mem-Info:
[ 1537.620573][T19728] active_anon:12611 inactive_anon:0 isolated_anon:0
[ 1537.620573][T19728]  active_file:5235 inactive_file:4267 isolated_file:0
[ 1537.620573][T19728]  unevictable:2816 dirty:457 writeback:0
[ 1537.620573][T19728]  slab_reclaimable:7263 slab_unreclaimable:108539
[ 1537.620573][T19728]  mapped:43486 shmem:7293 pagetables:1509
[ 1537.620573][T19728]  sec_pagetables:0 bounce:0
[ 1537.620573][T19728]  kernel_misc_reclaimable:0
[ 1537.620573][T19728]  free:1328611 free_pcp:12211 free_cma:0
[ 1537.666416][T19728] Node 0 active_anon:50444kB inactive_anon:0kB active_file:20912kB inactive_file:16936kB unevictable:9728kB isolated(anon):0kB isolated(file):0kB mapped:173916kB dirty:1828kB writeback:0kB shmem:27636kB shmem_thp:12288kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12812kB pagetables:5892kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1537.700166][T19728] Node 1 active_anon:0kB inactive_anon:0kB active_file:28kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1537.730480][T19728] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1537.772301][T19749] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2639'.
[ 1537.991920][T19749] net_ratelimit: 17 callbacks suppressed
[ 1537.991942][T19749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1538.060642][T19749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1538.103458][T19749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1538.114855][T19749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1538.126944][T19750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1538.135834][T19750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1538.144935][T19750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1538.154210][T19750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1538.163349][T19750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1538.172626][T19750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1538.180793][T19728] lowmem_reserve[]: 0 2505 2505 2505 2505
[ 1538.206556][T19728] Node 0 DMA32 free:1402184kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:51172kB inactive_anon:0kB active_file:21360kB inactive_file:16936kB unevictable:9728kB writepending:1956kB zspages:0kB present:3129332kB managed:2565152kB mlocked:8192kB bounce:0kB free_pcp:38188kB local_pcp:19404kB free_cma:0kB
[ 1538.374347][T19728] lowmem_reserve[]: 0 0 0 0 0
[ 1538.389912][T19728] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1538.468581][T19728] lowmem_reserve[]: 0 0 0 0 0
[ 1538.520648][T19728] Node 1 Normal free:3896096kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:28kB inactive_file:132kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:10256kB local_pcp:6372kB free_cma:0kB
[ 1538.814246][T19728] lowmem_reserve[]: 0 0 0 0 0
[ 1538.819114][T19728] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1538.844392][   T30] kauditd_printk_skb: 124 callbacks suppressed
[ 1538.844411][   T30] audit: type=1326 audit(1763325844.596:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19753 comm="syz.1.2641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000
[ 1538.915361][T19728] Node 0 DMA32: 0*4kB 1*8kB (U) 349*16kB (UME) 490*32kB (ME) 543*64kB (UME) 257*128kB (UME) 145*256kB (UME) 122*512kB (UME) 70*1024kB (UM) 21*2048kB (UME) 268*4096kB (UM) = 1400920kB
[ 1538.940601][T19728] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1538.964387][T19728] Node 1 Normal: 204*4kB (UE) 58*8kB (UE) 52*16kB (UE) 207*32kB (UME) 64*64kB (UME) 12*128kB (UME) 7*256kB (UME) 2*512kB (M) 2*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3896096kB
[ 1538.988209][T19728] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1539.002001][   T30] audit: type=1326 audit(1763325844.596:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19753 comm="syz.1.2641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf702d539 code=0x7ffc0000
[ 1539.034256][T19728] Node 0 hugepages_total=6 hugepages_free=6 hugepages_surp=4 hugepages_size=2048kB
[ 1539.063154][T19728] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1539.197153][T19728] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1539.216387][   T30] audit: type=1326 audit(1763325844.606:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19753 comm="syz.1.2641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000
[ 1539.318896][T19728] 16919 total pagecache pages
[ 1539.591773][   T30] audit: type=1326 audit(1763325844.606:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19753 comm="syz.1.2641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000
[ 1539.632527][T19728] 0 pages in swap cache
[ 1539.636916][   T30] audit: type=1326 audit(1763325844.606:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19753 comm="syz.1.2641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf702d539 code=0x7ffc0000
[ 1539.676606][T19728] Free swap  = 124996kB
[ 1539.683401][   T30] audit: type=1326 audit(1763325844.606:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19753 comm="syz.1.2641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000
[ 1539.748585][T19728] Total swap = 124996kB
[ 1539.754239][   T30] audit: type=1326 audit(1763325844.606:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19753 comm="syz.1.2641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf702d539 code=0x7ffc0000
[ 1539.778277][T19728] 2097051 pages RAM
[ 1539.791622][T19728] 0 pages HighMem/MovableOnly
[ 1539.804210][T19728] 424121 pages reserved
[ 1539.808545][   T30] audit: type=1326 audit(1763325844.606:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19753 comm="syz.1.2641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000
[ 1539.830978][   T30] audit: type=1326 audit(1763325844.606:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19753 comm="syz.1.2641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf702d539 code=0x7ffc0000
[ 1539.855931][   T30] audit: type=1326 audit(1763325844.606:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19753 comm="syz.1.2641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000
[ 1539.880303][T19728] 0 pages cma reserved
[ 1540.564628][T19774] xt_l2tp: missing protocol rule (udp|l2tpip)
[ 1541.497373][T19763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1543.601184][T19791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2648'.
[ 1543.720140][T19803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2651'.
[ 1544.078677][   T30] kauditd_printk_skb: 35 callbacks suppressed
[ 1544.080407][   T30] audit: type=1326 audit(1763325849.836:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19798 comm="syz.3.2650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000
[ 1544.151116][   T30] audit: type=1326 audit(1763325849.836:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19798 comm="syz.3.2650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000
[ 1544.174276][   T30] audit: type=1326 audit(1763325849.836:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19806 comm="syz.3.2650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7fe3539 code=0x7ffc0000
[ 1544.392272][   T30] audit: type=1326 audit(1763325849.986:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19806 comm="syz.3.2650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf7fe3539 code=0x7ffc0000
[ 1544.735321][T15467] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[ 1544.745545][   T30] audit: type=1326 audit(1763325850.016:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19798 comm="syz.3.2650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fe3539 code=0x7ffc0000
[ 1544.837534][   T30] audit: type=1326 audit(1763325850.016:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19798 comm="syz.3.2650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fe3539 code=0x7ffc0000
[ 1544.916256][T15467] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 1544.942228][T15467] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1544.950537][   T30] audit: type=1326 audit(1763325850.016:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19798 comm="syz.3.2650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fe3539 code=0x7ffc0000
[ 1545.003603][T15467] usb 4-1: Product: syz
[ 1545.013731][T15467] usb 4-1: Manufacturer: syz
[ 1545.034324][T15467] usb 4-1: SerialNumber: syz
[ 1545.066142][T15467] usb 4-1: config 0 descriptor??
[ 1545.086879][T15467] ch341 4-1:0.0: ch341-uart converter detected
[ 1545.098960][   T30] audit: type=1326 audit(1763325850.016:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19798 comm="syz.3.2650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fe3539 code=0x7ffc0000
[ 1545.244279][   T30] audit: type=1326 audit(1763325850.016:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19798 comm="syz.3.2650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7fe3539 code=0x7ffc0000
[ 1545.274421][   T30] audit: type=1326 audit(1763325850.016:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19798 comm="syz.3.2650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000
[ 1545.413204][T19816] net_ratelimit: 124 callbacks suppressed
[ 1545.413228][T19816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1545.427663][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1545.619804][T19817] netlink: 37 bytes leftover after parsing attributes in process `syz.1.2652'.
[ 1545.979576][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1545.985963][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1546.220037][T15467] usb 4-1: failed to receive control message: -110
[ 1546.248470][T15467] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110
[ 1547.154464][T16074] usb 4-1: USB disconnect, device number 40
[ 1547.162498][T16074] ch341 4-1:0.0: device disconnected
[ 1547.488336][T19836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1547.496742][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1548.379220][T19849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2657'.
[ 1550.380586][T19870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2663'.
[ 1553.107824][T19884] ipip0: entered promiscuous mode
[ 1553.112926][T19884] ipip0: entered allmulticast mode
[ 1553.358502][T19884] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2664'.
[ 1553.373457][T19884] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2664'.
[ 1553.386937][T19884] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2664'.
[ 1555.575762][   T31] INFO: task kworker/0:4:16066 blocked for more than 143 seconds.
[ 1555.583653][   T31]       Not tainted syzkaller #0
[ 1555.624465][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1555.653529][   T31] task:kworker/0:4     state:D stack:21720 pid:16066 tgid:16066 ppid:2      task_flags:0x4208060 flags:0x00080000
[ 1555.673790][   T31] Workqueue: usb_hub_wq hub_event
[ 1555.679140][   T31] Call Trace:
[ 1555.682518][   T31]  <TASK>
[ 1555.690146][   T31]  __schedule+0x1798/0x4cc0
[ 1555.781718][T19910] input: syz0 as /devices/virtual/input/input103
[ 1555.828612][   T31]  ? __pfx___schedule+0x10/0x10
[ 1555.833737][   T31]  ? schedule+0x91/0x360
[ 1555.838705][   T31]  schedule+0x165/0x360
[ 1555.843043][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1555.849285][   T31]  __mutex_lock+0x7e6/0x1350
[ 1555.856837][   T31]  ? __mutex_lock+0x5bb/0x1350
[ 1555.861943][   T31]  ? hub_event+0x21e5/0x4a20
[ 1555.867132][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1555.872489][   T31]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1555.879080][   T31]  hub_event+0x21e5/0x4a20
[ 1555.883830][   T31]  ? do_raw_spin_lock+0x121/0x290
[ 1555.891430][   T31]  ? __pfx_hub_event+0x10/0x10
[ 1555.909980][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[ 1555.918986][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1555.935630][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[ 1555.941585][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[ 1555.947876][   T31]  process_scheduled_works+0xae1/0x17b0
[ 1555.989739][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1555.998335][   T31]  worker_thread+0x8a0/0xda0
[ 1556.006716][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1556.021077][   T31]  ? __kthread_parkme+0x7b/0x200
[ 1556.028746][   T31]  kthread+0x711/0x8a0
[ 1556.036455][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 1556.047673][   T31]  ? __pfx_kthread+0x10/0x10
[ 1556.055715][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1556.060169][T19914] ptrace attach of "./syz-executor exec"[5852] was attempted by "./syz-executor exec"[19914]
[ 1556.074188][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1556.079518][   T31]  ? __pfx_kthread+0x10/0x10
[ 1556.084526][   T31]  ret_from_fork+0x4bc/0x870
[ 1556.090323][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1556.126703][   T31]  ? __switch_to_asm+0x39/0x70
[ 1556.164598][   T31]  ? __switch_to_asm+0x33/0x70
[ 1556.346246][T19914] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2668'.
[ 1556.526628][   T31]  ? __pfx_kthread+0x10/0x10
[ 1556.768917][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1556.773949][   T31]  </TASK>
[ 1556.777632][   T31] 
[ 1556.777632][   T31] Showing all locks held in the system:
[ 1556.785844][   T31] 5 locks held by kworker/0:0/9:
[ 1556.799144][   T31]  #0: ffff888020e99548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1557.078311][   T31]  #1: ffffc900000e7ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1557.093744][   T31]  #2: ffff88823bea6198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20
[ 1557.103183][   T31]  #3: ffff888145b6f518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20
[ 1557.114174][   T31]  #4: ffff888145788268 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20
[ 1557.355573][   T31] 3 locks held by kworker/u8:1/13:
[ 1557.363107][   T31]  #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1557.375565][   T31]  #1: ffffc90000127ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1557.516875][   T31]  #2: ffffffff8f2beb70 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820
[ 1557.579230][   T31] 1 lock held by khungtaskd/31:
[ 1557.596966][   T31]  #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1557.622158][   T31] 2 locks held by acpid/5184:
[ 1557.630101][   T31]  #0: ffff888071810160 (&joydev->mutex){+.+.}-{4:4}, at: joydev_release+0x16b/0x210
[ 1557.662807][   T31]  #1: ffff888057ef22c0 (&dev->mutex#2){+.+.}-{4:4}, at: input_close_device+0x4c/0x280
[ 1557.681179][   T31] 2 locks held by getty/5588:
[ 1557.692109][   T31]  #0: ffff88814d3c60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1557.704179][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[ 1557.715645][   T31] 3 locks held by kworker/0:2/15467:
[ 1557.722191][   T31]  #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1557.736339][   T31]  #1: ffffc90004c17ba0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1557.746777][   T31]  #2: ffffffff8df43178 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[ 1557.758086][   T31] 5 locks held by kworker/0:4/16066:
[ 1557.763731][   T31]  #0: ffff888020e99548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1557.777313][   T31]  #1: ffffc9000ba87ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1557.790507][   T31]  #2: ffff8881453ec198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20
[ 1557.799998][   T31]  #3: ffff888145f09518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20
[ 1557.810329][   T31]  #4: ffff888145788268 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20
[ 1557.820411][   T31] 1 lock held by udevd/19894:
[ 1557.825428][   T31]  #0: ffffffff8df43178 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[ 1557.838005][   T31] 1 lock held by syz.4.2668/19902:
[ 1557.843812][   T31]  #0: ffff888054a1ef48 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[ 1557.854658][   T31] 1 lock held by syz.4.2668/19914:
[ 1557.859874][   T31]  #0: ffff88807ac670d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_getobj_reset+0x298/0x610
[ 1557.870858][   T31] 1 lock held by syz.4.2668/19916:
[ 1557.876066][   T31]  #0: ffff88807ac670d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3b/0x100
[ 1557.886885][   T31] 1 lock held by syz.1.2669/19906:
[ 1557.892209][   T31]  #0: ffff888057ef22c0 (&dev->mutex#2){+.+.}-{4:4}, at: __input_unregister_device+0x31/0x640
[ 1557.902786][   T31] 
[ 1557.905256][   T31] =============================================
[ 1557.905256][   T31] 
[ 1557.913742][   T31] NMI backtrace for cpu 0
[ 1557.913763][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 1557.913786][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1557.913799][   T31] Call Trace:
[ 1557.913807][   T31]  <TASK>
[ 1557.913815][   T31]  dump_stack_lvl+0x189/0x250
[ 1557.913851][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1557.913878][   T31]  ? __pfx__printk+0x10/0x10
[ 1557.913910][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[ 1557.913936][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 1557.913963][   T31]  ? __pfx__printk+0x10/0x10
[ 1557.913988][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1557.914022][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1557.914052][   T31]  watchdog+0xf60/0xfa0
[ 1557.914077][   T31]  ? watchdog+0x1e2/0xfa0
[ 1557.914103][   T31]  kthread+0x711/0x8a0
[ 1557.914134][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1557.914153][   T31]  ? __pfx_kthread+0x10/0x10
[ 1557.914182][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1557.914209][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1557.914243][   T31]  ? __pfx_kthread+0x10/0x10
[ 1557.914271][   T31]  ret_from_fork+0x4bc/0x870
[ 1557.914295][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1557.914324][   T31]  ? __switch_to_asm+0x39/0x70
[ 1557.914339][   T31]  ? __switch_to_asm+0x33/0x70
[ 1557.914354][   T31]  ? __pfx_kthread+0x10/0x10
[ 1557.914382][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1557.914417][   T31]  </TASK>
[ 1558.053623][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1558.060226][   T31] Sending NMI from CPU 0 to CPUs 1:
[ 1558.065764][    C1] NMI backtrace for cpu 1
[ 1558.065793][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[ 1558.065813][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1558.065824][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[ 1558.065854][    C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 c1 21 00 f3 0f 1e fa fb f4 <e9> c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[ 1558.065869][    C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6
[ 1558.065886][    C1] RAX: 55ce15bd882ae000 RBX: ffffffff81967b47 RCX: 55ce15bd882ae000
[ 1558.065899][    C1] RDX: 0000000000000001 RSI: ffffffff8d70e27f RDI: ffffffff8bbf0760
[ 1558.065912][    C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb
[ 1558.065924][    C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7ceb70
[ 1558.065937][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100395eb58
[ 1558.065949][    C1] FS:  0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000
[ 1558.065963][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1558.065975][    C1] CR2: 000000005780599c CR3: 000000007f3bc000 CR4: 00000000003526f0
[ 1558.065990][    C1] Call Trace:
[ 1558.065996][    C1]  <TASK>
[ 1558.066002][    C1]  default_idle+0x13/0x20
[ 1558.066019][    C1]  default_idle_call+0x73/0xb0
[ 1558.066036][    C1]  do_idle+0x1e7/0x510
[ 1558.066054][    C1]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1558.066072][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1558.066096][    C1]  ? __pfx_do_idle+0x10/0x10
[ 1558.066119][    C1]  ? do_idle+0x4ed/0x510
[ 1558.066137][    C1]  cpu_startup_entry+0x44/0x60
[ 1558.066155][    C1]  start_secondary+0x101/0x110
[ 1558.066181][    C1]  common_startup_64+0x13e/0x147
[ 1558.066213][    C1]  </TASK>