last executing test programs:

9m7.840019997s ago: executing program 1 (id=2520):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=<r2=>r1, @ANYBLOB="140001140040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000021c0), 0x0, &(0x7f0000002240)=ANY=[@ANYRES64=r2, @ANYRES16=r3, @ANYRES32=r0, @ANYRESDEC=0x0, @ANYRES64=r1, @ANYRESHEX=r1])
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff, {0x1ff}}, './cgroup\x00'})
write$P9_RLERRORu(r5, &(0x7f0000000100)={0x13, 0x7, 0x1, {{0x6, 'ntfs3\x00'}}}, 0x13)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ntfs3\x00', 0x2208004, 0x0)
socket(0xa, 0x3, 0x3a)
getpgrp(0xffffffffffffffff)
userfaultfd(0x1)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000ff", @ANYRES16=r7, @ANYBLOB="090300000000000000002a000000"], 0x14}}, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000002300)={0x0, <r8=>0x0}, &(0x7f0000002280)=0xc)
lchown(&(0x7f0000000240)='./file0\x00', r8, 0xee00)

9m6.944652307s ago: executing program 1 (id=2522):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = msgget$private(0x0, 0x214)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x8, 0x0, 0x7fff7ffc}]})
r1 = geteuid()
msgctl$IPC_SET(r0, 0x1, &(0x7f0000000500)={{0x2, 0x0, 0x0, r1, 0x0, 0x96, 0x1}, 0x0, 0x0, 0x9, 0x6, 0x7, 0xb, 0x7, 0x0, 0x7, 0x3})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendfile(r4, r3, 0x0, 0x10000000021)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000440)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x20048050}, 0x5f3a1e12030bf48f)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_IOVA_RANGES(r5, 0x3b84, &(0x7f0000000040)={0x20, 0x0, 0x3, 0x0, &(0x7f0000000680)=[{}, {}, {}]})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000180)={0x20, r6, 0x7, 0x0, &(0x7f00000001c0)=[{0x0, 0x8001}, {0x3, 0x205}]})
ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r6, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x5})
ioctl$IOMMU_IOAS_UNMAP$ALL(r5, 0x3b86, &(0x7f0000000280)={0x18, r6})
ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r6, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2})
ioctl$IOMMU_IOAS_UNMAP(r5, 0x3b86, &(0x7f0000000340)={0x18, r6, 0x2, 0x1c})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r6, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000})
ioctl$IOMMU_IOAS_UNMAP$ALL(r5, 0x3b86, &(0x7f00000003c0)={0x18, r6})
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r6, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2})
ioctl$IOMMU_IOAS_COPY(r5, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r7, r6, 0x1c, 0x3, 0x2})
ioctl$IOMMU_IOAS_UNMAP(0xffffffffffffffff, 0x3b86, &(0x7f0000000140)={0x18, r6, 0x5, 0x1d})
ioctl$IOMMU_IOAS_UNMAP$ALL(r5, 0x3b86, &(0x7f0000000580)={0x18, r6})
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r5, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1})
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r5, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r6})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000640)={0x20, r6, 0x0, 0x0, &(0x7f0000000680)})
socket$nl_generic(0x10, 0x3, 0x10)

9m2.648054622s ago: executing program 1 (id=2529):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000021c0), 0x0, &(0x7f0000002240)=ANY=[@ANYRES64, @ANYRES16, @ANYRES32=r0, @ANYRESDEC=0x0, @ANYRES64, @ANYRESHEX])
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x1ff}}, './cgroup\x00'})
write$P9_RLERRORu(r1, &(0x7f0000000100)={0x13, 0x7, 0x1, {{0x6, 'ntfs3\x00'}}}, 0x13)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ntfs3\x00', 0x2208004, 0x0)
socket(0xa, 0x3, 0x3a)
getpgrp(0xffffffffffffffff)
userfaultfd(0x1)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/consoles\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000180)={0x2020}, 0x2024)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000ff", @ANYRES16=r5, @ANYBLOB="090300000000000000002a000000"], 0x14}}, 0x0)
socket(0x10, 0x80000, 0xd2d6)

9m0.533564057s ago: executing program 1 (id=2534):
syz_emit_ethernet(0x3d, &(0x7f0000000000)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2f, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x1b, 0x0, @opaque="24dc6170e1e0318539b7165b16818a481d1e81"}}}}}, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={<r0=>0x0, 0xffffffff}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000140)={r0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x84)
syz_extract_tcp_res(&(0x7f00000000c0), 0x1, 0x4)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="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"])
prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00')
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0xfffffffff7ffffe9}, 0x18)
socket$kcm(0x2, 0xa, 0x2)
write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB], 0xfdef)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x501100, 0x0)
syz_io_uring_setup(0x8016e, &(0x7f0000000b00)={0x0, 0x4bfb, 0x10100, 0x2, 0x3e8}, &(0x7f0000001240), 0x0)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x14}}, 0x4000)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001e40)=ANY=[@ANYBLOB="b80000000002010400000000000000000a000000300001802c00018014000300fe88000000000000000000000000000114000400fe8800000000000000000000000001013800038006000340000400002c00018014000300fe88000000000000000000000000070000000400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0xb8}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000240)={0x0, 0xffac, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}}, 0x0)
syslog(0x2, &(0x7f0000000080), 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000240)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @multicast, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @local, @loopback, @remote, @empty}}}}, &(0x7f0000000080)={0x1, 0x2, [0x68a, 0xac5, 0x2b5, 0x9b5]})
syz_emit_ethernet(0x3a, &(0x7f0000000540)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x18, 0x0, @wg=@data={0x4, 0xeab, 0x3}}}}}}, 0x0)

9m0.229189562s ago: executing program 1 (id=2539):
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0xd)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
openat(r1, &(0x7f00000003c0)='./file0\x00', 0x101001, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
r4 = socket$key(0xf, 0x3, 0x2)
r5 = socket(0x1000000010, 0x80002, 0x0)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockname(r6, &(0x7f00000014c0)=@ll={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80)
sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x30, 0x2d, 0x1, 0x800000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffe0}, {0x0, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0)
sendmsg$key(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="020e0000180000000000000000000000030005000000000002000000ac1e0001000000000000000003000600000000000200000000000000000000000000000004000400000000000000000000000000000000000000000000000000000000000800120000000200000000000000000006000000000000000000000000000000ff02000000000000000000000000000100000000000000000000000000000000040003"], 0xc0}}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r8=>0x0}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000001c0)={r8, 0x9}, 0x8)
r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
preadv2(r9, &(0x7f0000000100)=[{0x0, 0xfffffffffffffdd5}, {&(0x7f0000000180)=""/76, 0x4c}], 0x2, 0xe, 0x4, 0x1)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1048c, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x200, 0x0)
rmdir(&(0x7f0000000040)='./file1\x00')
chdir(&(0x7f0000000280)='./file1/file0\x00')

9m0.012432727s ago: executing program 1 (id=2540):
syz_socket_connect_nvme_tcp()
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)={0x49de, 0x2, 0x1007, 0xc003, 0x56, "000000e6ff00"})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000080)='./file1\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x0, 0x5, 0xfeff, 0x0, 0x0, 0xfffffffffffffffc, 0x3, 0x0, 0xfeff})
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040))
fallocate(r1, 0x1, 0xa, 0x20000)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
personality(0x5400004)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x10080, 0x0)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendfile(r3, r2, 0x0, 0x20000023893)

8m44.803088617s ago: executing program 32 (id=2540):
syz_socket_connect_nvme_tcp()
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)={0x49de, 0x2, 0x1007, 0xc003, 0x56, "000000e6ff00"})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000080)='./file1\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x0, 0x5, 0xfeff, 0x0, 0x0, 0xfffffffffffffffc, 0x3, 0x0, 0xfeff})
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040))
fallocate(r1, 0x1, 0xa, 0x20000)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
personality(0x5400004)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x10080, 0x0)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendfile(r3, r2, 0x0, 0x20000023893)

2m13.56270496s ago: executing program 2 (id=3799):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = getpgrp(0x0)
prlimit64(r0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
prlimit64(0x0, 0x8, &(0x7f0000000140), 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4})
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r6=>0xffffffffffffffff}, 0x111, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r6, 0xb}}, 0x48)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f00000003c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000340), r6, r5}}, 0x18)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0)
r8 = dup2(r7, r7)
preadv(r8, &(0x7f0000000680)=[{&(0x7f0000000100)=""/224, 0xe0}, {0x0}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000000580)=""/233, 0xe9}, {&(0x7f0000000200)=""/64, 0x40}], 0x5, 0x9, 0x10000ac1)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe)
accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80000)

2m12.310703616s ago: executing program 2 (id=3802):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0)=0xe, 0x40800)
r1 = gettid()
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000200)=r1)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0xc4042, 0x1df)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399eb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rcu_utilization\x00', r4, 0x0, 0x2}, 0x18)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
r7 = socket$inet(0x2, 0x4000000805, 0x0)
listen(r7, 0x5)
sendmmsg(r7, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000008400000005"], 0x18}}], 0x2, 0x844)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x30, 0x0, 0x1, 0xffffffff, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x1ff, 0x0, 0x20000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x68, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x40, @link='syz1\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000801}, 0x20000000)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10)
ioprio_set$uid(0x3, 0x0, 0x0)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x125182, 0x0)
syz_open_dev$sg(&(0x7f0000000240), 0xc2fa, 0x200)
sendfile(r3, r8, 0x0, 0xfffe82)

2m6.963568678s ago: executing program 2 (id=3808):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x26e1, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x0, @dev, 0x7}, 0x80, 0x0}, 0x200ce0c0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x5}}], {0x14, 0x10}}, 0x3c}}, 0x40004)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, 0x0, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000)
sendto$inet6(r1, &(0x7f0000000080)="de18b30018fde148e80fa75d16166ffd7e53eaf4f22e39b5d5555c9ffed28e28b6d20058", 0x24, 0x20004011, &(0x7f0000000180)={0xa, 0x4e20, 0x1, @empty, 0x5}, 0x1c)
socket$inet_icmp_raw(0x2, 0x3, 0x1)

2m6.635522821s ago: executing program 2 (id=3812):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = getpgrp(0x0)
prlimit64(r0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
prlimit64(0x0, 0x8, &(0x7f0000000140), 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4})
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r6=>0xffffffffffffffff}, 0x111, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r6, 0xb}}, 0x48)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f00000003c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000340), r6, r5}}, 0x18)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0)
r8 = dup2(r7, r7)
preadv(r8, &(0x7f0000000680)=[{&(0x7f0000000100)=""/224, 0xe0}, {0x0}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000000580)=""/233, 0xe9}, {&(0x7f0000000200)=""/64, 0x40}], 0x5, 0x9, 0x10000ac1)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe)
accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80000)

2m5.967466435s ago: executing program 2 (id=3815):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x26e1, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x0, @dev, 0x7}, 0x80, 0x0}, 0x200ce0c0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x5}}], {0x14, 0x10}}, 0x3c}}, 0x40004)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r8, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000)
sendto$inet6(r1, &(0x7f0000000080)="de18b30018fde148e80fa75d16166ffd7e53eaf4f22e39b5d5555c9ffed28e28b6d20058", 0x24, 0x20004011, &(0x7f0000000180)={0xa, 0x4e20, 0x1, @empty, 0x5}, 0x1c)

2m5.795082182s ago: executing program 2 (id=3817):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x3, 0x0)
r2 = accept$unix(r1, &(0x7f0000000200)=@abs, &(0x7f00000000c0)=0x6e)
connect$unix(r2, &(0x7f0000000180)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
syz_clone3(&(0x7f0000000680)={0x10400, &(0x7f0000000000), &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000440), {0x9}, &(0x7f0000000480)=""/177, 0xb1, &(0x7f0000000540)=""/225, &(0x7f0000000640)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58)
prctl$PR_SCHED_CORE(0x3e, 0x0, r3, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000)
r5 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xa8\xc4\xd2o\xae\xb4W`\xfd\x196\xa0Rd\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7', 0x42, 0x1f0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x13, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000030000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000100000085000000060000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r6}, 0x10)
mq_unlink(&(0x7f0000000000)='eth0\x00')
close(r5)
writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000340)='9', 0x1}], 0x1)
socket$kcm(0x29, 0x7, 0x0)

1m50.108778334s ago: executing program 33 (id=3817):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x3, 0x0)
r2 = accept$unix(r1, &(0x7f0000000200)=@abs, &(0x7f00000000c0)=0x6e)
connect$unix(r2, &(0x7f0000000180)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
syz_clone3(&(0x7f0000000680)={0x10400, &(0x7f0000000000), &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000440), {0x9}, &(0x7f0000000480)=""/177, 0xb1, &(0x7f0000000540)=""/225, &(0x7f0000000640)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58)
prctl$PR_SCHED_CORE(0x3e, 0x0, r3, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000)
r5 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xa8\xc4\xd2o\xae\xb4W`\xfd\x196\xa0Rd\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7', 0x42, 0x1f0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x13, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000030000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000100000085000000060000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r6}, 0x10)
mq_unlink(&(0x7f0000000000)='eth0\x00')
close(r5)
writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000340)='9', 0x1}], 0x1)
socket$kcm(0x29, 0x7, 0x0)

17.57103035s ago: executing program 0 (id=4030):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x8}}]}, &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={0xffffffffffffffff, r1})
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={<r3=>0xffffffffffffffff})
sendmmsg$inet_sctp(r3, &(0x7f0000008fc0)=[{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000002b40)="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", 0x204}], 0x1, 0x0, 0x0, 0x20004050}], 0x1, 0x4)
sendmsg$TIPC_NL_LINK_GET(r3, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r4, 0x84, 0x80, &(0x7f0000000000), 0x0)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180))
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, 0x0, 0x0)
recvmsg(r3, &(0x7f00000007c0)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000740)=""/71, 0x47}, 0x101)

16.063030298s ago: executing program 6 (id=4031):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
r1 = syz_open_dev$dri(0x0, 0x1b, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb635773f04ebbeef, 0x4010, r1, 0x1000)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000480)={0x20, 0xb, 0x2, "8fa5"}, 0x0, 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x6, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x200008, @loopback, 0x39}, 0x1c)
r6 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c000280050001000000000008"], 0x98}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r9}, 0x10)
mlockall(0x3)

14.869471331s ago: executing program 3 (id=4035):
r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8)
write$dsp(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
close(0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f00000002c0), &(0x7f0000000300)=r3}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0xc0046209, 0x0)
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/disk', 0x20002, 0x184)
ioctl$PTP_PEROUT_REQUEST2(r6, 0x541b, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x4d, 0x1, 0x0, "fbe237e7f30f000000df4832c30600"})

13.679171826s ago: executing program 0 (id=4037):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0xffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0)

13.326221596s ago: executing program 0 (id=4039):
socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prlimit64(0x0, 0x8, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4})
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x111, 0x4}}, 0x20)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000f40))
ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000040)=0x200000000)
r4 = dup2(r3, r3)
preadv(r4, &(0x7f0000000680)=[{&(0x7f0000000100)=""/224, 0xe0}, {0x0}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000000580)=""/233, 0xe9}, {&(0x7f0000000200)=""/64, 0x40}], 0x5, 0x9, 0x10000ac1)
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x5)
dup(0xffffffffffffffff)

13.31184013s ago: executing program 3 (id=4040):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x40004)
r4 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000003740)=""/4096, 0x1900}], 0x0, 0x11a}, 0x20)
r5 = getpid()
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
syz_clone3(&(0x7f0000000740)={0x1000, 0x0, 0x0, 0x0, {0x24}, 0x0, 0x0, 0x0, 0x0}, 0x58)

12.372808051s ago: executing program 4 (id=4042):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setresuid(0xee01, 0x0, 0x0)
keyctl$restrict_keyring(0xb, 0xfffffffffffffffc, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00'})
fcntl$notify(r0, 0x402, 0x8000003d)
close_range(r0, 0xffffffffffffffff, 0x2)

11.215427922s ago: executing program 3 (id=4043):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
r1 = syz_open_dev$dri(0x0, 0x1b, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb635773f04ebbeef, 0x4010, r1, 0x1000)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000480)={0x20, 0xb, 0x2, "8fa5"}, 0x0, 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x6, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x200008, @loopback, 0x39}, 0x1c)
r6 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c000280050001000000000008"], 0x98}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r9}, 0x10)
mlockall(0x3)

10.996176399s ago: executing program 0 (id=4045):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x26e1, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x0, @dev, 0x7}, 0x80, 0x0}, 0x200ce0c0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x5}}], {0x14, 0x10}}, 0x3c}}, 0x40004)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r8, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000)
socket$inet_icmp_raw(0x2, 0x3, 0x1)

10.906100735s ago: executing program 0 (id=4046):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
capget(0x0, &(0x7f0000000a40)={0x82d, 0x6000, 0x0, 0x7, 0x5, 0x5})
setresuid(0xee01, 0x0, 0x0)
keyctl$restrict_keyring(0xb, 0xfffffffffffffffc, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x8)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x503, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
fcntl$notify(r0, 0x402, 0x8000003d)
close_range(r0, 0xffffffffffffffff, 0x2)
ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000000)={&(0x7f0000000700)={{@local, 0x1}, {@my=0x0}, 0x400, "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"}, 0x418, 0x81})
memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3)

10.650297659s ago: executing program 5 (id=4047):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x8}}]}, &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={0xffffffffffffffff, r1})
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={<r3=>0xffffffffffffffff})
sendmmsg$inet_sctp(r3, &(0x7f0000008fc0)=[{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000002b40)="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", 0x204}], 0x1, 0x0, 0x0, 0x20004050}], 0x1, 0x4)
sendmsg$TIPC_NL_LINK_GET(r3, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r4, 0x84, 0x80, &(0x7f0000000000), 0x0)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180))
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, 0x0, 0x0)
recvmsg(r3, &(0x7f00000007c0)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000740)=""/71, 0x47}, 0x101)

10.031109468s ago: executing program 4 (id=4048):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r1}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r3, {0x1}, {0x9}, {0xfff2, 0x6}}}, 0x24}}, 0x40044)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x1, 0x0, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x2e, 0xe]}}, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x4, 0x8, 0x8, {}, {}, {0x4, 0x0, 0x0, 0x1}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "8187dc4bf6d0fd86"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x240400c6)

9.955696385s ago: executing program 6 (id=4049):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0xffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0)

9.640301749s ago: executing program 5 (id=4050):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0)=0xe, 0x40800)
r1 = gettid()
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000200)=r1)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0xc4042, 0x1df)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rcu_utilization\x00', r3, 0x0, 0x2}, 0x18)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58)
r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
r5 = socket$inet(0x2, 0x4000000805, 0x0)
listen(r5, 0x5)
sendmmsg(r5, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000008400000005"], 0x18}}], 0x2, 0x844)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x30, 0x0, 0x1, 0xffffffff, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x1ff, 0x0, 0x20000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x68, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x40, @link='syz1\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000801}, 0x20000000)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
ioprio_set$uid(0x3, 0x0, 0x0)

8.286170107s ago: executing program 4 (id=4051):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r1, @ANYBLOB="01000700000000000000090000000500070000000000050008000000000008000100000000000c0006000300000003001fea25dff6f6478f9b161f1b14c6e09d6d960e88b72754a52e48d13b57de1cb03be73cc5518f4dc3d760217a8e1ec6aa0cb5958ba1e2e4c5506e0d6d27ffe0be2c60f3d68618c9c4ca399cc13378f8190b697527074ef093fe9e207f40b948dfd7c3cdf894b9156f553c07a7049f102d"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40044)

8.283884982s ago: executing program 5 (id=4052):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = getpgrp(0x0)
prlimit64(r0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
prlimit64(0x0, 0x8, &(0x7f0000000140), 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4})
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r6=>0xffffffffffffffff}, 0x111, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, 0x0, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f00000003c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000340), r6, r5}}, 0x18)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0)
r8 = dup2(r7, r7)
preadv(r8, &(0x7f0000000680)=[{&(0x7f0000000100)=""/224, 0xe0}, {0x0}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000000580)=""/233, 0xe9}, {&(0x7f0000000200)=""/64, 0x40}], 0x5, 0x9, 0x10000ac1)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe)
accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80000)

8.223467998s ago: executing program 4 (id=4053):
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000780)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40000000}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
fcntl$lock(r2, 0x5, &(0x7f0000000200)={0x1, 0x0, 0x2000000, 0x7})

8.169810405s ago: executing program 6 (id=4054):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0xffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0)

7.263171827s ago: executing program 3 (id=4055):
socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prlimit64(0x0, 0x8, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4})
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x111, 0x4}}, 0x20)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000f40))
ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000040)=0x200000000)
r4 = dup2(r3, r3)
preadv(r4, &(0x7f0000000680)=[{&(0x7f0000000100)=""/224, 0xe0}, {0x0}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000000580)=""/233, 0xe9}, {&(0x7f0000000200)=""/64, 0x40}], 0x5, 0x9, 0x10000ac1)
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x5)
dup(0xffffffffffffffff)

4.421737557s ago: executing program 4 (id=4056):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x26e1, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x0, @dev, 0x7}, 0x80, 0x0}, 0x200ce0c0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x5}}], {0x14, 0x10}}, 0x3c}}, 0x40004)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r8, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000)
socket$inet_icmp_raw(0x2, 0x3, 0x1)

3.060262256s ago: executing program 5 (id=4057):
openat$audio(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x2})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)
openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24041, 0x0)
io_setup(0x202, &(0x7f0000000200))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x5, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r4, 0xffffffffffffffff, 0x500}, 0x57)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0)
r5 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0)
fsmount(r5, 0x0, 0x0)

2.362028653s ago: executing program 3 (id=4058):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0)=0xe, 0x40800)
r1 = gettid()
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000200)=r1)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0xc4042, 0x1df)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rcu_utilization\x00', r4, 0x0, 0x2}, 0x18)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
r7 = socket$inet(0x2, 0x4000000805, 0x0)
listen(r7, 0x5)
sendmmsg(r7, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000008400000005"], 0x18}}], 0x2, 0x844)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x30, 0x0, 0x1, 0xffffffff, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x1ff, 0x0, 0x20000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x68, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x40, @link='syz1\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000801}, 0x20000000)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10)
ioprio_set$uid(0x3, 0x0, 0x0)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x125182, 0x0)
syz_open_dev$sg(&(0x7f0000000240), 0xc2fa, 0x200)
sendfile(r3, r8, 0x0, 0xfffe82)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x55c})

2.311060701s ago: executing program 0 (id=4059):
syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010010905"], 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
userfaultfd(0x801)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
fsopen(&(0x7f0000000280)='cifs\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000018100000", @ANYRES32=r2, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000240), &(0x7f00000003c0)=r3}, 0x20)
syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[], 0x0)

2.280227982s ago: executing program 6 (id=4060):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x18, 0x0, "50e4d101a949f3f4d3479fb3110fbb83dc7a2414e74ef9c682c427e1a542df3531062020eb16da11d6707d82272beab27a1da6e527cceef0e7db687b56729c203d01b7693f6d4c81a64de132e818dea3"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in, 0x0, 0x0, 0x0, 0x0, "d3d87bc1779df0260137ffea3b267abe0be604d99164ceede9ce200eb018abebbf99a8ae25b276a23593abc5bfbcd104244b1bcd3f8dcc8bb1afb8237f33ee41a904e61d65a7bacfec9dc935544d3f64"}, 0xd8)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
close_range(r1, 0xffffffffffffffff, 0xff0f)

2.257740294s ago: executing program 5 (id=4061):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmmsg$alg(r0, 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000006240), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xfffffffc, 0x10400}}, 0x50)
syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1)
close(r4)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r3}, 0x38)

1.136160686s ago: executing program 4 (id=4062):
bind$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$unix(0x1, 0x3, 0x0)
r1 = accept$unix(r0, &(0x7f0000000200)=@abs, &(0x7f00000000c0)=0x6e)
connect$unix(r1, &(0x7f0000000180)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
syz_clone3(&(0x7f0000000680)={0x10400, &(0x7f0000000000), &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000440), {0x9}, &(0x7f0000000480)=""/177, 0xb1, &(0x7f0000000540)=""/225, &(0x7f0000000640)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58)
prctl$PR_SCHED_CORE(0x3e, 0x0, r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
r4 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xa8\xc4\xd2o\xae\xb4W`\xfd\x196\xa0Rd\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7', 0x42, 0x1f0, 0x0)
mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x13, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000030000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000100000085000000060000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r5}, 0x10)
mq_unlink(&(0x7f0000000000)='eth0\x00')
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000280)={r1})
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4)
syz_usb_connect(0x0, 0x46, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000cc739f20a404140057c901020301090234000100008000090413000304ce10000905000c4000a4080809050502100003fc010705910e3a85ea090508031000070100988f8dc883e2df243439e4e9d4df472946e4ffbcb2e3ed118c7bf80b7d3d6c61e31d5bf8fed884d9ff5dafdda51b31488939db981908f217fe79a61a3922863ead326697d32c6bf70288d0154313c1ba4b78439325d246fc726ce7eef95b2759aad5b10c465a9910f8fb6fc5a76d585383"], 0x0)

1.071872149s ago: executing program 6 (id=4063):
mlock2(&(0x7f0000d94000/0x2000)=nil, 0x2000, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x11, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffe}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x25, &(0x7f0000000100)=""/37, 0x41100, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000001c0)=[{0x2, 0x2, 0x3, 0x5}, {0x3, 0x5, 0xc, 0x9}], 0x10, 0x6, @void, @value}, 0x94)
ftruncate(r0, 0x9)
mlock2(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0)

855.289588ms ago: executing program 5 (id=4064):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58)
listen(r0, 0x5)
accept4(r0, &(0x7f0000000040)=@x25, 0x0, 0x800) (fail_nth: 7)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c)

845.421172ms ago: executing program 3 (id=4065):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = getpgrp(0x0)
prlimit64(r0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
prlimit64(0x0, 0x8, &(0x7f0000000140), 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4})
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, 0xffffffffffffffff, 0xb}}, 0x48)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f00000003c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000340), 0xffffffffffffffff, r5}}, 0x18)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0)
r7 = dup2(r6, r6)
preadv(r7, &(0x7f0000000680)=[{&(0x7f0000000100)=""/224, 0xe0}, {0x0}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000000580)=""/233, 0xe9}, {&(0x7f0000000200)=""/64, 0x40}], 0x5, 0x9, 0x10000ac1)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe)
accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80000)

0s ago: executing program 6 (id=4066):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_ACTIVATE(r0, 0x5601, 0xfffffffffffffffc)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000140)={0x2, 0x24e23, @remote}, 0x10)
r2 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x0, 0x1, 0x18e}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRES32, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r5 = socket(0x2, 0x80805, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000540)={'sit0\x00', <r6=>0x0, 0x20, 0x10, 0x8001, 0x9, {{0x36, 0x4, 0x1, 0x7, 0xd8, 0x64, 0x0, 0x3, 0x4, 0x0, @broadcast, @multicast1, {[@rr={0x7, 0xb, 0x41, [@multicast2, @multicast2]}, @cipso={0x86, 0x1b, 0x0, [{0x6, 0x9, "7a4c7a025a0994"}, {0x1, 0x4, "1e5f"}, {0x1, 0x8, "2adfc7fcf0e2"}]}, @timestamp={0x44, 0xc, 0xf1, 0x0, 0x3, [0x5, 0x7]}, @cipso={0x86, 0xe, 0x3, [{0x7, 0x8, "679c6f6798e9"}]}, @timestamp={0x44, 0x10, 0x23, 0x0, 0x4, [0x16, 0x4, 0xd37]}, @noop, @timestamp_addr={0x44, 0x2c, 0x30, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@local, 0x10}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa9}, {@private=0xa010101, 0x2}, {@broadcast, 0xba70}]}, @timestamp_prespec={0x44, 0x34, 0xd3, 0x3, 0xe, [{@broadcast}, {@empty, 0x75}, {@remote, 0xfff}, {@multicast2, 0x8001}, {@multicast2, 0x7}, {@private=0xa010100, 0x80}]}, @generic={0x88, 0xc, "1a7ba975ef657b1053d7"}, @ra={0x94, 0x4, 0x1}]}}}}})
sendmmsg$inet(r5, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010104}, 0x10, &(0x7f0000000180)}}, {{&(0x7f00000000c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000400)="2ae5260bbeda685f44adc71804dca116dd05b015ce881d3bbd4913ee90417f5d9c9ebb88ab4dddd16c9c9273872adf43af9bacd21fd9af857a06f55b2ac376fb453be7f0dad80ab8b3a2553023b03be7ebe7e9521055eb2eb52fd2b1b7f2f44e26638c422cf2a5c77b53ef6bfe3ee79ea905fbf39087e29419e4", 0x7a}, {&(0x7f0000000480)="7416ac99c4c6551ddd74f6e68d438c75fb5b6ceb56194b631a0a4a354a1af45d2cce64d7d8fb1b5f87ddfb17024177aabea13228ad5b22d3ebe91d320a56e1a7237a2a3e5c91732403726f037452dc94dad50809714003feffe80bed75e676982f88afcdf3a76149493a0feb370b158b7c9f7dd9577c6c1d261376f8c39ac81beb9b62ac129da2b4a6e0d0508c96c5", 0x8f}], 0x2, &(0x7f0000000640)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xe4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x51}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast1, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}], 0xb0}}], 0x3, 0x48000)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000010000004000018007000600666f00000800080000000000060001000200000008000500000000000c0007000000000000000000080009000000000008000b"], 0x54}}, 0x0)

kernel console output (not intermixed with test programs):

or, ignoring hub
[ 1112.225166][   T10] hub 3-1:1.0: probe with driver hub failed with error -5
[ 1112.240163][   T10] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1112.699139][ T5825] pegasus 6-1:0.0: probe with driver pegasus failed with error -71
[ 1112.735928][ T5825] usb 6-1: USB disconnect, device number 23
[ 1114.894798][   T10] usb 3-1: USB disconnect, device number 83
[ 1115.036787][T16915] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1115.044355][T16915] UDF-fs: Scanning with blocksize 512 failed
[ 1115.050931][T16915] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1115.058651][T16915] UDF-fs: Scanning with blocksize 1024 failed
[ 1115.066637][T16915] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1115.074193][T16915] UDF-fs: Scanning with blocksize 2048 failed
[ 1115.081008][T16915] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1115.088588][T16915] UDF-fs: Scanning with blocksize 4096 failed
[ 1115.098269][T16915] bad cache= option: no%e
[ 1115.098269][T16915] 
[ 1115.105091][T16915] CIFS: VFS: bad cache= option: no%e
[ 1115.354227][   T10] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[ 1115.514256][   T10] usb 3-1: Using ep0 maxpacket: 32
[ 1115.613071][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.624795][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1115.687008][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1115.700664][   T10] usb 3-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00
[ 1115.714809][T16921] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed
[ 1115.722642][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1116.689858][   T10] usb 3-1: config 0 descriptor??
[ 1116.820236][  T975] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[ 1116.914539][T16949] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed
[ 1116.927952][T16949] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 1116.941434][T16949] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1116.950717][T16949] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1117.664392][  T975] usb 1-1: Using ep0 maxpacket: 16
[ 1117.732739][   T10] usbhid 3-1:0.0: can't add hid device: -71
[ 1117.741218][  T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1117.757814][   T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1117.766839][  T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1117.780346][   T10] usb 3-1: USB disconnect, device number 84
[ 1117.786426][  T975] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1117.806142][  T975] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[ 1117.815919][  T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1117.847085][  T975] usb 1-1: config 0 descriptor??
[ 1118.134892][T16957] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1118.142451][T16957] UDF-fs: Scanning with blocksize 512 failed
[ 1118.149242][T16957] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1118.156786][T16957] UDF-fs: Scanning with blocksize 1024 failed
[ 1118.163329][T16957] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1118.170915][T16957] UDF-fs: Scanning with blocksize 2048 failed
[ 1118.177490][T16957] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1118.185027][T16957] UDF-fs: Scanning with blocksize 4096 failed
[ 1118.194907][T16957] bad cache= option: no%e
[ 1118.194907][T16957] 
[ 1118.201466][T16957] CIFS: VFS: bad cache= option: no%e
[ 1118.290576][  T975] input: HID 0955:7214 Haptics as /devices/virtual/input/input52
[ 1118.406775][  T975] shield 0003:0955:7214.0031: Registered Thunderstrike controller
[ 1118.426611][  T975] shield 0003:0955:7214.0031: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0
[ 1118.485767][T16940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1118.506146][T16940] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1118.555493][T16940] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3297'.
[ 1118.601052][T11473] shield 0003:0955:7214.0031: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[ 1118.613242][   T10] usb 1-1: USB disconnect, device number 82
[ 1118.642050][T11473] shield 0003:0955:7214.0031: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1118.770931][T11473] shield 0003:0955:7214.0031: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1118.802510][T11473] shield 0003:0955:7214.0031: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1119.030717][T16975] syz.5.3308: attempt to access beyond end of device
[ 1119.030717][T16975] nbd5: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1119.129678][T16975] SQUASHFS error: Failed to read block 0x0: -5
[ 1119.211326][T16975] unable to read squashfs_super_block
[ 1119.829947][T15813] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[ 1120.426609][T16996] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1120.434725][T16996] UDF-fs: Scanning with blocksize 512 failed
[ 1120.441513][T16996] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1120.449149][T16996] UDF-fs: Scanning with blocksize 1024 failed
[ 1120.455705][T16996] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1120.463187][T16996] UDF-fs: Scanning with blocksize 2048 failed
[ 1120.469736][T16996] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1120.477322][T16996] UDF-fs: Scanning with blocksize 4096 failed
[ 1120.487102][T16996] bad cache= option: no%e
[ 1120.487102][T16996] 
[ 1120.494578][T16996] CIFS: VFS: bad cache= option: no%e
[ 1120.624705][T15813] usb 3-1: Using ep0 maxpacket: 16
[ 1120.631614][T15813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1120.643197][T15813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1120.653042][T15813] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1120.666079][T15813] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[ 1120.675939][T15813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1120.702273][T15813] usb 3-1: config 0 descriptor??
[ 1120.761948][   T52] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[ 1120.928952][   T52] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 1120.944152][   T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1120.952404][   T52] usb 5-1: Product: syz
[ 1120.968596][   T52] usb 5-1: Manufacturer: syz
[ 1120.983528][   T52] usb 5-1: SerialNumber: syz
[ 1120.999909][   T52] usb 5-1: config 0 descriptor??
[ 1121.022711][   T52] ch341 5-1:0.0: ch341-uart converter detected
[ 1121.074339][   T10] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[ 1121.148754][T15813] input: HID 0955:7214 Haptics as /devices/virtual/input/input53
[ 1121.180871][T15813] shield 0003:0955:7214.0032: Registered Thunderstrike controller
[ 1121.190714][T15813] shield 0003:0955:7214.0032: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0
[ 1121.228342][   T52] usb 5-1: failed to receive control message: -121
[ 1121.235979][   T10] usb 4-1: Using ep0 maxpacket: 32
[ 1121.239065][   T52] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121
[ 1121.253384][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1121.284510][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1121.304256][   T10] usb 4-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00
[ 1121.319036][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1121.355053][   T10] usb 4-1: config 0 descriptor??
[ 1121.368149][T16982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1121.396739][T16982] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1121.417378][T16982] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3310'.
[ 1121.449373][T11473] usb 3-1: USB disconnect, device number 85
[ 1121.561533][   T52] shield 0003:0955:7214.0032: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[ 1121.572738][   T52] shield 0003:0955:7214.0032: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1121.585522][   T52] shield 0003:0955:7214.0032: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1121.597473][   T52] shield 0003:0955:7214.0032: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1122.959275][   T52] usb 5-1: USB disconnect, device number 107
[ 1122.967934][   T52] ch341 5-1:0.0: device disconnected
[ 1123.464199][   T52] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[ 1124.070579][   T10] usbhid 4-1:0.0: can't add hid device: -71
[ 1124.212568][T17035] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1124.561305][   T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1124.571789][   T10] usb 4-1: USB disconnect, device number 96
[ 1124.597740][T17034] syz.5.3326: attempt to access beyond end of device
[ 1124.597740][T17034] nbd5: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1124.619415][T17034] SQUASHFS error: Failed to read block 0x0: -5
[ 1124.627241][T17034] unable to read squashfs_super_block
[ 1126.494467][   T52] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1126.503093][   T52] usb 5-1: unable to read config index 0 descriptor/start: -71
[ 1126.510868][   T52] usb 5-1: can't read configurations, error -71
[ 1126.544660][T17055] IPVS: persistence engine module ip_vs_pe_Ž
 not found
[ 1126.866301][   T52] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[ 1126.976351][ T5816] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[ 1127.046472][   T52] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1127.068433][   T52] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[ 1127.092310][   T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1127.105677][   T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1127.120476][   T52] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1127.134227][ T5816] usb 3-1: Using ep0 maxpacket: 32
[ 1127.149299][ T5816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1127.164169][ T5916] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[ 1127.179829][   T52] usb 5-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41
[ 1127.190420][ T5816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1127.203967][   T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1127.218431][ T5816] usb 3-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00
[ 1127.229185][   T52] usb 5-1: Product: syz
[ 1127.233486][   T52] usb 5-1: Manufacturer: syz
[ 1127.245512][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1127.260128][   T52] usb 5-1: SerialNumber: syz
[ 1127.276448][   T52] usb 5-1: config 0 descriptor??
[ 1127.281944][ T5816] usb 3-1: config 0 descriptor??
[ 1127.337273][ T5916] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[ 1127.438285][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1127.459249][ T5916] usb 1-1: config 0 descriptor??
[ 1127.501764][   T52] usb 5-1: ucan: probing device on interface #0
[ 1127.508642][   T52] usb 5-1: ucan: invalid EP count (1)
[ 1127.515134][   T52] usb 5-1: ucan: probe failed; try to update the device firmware
[ 1127.539214][   T52] usb 5-1: USB disconnect, device number 109
[ 1127.914121][ T5913] usb 4-1: new high-speed USB device number 97 using dummy_hcd
[ 1128.065120][ T5913] usb 4-1: Using ep0 maxpacket: 16
[ 1128.076867][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1128.081463][T17070] .: renamed from vlan1 (while UP)
[ 1128.097266][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1128.119244][ T5913] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1128.135012][ T5913] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[ 1128.144754][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1128.157050][ T5913] usb 4-1: config 0 descriptor??
[ 1128.414344][   T10] usb 5-1: new high-speed USB device number 110 using dummy_hcd
[ 1128.545355][ T5916] pegasus 1-1:0.0: probe with driver pegasus failed with error -71
[ 1128.559391][ T5916] usb 1-1: USB disconnect, device number 83
[ 1128.579835][   T10] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[ 1128.584688][ T5913] input: HID 0955:7214 Haptics as /devices/virtual/input/input54
[ 1128.617265][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1128.630069][ T5913] shield 0003:0955:7214.0033: Registered Thunderstrike controller
[ 1128.648288][ T5913] shield 0003:0955:7214.0033: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0
[ 1128.685151][   T10] usb 5-1: config 0 descriptor??
[ 1128.827551][T17083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1128.844315][T17083] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1128.859980][T17083] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3344'.
[ 1128.874620][  T975] usb 4-1: USB disconnect, device number 97
[ 1128.877178][   T52] shield 0003:0955:7214.0033: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[ 1128.900089][   T52] shield 0003:0955:7214.0033: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1128.912019][   T52] shield 0003:0955:7214.0033: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1128.927424][   T52] shield 0003:0955:7214.0033: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1129.264969][T17101] binder: 17099:17101 ioctl c0046209 0 returned -22
[ 1129.305320][T17094] .: renamed from vlan1 (while UP)
[ 1129.859649][   T10] pegasus 5-1:0.0: probe with driver pegasus failed with error -71
[ 1129.949379][   T10] usb 5-1: USB disconnect, device number 110
[ 1130.050425][ T5816] usbhid 3-1:0.0: can't add hid device: -71
[ 1130.074559][ T5816] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1130.102447][ T5816] usb 3-1: USB disconnect, device number 86
[ 1130.814869][   T10] usb 4-1: new high-speed USB device number 98 using dummy_hcd
[ 1132.376162][   T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1132.411012][   T10] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1132.473337][   T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1132.503937][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1132.616607][   T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1132.640282][   T10] usb 4-1: invalid MIDI out EP 0
[ 1132.795780][T17132] bad cache= option: no%e
[ 1132.795780][T17132] 
[ 1132.802382][T17132] CIFS: VFS: bad cache= option: no%e
[ 1133.371741][   T10] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 1133.425430][   T10] usb 4-1: USB disconnect, device number 98
[ 1134.356755][  T975] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[ 1134.544210][  T975] usb 6-1: Using ep0 maxpacket: 16
[ 1134.558077][  T975] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=d3.06
[ 1134.598278][  T975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67
[ 1134.820626][  T975] usb 6-1: Product: syz
[ 1134.829697][  T975] usb 6-1: Manufacturer: syz
[ 1134.843388][  T975] usb 6-1: SerialNumber: syz
[ 1134.858028][  T975] r8152-cfgselector 6-1: Unknown version 0x0000
[ 1134.868079][  T975] r8152-cfgselector 6-1: config 0 descriptor??
[ 1135.108187][T17156] syz.2.3368: attempt to access beyond end of device
[ 1135.108187][T17156] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1135.222045][T17156] SQUASHFS error: Failed to read block 0x0: -5
[ 1135.230308][   T30] audit: type=1400 audit(1747108845.147:339): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=17159 comm="syz.4.3370" dest=20000
[ 1135.242044][T17156] unable to read squashfs_super_block
[ 1135.331657][T15813] r8152-cfgselector 6-1: USB disconnect, device number 24
[ 1136.555566][T17178] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1136.563235][T17178] UDF-fs: Scanning with blocksize 512 failed
[ 1136.573516][T17178] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1136.581907][T17178] UDF-fs: Scanning with blocksize 1024 failed
[ 1136.590599][T17178] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1136.598196][T17178] UDF-fs: Scanning with blocksize 2048 failed
[ 1136.607047][T17178] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1136.614642][T17178] UDF-fs: Scanning with blocksize 4096 failed
[ 1136.646079][T17178] bad cache= option: no%e
[ 1136.646079][T17178] 
[ 1136.652843][T17178] CIFS: VFS: bad cache= option: no%e
[ 1137.316795][   T30] audit: type=1400 audit(1747108847.237:340): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=17174 comm="syz.5.3376" dest=20000
[ 1137.587604][   T30] audit: type=1400 audit(1747108847.507:341): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=17190 comm="syz.4.3382" dest=20000
[ 1137.604164][  T975] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[ 1137.684136][ T5825] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[ 1137.780986][T17196] syz.4.3384: attempt to access beyond end of device
[ 1137.780986][T17196] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1137.798280][  T975] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1137.810696][T17196] SQUASHFS error: Failed to read block 0x0: -5
[ 1137.821600][  T975] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1137.837256][T17196] unable to read squashfs_super_block
[ 1137.852642][  T975] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1137.862155][  T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1138.028975][ T5825] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[ 1138.041096][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1138.053902][  T975] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1138.065102][ T5825] usb 6-1: config 0 descriptor??
[ 1138.071586][  T975] usb 3-1: invalid MIDI out EP 0
[ 1138.150046][T17201] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1138.157688][T17201] UDF-fs: Scanning with blocksize 512 failed
[ 1138.166996][T17201] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1138.174705][T17201] UDF-fs: Scanning with blocksize 1024 failed
[ 1138.183285][T17201] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1138.190903][T17201] UDF-fs: Scanning with blocksize 2048 failed
[ 1138.199114][T17201] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1138.208013][T17201] UDF-fs: Scanning with blocksize 4096 failed
[ 1138.235982][T17201] bad cache= option: no%e
[ 1138.235982][T17201] 
[ 1138.242584][T17201] CIFS: VFS: bad cache= option: no%e
[ 1138.672731][  T975] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 1138.711980][  T975] usb 3-1: USB disconnect, device number 87
[ 1138.950679][   T30] audit: type=1400 audit(1747108848.867:342): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=17209 comm="syz.0.3388" dest=20000
[ 1139.307765][T17216] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1139.315588][T17216] UDF-fs: Scanning with blocksize 512 failed
[ 1139.323912][T17216] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1139.332460][T17216] UDF-fs: Scanning with blocksize 1024 failed
[ 1139.341016][T17216] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1139.348694][T17216] UDF-fs: Scanning with blocksize 2048 failed
[ 1139.356417][T17216] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1139.364339][T17216] UDF-fs: Scanning with blocksize 4096 failed
[ 1139.386444][T17216] bad cache= option: no%e
[ 1139.386444][T17216] 
[ 1139.393121][T17216] CIFS: VFS: bad cache= option: no%e
[ 1140.657870][ T5825] pegasus 6-1:0.0: probe with driver pegasus failed with error -71
[ 1140.684510][ T5825] usb 6-1: USB disconnect, device number 25
[ 1140.734931][   T30] audit: type=1400 audit(1747108850.657:343): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=17230 comm="syz.3.3394" dest=20000
[ 1140.904158][ T5816] usb 5-1: new high-speed USB device number 111 using dummy_hcd
[ 1141.095897][T11473] usb 4-1: new high-speed USB device number 99 using dummy_hcd
[ 1141.134236][ T5816] usb 5-1: Using ep0 maxpacket: 16
[ 1141.185523][T17246] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1141.193117][T17246] UDF-fs: Scanning with blocksize 512 failed
[ 1141.203215][T17246] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1141.210831][T17246] UDF-fs: Scanning with blocksize 1024 failed
[ 1141.219834][T17246] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1141.227520][T17246] UDF-fs: Scanning with blocksize 2048 failed
[ 1141.236378][T17246] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1141.243976][T17246] UDF-fs: Scanning with blocksize 4096 failed
[ 1141.275368][T17246] bad cache= option: no%e
[ 1141.275368][T17246] 
[ 1141.281976][T17246] CIFS: VFS: bad cache= option: no%e
[ 1141.581632][ T5816] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1141.607882][ T5816] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1141.634727][ T5816] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1141.654330][T11473] usb 4-1: Using ep0 maxpacket: 16
[ 1141.662913][T11473] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1141.683026][ T5816] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[ 1141.695333][T11473] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1141.712502][ T5816] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1141.714056][T11473] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1141.727582][ T5816] usb 5-1: config 0 descriptor??
[ 1141.738873][T11473] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[ 1142.064356][T15813] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[ 1143.580816][T15813] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1143.959897][T11473] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1143.974856][T15813] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1143.997865][T15813] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1144.004966][T11473] usb 4-1: config 0 descriptor??
[ 1144.011162][T15813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1144.021151][ T5816] usbhid 5-1:0.0: can't add hid device: -71
[ 1144.032657][ T5816] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1144.041451][T11473] usb 4-1: can't set config #0, error -71
[ 1144.043608][T11473] usb 4-1: USB disconnect, device number 99
[ 1144.060236][T15813] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1144.103132][ T5816] usb 5-1: USB disconnect, device number 111
[ 1144.125438][T15813] usb 3-1: invalid MIDI out EP 0
[ 1144.230464][T15813] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 1144.313049][   T30] audit: type=1400 audit(1747108854.207:344): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=17266 comm="syz.0.3410" dest=20000
[ 1144.408654][T11473] usb 3-1: USB disconnect, device number 88
[ 1146.494336][ T5816] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[ 1146.724777][T17290] syz.0.3416: attempt to access beyond end of device
[ 1146.724777][T17290] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1146.772536][T17290] SQUASHFS error: Failed to read block 0x0: -5
[ 1146.954278][ T5816] usb 5-1: Using ep0 maxpacket: 16
[ 1147.319940][T17290] unable to read squashfs_super_block
[ 1147.364570][ T5816] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1147.375750][ T5816] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1147.385728][ T5816] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1147.401495][ T5816] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[ 1147.410690][ T5816] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1147.423046][ T5816] usb 5-1: config 0 descriptor??
[ 1147.695935][   T30] audit: type=1400 audit(1747108857.597:345): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=17302 comm="syz.0.3424" dest=20000
[ 1147.858729][ T5816] input: HID 0955:7214 Haptics as /devices/virtual/input/input55
[ 1147.896547][ T5816] shield 0003:0955:7214.0034: Registered Thunderstrike controller
[ 1147.915944][ T5816] shield 0003:0955:7214.0034: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0
[ 1148.466708][T17287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1148.497147][T17287] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1148.636077][T17287] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3417'.
[ 1148.821564][ T5916] shield 0003:0955:7214.0034: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[ 1148.840785][ T5816] usb 5-1: USB disconnect, device number 112
[ 1148.939819][ T5916] shield 0003:0955:7214.0034: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1149.544223][ T5916] shield 0003:0955:7214.0034: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1149.559855][ T5916] shield 0003:0955:7214.0034: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1150.732532][T17340] syz.3.3434: attempt to access beyond end of device
[ 1150.732532][T17340] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1150.820172][T17340] SQUASHFS error: Failed to read block 0x0: -5
[ 1150.831079][   T30] audit: type=1400 audit(1747108860.747:346): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=17345 comm="syz.2.3437" dest=20000
[ 1151.145217][T17340] unable to read squashfs_super_block
[ 1154.394202][ T5825] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[ 1154.575230][ T5825] usb 6-1: Using ep0 maxpacket: 16
[ 1154.605937][   T30] audit: type=1400 audit(1747108864.497:347): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=17385 comm="syz.2.3451" dest=20000
[ 1154.756032][ T5825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1154.774743][ T5825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1154.845083][ T5825] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1154.918597][ T5825] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[ 1154.926118][T17392] syz.3.3453: attempt to access beyond end of device
[ 1154.926118][T17392] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1154.941769][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1155.065326][T17392] SQUASHFS error: Failed to read block 0x0: -5
[ 1155.149503][T17392] unable to read squashfs_super_block
[ 1155.163156][ T5825] usb 6-1: config 0 descriptor??
[ 1155.345159][ T5913] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[ 1155.525647][ T5913] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1155.547627][ T5913] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1155.613751][ T5825] input: HID 0955:7214 Haptics as /devices/virtual/input/input56
[ 1155.704614][ T5825] shield 0003:0955:7214.0035: Registered Thunderstrike controller
[ 1155.746629][ T5913] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1155.747634][ T5825] shield 0003:0955:7214.0035: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0
[ 1155.756403][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1155.789664][ T5913] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1155.801310][T17374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1155.810687][ T5913] usb 3-1: invalid MIDI out EP 0
[ 1155.814849][T17374] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1156.312110][T17374] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.3446'.
[ 1156.383579][ T5825] shield 0003:0955:7214.0035: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[ 1156.656513][  T975] usb 6-1: USB disconnect, device number 26
[ 1156.675578][ T5825] shield 0003:0955:7214.0035: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1156.682085][T17416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3462'.
[ 1156.687277][ T5825] shield 0003:0955:7214.0035: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1156.790205][ T5825] shield 0003:0955:7214.0035: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1156.838472][ T5913] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 1156.877995][ T5913] usb 3-1: USB disconnect, device number 89
[ 1156.903048][   T30] audit: type=1400 audit(1747108866.817:348): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=17420 comm="syz.3.3464" dest=20000
[ 1157.713752][T17441] syz.5.3469: attempt to access beyond end of device
[ 1157.713752][T17441] nbd5: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1157.732948][T17441] SQUASHFS error: Failed to read block 0x0: -5
[ 1157.740151][T17441] unable to read squashfs_super_block
[ 1158.044127][ T5913] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[ 1158.264360][ T5913] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[ 1158.362573][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1158.568696][ T5913] usb 1-1: config 0 descriptor??
[ 1158.632682][T17429] kexec: Could not allocate control_code_buffer
[ 1158.733958][T17454] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ00000000000000000000ÿÿÿÿÿÿÿÿ0xffffffffffffffff'
[ 1159.024564][   T30] audit: type=1400 audit(1747108868.927:349): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=17455 comm="syz.3.3476" dest=20000
[ 1159.744837][T11473] usb 4-1: new high-speed USB device number 100 using dummy_hcd
[ 1160.001414][T17477] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 1160.738575][T11473] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1160.805121][T11473] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1160.835874][T11473] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1160.875432][T11473] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1160.876004][ T5913] pegasus 1-1:0.0: probe with driver pegasus failed with error -71
[ 1160.958736][ T5913] usb 1-1: USB disconnect, device number 84
[ 1161.001506][T11473] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1161.019917][T11473] usb 4-1: invalid MIDI out EP 0
[ 1161.483135][T11473] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 1161.599391][ T5913] usb 4-1: USB disconnect, device number 100
[ 1161.750708][T17492] syz.4.3485: attempt to access beyond end of device
[ 1161.750708][T17492] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1161.774791][T17492] SQUASHFS error: Failed to read block 0x0: -5
[ 1161.781046][T17492] unable to read squashfs_super_block
[ 1161.895215][T17493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3486'.
[ 1167.502394][   T30] audit: type=1400 audit(1747108877.177:350): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=17510 comm="syz.0.3490" dest=20000
[ 1173.346129][T17538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3500'.
[ 1173.666395][   T30] audit: type=1400 audit(1747108883.587:351): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=17557 comm="syz.4.3505" dest=20000
[ 1173.819008][T17559] syz.2.3502: attempt to access beyond end of device
[ 1173.819008][T17559] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1173.842154][T17559] SQUASHFS error: Failed to read block 0x0: -5
[ 1173.852397][T17559] unable to read squashfs_super_block
[ 1176.107725][ T5816] usb 5-1: new high-speed USB device number 113 using dummy_hcd
[ 1176.282321][T17579] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1176.289934][T17579] UDF-fs: Scanning with blocksize 512 failed
[ 1176.297854][T17579] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1176.305387][T17579] UDF-fs: Scanning with blocksize 1024 failed
[ 1176.311944][T17579] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1176.319511][T17579] UDF-fs: Scanning with blocksize 2048 failed
[ 1176.326188][T17579] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1176.333684][T17579] UDF-fs: Scanning with blocksize 4096 failed
[ 1176.334855][T17584] bad cache= option: no%e
[ 1176.334855][T17584] 
[ 1176.346408][T17584] CIFS: VFS: bad cache= option: no%e
[ 1176.424210][ T5816] usb 5-1: Using ep0 maxpacket: 16
[ 1176.468942][T17585] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 1176.481747][T17585] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1176.489537][T17585] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1177.091813][  T975] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[ 1177.101700][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.138017][ T5816] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=d3.06
[ 1177.175609][ T5816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67
[ 1177.200560][ T5816] usb 5-1: Product: syz
[ 1177.343192][ T5816] usb 5-1: Manufacturer: syz
[ 1177.357227][ T5816] usb 5-1: SerialNumber: syz
[ 1177.364287][  T975] usb 6-1: Using ep0 maxpacket: 32
[ 1177.366436][ T5816] r8152-cfgselector 5-1: Unknown version 0x0000
[ 1177.375942][ T5816] r8152-cfgselector 5-1: config 0 descriptor??
[ 1177.379811][  T975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1177.398515][  T975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1177.410286][  T975] usb 6-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00
[ 1177.425029][  T975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1177.438052][  T975] usb 6-1: config 0 descriptor??
[ 1177.810307][   T30] audit: type=1400 audit(1747108887.727:352): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=17595 comm="syz.2.3516" dest=20000
[ 1177.889085][ T5825] r8152-cfgselector 5-1: USB disconnect, device number 113
[ 1177.961555][  T975] usbhid 6-1:0.0: can't add hid device: -71
[ 1177.968164][  T975] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1177.979466][  T975] usb 6-1: USB disconnect, device number 27
[ 1179.334251][T11473] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[ 1180.075635][T17616] syz.0.3522: attempt to access beyond end of device
[ 1180.075635][T17616] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1180.090994][T17616] SQUASHFS error: Failed to read block 0x0: -5
[ 1180.099097][T17616] unable to read squashfs_super_block
[ 1180.167679][T11473] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1180.177944][T11473] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[ 1180.191034][T11473] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1180.204125][T11473] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1180.215623][T11473] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1180.239129][T11473] usb 3-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41
[ 1180.248568][T11473] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1180.258273][T11473] usb 3-1: Product: syz
[ 1180.265164][T11473] usb 3-1: Manufacturer: syz
[ 1180.270411][T11473] usb 3-1: SerialNumber: syz
[ 1180.279579][T11473] usb 3-1: config 0 descriptor??
[ 1180.501644][T11473] usb 3-1: ucan: probing device on interface #0
[ 1180.534151][T11473] usb 3-1: ucan: invalid EP count (1)
[ 1180.539989][T11473] usb 3-1: ucan: probe failed; try to update the device firmware
[ 1180.722293][T11473] usb 3-1: USB disconnect, device number 90
[ 1181.094120][   T30] audit: type=1400 audit(1747108891.007:353): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=17626 comm="syz.3.3527" dest=20000
[ 1182.804130][   T52] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[ 1182.897091][T17654] syz.4.3536: attempt to access beyond end of device
[ 1182.897091][T17654] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1182.943542][T17654] SQUASHFS error: Failed to read block 0x0: -5
[ 1182.964858][T17654] unable to read squashfs_super_block
[ 1183.383736][T17662] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1183.993569][T17666] IPVS: persistence engine module ip_vs_pe_Ž
 not found
[ 1185.056395][   T30] audit: type=1400 audit(1747108894.977:354): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=17671 comm="syz.3.3540" dest=20000
[ 1186.120373][   T52] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1186.190754][   T52] usb 1-1: unable to read config index 0 descriptor/start: -71
[ 1186.459832][   T52] usb 1-1: can't read configurations, error -71
[ 1187.232315][T17694] syz.0.3547: attempt to access beyond end of device
[ 1187.232315][T17694] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1187.325471][T17694] SQUASHFS error: Failed to read block 0x0: -5
[ 1187.331918][T17694] unable to read squashfs_super_block
[ 1187.477118][T17700] syz.5.3548: attempt to access beyond end of device
[ 1187.477118][T17700] nbd5: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1187.517664][T17700] SQUASHFS error: Failed to read block 0x0: -5
[ 1187.537703][T17700] unable to read squashfs_super_block
[ 1187.847846][ T5913] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[ 1188.689113][   T30] audit: type=1400 audit(1747108898.607:355): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=17708 comm="syz.2.3552" dest=20000
[ 1188.734288][ T5913] usb 4-1: Using ep0 maxpacket: 16
[ 1188.751651][ T5913] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=d3.06
[ 1188.775145][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67
[ 1188.798979][ T5913] usb 4-1: Product: syz
[ 1188.803176][ T5913] usb 4-1: Manufacturer: syz
[ 1188.824464][ T5913] usb 4-1: SerialNumber: syz
[ 1188.846010][ T5913] r8152-cfgselector 4-1: Unknown version 0x0000
[ 1188.854147][ T5913] r8152-cfgselector 4-1: config 0 descriptor??
[ 1189.124126][T11473] usb 5-1: new high-speed USB device number 114 using dummy_hcd
[ 1189.313922][ T5913] r8152-cfgselector 4-1: USB disconnect, device number 101
[ 1190.146722][T17727] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1191.415005][T17733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3561'.
[ 1191.441827][T17729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3559'.
[ 1192.484142][T11473] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1192.494952][T11473] usb 5-1: unable to read config index 0 descriptor/start: -71
[ 1192.502648][T11473] usb 5-1: can't read configurations, error -71
[ 1192.534577][T17743] syz.0.3564: attempt to access beyond end of device
[ 1192.534577][T17743] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1192.605220][T17743] SQUASHFS error: Failed to read block 0x0: -5
[ 1192.672492][T17743] unable to read squashfs_super_block
[ 1193.757729][T17759] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 1193.944056][   T30] audit: type=1400 audit(1747108903.607:356): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=17748 comm="syz.4.3566" dest=20000
[ 1194.266307][T17764] binder: 17762:17764 ioctl c0306201 0 returned -14
[ 1195.102607][  T975] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[ 1195.254096][  T975] usb 3-1: Using ep0 maxpacket: 16
[ 1195.283883][  T975] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[ 1195.293014][  T975] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1195.304102][  T975] usb 3-1: config 0 has no interface number 0
[ 1195.460734][  T975] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[ 1195.512581][  T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1195.537827][  T975] usb 3-1: Product: syz
[ 1195.581803][  T975] usb 3-1: Manufacturer: syz
[ 1195.588883][  T975] usb 3-1: SerialNumber: syz
[ 1195.599074][  T975] usb 3-1: config 0 descriptor??
[ 1195.607052][  T975] usb 3-1: Found UVC 0.00 device syz (046d:08f3)
[ 1195.613607][  T975] usb 3-1: No valid video chain found.
[ 1195.811400][  T975] usb 3-1: USB disconnect, device number 91
[ 1195.847045][    C1] vcan0: j1939_tp_rxtimer: 0xffff88807d539c00: rx timeout, send abort
[ 1196.355323][    C1] vcan0: j1939_tp_rxtimer: 0xffff88807d539c00: abort rx timeout. Force session deactivation
[ 1196.698921][T17793] syz.0.3579: attempt to access beyond end of device
[ 1196.698921][T17793] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1196.713585][T17793] SQUASHFS error: Failed to read block 0x0: -5
[ 1196.722445][T17793] unable to read squashfs_super_block
[ 1196.845816][ T5916] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[ 1196.963300][T17799] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ00000000000000000000ÿÿÿÿÿÿÿÿ0xffffffffffffffff'
[ 1197.191781][T17800] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1197.250860][T17801] ntfs3(nullb0): Primary boot signature is not NTFS.
[ 1197.265052][T17801] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[ 1197.895402][   T30] audit: type=1400 audit(1747108907.807:357): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=17803 comm="syz.2.3582" dest=20000
[ 1199.724545][ T5916] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1199.730782][T17821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3588'.
[ 1199.760385][ T5916] usb 5-1: unable to read config index 0 descriptor/start: -71
[ 1199.784705][ T5916] usb 5-1: can't read configurations, error -71
[ 1199.873251][T17826] syz.2.3590: attempt to access beyond end of device
[ 1199.873251][T17826] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1199.886761][T17826] SQUASHFS error: Failed to read block 0x0: -5
[ 1199.892960][T17826] unable to read squashfs_super_block
[ 1200.324186][ T5913] usb 3-1: new high-speed USB device number 92 using dummy_hcd
[ 1200.481694][    C1] vcan0: j1939_tp_rxtimer: 0xffff888079305400: rx timeout, send abort
[ 1200.654096][ T5913] usb 3-1: Using ep0 maxpacket: 16
[ 1200.663598][ T5913] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=d3.06
[ 1200.698984][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67
[ 1200.708490][ T5913] usb 3-1: Product: syz
[ 1200.712780][ T5913] usb 3-1: Manufacturer: syz
[ 1200.717858][ T5913] usb 3-1: SerialNumber: syz
[ 1200.741025][ T5913] r8152-cfgselector 3-1: Unknown version 0x0000
[ 1200.747555][ T5913] r8152-cfgselector 3-1: config 0 descriptor??
[ 1200.791142][   T30] audit: type=1400 audit(1747108910.707:358): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=17841 comm="syz.5.3596" dest=20000
[ 1200.989973][    C1] vcan0: j1939_tp_rxtimer: 0xffff888079305400: abort rx timeout. Force session deactivation
[ 1201.173107][ T5913] r8152-cfgselector 3-1: USB disconnect, device number 92
[ 1201.178360][T17856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3603'.
[ 1201.216635][ T5916] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[ 1201.613450][   T30] audit: type=1400 audit(1747108911.527:359): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=17866 comm="syz.0.3607" dest=20000
[ 1201.701029][T17868] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1203.204103][  T975] usb 3-1: new high-speed USB device number 93 using dummy_hcd
[ 1203.923826][  T975] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[ 1204.014134][  T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1204.024969][  T975] usb 3-1: config 0 descriptor??
[ 1204.030986][ T5916] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1204.065428][ T5916] usb 6-1: unable to read config index 0 descriptor/start: -71
[ 1204.101664][ T5916] usb 6-1: can't read configurations, error -71
[ 1204.124866][T17890] syz.0.3614: attempt to access beyond end of device
[ 1204.124866][T17890] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1204.197007][T17890] SQUASHFS error: Failed to read block 0x0: -5
[ 1204.203527][T17890] unable to read squashfs_super_block
[ 1204.395217][   T30] audit: type=1400 audit(1747108914.317:360): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=17897 comm="syz.5.3618" dest=20000
[ 1204.414557][ T5913] usb 4-1: new high-speed USB device number 102 using dummy_hcd
[ 1204.434266][T17900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3617'.
[ 1204.604222][ T5913] usb 4-1: Using ep0 maxpacket: 32
[ 1204.612146][ T5913] usb 4-1: config 0 has an invalid interface number: 19 but max is 0
[ 1204.643284][ T5913] usb 4-1: config 0 has no interface number 0
[ 1204.651834][T17883] .: renamed from vlan1 (while UP)
[ 1204.659864][ T5913] usb 4-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1204.684977][ T5913] usb 4-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16
[ 1204.704289][ T5913] usb 4-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81
[ 1204.744532][ T5913] usb 4-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024
[ 1204.771107][ T5913] usb 4-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024
[ 1204.791799][ T5913] usb 4-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1204.810697][ T5913] usb 4-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57
[ 1204.823697][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1204.840751][ T5913] usb 4-1: Product: syz
[ 1204.846298][ T5913] usb 4-1: Manufacturer: syz
[ 1204.851023][ T5913] usb 4-1: SerialNumber: syz
[ 1204.862792][ T5913] usb 4-1: config 0 descriptor??
[ 1204.877542][T17885] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1204.886028][T17885] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1204.900808][ T5913] ipaq 4-1:0.19: PocketPC PDA converter detected
[ 1204.915304][ T5913] usb 4-1: active config #0 != 1 ??
[ 1204.954233][ T5916] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[ 1205.099315][  T975] pegasus 3-1:0.0: probe with driver pegasus failed with error -71
[ 1205.115826][ T5916] usb 6-1: Using ep0 maxpacket: 16
[ 1205.132820][ T5916] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=d3.06
[ 1205.144828][  T975] usb 3-1: USB disconnect, device number 93
[ 1205.173845][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67
[ 1205.202760][ T5916] usb 6-1: Product: syz
[ 1205.215017][ T5913] usb 4-1: USB disconnect, device number 102
[ 1205.232242][ T5916] usb 6-1: Manufacturer: syz
[ 1205.253883][ T5916] usb 6-1: SerialNumber: syz
[ 1205.270728][ T5916] r8152-cfgselector 6-1: Unknown version 0x0000
[ 1205.294064][ T5916] r8152-cfgselector 6-1: config 0 descriptor??
[ 1205.711505][  T975] r8152-cfgselector 6-1: USB disconnect, device number 29
[ 1205.904348][ T5916] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[ 1206.343408][T17922] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1206.351498][T17922] UDF-fs: Scanning with blocksize 512 failed
[ 1206.358191][T17922] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1206.365823][T17922] UDF-fs: Scanning with blocksize 1024 failed
[ 1206.372379][T17922] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1206.379944][T17922] UDF-fs: Scanning with blocksize 2048 failed
[ 1206.386524][T17922] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1206.395381][T17922] UDF-fs: Scanning with blocksize 4096 failed
[ 1206.414364][T17923] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1206.420534][T17922] bad cache= option: no%e
[ 1206.420534][T17922] 
[ 1206.429166][T17922] CIFS: VFS: bad cache= option: no%e
[ 1207.497292][   T30] audit: type=1400 audit(1747108917.417:361): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=17928 comm="syz.5.3629" dest=20000
[ 1209.354192][ T5916] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1209.432943][ T5916] usb 1-1: unable to read config index 0 descriptor/start: -71
[ 1209.450834][ T5916] usb 1-1: can't read configurations, error -71
[ 1209.726293][  T975] usb 4-1: new high-speed USB device number 103 using dummy_hcd
[ 1210.914608][  T975] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[ 1211.024090][  T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1211.082969][  T975] usb 4-1: config 0 descriptor??
[ 1211.284399][ T5913] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[ 1211.294262][ T5816] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[ 1211.331215][   T30] audit: type=1400 audit(1747108921.247:362): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=17962 comm="syz.5.3641" dest=20000
[ 1211.431921][T17967] netlink: 'syz.5.3643': attribute type 72 has an invalid length.
[ 1211.465481][ T5913] usb 3-1: Using ep0 maxpacket: 16
[ 1211.473836][ T5816] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1211.509263][ T5816] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1211.531645][ T5816] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1211.542990][ T5816] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1211.551795][ T5913] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=d3.06
[ 1211.567633][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67
[ 1211.576917][ T5913] usb 3-1: Product: syz
[ 1211.581118][ T5913] usb 3-1: Manufacturer: syz
[ 1211.594858][ T5913] usb 3-1: SerialNumber: syz
[ 1211.607969][ T5816] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1211.619211][ T5913] r8152-cfgselector 3-1: Unknown version 0x0000
[ 1211.628202][ T5816] usb 5-1: invalid MIDI out EP 0
[ 1211.634212][ T5913] r8152-cfgselector 3-1: config 0 descriptor??
[ 1211.702788][ T5816] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 1211.719285][T17947] .: renamed from vlan1 (while UP)
[ 1211.744213][ T5825] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[ 1211.859584][ T5913] usb 5-1: USB disconnect, device number 118
[ 1212.062036][ T5832] r8152-cfgselector 3-1: USB disconnect, device number 94
[ 1212.139838][  T975] pegasus 4-1:0.0: probe with driver pegasus failed with error -71
[ 1212.151761][  T975] usb 4-1: USB disconnect, device number 103
[ 1212.241720][T17971] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1214.484335][  T975] usb 5-1: new high-speed USB device number 119 using dummy_hcd
[ 1214.535351][ T5825] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1214.593034][ T5825] usb 6-1: unable to read config index 0 descriptor/start: -71
[ 1214.622154][ T5825] usb 6-1: can't read configurations, error -71
[ 1214.674443][  T975] usb 5-1: Using ep0 maxpacket: 32
[ 1214.681805][  T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1214.702194][  T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1214.725600][  T975] usb 5-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00
[ 1214.748072][  T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1214.766939][  T975] usb 5-1: config 0 descriptor??
[ 1214.829125][T17965] kexec: Could not allocate control_code_buffer
[ 1214.998892][   T30] audit: type=1400 audit(1747108924.917:363): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=17996 comm="syz.0.3653" dest=20000
[ 1215.562668][  T975] usbhid 5-1:0.0: can't add hid device: -71
[ 1215.569383][  T975] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1215.605546][  T975] usb 5-1: USB disconnect, device number 119
[ 1217.886408][   T52] usb 1-1: new high-speed USB device number 89 using dummy_hcd
[ 1218.054413][   T52] usb 1-1: Using ep0 maxpacket: 16
[ 1220.005844][   T52] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=d3.06
[ 1220.015431][   T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67
[ 1220.120499][   T52] usb 1-1: Product: syz
[ 1220.202719][   T52] usb 1-1: Manufacturer: syz
[ 1222.154228][T18030] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 1223.837230][   T52] r8152-cfgselector 1-1: Unknown version 0x0000
[ 1223.843598][   T52] r8152-cfgselector 1-1: config 0 descriptor??
[ 1224.216075][   T30] audit: type=1400 audit(1747108933.637:364): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=18031 comm="syz.5.3664" dest=20000
[ 1224.264214][   T52] r8152-cfgselector 1-1: can't set config #0, error -71
[ 1224.303169][   T52] r8152-cfgselector 1-1: USB disconnect, device number 89
[ 1226.127521][ T5825] usb 4-1: new high-speed USB device number 104 using dummy_hcd
[ 1226.297386][ T5825] usb 4-1: Using ep0 maxpacket: 32
[ 1226.356507][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1226.378657][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1226.415157][ T5825] usb 4-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00
[ 1226.438860][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1226.477115][ T5825] usb 4-1: config 0 descriptor??
[ 1226.902472][ T5825] usbhid 4-1:0.0: can't add hid device: -71
[ 1226.909394][ T5825] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1226.932837][ T5825] usb 4-1: USB disconnect, device number 104
[ 1227.266159][   T30] audit: type=1400 audit(1747108937.167:365): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=18070 comm="syz.5.3677" dest=20000
[ 1227.333666][   T52] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[ 1227.683200][   T52] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[ 1227.771962][   T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1228.236149][   T52] usb 5-1: config 0 descriptor??
[ 1229.357688][T18083] binder: 18079:18083 ioctl c0046209 0 returned -22
[ 1229.821873][   T52] pegasus 5-1:0.0: probe with driver pegasus failed with error -71
[ 1229.833119][   T52] usb 5-1: USB disconnect, device number 120
[ 1230.668051][ T5825] usb 5-1: new high-speed USB device number 121 using dummy_hcd
[ 1231.109764][T18116] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1231.284118][ T5832] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[ 1231.454256][ T5832] usb 3-1: Using ep0 maxpacket: 32
[ 1231.493173][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1231.544087][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1231.580440][ T5832] usb 3-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00
[ 1231.603514][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1231.637368][ T5832] usb 3-1: config 0 descriptor??
[ 1232.541203][ T5832] usbhid 3-1:0.0: can't add hid device: -71
[ 1232.547375][ T5832] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1232.557594][ T5832] usb 3-1: USB disconnect, device number 95
[ 1232.944332][   T52] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[ 1233.104387][   T52] usb 6-1: Using ep0 maxpacket: 32
[ 1233.135253][   T52] usb 6-1: config 0 has an invalid interface number: 19 but max is 0
[ 1233.143398][   T52] usb 6-1: config 0 has no interface number 0
[ 1233.154889][   T52] usb 6-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1233.164316][ T5832] usb 1-1: new high-speed USB device number 90 using dummy_hcd
[ 1233.178332][   T52] usb 6-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16
[ 1233.188620][   T52] usb 6-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81
[ 1233.205469][   T52] usb 6-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024
[ 1233.219177][   T52] usb 6-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024
[ 1233.237325][   T52] usb 6-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1233.258014][   T52] usb 6-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57
[ 1233.268304][   T52] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1233.276635][   T52] usb 6-1: Product: syz
[ 1233.281107][   T52] usb 6-1: Manufacturer: syz
[ 1233.285846][   T52] usb 6-1: SerialNumber: syz
[ 1233.309979][   T52] usb 6-1: config 0 descriptor??
[ 1233.317069][T18109] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1233.324592][T18109] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1233.337427][   T52] ipaq 6-1:0.19: PocketPC PDA converter detected
[ 1233.353371][   T52] usb 6-1: active config #0 != 1 ??
[ 1233.364357][  T975] usb 3-1: new high-speed USB device number 96 using dummy_hcd
[ 1233.374869][ T5832] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[ 1233.396831][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1233.422647][ T5832] usb 1-1: config 0 descriptor??
[ 1233.482265][ T5825] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1233.494403][ T5825] usb 5-1: unable to read config index 0 descriptor/start: -71
[ 1233.510854][ T5825] usb 5-1: can't read configurations, error -71
[ 1233.567029][  T975] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[ 1233.597229][  T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1233.625329][  T975] usb 3-1: config 0 descriptor??
[ 1233.635968][T18123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3693'.
[ 1234.754302][T11473] usb 6-1: USB disconnect, device number 32
[ 1235.196893][ T5832] pegasus 1-1:0.0: probe with driver pegasus failed with error -71
[ 1235.216322][ T5832] usb 1-1: USB disconnect, device number 90
[ 1235.258561][  T975] pegasus 3-1:0.0: probe with driver pegasus failed with error -71
[ 1235.291321][  T975] usb 3-1: USB disconnect, device number 96
[ 1235.366597][T18143] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3699'.
[ 1235.674241][T18148] ntfs3(nullb0): Primary boot signature is not NTFS.
[ 1235.706157][T18148] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[ 1236.464337][  T975] usb 1-1: new high-speed USB device number 91 using dummy_hcd
[ 1236.472120][ T5832] usb 3-1: new high-speed USB device number 97 using dummy_hcd
[ 1236.762433][  T975] usb 1-1: Using ep0 maxpacket: 32
[ 1237.144281][  T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1237.164150][  T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1237.276232][  T975] usb 1-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00
[ 1237.320484][  T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1237.383299][  T975] usb 1-1: config 0 descriptor??
[ 1237.474501][T18167] syz.4.3706: attempt to access beyond end of device
[ 1237.474501][T18167] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1237.620394][T18156] fuse: Bad value for 'fd'
[ 1237.676327][T18170] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1237.922332][T18167] SQUASHFS error: Failed to read block 0x0: -5
[ 1238.110957][T18167] unable to read squashfs_super_block
[ 1238.145255][  T975] usbhid 1-1:0.0: can't add hid device: -71
[ 1238.155474][  T975] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1238.193621][  T975] usb 1-1: USB disconnect, device number 91
[ 1238.470571][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.619350][T18188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3710'.
[ 1239.268283][ T5832] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1239.334154][ T5832] usb 3-1: unable to read config index 0 descriptor/start: -71
[ 1239.341754][ T5832] usb 3-1: can't read configurations, error -71
[ 1239.714276][ T5913] usb 5-1: new high-speed USB device number 123 using dummy_hcd
[ 1240.057553][ T5913] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[ 1240.074125][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1240.095112][ T5913] usb 5-1: config 0 descriptor??
[ 1241.014448][   T52] usb 1-1: new high-speed USB device number 92 using dummy_hcd
[ 1241.204089][   T52] usb 1-1: Using ep0 maxpacket: 32
[ 1241.229489][   T52] usb 1-1: config 0 has an invalid interface number: 19 but max is 0
[ 1241.244037][   T52] usb 1-1: config 0 has no interface number 0
[ 1241.250317][   T52] usb 1-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1241.274223][   T52] usb 1-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16
[ 1241.303845][   T52] usb 1-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81
[ 1241.328157][ T5913] pegasus 5-1:0.0: probe with driver pegasus failed with error -71
[ 1241.355323][ T5913] usb 5-1: USB disconnect, device number 123
[ 1241.361467][   T52] usb 1-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024
[ 1241.395887][   T52] usb 1-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024
[ 1241.406728][   T52] usb 1-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1241.432243][   T52] usb 1-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57
[ 1241.442084][   T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1241.452181][   T52] usb 1-1: Product: syz
[ 1241.456731][  T975] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[ 1241.457870][   T52] usb 1-1: Manufacturer: syz
[ 1241.469589][   T52] usb 1-1: SerialNumber: syz
[ 1241.493514][   T52] usb 1-1: config 0 descriptor??
[ 1241.501677][T18201] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1241.532906][T18201] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1241.571515][   T52] ipaq 1-1:0.19: PocketPC PDA converter detected
[ 1241.580673][   T52] usb 1-1: active config #0 != 1 ??
[ 1241.634232][ T5832] usb 3-1: new high-speed USB device number 99 using dummy_hcd
[ 1241.655680][  T975] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1241.668596][  T975] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1241.692327][  T975] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1241.714061][  T975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1241.748509][  T975] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1241.765534][  T975] usb 6-1: invalid MIDI out EP 0
[ 1241.784058][ T5832] usb 3-1: Using ep0 maxpacket: 32
[ 1241.808192][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1241.867057][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1241.927567][ T5832] usb 3-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00
[ 1241.955505][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1241.980760][  T975] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 1241.992028][ T5832] usb 3-1: config 0 descriptor??
[ 1242.739956][T18222] fuse: Bad value for 'fd'
[ 1243.260162][ T5832] usbhid 3-1:0.0: can't add hid device: -71
[ 1243.266991][   T52] usb 1-1: USB disconnect, device number 92
[ 1243.278335][ T5832] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1243.304853][  T975] usb 6-1: USB disconnect, device number 33
[ 1243.317102][ T5832] usb 3-1: USB disconnect, device number 99
[ 1245.674265][ T9577] Bluetooth: hci3: command 0x0406 tx timeout
[ 1245.954872][T18255] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3734'.
[ 1247.474647][ T5816] usb 1-1: new high-speed USB device number 93 using dummy_hcd
[ 1247.665974][ T5816] usb 1-1: Using ep0 maxpacket: 32
[ 1247.692414][ T5816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1247.719216][ T5816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1247.739893][ T5816] usb 1-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00
[ 1247.931944][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1247.992843][ T5816] usb 1-1: config 0 descriptor??
[ 1248.302472][T18261] fuse: Bad value for 'fd'
[ 1248.790812][ T5816] usbhid 1-1:0.0: can't add hid device: -71
[ 1248.798671][ T5816] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1248.806462][ T5832] usb 4-1: new high-speed USB device number 105 using dummy_hcd
[ 1248.817285][ T5816] usb 1-1: USB disconnect, device number 93
[ 1248.967217][ T5832] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[ 1248.990594][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1249.029691][ T5832] usb 4-1: config 0 descriptor??
[ 1249.038333][T18283] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ00000000000000000000ÿÿÿÿÿÿÿÿ0xffffffffffffffff'
[ 1249.184935][ T5825] usb 3-1: new high-speed USB device number 100 using dummy_hcd
[ 1249.321540][T18284] ntfs3(nullb0): Primary boot signature is not NTFS.
[ 1249.332606][T18284] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[ 1249.702095][ T5825] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1249.723742][ T5825] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1249.784356][ T5825] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1249.814660][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1249.850379][ T5825] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1249.870379][ T5825] usb 3-1: invalid MIDI out EP 0
[ 1249.879354][T18294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3747'.
[ 1249.971831][ T5825] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 1250.739335][ T5816] usb 3-1: USB disconnect, device number 100
[ 1250.945456][T18306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3748'.
[ 1251.373305][ T5832] pegasus 4-1:0.0: probe with driver pegasus failed with error -71
[ 1251.388323][ T5832] usb 4-1: USB disconnect, device number 105
[ 1251.804415][ T5816] usb 1-1: new full-speed USB device number 94 using dummy_hcd
[ 1253.350251][   T30] audit: type=1400 audit(1747108963.267:366): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=18317 comm="syz.3.3755" dest=20000
[ 1253.438134][ T5816] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84
[ 1253.456318][ T5816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 47999, setting to 64
[ 1253.482893][ T5816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1253.614207][ T5825] usb 5-1: new high-speed USB device number 124 using dummy_hcd
[ 1254.536377][ T5816] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1
[ 1254.556444][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1254.574035][ T5816] usb 1-1: Product: syz
[ 1254.578247][ T5816] usb 1-1: Manufacturer: syz
[ 1254.583411][ T5816] usb 1-1: SerialNumber: syz
[ 1254.592130][ T5816] usb 1-1: config 0 descriptor??
[ 1254.597949][ T5816] usb 1-1: can't set config #0, error -71
[ 1254.606173][ T5816] usb 1-1: USB disconnect, device number 94
[ 1254.684233][ T5825] usb 5-1: Using ep0 maxpacket: 32
[ 1254.708155][ T5825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1254.763428][T18339] syz.2.3761: attempt to access beyond end of device
[ 1254.763428][T18339] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1254.780930][ T5825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1254.784296][T18339] SQUASHFS error: Failed to read block 0x0: -5
[ 1254.830562][T18339] unable to read squashfs_super_block
[ 1254.858562][ T5825] usb 5-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00
[ 1254.868625][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1254.889023][ T5825] usb 5-1: config 0 descriptor??
[ 1257.162791][    C1] vcan0: j1939_tp_rxtimer: 0xffff88807870f800: rx timeout, send abort
[ 1257.395625][ T5825] usbhid 5-1:0.0: can't add hid device: -71
[ 1257.450636][ T5825] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1257.451069][T18360] syz.0.3765: attempt to access beyond end of device
[ 1257.451069][T18360] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1257.474290][ T5825] usb 5-1: USB disconnect, device number 124
[ 1257.476023][T18360] SQUASHFS error: Failed to read block 0x0: -5
[ 1257.489310][T18360] unable to read squashfs_super_block
[ 1257.671144][    C1] vcan0: j1939_tp_rxtimer: 0xffff88807870f800: abort rx timeout. Force session deactivation
[ 1257.857103][   T30] audit: type=1400 audit(1747108967.777:367): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=18365 comm="syz.0.3768" dest=20000
[ 1257.940918][T18370] binder: 18368:18370 ioctl c0306201 0 returned -14
[ 1258.124640][T18376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3772'.
[ 1258.374074][ T5825] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[ 1258.694127][ T5825] usb 6-1: Using ep0 maxpacket: 16
[ 1258.711996][ T5825] usb 6-1: config 0 has an invalid interface number: 105 but max is 0
[ 1258.746385][ T5825] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1258.779182][ T5825] usb 6-1: config 0 has no interface number 0
[ 1258.802053][ T5825] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[ 1258.819498][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1258.848202][ T5825] usb 6-1: Product: syz
[ 1258.861628][ T5825] usb 6-1: Manufacturer: syz
[ 1258.877258][ T5825] usb 6-1: SerialNumber: syz
[ 1258.912388][ T5825] usb 6-1: config 0 descriptor??
[ 1258.952140][ T5825] usb 6-1: Found UVC 0.00 device syz (046d:08f3)
[ 1258.964043][ T5825] usb 6-1: No valid video chain found.
[ 1260.443377][ T5916] usb 6-1: USB disconnect, device number 34
[ 1260.801830][T18396] syz.4.3778: attempt to access beyond end of device
[ 1260.801830][T18396] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1260.857411][T18396] SQUASHFS error: Failed to read block 0x0: -5
[ 1260.881480][T18396] unable to read squashfs_super_block
[ 1260.994256][ T5825] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[ 1261.178362][ T5825] usb 4-1: Using ep0 maxpacket: 16
[ 1262.145503][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1262.874949][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1262.908717][ T5825] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1262.951561][   T30] audit: type=1400 audit(1747108972.867:368): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=18409 comm="syz.4.3782" dest=20000
[ 1262.973378][ T5825] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[ 1263.137313][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807e88ac00: rx timeout, send abort
[ 1263.535783][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1263.594515][ T5825] usb 4-1: config 0 descriptor??
[ 1263.645562][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807e88ac00: abort rx timeout. Force session deactivation
[ 1264.144630][ T5825] usbhid 4-1:0.0: can't add hid device: -71
[ 1264.150706][ T5825] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1264.302137][ T5825] usb 4-1: USB disconnect, device number 106
[ 1264.338254][T18421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3785'.
[ 1265.360322][T18431] binder: 18430:18431 ioctl c0306201 0 returned -14
[ 1266.231788][ T5825] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[ 1266.678657][ T5816] usb 1-1: new high-speed USB device number 95 using dummy_hcd
[ 1266.881904][ T5825] usb 6-1: Using ep0 maxpacket: 32
[ 1267.784977][T18438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3791'.
[ 1267.800323][ T5825] usb 6-1: unable to read config index 0 descriptor/start: -71
[ 1267.872360][ T5825] usb 6-1: can't read configurations, error -71
[ 1268.040604][T18442] syz.5.3792: attempt to access beyond end of device
[ 1268.040604][T18442] nbd5: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1268.056042][ T5816] usb 1-1: Using ep0 maxpacket: 16
[ 1268.063436][ T5816] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[ 1268.084098][ T5816] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1268.115653][T18442] SQUASHFS error: Failed to read block 0x0: -5
[ 1268.128693][ T5816] usb 1-1: config 0 has no interface number 0
[ 1268.141104][T18442] unable to read squashfs_super_block
[ 1268.158540][ T5816] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[ 1268.200431][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1268.230962][ T5816] usb 1-1: Product: syz
[ 1268.249892][ T5816] usb 1-1: Manufacturer: syz
[ 1268.277255][ T5816] usb 1-1: SerialNumber: syz
[ 1268.362744][T18449] vcan0: tx drop: invalid da for name 0x0000000000000001
[ 1268.874971][ T5816] usb 1-1: config 0 descriptor??
[ 1268.984691][ T5816] usb 1-1: can't set config #0, error -71
[ 1268.993203][ T5816] usb 1-1: USB disconnect, device number 95
[ 1269.122660][   T30] audit: type=1400 audit(1747108979.027:369): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=18451 comm="syz.4.3795" dest=20000
[ 1269.175718][T18456] syz.0.3794: attempt to access beyond end of device
[ 1269.175718][T18456] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1269.210235][T18456] SQUASHFS error: Failed to read block 0x0: -5
[ 1269.223394][T18456] unable to read squashfs_super_block
[ 1270.413062][T18480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3800'.
[ 1271.964231][T18487] bad cache= option: no%e
[ 1271.964231][T18487] 
[ 1271.970852][T18487] CIFS: VFS: bad cache= option: no%e
[ 1276.226639][T18506] syz.5.3807: attempt to access beyond end of device
[ 1276.226639][T18506] nbd5: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1276.252325][T18506] SQUASHFS error: Failed to read block 0x0: -5
[ 1276.259686][T18506] unable to read squashfs_super_block
[ 1276.291583][   T30] audit: type=1400 audit(1747108986.207:370): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=18509 comm="syz.2.3808" dest=20000
[ 1276.868460][T18510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3810'.
[ 1277.100596][T18528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3814'.
[ 1277.119087][   T30] audit: type=1400 audit(1747108987.037:371): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=18524 comm="syz.2.3815" dest=20000
[ 1277.334460][ T5913] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[ 1277.512450][ T5913] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1277.533913][ T5913] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1277.557693][ T5913] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1277.568188][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1278.106754][ T5913] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1278.247555][ T5913] usb 6-1: invalid MIDI out EP 0
[ 1278.864366][T18543] syz.4.3820: attempt to access beyond end of device
[ 1278.864366][T18543] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1278.905012][T18543] SQUASHFS error: Failed to read block 0x0: -5
[ 1278.911435][T18543] unable to read squashfs_super_block
[ 1279.869323][ T5913] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 1279.894390][ T5913] usb 6-1: USB disconnect, device number 37
[ 1280.000395][   T30] audit: type=1400 audit(1747108989.917:372): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=18549 comm="syz.5.3822" dest=20000
[ 1285.869122][T18572] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3828'.
[ 1285.878099][ T5825] usb 1-1: new high-speed USB device number 96 using dummy_hcd
[ 1286.076994][ T5825] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[ 1286.102520][ T5825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1286.130166][ T5825] usb 1-1: config 0 descriptor??
[ 1286.238535][T18579] ntfs3(nullb0): Primary boot signature is not NTFS.
[ 1286.246290][T18579] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[ 1287.662548][T18589] syz.3.3834: attempt to access beyond end of device
[ 1287.662548][T18589] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1287.677013][T18589] SQUASHFS error: Failed to read block 0x0: -5
[ 1287.684144][T18589] unable to read squashfs_super_block
[ 1288.620042][ T5825] pegasus 1-1:0.0: probe with driver pegasus failed with error -32
[ 1288.826972][   T30] audit: type=1400 audit(1747108998.647:373): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=18594 comm="syz.3.3835" dest=20000
[ 1289.262346][T18607] ptrace attach of "./syz-executor exec"[16365] was attempted by "./syz-executor exec"[18607]
[ 1291.576497][T18603] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1291.584160][T18603] UDF-fs: Scanning with blocksize 512 failed
[ 1291.590661][T18603] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1291.599644][T18603] UDF-fs: Scanning with blocksize 1024 failed
[ 1291.606051][T18603] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1291.613619][T18603] UDF-fs: Scanning with blocksize 2048 failed
[ 1291.619987][T18603] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1291.627498][T18603] UDF-fs: Scanning with blocksize 4096 failed
[ 1291.627745][T18608] bad cache= option: no%e
[ 1291.627745][T18608] 
[ 1291.640198][T18608] CIFS: VFS: bad cache= option: no%e
[ 1291.856266][T11473] usb 1-1: USB disconnect, device number 96
[ 1292.070074][ T5825] usb 5-1: new high-speed USB device number 125 using dummy_hcd
[ 1292.831711][ T5825] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1292.910783][ T5825] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1293.005171][ T5825] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1293.127078][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1293.728015][ T5825] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1293.828803][ T5825] usb 5-1: invalid MIDI out EP 0
[ 1294.217669][   T30] audit: type=1400 audit(1747109004.137:374): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=18624 comm="syz.3.3845" dest=20000
[ 1294.344492][T18628] ntfs3(nullb0): Primary boot signature is not NTFS.
[ 1294.356678][T18628] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[ 1294.813412][T18632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3846'.
[ 1294.833400][ T5825] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 1294.895962][ T5825] usb 5-1: USB disconnect, device number 125
[ 1295.048711][   T30] audit: type=1400 audit(1747109004.957:375): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=18634 comm="syz.0.3847" dest=20000
[ 1297.217759][ T9577] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1297.269572][ T9577] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1297.280146][ T9577] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1297.288461][ T9577] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1297.298293][ T9577] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1297.514109][ T5816] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[ 1297.824686][ T5825] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[ 1298.074146][ T5825] usb 4-1: Using ep0 maxpacket: 32
[ 1298.172687][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1298.207682][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1298.242696][ T5825] usb 4-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00
[ 1298.295610][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1298.373609][ T5825] usb 4-1: config 0 descriptor??
[ 1299.362792][ T9577] Bluetooth: hci4: command tx timeout
[ 1299.698870][T15421] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1299.759316][ T5825] usbhid 4-1:0.0: can't add hid device: -71
[ 1299.795072][ T5825] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1299.982967][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.124491][ T5825] usb 4-1: USB disconnect, device number 107
[ 1300.821004][ T5816] usb 6-1: unable to read config index 0 descriptor/start: -71
[ 1300.831121][ T5816] usb 6-1: can't read configurations, error -71
[ 1300.869218][   T30] audit: type=1400 audit(1747109010.787:376): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=18673 comm="syz.0.3858" dest=20000
[ 1300.909296][T18676] binder: 18675:18676 ioctl c0306201 0 returned -14
[ 1300.959778][T15421] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1301.265560][T18679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3860'.
[ 1301.284908][ T5816] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[ 1301.343690][T15421] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1301.431167][T14496] Bluetooth: hci4: command tx timeout
[ 1301.524162][ T5816] usb 6-1: Using ep0 maxpacket: 16
[ 1301.559384][ T5816] usb 6-1: config 0 has an invalid interface number: 105 but max is 0
[ 1301.568932][ T5816] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1301.582705][T15421] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1301.603243][ T5816] usb 6-1: config 0 has no interface number 0
[ 1301.626006][ T5816] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[ 1301.641524][ T5816] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1301.771699][ T5816] usb 6-1: Product: syz
[ 1301.776102][ T5816] usb 6-1: Manufacturer: syz
[ 1301.780727][ T5816] usb 6-1: SerialNumber: syz
[ 1301.795470][ T5816] usb 6-1: config 0 descriptor??
[ 1301.803758][ T5816] usb 6-1: Found UVC 0.00 device syz (046d:08f3)
[ 1301.811292][ T5816] usb 6-1: No valid video chain found.
[ 1301.817789][ T5825] usb 5-1: new high-speed USB device number 126 using dummy_hcd
[ 1302.681633][ T5825] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[ 1303.144372][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1303.169469][ T5825] usb 5-1: config 0 descriptor??
[ 1303.506103][T14496] Bluetooth: hci4: command tx timeout
[ 1303.749537][T10271] usb 6-1: USB disconnect, device number 39
[ 1304.445515][T18698] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1304.453063][T18698] UDF-fs: Scanning with blocksize 512 failed
[ 1304.459891][T18698] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1304.467620][T18698] UDF-fs: Scanning with blocksize 1024 failed
[ 1304.474317][T18698] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1304.482133][T18698] UDF-fs: Scanning with blocksize 2048 failed
[ 1304.488824][T18698] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1304.496460][T18698] UDF-fs: Scanning with blocksize 4096 failed
[ 1304.498199][T18699] bad cache= option: no%e
[ 1304.498199][T18699] 
[ 1304.511195][T18699] CIFS: VFS: bad cache= option: no%e
[ 1304.591116][T15421] bridge_slave_1: left allmulticast mode
[ 1304.603048][T15421] bridge_slave_1: left promiscuous mode
[ 1304.774513][T15421] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1304.803107][T15421] bridge_slave_0: left allmulticast mode
[ 1304.823695][T15421] bridge_slave_0: left promiscuous mode
[ 1304.829885][T15421] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1305.826738][ T5825] pegasus 5-1:0.0: probe with driver pegasus failed with error -110
[ 1305.842307][T14496] Bluetooth: hci4: command tx timeout
[ 1306.974135][T11473] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[ 1307.142186][T11473] usb 6-1: Using ep0 maxpacket: 16
[ 1307.149368][T11473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1307.168787][T11473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1307.181316][T11473] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1307.199073][T11473] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[ 1307.209378][T11473] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1307.220810][T11473] usb 6-1: config 0 descriptor??
[ 1307.228171][   T30] audit: type=1400 audit(1747109017.147:377): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=18720 comm="syz.3.3869" dest=20000
[ 1307.458945][T15421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1307.481384][T15421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1307.492894][T15421] bond0 (unregistering): Released all slaves
[ 1307.533707][T18648] chnl_net:caif_netlink_parms(): no params data found
[ 1307.579762][ T5825] usb 5-1: USB disconnect, device number 126
[ 1307.979853][T11473] input: HID 0955:7214 Haptics as /devices/virtual/input/input57
[ 1308.003843][T11473] shield 0003:0955:7214.0036: Registered Thunderstrike controller
[ 1308.013100][T11473] shield 0003:0955:7214.0036: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0
[ 1308.056881][T18709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1308.073265][T18709] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1308.090388][T18709] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.3866'.
[ 1308.177422][T11473] shield 0003:0955:7214.0036: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[ 1308.177775][ T5816] usb 6-1: USB disconnect, device number 40
[ 1308.190510][T11473] shield 0003:0955:7214.0036: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1308.209456][T11473] shield 0003:0955:7214.0036: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1308.223270][T11473] shield 0003:0955:7214.0036: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1308.269717][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880273f9800: rx timeout, send abort
[ 1308.301603][T15421] hsr_slave_0: left promiscuous mode
[ 1308.316606][T15421] hsr_slave_1: left promiscuous mode
[ 1308.323643][T15421] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1308.333437][T15421] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1308.344816][T15421] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1308.352387][T15421] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1308.381553][T15421] veth1_macvtap: left promiscuous mode
[ 1308.387586][T15421] veth0_macvtap: left promiscuous mode
[ 1308.395512][T15421] veth1_vlan: left promiscuous mode
[ 1308.401307][T15421] veth0_vlan: left promiscuous mode
[ 1308.778529][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880273f9800: abort rx timeout. Force session deactivation
[ 1310.534092][ T5916] usb 1-1: new high-speed USB device number 97 using dummy_hcd
[ 1312.288021][T18748] binder: 18747:18748 ioctl c0306201 0 returned -14
[ 1312.328601][ T5916] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[ 1313.802253][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1314.897503][ T5916] usb 1-1: config 0 descriptor??
[ 1314.909376][ T5916] usb 1-1: can't set config #0, error -71
[ 1314.924519][ T5916] usb 1-1: USB disconnect, device number 97
[ 1315.233521][   T30] audit: type=1400 audit(1747109025.137:378): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=18756 comm="syz.5.3879" dest=20000
[ 1317.923950][T18774] syz.3.3886: attempt to access beyond end of device
[ 1317.923950][T18774] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1318.064584][T18774] SQUASHFS error: Failed to read block 0x0: -5
[ 1318.188393][T18774] unable to read squashfs_super_block
[ 1318.570854][T18783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3887'.
[ 1318.901737][T18786] binder: 18785:18786 ioctl c0306201 0 returned -14
[ 1319.155130][T10271] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[ 1319.314233][T10271] usb 4-1: Using ep0 maxpacket: 16
[ 1319.342310][T10271] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[ 1319.362893][T10271] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1319.376746][T10271] usb 4-1: config 0 has no interface number 0
[ 1319.383115][T10271] usb 4-1: too many endpoints for config 0 interface 105 altsetting 48: 120, using maximum allowed: 30
[ 1319.397715][T10271] usb 4-1: config 0 interface 105 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 120
[ 1319.488704][T10271] usb 4-1: config 0 interface 105 has no altsetting 0
[ 1319.513553][T10271] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[ 1319.525573][T10271] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1319.553462][T10271] usb 4-1: Product: syz
[ 1319.564545][T10271] usb 4-1: Manufacturer: syz
[ 1319.594843][T10271] usb 4-1: SerialNumber: syz
[ 1319.674954][T10271] usb 4-1: config 0 descriptor??
[ 1319.936201][T10271] usb 4-1: USB disconnect, device number 109
[ 1319.997142][   T30] audit: type=1400 audit(1747109029.917:379): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=18793 comm="syz.0.3892" dest=20000
[ 1320.235313][T15421] team0 (unregistering): Port device team_slave_1 removed
[ 1320.627245][T15421] team0 (unregistering): Port device team_slave_0 removed
[ 1321.368321][T18798] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 1321.405496][T18648] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1321.421058][T18648] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1321.430800][T18648] bridge_slave_0: entered allmulticast mode
[ 1321.440027][T18648] bridge_slave_0: entered promiscuous mode
[ 1321.493356][T18648] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1321.534294][T18648] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1321.774097][T18648] bridge_slave_1: entered allmulticast mode
[ 1321.781880][T18648] bridge_slave_1: entered promiscuous mode
[ 1321.791414][T18810] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 1322.738547][T18648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1323.113692][T18648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1327.286019][T18648] team0: Port device team_slave_0 added
[ 1327.325777][   T30] audit: type=1400 audit(1747109037.237:380): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=18834 comm="syz.0.3903" dest=20000
[ 1327.509819][T18648] team0: Port device team_slave_1 added
[ 1327.530093][T18836] syz.3.3904: attempt to access beyond end of device
[ 1327.530093][T18836] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1327.548804][T18836] SQUASHFS error: Failed to read block 0x0: -5
[ 1327.555242][T18836] unable to read squashfs_super_block
[ 1327.582102][T18838] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 1327.601475][T18838] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1327.608958][T18838] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1327.706390][T18648] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1327.713380][T18648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1327.794084][T18648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1327.816068][T18648] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1327.823051][T18648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1327.880813][T18648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1328.017140][T18648] hsr_slave_0: entered promiscuous mode
[ 1328.028810][T18648] hsr_slave_1: entered promiscuous mode
[ 1328.039442][T18648] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1328.051797][T18648] Cannot create hsr debugfs directory
[ 1328.164072][T11473] usb 1-1: new high-speed USB device number 98 using dummy_hcd
[ 1328.609731][T11473] usb 1-1: Using ep0 maxpacket: 8
[ 1328.735392][T11473] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1328.745709][T11473] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1328.764073][T11473] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1328.804101][T11473] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1328.823531][T11473] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1328.860119][T11473] hub 1-1:1.0: bad descriptor, ignoring hub
[ 1328.869038][T18850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3909'.
[ 1328.878753][T11473] hub 1-1:1.0: probe with driver hub failed with error -5
[ 1328.897414][T11473] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1329.020014][T18648] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1329.043938][T18648] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1329.073375][T18648] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1329.284873][T18648] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1330.254452][   T10] usb 4-1: new high-speed USB device number 110 using dummy_hcd
[ 1330.639136][T18648] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1330.699248][   T10] usb 4-1: Using ep0 maxpacket: 32
[ 1330.708353][   T10] usb 4-1: config 0 has an invalid interface number: 19 but max is 0
[ 1330.723039][T18648] 8021q: adding VLAN 0 to HW filter on device team0
[ 1330.746666][   T10] usb 4-1: config 0 has no interface number 0
[ 1330.753910][   T10] usb 4-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1330.769111][ T7471] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1330.776347][ T7471] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1330.794559][   T10] usb 4-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16
[ 1330.804893][   T10] usb 4-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81
[ 1330.854133][   T10] usb 4-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024
[ 1330.914906][   T10] usb 4-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024
[ 1330.948980][   T10] usb 4-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1331.018066][T18648] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1331.037245][   T10] usb 4-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57
[ 1331.048154][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1331.058011][T18648] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1331.068746][   T10] usb 4-1: Product: syz
[ 1331.072935][   T10] usb 4-1: Manufacturer: syz
[ 1331.086512][   T10] usb 4-1: SerialNumber: syz
[ 1331.107712][ T7471] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1331.114923][ T7471] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1331.124581][   T10] usb 4-1: config 0 descriptor??
[ 1331.132078][T18853] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1331.139453][T18853] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1331.147103][T11473] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[ 1331.162749][   T10] ipaq 4-1:0.19: PocketPC PDA converter detected
[ 1331.185677][   T10] usb 4-1: active config #0 != 1 ??
[ 1331.294185][T11473] usb 6-1: device descriptor read/64, error -71
[ 1331.429831][  T975] usb 4-1: USB disconnect, device number 110
[ 1331.564077][T11473] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[ 1331.714198][T11473] usb 6-1: device descriptor read/64, error -71
[ 1331.716544][T18648] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1331.846691][T11473] usb usb6-port1: attempt power cycle
[ 1331.985033][ T5816] usb 1-1: USB disconnect, device number 98
[ 1332.194947][T11473] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[ 1332.244864][T11473] usb 6-1: device descriptor read/8, error -71
[ 1332.308703][   T30] audit: type=1400 audit(1747109042.217:381): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=18880 comm="syz.0.3914" dest=20000
[ 1332.532248][T18888] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1332.539951][T18888] UDF-fs: Scanning with blocksize 512 failed
[ 1332.549655][T18888] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1332.557227][T18888] UDF-fs: Scanning with blocksize 1024 failed
[ 1332.566676][T18888] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1332.574337][T18888] UDF-fs: Scanning with blocksize 2048 failed
[ 1332.582601][T18888] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1332.590196][T18888] UDF-fs: Scanning with blocksize 4096 failed
[ 1332.670353][T18887] binder: 18886:18887 ioctl c0306201 0 returned -14
[ 1332.957910][T11473] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[ 1332.985170][T11473] usb 6-1: device descriptor read/8, error -71
[ 1333.099283][T11473] usb usb6-port1: unable to enumerate USB device
[ 1333.129176][ T5816] usb 1-1: new high-speed USB device number 99 using dummy_hcd
[ 1333.152248][T18648] veth0_vlan: entered promiscuous mode
[ 1333.165373][T18648] veth1_vlan: entered promiscuous mode
[ 1333.293665][ T5816] usb 1-1: Using ep0 maxpacket: 16
[ 1333.378963][T18648] veth0_macvtap: entered promiscuous mode
[ 1333.436460][ T5816] usb 1-1: config index 0 descriptor too short (expected 30768, got 72)
[ 1333.522754][ T5816] usb 1-1: config 48 has too many interfaces: 48, using maximum allowed: 32
[ 1333.635435][ T5816] usb 1-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config
[ 1333.742120][ T5816] usb 1-1: config 48 has 0 interfaces, different from the descriptor's value: 48
[ 1333.752660][T18648] veth1_macvtap: entered promiscuous mode
[ 1334.550795][ T5816] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[ 1334.583801][T18648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1334.639371][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1334.678363][T18648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1334.706502][ T5816] usb 1-1: Product: syz
[ 1334.744190][ T5816] usb 1-1: Manufacturer: syz
[ 1334.756419][T18648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1334.788473][ T5816] usb 1-1: SerialNumber: syz
[ 1334.858718][T18648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1334.938549][T18648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1334.949624][T18648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1334.961417][T18648] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1335.058364][T18648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1335.073545][T18648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1335.284536][T18648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1335.304822][ T5913] usb 4-1: new high-speed USB device number 111 using dummy_hcd
[ 1336.484080][T18648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1336.497431][T18648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1336.524922][T18648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1336.535615][T18648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1336.547586][T18648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1336.569249][T18648] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1336.831491][ T5816] usb 1-1: USB disconnect, device number 99
[ 1337.047033][T18648] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1337.071383][T18648] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1337.095900][T18648] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1337.107161][T18648] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1338.467640][ T5913] usb 4-1: Using ep0 maxpacket: 32
[ 1338.553113][T15421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1338.574509][T15421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1338.611600][ T5913] usb 4-1: device descriptor read/all, error -71
[ 1339.733531][T17258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1339.862107][T17258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1341.756913][T18920] IPVS: persistence engine module ip_vs_pe_Ž
 not found
[ 1341.856963][   T30] audit: type=1400 audit(1747109051.757:382): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=18928 comm="syz.3.3926" dest=20000
[ 1342.294093][  T975] usb 4-1: new high-speed USB device number 113 using dummy_hcd
[ 1343.042980][ T5825] usb 5-1: new high-speed USB device number 127 using dummy_hcd
[ 1343.137142][  T975] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1343.206637][  T975] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1343.233421][  T975] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1343.243316][ T5825] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[ 1343.252628][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1343.270088][ T5825] usb 5-1: config 0 descriptor??
[ 1343.275420][  T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1343.393702][  T975] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1343.449342][  T975] usb 4-1: invalid MIDI out EP 0
[ 1343.454602][   T10] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[ 1343.520834][  T975] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 1343.612139][T15813] usb 4-1: USB disconnect, device number 113
[ 1343.614061][   T10] usb 6-1: Using ep0 maxpacket: 32
[ 1343.632387][   T10] usb 6-1: config 0 has an invalid interface number: 19 but max is 0
[ 1343.650486][   T10] usb 6-1: config 0 has no interface number 0
[ 1343.659776][   T10] usb 6-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1343.672120][   T10] usb 6-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16
[ 1343.682305][   T10] usb 6-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81
[ 1343.700187][   T10] usb 6-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024
[ 1343.712533][   T10] usb 6-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024
[ 1343.728858][   T10] usb 6-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1343.748624][   T10] usb 6-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57
[ 1343.760651][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1343.779474][   T10] usb 6-1: Product: syz
[ 1343.789675][   T10] usb 6-1: Manufacturer: syz
[ 1343.799743][   T10] usb 6-1: SerialNumber: syz
[ 1343.822133][   T10] usb 6-1: config 0 descriptor??
[ 1343.840967][T18936] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 1343.848524][T18936] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 1343.859424][   T10] ipaq 6-1:0.19: PocketPC PDA converter detected
[ 1343.866827][   T10] usb 6-1: active config #0 != 1 ??
[ 1344.706676][T15813] usb 6-1: USB disconnect, device number 45
[ 1344.751444][ T5825] pegasus 5-1:0.0: probe with driver pegasus failed with error -71
[ 1344.763558][ T5825] usb 5-1: USB disconnect, device number 127
[ 1349.285608][T18984] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3941'.
[ 1349.474319][ T5825] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 1350.372967][ T5825] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1350.398233][ T5825] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1350.411669][ T5825] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1350.422783][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1350.485014][ T5825] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1350.526754][ T5825] usb 5-1: invalid MIDI out EP 0
[ 1350.872402][T15813] usb 1-1: new high-speed USB device number 100 using dummy_hcd
[ 1351.421017][ T5825] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 1351.459200][ T5825] usb 5-1: USB disconnect, device number 2
[ 1351.505708][T15813] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[ 1351.515037][T15813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1351.532802][T15813] usb 1-1: config 0 descriptor??
[ 1351.935888][T19015] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1351.943491][T19015] UDF-fs: Scanning with blocksize 512 failed
[ 1351.953484][T19015] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1351.961102][T19015] UDF-fs: Scanning with blocksize 1024 failed
[ 1351.970331][T19015] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1351.977928][T19015] UDF-fs: Scanning with blocksize 2048 failed
[ 1351.986771][T19015] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1351.994375][T19015] UDF-fs: Scanning with blocksize 4096 failed
[ 1352.062446][T19015] bad cache= option: no%e
[ 1352.062446][T19015] 
[ 1352.069137][T19015] CIFS: VFS: bad cache= option: no%e
[ 1352.921823][  T975] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[ 1353.097458][T15813] pegasus 1-1:0.0: probe with driver pegasus failed with error -71
[ 1354.214394][T15813] usb 1-1: USB disconnect, device number 100
[ 1354.274521][  T975] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84
[ 1354.303203][  T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 47999, setting to 64
[ 1354.315218][  T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1354.329193][  T975] usb 5-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1
[ 1354.338676][  T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1354.347298][  T975] usb 5-1: Product: syz
[ 1354.351658][  T975] usb 5-1: Manufacturer: syz
[ 1354.361884][  T975] usb 5-1: SerialNumber: syz
[ 1354.369433][  T975] usb 5-1: config 0 descriptor??
[ 1354.377435][T19021] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 1354.387003][  T975] option 5-1:0.0: GSM modem (1-port) converter detected
[ 1355.702581][   T30] audit: type=1326 audit(1747109065.617:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19020 comm="syz.4.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98ff8e969 code=0x7ffc0000
[ 1356.518212][   T30] audit: type=1326 audit(1747109065.617:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19020 comm="syz.4.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98ff8e969 code=0x7ffc0000
[ 1356.542308][   T30] audit: type=1326 audit(1747109065.617:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19020 comm="syz.4.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fa98ff8e969 code=0x7ffc0000
[ 1356.566701][   T30] audit: type=1326 audit(1747109065.617:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19020 comm="syz.4.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98ff8e969 code=0x7ffc0000
[ 1356.600105][ T5913] usb 5-1: USB disconnect, device number 3
[ 1356.614062][   T30] audit: type=1326 audit(1747109065.697:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19020 comm="syz.4.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98ff8e969 code=0x7ffc0000
[ 1356.616114][ T5913] option 5-1:0.0: device disconnected
[ 1357.952619][T19047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3958'.
[ 1361.125410][T15813] usb 1-1: new high-speed USB device number 101 using dummy_hcd
[ 1361.142897][T19068] binder: 19067:19068 ioctl c0306201 0 returned -14
[ 1361.346086][T15813] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1361.723117][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.737022][T15813] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1361.749275][T15813] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1361.767866][T15813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1361.893063][T15813] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[ 1361.921961][T15813] usb 1-1: invalid MIDI out EP 0
[ 1361.960627][T15813] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 1362.043892][T15813] usb 1-1: USB disconnect, device number 101
[ 1362.705050][T19086] IPVS: persistence engine module ip_vs_pe_Ž
 not found
[ 1362.744663][ T5832] usb 4-1: new high-speed USB device number 114 using dummy_hcd
[ 1362.794289][  T975] usb 6-1: new full-speed USB device number 46 using dummy_hcd
[ 1362.904116][ T5832] usb 4-1: device descriptor read/64, error -71
[ 1362.942675][T15813] usb 1-1: new high-speed USB device number 102 using dummy_hcd
[ 1363.219144][T15813] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1363.259927][T15813] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1363.302486][T15813] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1363.362908][T15813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1363.602981][T15813] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[ 1363.629821][T15813] usb 1-1: invalid MIDI out EP 0
[ 1364.717495][  T975] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84
[ 1364.730356][  T975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 47999, setting to 64
[ 1364.741904][  T975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1364.756018][  T975] usb 6-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1
[ 1364.771362][  T975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1364.780230][  T975] usb 6-1: Product: syz
[ 1364.783145][T15813] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 1364.784916][  T975] usb 6-1: Manufacturer: syz
[ 1364.784934][  T975] usb 6-1: SerialNumber: syz
[ 1364.806227][  T975] usb 6-1: config 0 descriptor??
[ 1364.813182][T19084] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 1364.826796][  T975] option 6-1:0.0: GSM modem (1-port) converter detected
[ 1364.855320][T15813] usb 1-1: USB disconnect, device number 102
[ 1364.934093][ T5832] usb 4-1: new high-speed USB device number 115 using dummy_hcd
[ 1365.107169][   T30] audit: type=1326 audit(1747109075.027:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19083 comm="syz.5.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693538e969 code=0x7ffc0000
[ 1365.140749][ T5916] usb 6-1: USB disconnect, device number 46
[ 1365.144556][   T30] audit: type=1326 audit(1747109075.057:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19083 comm="syz.5.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f693538e969 code=0x7ffc0000
[ 1365.149867][ T5916] option 6-1:0.0: device disconnected
[ 1365.192989][ T5832] usb 4-1: device descriptor read/64, error -71
[ 1365.956805][   T30] audit: type=1326 audit(1747109075.057:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19083 comm="syz.5.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693538e969 code=0x7ffc0000
[ 1366.019825][T19108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3969'.
[ 1366.024868][   T30] audit: type=1326 audit(1747109075.057:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19083 comm="syz.5.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693538e969 code=0x7ffc0000
[ 1366.050596][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1366.126820][ T5832] usb usb4-port1: attempt power cycle
[ 1366.923535][T19101] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3976'.
[ 1366.934051][ T5832] usb 4-1: new high-speed USB device number 116 using dummy_hcd
[ 1366.967688][ T5832] usb 4-1: device descriptor read/8, error -71
[ 1367.266494][ T5832] usb 4-1: new high-speed USB device number 117 using dummy_hcd
[ 1367.752206][ T5832] usb 4-1: device descriptor read/8, error -71
[ 1367.874751][ T5832] usb usb4-port1: unable to enumerate USB device
[ 1368.131118][T19123] binder: 19121:19123 ioctl c0306201 0 returned -14
[ 1368.610745][T19130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3984'.
[ 1368.651922][ T5832] usb 4-1: new high-speed USB device number 118 using dummy_hcd
[ 1369.004510][ T5832] usb 4-1: Using ep0 maxpacket: 16
[ 1369.031026][ T5832] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[ 1369.474014][ T5832] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1369.521873][ T5832] usb 4-1: config 0 has no interface number 0
[ 1369.544353][ T5832] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[ 1369.560758][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1369.572709][ T5832] usb 4-1: Product: syz
[ 1369.578851][ T5832] usb 4-1: Manufacturer: syz
[ 1369.585014][ T5832] usb 4-1: SerialNumber: syz
[ 1369.902803][ T5832] usb 4-1: config 0 descriptor??
[ 1370.084114][ T5832] usb 4-1: Found UVC 0.00 device syz (046d:08f3)
[ 1370.099180][ T5832] usb 4-1: No valid video chain found.
[ 1370.230853][ T5816] usb 4-1: USB disconnect, device number 118
[ 1370.712026][T10271] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[ 1371.144724][T10271] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84
[ 1371.167709][T10271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 47999, setting to 64
[ 1371.184404][T10271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1371.313614][T10271] usb 5-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1
[ 1371.499279][T10271] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1371.738240][T10271] usb 5-1: Product: syz
[ 1371.754052][T10271] usb 5-1: Manufacturer: syz
[ 1371.758962][T10271] usb 5-1: SerialNumber: syz
[ 1371.770101][T10271] usb 5-1: config 0 descriptor??
[ 1371.793762][T19155] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1371.803811][T10271] option 5-1:0.0: GSM modem (1-port) converter detected
[ 1372.881317][   T30] audit: type=1326 audit(1747109082.797:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19153 comm="syz.4.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98ff8e969 code=0x7ffc0000
[ 1372.938811][   T30] audit: type=1326 audit(1747109082.797:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19153 comm="syz.4.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fa98ff8e969 code=0x7ffc0000
[ 1372.992171][   T52] usb 5-1: USB disconnect, device number 4
[ 1373.035036][   T52] option 5-1:0.0: device disconnected
[ 1373.054749][   T30] audit: type=1326 audit(1747109082.797:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19153 comm="syz.4.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98ff8e969 code=0x7ffc0000
[ 1373.084807][   T30] audit: type=1326 audit(1747109082.797:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19153 comm="syz.4.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98ff8e969 code=0x7ffc0000
[ 1373.436942][T19184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3998'.
[ 1373.536187][T19187] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4000'.
[ 1374.140116][   T30] audit: type=1400 audit(1747109084.057:396): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=19196 comm="syz.0.4004" dest=20000
[ 1374.414959][T19202] binder: 19201:19202 ioctl c0306201 0 returned -14
[ 1375.183643][T10271] usb 1-1: new high-speed USB device number 103 using dummy_hcd
[ 1375.334577][T10271] usb 1-1: Using ep0 maxpacket: 16
[ 1375.341812][T10271] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[ 1375.352215][T10271] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1375.367215][T10271] usb 1-1: config 0 has no interface number 0
[ 1375.382982][T10271] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[ 1375.411189][T10271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1375.438180][T10271] usb 1-1: Product: syz
[ 1375.447054][T10271] usb 1-1: Manufacturer: syz
[ 1375.457041][T10271] usb 1-1: SerialNumber: syz
[ 1375.469260][T10271] usb 1-1: config 0 descriptor??
[ 1375.480513][T10271] usb 1-1: Found UVC 0.00 device syz (046d:08f3)
[ 1376.982465][T10271] usb 1-1: No valid video chain found.
[ 1377.042985][T10271] usb 1-1: USB disconnect, device number 103
[ 1377.752269][T19220] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4012'.
[ 1378.235679][T19233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4015'.
[ 1378.324787][T19235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4017'.
[ 1378.343272][T19239] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4016'.
[ 1379.940785][T19258] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 1379.954273][T19258] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1379.961500][T19258] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1388.617852][T19300] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4033'.
[ 1389.146848][T19303] binder: 19298:19303 ioctl c0046209 0 returned -22
[ 1389.539094][T19309] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 1391.361275][T19325] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4031'.
[ 1391.924401][T19334] tipc: Started in network mode
[ 1391.941355][T19334] tipc: Node identity a6b8e82a9aec, cluster identity 4711
[ 1391.969839][T19334] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1392.017010][T19334] syzkaller0: MTU too low for tipc bearer
[ 1392.023091][T19334] tipc: Disabling bearer <eth:syzkaller0>
[ 1392.134313][  T975] usb 4-1: new high-speed USB device number 119 using dummy_hcd
[ 1392.302471][  T975] usb 4-1: device descriptor read/64, error -71
[ 1393.044077][  T975] usb 4-1: new high-speed USB device number 120 using dummy_hcd
[ 1393.224432][T19351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4048'.
[ 1393.324298][  T975] usb 4-1: device descriptor read/64, error -71
[ 1393.337625][T19350] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 1393.352380][T19350] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1393.360175][T19350] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1393.471141][  T975] usb usb4-port1: attempt power cycle
[ 1394.644091][  T975] usb 4-1: new high-speed USB device number 121 using dummy_hcd
[ 1394.709485][  T975] usb 4-1: device descriptor read/8, error -71
[ 1400.324542][   T30] audit: type=1400 audit(1747109110.227:397): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=19376 comm="syz.5.4057"
[ 1402.113485][ T5825] usb 1-1: new high-speed USB device number 104 using dummy_hcd
[ 1402.890021][   T30] audit: type=1400 audit(1747109112.807:398): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=19399 comm="syz.5.4064" dest=20002
[ 1402.905979][ T5825] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1402.930374][ T5825] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1402.966541][ T5825] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1403.083941][ T5825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1403.126295][  T975] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[ 1403.384230][  T975] usb 5-1: Using ep0 maxpacket: 32
[ 1403.433396][ T5825] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[ 1403.453529][  T975] usb 5-1: config 0 has an invalid interface number: 19 but max is 0
[ 1403.515594][  T975] usb 5-1: config 0 has no interface number 0
[ 1403.551221][ T5825] usb 1-1: invalid MIDI out EP 0
[ 1403.634922][  T975] usb 5-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1403.687892][T19400] FAULT_INJECTION: forcing a failure.
[ 1403.687892][T19400] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1403.689720][T19400] 
[ 1403.689728][T19400] ======================================================
[ 1403.689733][T19400] WARNING: possible circular locking dependency detected
[ 1403.689743][T19400] 6.15.0-rc6-syzkaller-00025-g627277ba7c23 #0 Not tainted
[ 1403.689749][T19400] ------------------------------------------------------
[ 1403.689754][T19400] syz.5.4064/19400 is trying to acquire lock:
[ 1403.689759][T19400] ffffffff8df31ea0 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x13a/0xc40
[ 1403.689789][T19400] 
[ 1403.689789][T19400] but task is already holding lock:
[ 1403.689793][T19400] ffff8880b88399d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140
[ 1403.689817][T19400] 
[ 1403.689817][T19400] which lock already depends on the new lock.
[ 1403.689817][T19400] 
[ 1403.689821][T19400] 
[ 1403.689821][T19400] the existing dependency chain (in reverse order) is:
[ 1403.689825][T19400] 
[ 1403.689825][T19400] -> #4 (&rq->__lock){-.-.}-{2:2}:
[ 1403.689836][T19400]        lock_acquire+0x120/0x360
[ 1403.689849][T19400]        _raw_spin_lock_nested+0x32/0x50
[ 1403.689860][T19400]        raw_spin_rq_lock_nested+0x2a/0x140
[ 1403.689872][T19400]        task_rq_lock+0xbc/0x470
[ 1403.689884][T19400]        cgroup_move_task+0x9a/0x590
[ 1403.689892][T19400]        css_set_move_task+0x658/0x9e0
[ 1403.689900][T19400]        cgroup_post_fork+0x1ef/0x790
[ 1403.689907][T19400]        copy_process+0x37e6/0x3b80
[ 1403.689915][T19400]        kernel_clone+0x224/0x7f0
[ 1403.689923][T19400]        user_mode_thread+0xdd/0x140
[ 1403.689931][T19400]        rest_init+0x23/0x300
[ 1403.689943][T19400]        start_kernel+0x470/0x4f0
[ 1403.689953][T19400]        x86_64_start_reservations+0x2a/0x30
[ 1403.689964][T19400]        x86_64_start_kernel+0x66/0x70
[ 1403.689975][T19400]        common_startup_64+0x13e/0x147
[ 1403.689988][T19400] 
[ 1403.689988][T19400] -> #3 (&p->pi_lock){-.-.}-{2:2}:
[ 1403.689999][T19400]        lock_acquire+0x120/0x360
[ 1403.690010][T19400]        _raw_spin_lock_irqsave+0xa7/0xf0
[ 1403.690018][T19400]        try_to_wake_up+0x6e/0x1290
[ 1403.690028][T19400]        __wake_up_common_lock+0x134/0x1f0
[ 1403.690039][T19400]        tty_port_default_wakeup+0xa2/0xf0
[ 1403.690049][T19400]        serial8250_tx_chars+0x72e/0x970
[ 1403.690058][T19400]        serial8250_handle_irq+0x633/0xbb0
[ 1403.690066][T19400]        serial8250_default_handle_irq+0xbf/0x1b0
[ 1403.690077][T19400]        serial8250_interrupt+0xa2/0x1d0
[ 1403.690090][T19400]        __handle_irq_event_percpu+0x28c/0x980
[ 1403.690099][T19400]        handle_irq_event+0x8b/0x1e0
[ 1403.690107][T19400]        handle_edge_irq+0x24d/0xb60
[ 1403.690114][T19400]        __common_interrupt+0x143/0x250
[ 1403.690127][T19400]        common_interrupt+0xb6/0xe0
[ 1403.690140][T19400]        asm_common_interrupt+0x26/0x40
[ 1403.690148][T19400]        pv_native_safe_halt+0x13/0x20
[ 1403.690157][T19400]        default_idle+0x13/0x20
[ 1403.690170][T19400]        default_idle_call+0x74/0xb0
[ 1403.690181][T19400]        do_idle+0x1e8/0x510
[ 1403.690194][T19400]        cpu_startup_entry+0x44/0x60
[ 1403.690207][T19400]        rest_init+0x2de/0x300
[ 1403.690218][T19400]        start_kernel+0x470/0x4f0
[ 1403.690226][T19400]        x86_64_start_reservations+0x2a/0x30
[ 1403.690237][T19400]        x86_64_start_kernel+0x66/0x70
[ 1403.690248][T19400]        common_startup_64+0x13e/0x147
[ 1403.690259][T19400] 
[ 1403.690259][T19400] -> #2 (&tty->write_wait){-...}-{3:3}:
[ 1403.690270][T19400]        lock_acquire+0x120/0x360
[ 1403.690281][T19400]        _raw_spin_lock_irqsave+0xa7/0xf0
[ 1403.690289][T19400]        __wake_up_common_lock+0x2f/0x1f0
[ 1403.690299][T19400]        tty_port_default_wakeup+0xa2/0xf0
[ 1403.690308][T19400]        serial8250_tx_chars+0x72e/0x970
[ 1403.690316][T19400]        serial8250_handle_irq+0x633/0xbb0
[ 1403.690325][T19400]        serial8250_default_handle_irq+0xbf/0x1b0
[ 1403.690335][T19400]        serial8250_interrupt+0xa2/0x1d0
[ 1403.690347][T19400]        __handle_irq_event_percpu+0x28c/0x980
[ 1403.690356][T19400]        handle_irq_event+0x8b/0x1e0
[ 1403.690364][T19400]        handle_edge_irq+0x24d/0xb60
[ 1403.690371][T19400]        __common_interrupt+0x143/0x250
[ 1403.690383][T19400]        common_interrupt+0xb6/0xe0
[ 1403.690395][T19400]        asm_common_interrupt+0x26/0x40
[ 1403.690403][T19400]        pv_native_safe_halt+0x13/0x20
[ 1403.690412][T19400]        default_idle+0x13/0x20
[ 1403.690422][T19400]        default_idle_call+0x74/0xb0
[ 1403.690434][T19400]        do_idle+0x1e8/0x510
[ 1403.690446][T19400]        cpu_startup_entry+0x44/0x60
[ 1403.690458][T19400]        rest_init+0x2de/0x300
[ 1403.690470][T19400]        start_kernel+0x470/0x4f0
[ 1403.690478][T19400]        x86_64_start_reservations+0x2a/0x30
[ 1403.690489][T19400]        x86_64_start_kernel+0x66/0x70
[ 1403.690499][T19400]        common_startup_64+0x13e/0x147
[ 1403.690510][T19400] 
[ 1403.690510][T19400] -> #1 (&port_lock_key){-.-.}-{3:3}:
[ 1403.690522][T19400]        lock_acquire+0x120/0x360
[ 1403.690533][T19400]        _raw_spin_lock_irqsave+0xa7/0xf0
[ 1403.690541][T19400]        serial8250_console_write+0x17e/0x1ba0
[ 1403.690557][T19400]        console_flush_all+0x728/0xc40
[ 1403.690565][T19400]        console_unlock+0xc4/0x270
[ 1403.690571][T19400]        vprintk_emit+0x5b7/0x7a0
[ 1403.690578][T19400]        _printk+0xcf/0x120
[ 1403.690591][T19400]        register_console+0xa8b/0xf90
[ 1403.690600][T19400]        univ8250_console_init+0x52/0x90
[ 1403.690607][T19400]        console_init+0x1a1/0x670
[ 1403.690616][T19400]        start_kernel+0x2cb/0x4f0
[ 1403.690624][T19400]        x86_64_start_reservations+0x2a/0x30
[ 1403.690635][T19400]        x86_64_start_kernel+0x66/0x70
[ 1403.690646][T19400]        common_startup_64+0x13e/0x147
[ 1403.690657][T19400] 
[ 1403.690657][T19400] -> #0 (console_owner){-.-.}-{0:0}:
[ 1403.690668][T19400]        validate_chain+0xb9b/0x2140
[ 1403.690681][T19400]        __lock_acquire+0xaac/0xd20
[ 1403.690691][T19400]        lock_acquire+0x120/0x360
[ 1403.690702][T19400]        console_flush_all+0x6d2/0xc40
[ 1403.690710][T19400]        console_unlock+0xc4/0x270
[ 1403.690716][T19400]        vprintk_emit+0x5b7/0x7a0
[ 1403.690722][T19400]        _printk+0xcf/0x120
[ 1403.690734][T19400]        should_fail_ex+0x3f5/0x560
[ 1403.690742][T19400]        strncpy_from_user+0x36/0x290
[ 1403.690755][T19400]        strncpy_from_user_nofault+0x72/0x140
[ 1403.690764][T19400]        bpf_probe_read_compat_str+0xe2/0x180
[ 1403.690777][T19400]        bpf_prog_2eacd51f1ba28bf2+0x65/0x6b
[ 1403.690785][T19400]        bpf_trace_run2+0x281/0x4b0
[ 1403.690793][T19400]        __bpf_trace_tlb_flush+0xf5/0x150
[ 1403.690800][T19400]        trace_tlb_flush+0x115/0x140
[ 1403.690811][T19400]        switch_mm_irqs_off+0x4fc/0x810
[ 1403.690822][T19400]        __schedule+0x1060/0x4c70
[ 1403.690830][T19400]        preempt_schedule_irq+0xb5/0x150
[ 1403.690839][T19400]        irqentry_exit+0x6f/0x90
[ 1403.690848][T19400]        asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1403.690857][T19400]        unwind_next_frame+0x1831/0x2390
[ 1403.690866][T19400]        __unwind_start+0x5b9/0x760
[ 1403.690875][T19400]        arch_stack_walk+0xe4/0x150
[ 1403.690886][T19400]        stack_trace_save+0x9c/0xe0
[ 1403.690894][T19400]        kasan_save_track+0x3e/0x80
[ 1403.690906][T19400]        kasan_save_free_info+0x46/0x50
[ 1403.690916][T19400]        __kasan_slab_free+0x62/0x70
[ 1403.690927][T19400]        kmem_cache_free+0x192/0x3f0
[ 1403.690940][T19400]        __dentry_kill+0x4d2/0x660
[ 1403.690948][T19400]        dput+0x19f/0x2b0
[ 1403.690955][T19400]        __fput+0x68e/0xa70
[ 1403.690964][T19400]        task_work_run+0x1d1/0x260
[ 1403.690974][T19400]        get_signal+0x11c5/0x1310
[ 1403.690987][T19400]        arch_do_signal_or_restart+0x95/0x780
[ 1403.690999][T19400]        syscall_exit_to_user_mode+0x8b/0x120
[ 1403.691009][T19400]        do_syscall_64+0x103/0x210
[ 1403.691020][T19400]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1403.691028][T19400] 
[ 1403.691028][T19400] other info that might help us debug this:
[ 1403.691028][T19400] 
[ 1403.691031][T19400] Chain exists of:
[ 1403.691031][T19400]   console_owner --> &p->pi_lock --> &rq->__lock
[ 1403.691031][T19400] 
[ 1403.691045][T19400]  Possible unsafe locking scenario:
[ 1403.691045][T19400] 
[ 1403.691048][T19400]        CPU0                    CPU1
[ 1403.691051][T19400]        ----                    ----
[ 1403.691054][T19400]   lock(&rq->__lock);
[ 1403.691060][T19400]                                lock(&p->pi_lock);
[ 1403.691066][T19400]                                lock(&rq->__lock);
[ 1403.691073][T19400]   lock(console_owner);
[ 1403.691079][T19400] 
[ 1403.691079][T19400]  *** DEADLOCK ***
[ 1403.691079][T19400] 
[ 1403.691082][T19400] 5 locks held by syz.5.4064/19400:
[ 1403.691088][T19400]  #0: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x2390
[ 1403.691110][T19400]  #1: ffff8880b88399d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140
[ 1403.691134][T19400]  #2: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x186/0x4b0
[ 1403.691154][T19400]  #3: ffffffff8df31f00 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120
[ 1403.691178][T19400]  #4: ffffffff8de197d0 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xc40
[ 1403.691198][T19400] 
[ 1403.691198][T19400] stack backtrace:
[ 1403.691205][T19400] CPU: 0 UID: 0 PID: 19400 Comm: syz.5.4064 Not tainted 6.15.0-rc6-syzkaller-00025-g627277ba7c23 #0 PREEMPT(full) 
[ 1403.691217][T19400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1403.691224][T19400] Call Trace:
[ 1403.691228][T19400]  <TASK>
[ 1403.691234][T19400]  dump_stack_lvl+0x189/0x250
[ 1403.691248][T19400]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1403.691260][T19400]  ? __pfx__printk+0x10/0x10
[ 1403.691274][T19400]  ? print_lock_name+0xde/0x100
[ 1403.691288][T19400]  print_circular_bug+0x2ee/0x310
[ 1403.691297][T19400]  check_noncircular+0x134/0x160
[ 1403.691307][T19400]  validate_chain+0xb9b/0x2140
[ 1403.691325][T19400]  __lock_acquire+0xaac/0xd20
[ 1403.691338][T19400]  ? console_flush_all+0x13a/0xc40
[ 1403.691347][T19400]  lock_acquire+0x120/0x360
[ 1403.691358][T19400]  ? console_flush_all+0x13a/0xc40
[ 1403.691369][T19400]  ? do_raw_spin_unlock+0x122/0x240
[ 1403.691378][T19400]  ? console_flush_all+0x13a/0xc40
[ 1403.691388][T19400]  console_flush_all+0x6d2/0xc40
[ 1403.691396][T19400]  ? console_flush_all+0x13a/0xc40
[ 1403.691405][T19400]  ? console_flush_all+0x13a/0xc40
[ 1403.691415][T19400]  ? __pfx_console_flush_all+0x10/0x10
[ 1403.691427][T19400]  ? is_printk_cpu_sync_owner+0x32/0x40
[ 1403.691438][T19400]  console_unlock+0xc4/0x270
[ 1403.691446][T19400]  ? __pfx_console_unlock+0x10/0x10
[ 1403.691461][T19400]  ? is_printk_cpu_sync_owner+0x32/0x40
[ 1403.691472][T19400]  vprintk_emit+0x5b7/0x7a0
[ 1403.691481][T19400]  ? __pfx_vprintk_emit+0x10/0x10
[ 1403.691489][T19400]  ? bpf_bprintf_prepare+0x146/0x1450
[ 1403.691500][T19400]  ? bpf_bprintf_prepare+0x127a/0x1450
[ 1403.691510][T19400]  _printk+0xcf/0x120
[ 1403.691525][T19400]  ? __pfx__printk+0x10/0x10
[ 1403.691538][T19400]  ? sched_clock_cpu+0x74/0x430
[ 1403.691557][T19400]  ? bpf_trace_printk+0xc1/0x190
[ 1403.691570][T19400]  should_fail_ex+0x3f5/0x560
[ 1403.691580][T19400]  strncpy_from_user+0x36/0x290
[ 1403.691594][T19400]  strncpy_from_user_nofault+0x72/0x140
[ 1403.691604][T19400]  bpf_probe_read_compat_str+0xe2/0x180
[ 1403.691618][T19400]  bpf_prog_2eacd51f1ba28bf2+0x65/0x6b
[ 1403.691625][T19400]  bpf_trace_run2+0x281/0x4b0
[ 1403.691635][T19400]  ? bpf_trace_run2+0x186/0x4b0
[ 1403.691644][T19400]  ? __pfx_bpf_trace_run2+0x10/0x10
[ 1403.691653][T19400]  ? kvm_sched_clock_read+0x11/0x20
[ 1403.691663][T19400]  ? __bpf_trace_tlb_flush+0xe0/0x150
[ 1403.691672][T19400]  __bpf_trace_tlb_flush+0xf5/0x150
[ 1403.691680][T19400]  ? __pfx___bpf_trace_tlb_flush+0x10/0x10
[ 1403.691690][T19400]  ? psi_group_change+0xbc7/0x1210
[ 1403.691698][T19400]  ? rcu_read_lock_sched_held+0x89/0x100
[ 1403.691712][T19400]  trace_tlb_flush+0x115/0x140
[ 1403.691724][T19400]  switch_mm_irqs_off+0x4fc/0x810
[ 1403.691738][T19400]  ? __pfx_switch_mm_irqs_off+0x10/0x10
[ 1403.691749][T19400]  ? psi_task_switch+0x318/0x6d0
[ 1403.691759][T19400]  __schedule+0x1060/0x4c70
[ 1403.691772][T19400]  ? preempt_schedule_irq+0xb5/0x150
[ 1403.691783][T19400]  ? __pfx___schedule+0x10/0x10
[ 1403.691791][T19400]  ? sched_clock_cpu+0x74/0x430
[ 1403.691804][T19400]  ? psi_task_switch+0x318/0x6d0
[ 1403.691813][T19400]  ? __switch_to+0xd70/0x1600
[ 1403.691827][T19400]  ? preempt_schedule_irq+0xaa/0x150
[ 1403.691838][T19400]  preempt_schedule_irq+0xb5/0x150
[ 1403.691847][T19400]  ? __pfx_preempt_schedule_irq+0x10/0x10
[ 1403.691860][T19400]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[ 1403.691874][T19400]  irqentry_exit+0x6f/0x90
[ 1403.691884][T19400]  asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1403.691894][T19400] RIP: 0010:unwind_next_frame+0x1831/0x2390
[ 1403.691905][T19400] Code: 58 80 3c 28 00 74 05 e8 3d de ad 00 4d 8b 66 38 49 8d 7e 08 48 89 f8 48 c1 e8 03 80 3c 28 00 74 05 e8 23 de ad 00 4d 8b 6e 08 <4d> 8d 7e 10 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 06
[ 1403.691913][T19400] RSP: 0018:ffffc90004ab75d8 EFLAGS: 00000246
[ 1403.691921][T19400] RAX: 1ffff92000956ee2 RBX: ffffffff900bbb01 RCX: 0000000000000001
[ 1403.691928][T19400] RDX: ffffc90004ab7748 RSI: dffffc0000000000 RDI: ffffc90004ab7710
[ 1403.691935][T19400] RBP: dffffc0000000000 R08: ffffc90004ab76f8 R09: 0000000000000000
[ 1403.691942][T19400] R10: ffffc90004ab7758 R11: fffff52000956eed R12: ffffc90004ab7708
[ 1403.691949][T19400] R13: ffffc90004ab0000 R14: ffffc90004ab7708 R15: ffffffff8171ca05
[ 1403.691956][T19400]  ? unwind_next_frame+0xa5/0x2390
[ 1403.691969][T19400]  ? unwind_next_frame+0x17c4/0x2390
[ 1403.691979][T19400]  ? unwind_next_frame+0xa5/0x2390
[ 1403.691989][T19400]  ? __unwind_start+0xf8/0x760
[ 1403.692000][T19400]  __unwind_start+0x5b9/0x760
[ 1403.692011][T19400]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1403.692021][T19400]  arch_stack_walk+0xe4/0x150
[ 1403.692032][T19400]  ? arch_stack_walk+0xe4/0x150
[ 1403.692044][T19400]  stack_trace_save+0x9c/0xe0
[ 1403.692052][T19400]  ? __pfx_stack_trace_save+0x10/0x10
[ 1403.692061][T19400]  ? __lock_acquire+0xaac/0xd20
[ 1403.692075][T19400]  kasan_save_track+0x3e/0x80
[ 1403.692097][T19400]  ? __dentry_kill+0x4d2/0x660
[ 1403.692105][T19400]  kasan_save_free_info+0x46/0x50
[ 1403.692115][T19400]  __kasan_slab_free+0x62/0x70
[ 1403.692128][T19400]  kmem_cache_free+0x192/0x3f0
[ 1403.692141][T19400]  ? do_raw_spin_unlock+0x122/0x240
[ 1403.692151][T19400]  __dentry_kill+0x4d2/0x660
[ 1403.692159][T19400]  ? dput+0x37/0x2b0
[ 1403.692167][T19400]  dput+0x19f/0x2b0
[ 1403.692175][T19400]  __fput+0x68e/0xa70
[ 1403.692186][T19400]  task_work_run+0x1d1/0x260
[ 1403.692198][T19400]  ? __pfx_task_work_run+0x10/0x10
[ 1403.692212][T19400]  get_signal+0x11c5/0x1310
[ 1403.692225][T19400]  ? task_work_add+0x281/0x420
[ 1403.692236][T19400]  ? __pfx_task_work_add+0x10/0x10
[ 1403.692247][T19400]  ? __file_ref_put+0xd5/0x130
[ 1403.692260][T19400]  ? __pfx___file_ref_put+0x10/0x10
[ 1403.692274][T19400]  arch_do_signal_or_restart+0x95/0x780
[ 1403.692288][T19400]  ? __fput_deferred+0x16f/0x1f0
[ 1403.692298][T19400]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1403.692311][T19400]  ? __sys_accept4+0x16e/0x1c0
[ 1403.692324][T19400]  ? local_irq_enable_exit_to_user+0x5/0x10
[ 1403.692339][T19400]  syscall_exit_to_user_mode+0x8b/0x120
[ 1403.692350][T19400]  do_syscall_64+0x103/0x210
[ 1403.692361][T19400]  ? clear_bhb_loop+0x60/0xb0
[ 1403.692372][T19400]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1403.692380][T19400] RIP: 0033:0x7f693538e969
[ 1403.692388][T19400] Code: Unable to access opcode bytes at 0x7f693538e93f.
[ 1403.692393][T19400] RSP: 002b:00007f6936135038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120
[ 1403.692402][T19400] RAX: fffffffffffffe00 RBX: 00007f69355b5fa0 RCX: 00007f693538e969
[ 1403.692408][T19400] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[ 1403.692414][T19400] RBP: 00007f6936135090 R08: 0000000000000000 R09: 0000000000000000
[ 1403.692420][T19400] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001
[ 1403.692426][T19400] R13: 0000000000000000 R14: 00007f69355b5fa0 R15: 00007ffdaeff6658
[ 1403.692436][T19400]  </TASK>
[ 1405.245485][T19400] CPU: 0 UID: 0 PID: 19400 Comm: syz.5.4064 Not tainted 6.15.0-rc6-syzkaller-00025-g627277ba7c23 #0 PREEMPT(full) 
[ 1405.245501][T19400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1405.245508][T19400] Call Trace:
[ 1405.245516][T19400]  <TASK>
[ 1405.245522][T19400]  dump_stack_lvl+0x189/0x250
[ 1405.245540][T19400]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1405.245553][T19400]  ? __pfx__printk+0x10/0x10
[ 1405.245566][T19400]  ? sched_clock_cpu+0x74/0x430
[ 1405.245581][T19400]  ? bpf_trace_printk+0xc1/0x190
[ 1405.245596][T19400]  should_fail_ex+0x414/0x560
[ 1405.245607][T19400]  strncpy_from_user+0x36/0x290
[ 1405.245622][T19400]  strncpy_from_user_nofault+0x72/0x140
[ 1405.245634][T19400]  bpf_probe_read_compat_str+0xe2/0x180
[ 1405.245647][T19400]  bpf_prog_2eacd51f1ba28bf2+0x65/0x6b
[ 1405.245655][T19400]  bpf_trace_run2+0x281/0x4b0
[ 1405.245665][T19400]  ? bpf_trace_run2+0x186/0x4b0
[ 1405.245675][T19400]  ? __pfx_bpf_trace_run2+0x10/0x10
[ 1405.245685][T19400]  ? kvm_sched_clock_read+0x11/0x20
[ 1405.245696][T19400]  ? __bpf_trace_tlb_flush+0xe0/0x150
[ 1405.245705][T19400]  __bpf_trace_tlb_flush+0xf5/0x150
[ 1405.245714][T19400]  ? __pfx___bpf_trace_tlb_flush+0x10/0x10
[ 1405.245724][T19400]  ? psi_group_change+0xbc7/0x1210
[ 1405.245733][T19400]  ? rcu_read_lock_sched_held+0x89/0x100
[ 1405.245748][T19400]  trace_tlb_flush+0x115/0x140
[ 1405.245761][T19400]  switch_mm_irqs_off+0x4fc/0x810
[ 1405.245775][T19400]  ? __pfx_switch_mm_irqs_off+0x10/0x10
[ 1405.245786][T19400]  ? psi_task_switch+0x318/0x6d0
[ 1405.245796][T19400]  __schedule+0x1060/0x4c70
[ 1405.245810][T19400]  ? preempt_schedule_irq+0xb5/0x150
[ 1405.245822][T19400]  ? __pfx___schedule+0x10/0x10
[ 1405.245830][T19400]  ? sched_clock_cpu+0x74/0x430
[ 1405.245843][T19400]  ? psi_task_switch+0x318/0x6d0
[ 1405.245852][T19400]  ? __switch_to+0xd70/0x1600
[ 1405.245866][T19400]  ? preempt_schedule_irq+0xaa/0x150
[ 1405.245877][T19400]  preempt_schedule_irq+0xb5/0x150
[ 1405.245887][T19400]  ? __pfx_preempt_schedule_irq+0x10/0x10
[ 1405.245899][T19400]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[ 1405.245913][T19400]  irqentry_exit+0x6f/0x90
[ 1405.245924][T19400]  asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1405.245935][T19400] RIP: 0010:unwind_next_frame+0x1831/0x2390
[ 1405.245947][T19400] Code: 58 80 3c 28 00 74 05 e8 3d de ad 00 4d 8b 66 38 49 8d 7e 08 48 89 f8 48 c1 e8 03 80 3c 28 00 74 05 e8 23 de ad 00 4d 8b 6e 08 <4d> 8d 7e 10 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 06
[ 1405.245955][T19400] RSP: 0018:ffffc90004ab75d8 EFLAGS: 00000246
[ 1405.245965][T19400] RAX: 1ffff92000956ee2 RBX: ffffffff900bbb01 RCX: 0000000000000001
[ 1405.245972][T19400] RDX: ffffc90004ab7748 RSI: dffffc0000000000 RDI: ffffc90004ab7710
[ 1405.245979][T19400] RBP: dffffc0000000000 R08: ffffc90004ab76f8 R09: 0000000000000000
[ 1405.245985][T19400] R10: ffffc90004ab7758 R11: fffff52000956eed R12: ffffc90004ab7708
[ 1405.245992][T19400] R13: ffffc90004ab0000 R14: ffffc90004ab7708 R15: ffffffff8171ca05
[ 1405.245999][T19400]  ? unwind_next_frame+0xa5/0x2390
[ 1405.246013][T19400]  ? unwind_next_frame+0x17c4/0x2390
[ 1405.246024][T19400]  ? unwind_next_frame+0xa5/0x2390
[ 1405.246033][T19400]  ? __unwind_start+0xf8/0x760
[ 1405.246044][T19400]  __unwind_start+0x5b9/0x760
[ 1405.246056][T19400]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1405.246066][T19400]  arch_stack_walk+0xe4/0x150
[ 1405.246079][T19400]  ? arch_stack_walk+0xe4/0x150
[ 1405.246090][T19400]  stack_trace_save+0x9c/0xe0
[ 1405.246099][T19400]  ? __pfx_stack_trace_save+0x10/0x10
[ 1405.246108][T19400]  ? __lock_acquire+0xaac/0xd20
[ 1405.246123][T19400]  kasan_save_track+0x3e/0x80
[ 1405.246153][T19400]  ? __dentry_kill+0x4d2/0x660
[ 1405.246162][T19400]  kasan_save_free_info+0x46/0x50
[ 1405.246173][T19400]  __kasan_slab_free+0x62/0x70
[ 1405.246186][T19400]  kmem_cache_free+0x192/0x3f0
[ 1405.246201][T19400]  ? do_raw_spin_unlock+0x122/0x240
[ 1405.246211][T19400]  __dentry_kill+0x4d2/0x660
[ 1405.246220][T19400]  ? dput+0x37/0x2b0
[ 1405.246228][T19400]  dput+0x19f/0x2b0
[ 1405.246236][T19400]  __fput+0x68e/0xa70
[ 1405.246249][T19400]  task_work_run+0x1d1/0x260
[ 1405.246262][T19400]  ? __pfx_task_work_run+0x10/0x10
[ 1405.246276][T19400]  get_signal+0x11c5/0x1310
[ 1405.246290][T19400]  ? task_work_add+0x281/0x420
[ 1405.246301][T19400]  ? __pfx_task_work_add+0x10/0x10
[ 1405.246312][T19400]  ? __file_ref_put+0xd5/0x130
[ 1405.246325][T19400]  ? __pfx___file_ref_put+0x10/0x10
[ 1405.246339][T19400]  arch_do_signal_or_restart+0x95/0x780
[ 1405.246353][T19400]  ? __fput_deferred+0x16f/0x1f0
[ 1405.246363][T19400]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1405.246378][T19400]  ? __sys_accept4+0x16e/0x1c0
[ 1405.246392][T19400]  ? local_irq_enable_exit_to_user+0x5/0x10
[ 1405.246406][T19400]  syscall_exit_to_user_mode+0x8b/0x120
[ 1405.246418][T19400]  do_syscall_64+0x103/0x210
[ 1405.246431][T19400]  ? clear_bhb_loop+0x60/0xb0
[ 1405.246441][T19400]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1405.246450][T19400] RIP: 0033:0x7f693538e969
[ 1405.246458][T19400] Code: Unable to access opcode bytes at 0x7f693538e93f.
[ 1405.246463][T19400] RSP: 002b:00007f6936135038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120
[ 1405.246472][T19400] RAX: fffffffffffffe00 RBX: 00007f69355b5fa0 RCX: 00007f693538e969
[ 1405.246479][T19400] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[ 1405.246485][T19400] RBP: 00007f6936135090 R08: 0000000000000000 R09: 0000000000000000
[ 1405.246491][T19400] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001
[ 1405.246497][T19400] R13: 0000000000000000 R14: 00007f69355b5fa0 R15: 00007ffdaeff6658
[ 1405.246506][T19400]  </TASK>
[ 1406.037138][  T975] usb 5-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16
[ 1406.048219][  T975] usb 5-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81
[ 1406.060924][  T975] usb 5-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024
[ 1406.073448][  T975] usb 5-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024
[ 1406.084485][  T975] usb 5-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1406.145082][ T5825] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 1406.255346][T10271] usb 1-1: USB disconnect, device number 104
[ 1406.337009][  T975] usb 5-1: string descriptor 0 read error: -71
[ 1406.343308][  T975] usb 5-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57
[ 1406.352508][  T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1406.362202][  T975] usb 5-1: config 0 descriptor??
[ 1406.367566][  T975] usb 5-1: can't set config #0, error -71
[ 1406.375970][  T975] usb 5-1: USB disconnect, device number 5
[ 1406.384187][T19408] IPVS: persistence engine module ip_vs_pe_Ž
 not found