last executing test programs:

11.122231517s ago: executing program 4 (id=106):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_usb_connect(0x3, 0x24, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0xdb, 0x16, 0x89, 0x20, 0x2040, 0xd900, 0xa92c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4c, 0x0, 0x0, 0xb2, 0x50, 0xcf}}]}}]}}, 0x0)
r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000a40)={&(0x7f0000000800)=[{0x5, 0x800, 0x0, 0x0}, {0x8, 0xc001, 0x0, 0x0}], 0x2})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r4 = accept4(r3, 0x0, 0x0, 0x80000)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4)
writev(r4, &(0x7f0000000040)=[{&(0x7f00000012c0)="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", 0xfd1}], 0x1)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, 0x0)
preadv(r5, &(0x7f0000000280), 0x0, 0x6, 0x0)
r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x101080, 0x0)
fcntl$notify(r6, 0x402, 0x1)
syz_open_procfs(0x0, &(0x7f0000000600)='net/sockstat\x00')
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x800000, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1800}, 0x50)

9.910026598s ago: executing program 0 (id=110):
socket$netlink(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x5000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)

8.980309952s ago: executing program 0 (id=111):
syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="04010000e4fceaff57a2132048540000000109021200010010000009eaffffff4c967800"], 0x0)
munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000)

7.694680945s ago: executing program 4 (id=116):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)={0x50, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "554193e250eae5da17d7feb9ba"}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x0)

7.572155365s ago: executing program 4 (id=117):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'ip_vti0\x00', 0x400})
ioctl$TUNSETLINK(r0, 0x400454cd, 0xfee0)
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0)
syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[], 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001180)=ANY=[@ANYBLOB="500000001e0001002abd7000fedbdf25ff010000000000000000000000000001000004d402002b00fc010000000000000000004000000000030000fffa35000010000a"], 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c)
r5 = socket$kcm(0xa, 0x2, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, 0x0, 0x0)
sendmsg$sock(r5, 0x0, 0x0)
sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0}, 0x0)
r7 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002)
ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000140)=0x12)
close(r7)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = syz_open_dev$sg(&(0x7f0000000200), 0x1, 0x6100)
ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\n'])
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x30, 0x0, &(0x7f00000004c0)=[@enter_looper, @increfs_done, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={@ptr={0x70742a85, 0x1, &(0x7f00000006c0)=""/152, 0x0, 0x0, 0x3d}, @fda={0x66646185, 0x0, 0x1, 0x1d}, @fda={0x66646185, 0x8, 0x0, 0x32}}, &(0x7f0000000180)}}, @exit_looper, @decrefs], 0x1b, 0x0, &(0x7f0000000300)="5faccb7f62b3db"})
sched_setscheduler(0x0, 0x2, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)

6.830376181s ago: executing program 1 (id=121):
r0 = syz_open_dev$video(&(0x7f0000000100), 0x40000000007ff, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000001280)={0x1, @pix_mp={0x10000, 0x802, 0x34325258, 0x4, 0x5, [{0xff, 0x3}, {0x40004944, 0x8bbc043}, {0x8, 0xc}, {0xe, 0x7fffffff}, {0x1, 0xfffffffd}, {0x39, 0x1}, {0x9, 0x2}, {0x400, 0x500}], 0x2, 0x3, 0x8, 0x1, 0x1}}) (fail_nth: 3)

6.405280925s ago: executing program 1 (id=122):
openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{0x40000001, 0x5, 0x7, 0x35e, 0x7fffffff, 0x5, 0x2}, {0x80000000, 0x0, 0x5, 0x6, 0x9, 0x5240, 0x3}]})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="3c00d327ec2c7d156b5dc342203e0d9471d8866eae17"])
read$FUSE(r2, &(0x7f00000077c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0xffffffffffffffda, r3, {0x7, 0x1f, 0x0, 0xfe05a, 0x5000, 0x0, 0x0, 0xc}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
fchdir(r6)
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
r7 = accept4(r5, 0x0, 0x0, 0x80800)
sendmmsg$alg(r7, &(0x7f0000000040), 0x0, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0xfff3}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000440)={0x1, 0x3, 0x1000, 0x100000, 0x0, 0x0, 0x0, 0x0})
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="7800000002060108000000000000000000000000050005000a000000140007800800114000000000050015000c000000050001000700000005000400000000000900020073797a310000000011000300686173683a6e65742c6e65740000000015000300686173683a69702c706f72742c6e6574"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1, 0xffffffff}, 0x8)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae8", 0x1b)
r9 = accept4(r8, 0x0, 0x0, 0x800)
sendmsg$RDMA_NLDEV_CMD_GET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[], 0x10}}, 0x0)

5.850754862s ago: executing program 0 (id=125):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1})
ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc4c03d12, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc03064ca, &(0x7f0000000140)={0x0, 0x0})
syz_emit_ethernet(0x0, 0x0, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00')
connect$inet6(r0, 0x0, 0x0)
write$binfmt_script(r0, 0x0, 0x0)
ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000240)={'wlan0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x10, 0xfff, 0xa1, 0x9, 0x4, 0xfffffff4, 0x0, 0x7, 0xffffa3d3}})
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b712000000090001db120a000000000007000000000000009500000000000a6682f0a61b01e4c027d252f602901b7cbbd5b9097bb8334a5541cf9e345af317e35f2ad53d857708f974879196ac07622b10548ccd2028eaf7610ae297a58e413b22d81494fcb1dbd1e9cb784c590ddd3d400ac1949839f92232e7684f2305d906ee929a27a5dedf301650960d8ae1cf339f6bda65bf6594c2839dcea6e419c9b8b7d17b9e49f392c832ffa41c17b82700789b163bbc8507f171b46d2c569e75810e60a06b6f69ef41ca39a2e8c2f369545d761d74"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x2, &(0x7f000000cf3d)=""/195}, 0x23)
r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0xe000, 0x0)
ioctl$SNDCTL_SEQ_TESTMIDI(r5, 0x40045108, &(0x7f00000001c0)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

5.581570143s ago: executing program 4 (id=126):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_usb_connect(0x3, 0x24, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0xdb, 0x16, 0x89, 0x20, 0x2040, 0xd900, 0xa92c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4c, 0x0, 0x0, 0xb2, 0x50, 0xcf}}]}}]}}, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000a40)={&(0x7f0000000800)=[{0x5, 0x800, 0x0, 0x0}, {0x8, 0xc001, 0x0, 0x0}], 0x2})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r3 = accept4(r2, 0x0, 0x0, 0x80000)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3)
writev(r3, &(0x7f0000000040)=[{&(0x7f00000012c0)="a4eac90f8e3ae7580e2e693731ef6b447fc2057d9a84e61f40c79e10218d131f865d68b23cd7c3f2b681e2205f67f140252abcc3b8015e176881d81a9e61b6a2c92a9d8e1f51861b64e7b61bf9a131e197f5a6c6d4d887d86c79836e81c69e211d2bf4c595b01c94de464ff9aa72b6058fe774c81142bbce9bd0d83f6239362c3347e3daadb292cf3fee4766a2d43cf006a476ce0e4dd221acdcdefcf67733ed2978c2cd564772844077920cf54543db03688079168e36709dbbf84933a2415a32617f7de4336d89967c2cbcd76a973d88a3c440862bc11e51df6f1cd25f1aa711b721c33703645bcf93b775f1eb28c7640d1b7cbe44b9fc0e55d1a4d8f83b8fd537a231fe75ebb7255387d089ae7924c86b36f11d4c09d27626fd8cd62dbee1662558322e3dffdb4c4816e8ee2501b8e73eda5a8caf70487ea6edede6b8337d5ff348bd874de5b9a5058b85c0659031d237abfcdc40bd6b45d4845b08adc7bdaefa8099bef8d5f6cae07abc605dc651a21b04ae53f6d89d9fac3ec696ca9508a681ca65a4524242fae4d79e40840ce54330107125a916b03459f58e4e6c3215a97e391c069926a24d9486909ef1f0c210514e2cd81cbaa6352a2de4f5829eb670a6500c83eb8c8bd5edbe4005bfb524fce3d4796d028acf27fb9df67851db5d59b2f88d97aa591d607d602dbb9bb4211abbc8641610aae237e8d47f8381dced80019a4e9b3d0e6e2a978ffeec19fe0a6077eb48d3d4d478801eb1902bb3f8552d402dd8de49cb6bb7c78600c75e3bcf53bf58e391d6484423cbfe17cf95f3b30a41b849af63ffd6a7b5aaab0ce5ac6d78519430c27415fd46f150671ee860341b9c473937c498cc9aae0cb64a73f24780b4771b1ea51816bd68f19c49747c4caf0acd418517e88e1f82cd9d2d870abb33624483670269aac3d2fe75fff726d60fe1be2fc2abc47b98eb75ef2f7f4eca0b50450ef48d71921cd10307563d120eed0416e3dcf4b198ec8424d857ab872d9de56e614e3fba275bae2c21793bebe86cdfbe822bffd2c9be6e623fcbb441e202cf8107da69cb06f93f7956a4ee88de99dc881fac8894ea5acaf4cac4c65de055017ab0dcd1adab2a22e1c2a12e73316be0f4d07b405d6bf4adda88fac3f081f8f180b403a067184b26e35860e1064d87748390e6f63217d7db40f002f85c57c125be768d68600e2c795a83a3477481a41b8392a6ae2c3a51cec2da15980c299f528e658641960ef2983ae3e30955586dd9e6a6591d81645ed451dfc14b2c648a89655af1f66067350c6fb356610469ae7b20ccd14cbb0fb04f58bfda8f28f90ebade9b6f8017094f1d467d9df73dfcc48cea0307ca833b72978e64651c8eb429f2b36adab59251452b4abaa2ecb42eaf674b12b49081b40c324d6da586212f187c51e32c42b00622b3fcb1acfecaeb603cec87a0010c199a80cf184894b0992fe709613c672ec91587afe94c637cce86a50dfe9c695c8398e963e68156537014405962d20610846691a352dad6204a33f07f175e5dbdc89aab549ef4150320084fd999a090d86affac5ac371dfe5dd595b7459b39bd78ba5bb77469da251d4f9906356667a27ac58025eed8d0ded3a69cd2a6cae52ac4dd5799802421fd8a818c5bc787da162a42f5dec2175b4ff37a543d214bdf0cc071de0b77c9902ce7dbb42ace340e64a020100b677a73bc4449655f4165f074cb1b85cd491f18f3fbeb03ca708a91fe041a46433d8d8e1693dbff6333981c243b1d412c87741aca8e790f3ebb3151e3b44870ba74c64cc5c3011d7ac138ef0bd48f197a32c31fac8d53ba54ae114119328eb9e8825555ba29e9d45cbe656eeff1b4e39600695d3911ab4f5075c3d5691b731c50adc226d3ebf50d3c38561a5d0cef2c9d16e071bb8221ab4f85a802a63b7071402f88c7cf39cfc916f8622357b3234f3761f89cfbf3aded40c512a614702ae867e197510d3bdb4ee60df96c4e51b5a338b58b07e8ee62be9822e0d166ff874b8d1f9e4486c601d9b56a26eb0b83a80704dee19d10cc05c63b95f7d1efef88177645bc30d8473983ed552926d219bd0c3dbcb0fb464649624ba7a57f5163f49f33fb79a46e7ac9797e300262a843f15f644f5230546f3c62450242fe12a79bd44c61fd946165662b0bfbcffd12deb93e0cb82dc8cc66bebf0721b94a5fa0d66381540246ff78c6225a952ab984c06c07902ed42e40fcc9151b0a59be83f454698f302f349014082ff08bcecbf0b9dea7e32b063449d573ca1b6efc812acf382ef7b7e6cd206185e063c985b8c44fe38d62d4a8d3d15228406f3abed51fe90bae3ddc283069d46e0ebd3a8bb87e4e0eb116dff6fc881e8fd0e5032e6a6494cadfd85652ed1c9c2d7aa00e18ccbde0aa3c857c50ee86975aff735f633471ab8e6db33bfcefeae661bd1bd6dfb55a9a4b4f9be01fd15e27e03fc943ccdb91a799d2eb168d9fdeecd32c19169cc0443ebb8e2f681d773efff72530f61a288cfb49c0217b9a9223ceb3798390e15fbe9475975c05f22a7c4d1990f9400a249d32eec4a5773bea0d15cc0df06d223e057b3693ac906cf632da8c9092e52718bd9f16af452dacfab22cfc2c58a3168de9914570f1035ae9b3092346db21dda270393a992cb967dc074ae2fe8b545df855b9e8b251cac7935a842bda9e850a9efb5309cc0fb83a630dcb3684fec4999ed6c4cc91aea72961420523be74711ff4c3f16a5f6ee906dae87d2bbc194b2d8b7743c157f6c8d80e6f4e377cf05810bef82e51fa5c1e442018466071f7d572cae794fab5cfbbd8e8d398c3a2823e8ce4357572a32123312d0d3976d63dc2a00b2d474ad288762e768e31ab7b4f09e7f3cfcb7a48adbdbca43d30c9bc8f67d115bc34f24eaf0318bb5e2994ff0f8b62c13f46abebdd0846da71a5d106e62266ec3e5a3f2c7166628220568807b595dc73920a0a7a9f2644db70fc53fac0a547cf6cbefe7aee975e0159fe8f413eab912925757581d2fe97cc5f19343f329b2ef081397737414a822432b5f9fa2044aebda92c1d6a065401b70c20a6867fb93e8f6f575aa9fae3e67b6fc6e0418f58731d932b3e5bd1dddbb9854a25144a334d00bea2995d7a751d40a06c37372b05cc584aaf62b90fdd95f87ff53eab367600d50eebbbb4cf04f225824086cfaca6aa82b3e3433881f7ec32cd419780ed0de6fb2234368983282fb93b9d1a6bd96c3d14aff8272328db634b02bbbc5b8957c695e469f80fc50eac333b88303d0bf29c42c13a92a58a9bf30391cfe6a0c5df40cd5b7a8637cbece9a4f251e5aa4aa2fdf883d82d2a430f06416f0372911e426620b25d8839d2ac9d73cb782194f0daddd4caa68f1ff6892981c00d6812d21ffb5fcd9b1cd187d519040968aa2d7f4ccfcc236ffe2cae8d349f39feb3fa574272a428dfbfba0a735a349188b1396b96d1fc2e86069fc797de98985bf338e495d66cbed89c2f5f2cc78ec2b880f04627e5cd49e93bb606d241149b936ab29b790e22022361c483d760e07cabdfdd204114fc3808b7bb7cf977ffe0b8c58584364571578084f1dfbb592e47e0f01c020d02aafc8c83a56299f31836574923a706e7a46861502dfbf0e9d2893a38aca39a16cec44664541e092ec489abfa28128ebd73e7bbe062515384c69c656268ef42c37632ce2db76afd09e6de7928136cfaae1b4fdeaab590617584831a7eb19af64625ec2ca635f79f50caa48524b0fcd1e08a09bcf52e231f3487ab54fc77ae44e13a966976e9e9deaf8ab9da7f804fe6290e16629c6f83110f54e5c206798033c614be334a5ee04f4ecb30f58371eeb3664eab1d00f52725992897279d21d475cefbe2345a7f1df6e916a806e7c39b651866f6c1108d00990673ca858d8af73a26a74e1f8d7818859e7d0123224f866ed0745382b2a29f5374d7c6c0fa54ddf743d89c85dc56cfab74ee786d054a5f4f1db15d85e9fe1a7fdaa3746d9e7429735f2253cb2a600b81f969c7c7e56f22b47f15aa700b3369102ea105106b96cebd1161673ae4725a4d96421833f65f76c64de5aa7957b0df8ab64583e8d5018faa1f4e0376f1d38103ac78403f65f809619c3a9fe43c6b3493d29c52d4c230a39914b1b49c627fba1612c6479205c256ef023cb52ca142c6c37391ec9f74ba334ddebce6438cdf6e99527e68585324cbf6547872366d2d0b7db30a33528a745cbc8820e52a3cf77e50a76935ff4a7f41dfc58c86ff05e24436faf28f423467105b314bd6e4edbf1a352840728e8fe4dd79ee5f770dd987eb62ba3ff5c26c9de6685afefa5a227a4a6dfc1d23ba09eefab45402b138b53b83873a3797096d4b62450c579a894be0c05b947646ef2039ed37955155b58fae377c727605979505b037a0a72e622b883cd1001f69da95ffdd143e68e1fc2cc42db37bde33184ff85c89713a722e1eba4ad292ec9ccd1c8c18674e77bf6394edd47ad635b278ec09921020507104485a6453585c385d0cd4cf611d0c6da50ec3d34eecaf3bba0ae5051a55450ae2e40c4fd0ba420b04b2e1b4d1592e8b80f92d40d42de588e719fe2b022c30a5187c64cc5c48679f680387464d3681edea585006a2e852be2266e8c4230a6bf60dd8efb0e3c1b4dcfed2844d495957ae734470d0199a0e0278f80018a39e9c82c15cb9c73a3deb2579444b414ca7061bfb4f599fe3968334c0ebde54b9a046370bb7d3227c9dd23e8edcf8b07aabf328bb164c79c6df5f0bd46a276413dee370e32da823d5e9839937e72b6480ac0439d104cadba1a8d6d0542f73f720ecdafece52fc6fa291e44b3852af376a3aceb05c2c293a2576175a3b4135ff6799a232d9c3907fcdd49e0d97e80ece0135dac08c37a16a93046d7ca3f3db91d0c28447522759017980f4d3321981ab53000fbe5293b396f6163e3ae016329bc42f6c958d648a30ed5c6e14eeef235fb74cbc24e183a0f89ee89b3c51a8b7106afefb2e406a026619793fe4c3f4bdc7d66fbf98a740afb32485ae5451b905c22bf63f9b3b42b30a3287f266559db4067d1c00d2ffee58378a44614dafed9107d97d9c3048f2bdba374ccc827f302dae2a4637354cedfc0a2d7f2d2462f5ed43f1b682e8167a2081a20741ed8bb94791526355e14a6b191aee05ef45f5d5cd83cf8fa66e5c5b4f38d7bedc90da431a285b239e13a3f9e68399da38eda883b4e443c1d557fc4cec84ce9bccf67a652e7d94c8ff57c277fb0ce233ea35929d98467ea8643cfc0464827aa26e381293c0efc049b4707416551c7d57c40d232a660b2c8d722dcd1cde8629e2b30b476c2ea9da3beec02a6b38f507230ee700f871338007cdb06d3be80450fb20f8493668183d776c902d044d4152c8a4e9ffa909d82d1b6aa27ca390706d7690b307436de72b4a81c094688397281810e98053b8c622bdc1194f54aab47fe1d3d9512733ee3e6b5b7688a90960929a0afee9580440b8964c450e3caeefcbe24c1bf6e74336ad4954f62c874a4a1ba019cae59bd1eb2ffee6174e04324348d92b588a31271a3ac59b91adb5eb22cf5af39d7cb8a7d3d8916aa9cb772c53217c18c7caa1442f9046ea806e48c6b3542d97916091d9485f0d0652427e6224346df7e4ad0820cb532fec7079c32a1dbb09cfdf8dab5f9bf240620937a91f504e7ca5a09447190290ed04ebcffbcde6f17542ab2824c", 0xfd1}], 0x1)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
preadv(r4, &(0x7f0000000280), 0x0, 0x6, 0x0)
r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x101080, 0x0)
fcntl$notify(r5, 0x402, 0x1)
syz_open_procfs(0x0, &(0x7f0000000600)='net/sockstat\x00')
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x800000, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1800}, 0x50)

5.400145702s ago: executing program 1 (id=127):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r2)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'syzkaller1\x00', 0x400})
r3 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4)

5.338438327s ago: executing program 3 (id=128):
r0 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r0, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000240)="a9050000000774640001000000000000", 0x10}, {&(0x7f0000000300)="82d994", 0x3}, {&(0x7f0000000280)="50f81d8fec9ea5d54c96c9d1461288a69f", 0x11}], 0x3}}], 0x1, 0x2404c0e4)

5.072908925s ago: executing program 2 (id=129):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="8500000001000000180818000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195}, 0x23)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x24e22}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000)
r2 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x182, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x40c0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0)
socket$packet(0x11, 0x3, 0x300)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000b40)={0x14, 0x1b, 0x200, 0x70bd25, 0x25dfdbff, {0xe}}, 0x14}}, 0x20010000)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x120, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x7, 0x4, 0x9}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x328)
sendfile(r6, r6, 0x0, 0x200000)
r8 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x40, 0x0)
read$dsp(r8, 0x0, 0x0)

5.024626541s ago: executing program 3 (id=130):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b800069907000000b0000500fef32702d3001500030001400200070901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002)

4.786115893s ago: executing program 3 (id=131):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x58, r1, 0x1, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x6}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8}, {0x8, 0x0, 0x5}, {0x8, 0x0, 0x5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004010}, 0x2000a010)

4.29023981s ago: executing program 0 (id=132):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_CAP_X86_USER_SPACE_MSR(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0xbc, 0x0, 0x1})
setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5})
r3 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x141102)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x1, 0x4, 0x20})
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r4, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x14, 0x110, 0xd, {[@timestamp={0x44, 0x4, 0x7d, 0x0, 0xa}]}}}], 0x18}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, {@in=@empty, 0x0, 0x32}, @in6=@loopback, {}, {}, {0x0, 0x0, 0xfffffffa}, 0x0, 0x0, 0xa, 0x0, 0x8}}, 0xf0}}, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/vlan/config\x00')
lseek(r5, 0x8, 0x0)

3.987829969s ago: executing program 2 (id=133):
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x8, r4}, 0x18)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0xa, 0x8, 0x5}, 0x0)
socket$unix(0x1, 0x1, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000200)="0fc79f00800000640f79fd660f380a290f20d7c7442400da586a53c744240209c10000c7442406000000000f011424dbd2660f3882aa1ed90000f2f2f20faac4e1605d15ea2d9b5db900080000b877b98af2baf8b357790f30", 0x59}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000)
write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2b00002203000000000000004000000002000000f3ffffff0900000000000000407d282635210e287b2b005a5ba7856a3ad0adf6c0bf5cfec74fe35a5114c97ee1263ee95d4e624d88a17de12312f03aaff588f72a2e250703cf6508bd3a248067b0d659c53cde7dc197ef3f643b0e0e5e253e21d5867398e5cdefb6ffe9bcfc128edf1667f59765cea13afd489cf8cb4e927470f91ef146d7dc"], 0x2b)
r9 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TCSETAW(r9, 0x5407, &(0x7f0000000180)={0xfffb, 0x6, 0x3, 0x400, 0x17, "24241e6488c67424"})
socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r10=>0xffffffffffffffff})
sendmmsg$sock(r10, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000003a00)=@nfc_llcp={0x27, 0x0, 0x1, 0x1, 0x66, 0x2, "3f023ec8a06819bd70e58c762459e55dc2be7d23c887280c427c99e4e59d123ac235a78a68bc9daf672d4816b070f10e0b49a5ce4feac328a43d95524c2724", 0x1d}, 0x80, &(0x7f0000003d00)=[{0x0}, {&(0x7f0000003b80)="8cbc28", 0x3}], 0x2}}], 0x5, 0x885)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x80040, 0x0)
ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x61)
r12 = getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r9, 0xc1105511, &(0x7f0000000440)={{0x4, 0x5, 0xf86, 0x6, '\x00', 0x2}, 0x0, 0x20000000, 0x7, r12, 0x0, 0x2, 'syz1\x00', &(0x7f00000002c0)})

3.797870961s ago: executing program 0 (id=134):
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6(0xa, 0xa, 0x7ffe)
socket(0x10, 0x803, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0e, 0xffffffff}, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002f00)=[{{0x0, 0x0, &(0x7f0000000640)}}], 0x1, 0x4004851)
setsockopt(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)="0100000000", 0x5)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000001c0)={0x28, 0x6, r4, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4})
ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000140)={0xc, r4})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, 0x0)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="00000800030000000000140000004600002c006a0000000190780a090100ac1414aa4404a2400d009078011b00010000000f71a7a6dd726faa16"], 0x3a)
ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x7ffffffe)

2.449605411s ago: executing program 4 (id=135):
r0 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r2, &(0x7f0000000780)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0)
set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
listen(r2, 0xda90)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_async', 0x149b82, 0xb300bb1401d27a12)
write$cgroup_int(r3, &(0x7f0000000000)=0x800, 0x12)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000080), 0x0, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0x3, 0x92, 0x7, 0x8, 0x5}, 0x0)
setitimer(0x2, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a0080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000030000000060a010400000000000000000100000008000b400000000008000b40000000030900010073797a3000000000140000001100010000000000000000000700000a"], 0xa4}}, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil})
r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0)
close_range(r7, r7, 0x2)
sendmsg$inet(r1, &(0x7f0000000640)={&(0x7f0000000140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000200)="3c6b826bd1c90240ed4849f08d57dc85fe01401b07adc4c8de435193d2e992b46b8e756b2582f16cf825ed215d1bc0fe330c94c231a4023f22c553d0c97b440ad6e414ea526eb13c78e2e6786cc7bff0097c3098f5016810a90753063447", 0x5e}, {&(0x7f0000000180)="f1b923c104fa0f8e9e0a0832a949b6356bb96dad570396d8ae952f91fa6dd9aedae319ca7cdf15defdc2548132", 0x2d}, {&(0x7f0000000380)="2262e33568bfdc802ccc5b253feed56a", 0x10}, {&(0x7f00000003c0)="17d62367509c7a995ddf54769de1d794afa1033c2510dfdff2b44a7244ea67ef0a161a64a5bfa69a593faa05b2257c5a0eec635c6f8c66526489d41a11794c60cc0083333c25861a0f3e1668a05e4bc20922e2857c2382e32e37ce8a57fd63ed5fd954398d946ab4e5a3f9d4c96c7838148563ab86c68d943cbc9e1397b20a0ce23e6bc24c", 0x85}, {&(0x7f0000000480)="0010c3b8f4e1399f4df761be470e1385d3a14fbb1c93a27101678c358a3b08d152ae8e4c406ba2b0cc3c3633cddae5f78e410c76d39886ec046354014205f36b0016e62cbc303fbd330973f495d776f32e3e26ed26aa19dca9e0a4ac89e62bbe566abf23e07b6c94f76c09c387f3b3d9c0b1ae0b7244bb8b6f76063f707a69f61643485bb232e3da8fcaa6bcf202d093d9130b82a8ce773a833c66f85421650642f3d0b01554709e8682d34326", 0xad}, {&(0x7f0000000540)="dc1b3869475ee4111160949e67ffef4a2c2df006f90508755090926b8220542005cda9c953fd846b743dd47a302fee5a457ffb09feda8d0eb31193120d010be63e0f4be1b36c4f49339f4a17557c13525f88737250d3e48adede948c725df3ea5251423992c4559ecc31df14a99801764da0", 0x72}], 0x6}, 0x50)
accept4(r2, 0x0, 0x0, 0x0)

1.344358023s ago: executing program 2 (id=136):
r0 = socket(0x1e, 0x805, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={&(0x7f0000000000), 0x0, 0x0, 0x0, 0x1d69, r1}, 0x38)
connect$can_bcm(r0, 0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet_tcp(0x2, 0x1, 0x0)
unshare(0x26000400)
socket$nl_generic(0x10, 0x3, 0x10)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r4, 0x0, 0xffffffffffffffff}, 0x18)
r5 = syz_open_procfs(0x0, &(0x7f0000019240)='net/netstat\x00')
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0xa, 0x7, 0x8dcca6d6bce1935d, "fee8a2ab78fc979fd1e00d96072000001e0000e20600000000000000785d960001000000002000", "2809e8dbe1085989ed2393ac4afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "0500000000000800000000000000000000e0050000000002001000", [0x8, 0xffffffff9673e35d]}})
pread64(r5, 0x0, 0x0, 0x200)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f00000001c0)={0x0, 'veth1_to_team\x00', {0x1}, 0x7f})
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)

1.26826662s ago: executing program 3 (id=137):
prlimit64(0x0, 0xe, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r3, 0x0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='u', 0x1}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="b0f6ffffff00"], 0xb0}, 0x0, 0x8400, 0x1})
r4 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xfe15, 0x2, 0xfffffffc, 0x30f, 0x0, r0}, &(0x7f00000000c0)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r4, 0x47bc, 0x0, 0x70, 0x0, 0x2f)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x34)
r9 = dup(r8)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r11=>0x0)
shmctl$SHM_LOCK(0x0, 0xb)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r11, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
semctl$GETPID(0x0, 0x1, 0xb, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000380)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, r9, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, {0x0, r10}})
io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0, 0x1328}], 0x2, 0x0, 0x0, 0x41}, 0x0)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200100}, 0xc, 0x0}, 0x0)
r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r12, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)

1.221519265s ago: executing program 1 (id=138):
openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x2ea00, 0x3f00)

1.218237877s ago: executing program 4 (id=139):
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340277f2b053a3304b89f8a7a80b00db96f248dabd7fac3c2f9e2b99a67f20a1cd09c0c843e5635493bbfa23b72d98a0c37a3e5805f5e2ec75e9d98b09"], 0x20}, 0x1, 0x0, 0x0, 0x80000}, 0x40800)
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r1 = fsopen(&(0x7f0000000000)='udf\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0)
read(r1, &(0x7f0000000280)=""/250, 0xfa)
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ppoll(&(0x7f0000000000)=[{r3, 0xc012}], 0x1, 0x0, 0x0, 0x0)
connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r4 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
syz_usb_connect(0x5, 0xe4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a00067af4190009050f102000050801060c8b631b7507250102020700090501", @ANYRES32], 0x0)
write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_SIOCGARP(r5, 0x8917, &(0x7f0000000300)={{0x2, 0x4e23, @remote}, {0x308, @random="4239abbaec13"}, 0xa, {0x2, 0x4e20, @remote}, 'virt_wifi0\x00'})
r6 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0)
ioctl$VIDIOC_CROPCAP(r6, 0xc02c563a, &(0x7f0000000800))
write$binfmt_elf64(r4, &(0x7f0000000200)=ANY=[], 0x1cb)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x1000004, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0x20008}}, 0x20}, 0x1, 0x0, 0x0, 0x20004800}, 0x4048004)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000019000100000000000000000002"], 0x2c}}, 0x0)
sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
close(r4)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x800)

1.165703777s ago: executing program 0 (id=140):
socket(0x10, 0x3, 0x0)
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001180000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
pwritev(r1, &(0x7f0000000840)=[{&(0x7f0000000380)='\f', 0xfff5}], 0x1, 0x5, 0xb2)
r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000b80)={0xf, {{0xa, 0x4e22, 0x4d, @remote, 0x40}}, 0x1, 0x4, [{{0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8001}}, {{0xa, 0x4e22, 0xfffffffe, @empty, 0x79f}}, {{0xa, 0x4e24, 0x8, @mcast2, 0x6}}, {{0xa, 0x4e22, 0xff000, @private2, 0x6}}]}, 0x290)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10012}, [@FRA_SRC={0x8, 0x2, @multicast1}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000840}, 0x40000)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000200))
ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000)
preadv2(r2, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/216, 0xd8}], 0x1, 0x4, 0x58c8, 0x2)
syz_usb_connect$uac1(0x3, 0x88, &(0x7f0000000980)=ANY=[@ANYBLOB="12011001000000206b1d010140000102030109027600030101a0090904000000010100000a24010200d30201020904010000010200000904010101010200000c2402010f01f86ffe9609050109ff03060507072501000705000904020000010200000904020101010200000b2402010901dd0258a45409058209000402027f072501810505000000"], &(0x7f00000006c0)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x300, 0xf7, 0x4, 0x0, 0x10, 0x1}, 0x51, &(0x7f0000000f80)={0x5, 0xf, 0x51, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "e149263d4898e6cad7ebc441d219e086"}, @ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x7fff, 0xf00, 0x7b, [0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "4fc1eb0c1c8380c6f797b6ce8cde5def"}, @generic={0x3, 0x10, 0xb}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x6, 0xd6, 0x46cc}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x8, 0x8}]}, 0x1, [{0x5b, &(0x7f00000007c0)=@string={0x5b, 0x3, "40b6683c5545601bf0b39c1f0f3740192995b1c1c7b146cb02e1320909bd1ed13fc85ca10e704d727d3bd78eb54e354b5c0b5edac0574e402a2443c4e70662b7000507187a5e0d0804c32f97d9a84a7dadb85fec84cd6a3994"}}]})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_usb_control_io$rtl8150(r0, &(0x7f0000000240)={0x14, &(0x7f00000003c0)={0x40, 0xa, 0xa3, {0xa3, 0x22, "cd1ceb50fc773baad7444f585a97f225f693cc3099d139157dfdaffa8a4985e3a18575402636fc15683fb24a0a52c44bca11e72767a5d9b8b7e0323ea042d4a96fdcf7c5242d684e5a1b54d0024e8d51d3a892e51f87439e145e27e222aca7c2a51e32fb5e26a2a4bf2152fe541a510c3afb194d5360bb15d9d39edbe37ee9c1606f60c6b2f915b8f02fc5f2b5bdf30d6ce42f7c6dba08caaf85e058bda8646388"}}, &(0x7f0000000180)=ANY=[@ANYBLOB]}, &(0x7f0000000680)={0x2c, &(0x7f0000000480)=ANY=[@ANYBLOB="40314800000073ddbd2f11536759120378633edbeffd6a8787951c56f7943ef16cdca6701dc7aa92909cb380295111b376ed83c076de24ce4e650400000035e5d2de4522e0b07958a5eb003228da"], &(0x7f0000000500)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001000)=ANY=[@ANYBLOB="c00503000000dcd103b9ae006eed0869078ddb962576c08695a55aeb90bab1bd69ca5c27a14e0c289a4782aed3cdfa35230689aef6a13f9daa8fe40b97df30183dbb1c47cf949dd1b8b29a8b8e745cb763d369d63a797c6207f41a6aa6f221ec79737406a8bb6766af2aff340e04f5c55aaa8ab1d34f40d43584b3902d44b39b"], &(0x7f0000000e40)=ANY=[@ANYBLOB="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"]})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0)
ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000000100))
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r5=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000280)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r5, 0x0}])
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x10000, 0x0)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r8, 0xc0189371, &(0x7f0000000700)={{0x1, 0x1, 0x18, r7}, './file0\x00'})
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_SEND_PRIO(r9, 0x6b, 0x3, &(0x7f0000000740)=0x1, 0x4)
getdents(r7, 0xfffffffffffffffd, 0x58)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$PPPIOCGL2TPSTATS(r10, 0x80487436, &(0x7f0000000a40)="2f5ff6fffc38d8fe2a96a1666d950961794104732443e6b515c71c02f9892ca9c13b373399a5e676d0c3f4c4c2cebedbb0255515db2a531e53d69244c41c40d954221f130439ca65019528689cd01987c517530abae4401f054c93936e3f8fedd2fa561f9b6961d9b25defe62c59ab35a06ab7299bbe32afdf72328b265241c96995eda2b14efc32ae3a")

1.060052067s ago: executing program 2 (id=141):
syz_open_dev$loop(&(0x7f0000000280), 0x8, 0x62138f9242a1c54c)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280)=0x4, 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00')

998.343547ms ago: executing program 1 (id=142):
unshare(0x24020400)
r0 = fsopen(&(0x7f0000000380)='9p\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x82)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2)
ioctl$VIDIOC_DQEVENT(r4, 0x80885659, 0x0)
r5 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2)
ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f041, 0x8e5})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r6, &(0x7f0000000200)={0x2a, 0x1, 0x1}, 0x66)
r7 = socket(0x10, 0x803, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x88}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYRES64=r1, @ANYRES32=r8, @ANYRES16=r9, @ANYRES16=r1, @ANYRES32=r6, @ANYRES16=r2, @ANYRES8=r6], 0x28}, 0x1, 0x0, 0x0, 0x20008880}, 0x40040)
r10 = syz_io_uring_setup(0x20049a, &(0x7f0000000540)={0x0, 0xa7ee, 0x2a, 0x2, 0x2cc}, &(0x7f0000000000)=<r11=>0x0, &(0x7f0000000280)=<r12=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r6, 0x0, 0x0})
r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/bus/input/devices\x00', 0x0, 0x0)
read$FUSE(r13, &(0x7f0000002480)={0x2020}, 0x2020)
lseek(r13, 0x6, 0x0)
io_uring_enter(r10, 0x40f9, 0x217, 0xa5, 0x0, 0x0)

997.655807ms ago: executing program 3 (id=143):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x5d}, @exit], &(0x7f00000003c0)='syzkaller\x00'}, 0x94)

927.440663ms ago: executing program 2 (id=144):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0xbe0848d304c8d2a2, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000340))
ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0)
r3 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2)
r4 = getpid()
capget(&(0x7f0000000100)={0x20080522, r4}, &(0x7f0000000180)={0x5, 0x8, 0xfffffffc, 0x7, 0xd, 0x9})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x10, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@call={0x85, 0x0, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0xf0f041, 0x0, '\x00', @value64}})
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x3011})
r7 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SET(r7, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x4, 0x70bd2b, 0x25dfdbff, {0x30, 0x0, 0x2, r4, 0x8, 0x1, 0x980, 0x4, 0x0, 0x81, 0x6fa}, ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000)
ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0xf, 0x5, 0x2, {0xe, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x4001}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x5}}})

824.066709ms ago: executing program 3 (id=145):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_usb_connect(0x3, 0x24, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0xdb, 0x16, 0x89, 0x20, 0x2040, 0xd900, 0xa92c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4c, 0x0, 0x0, 0xb2, 0x50, 0xcf}}]}}]}}, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000a40)={&(0x7f0000000800)=[{0x5, 0x800, 0x0, 0x0}, {0x8, 0xc001, 0x0, 0x0}], 0x2})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r3 = accept4(r2, 0x0, 0x0, 0x80000)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3)
writev(r3, &(0x7f0000000040)=[{&(0x7f00000012c0)="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", 0xfd1}], 0x1)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
preadv(r4, &(0x7f0000000280), 0x0, 0x6, 0x0)
r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x101080, 0x0)
fcntl$notify(r5, 0x402, 0x1)
syz_open_procfs(0x0, &(0x7f0000000600)='net/sockstat\x00')
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x800000, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1800}, 0x50)

823.075345ms ago: executing program 2 (id=146):
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x8, r4}, 0x18)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0xa, 0x8, 0x5}, 0x0)
socket$unix(0x1, 0x1, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000200)="0fc79f00800000640f79fd660f380a290f20d7c7442400da586a53c744240209c10000c7442406000000000f011424dbd2660f3882aa1ed90000f2f2f20faac4e1605d15ea2d9b5db900080000b877b98af2baf8b357790f30", 0x59}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000)
write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2b00002203000000000000004000000002000000f3ffffff0900000000000000407d282635210e287b2b005a5ba7856a3ad0adf6c0bf5cfec74fe35a5114c97ee1263ee95d4e624d88a17de12312f03aaff588f72a2e250703cf6508bd3a248067b0d659c53cde7dc197ef3f643b0e0e5e253e21d5867398e5cdefb6ffe9bcfc128edf1667f59765cea13afd489cf8cb4e927470f91ef146d7dc"], 0x2b)
r9 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TCSETAW(r9, 0x5407, &(0x7f0000000180)={0xfffb, 0x6, 0x3, 0x400, 0x17, "24241e6488c67424"})
socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r10=>0xffffffffffffffff})
sendmmsg$sock(r10, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000003a00)=@nfc_llcp={0x27, 0x0, 0x1, 0x1, 0x66, 0x2, "3f023ec8a06819bd70e58c762459e55dc2be7d23c887280c427c99e4e59d123ac235a78a68bc9daf672d4816b070f10e0b49a5ce4feac328a43d95524c2724", 0x1d}, 0x80, &(0x7f0000003d00)=[{0x0}, {&(0x7f0000003b80)="8cbc28", 0x3}], 0x2}}], 0x5, 0x885)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x80040, 0x0)
ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x61)
r12 = getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r9, 0xc1105511, &(0x7f0000000440)={{0x4, 0x5, 0xf86, 0x6, '\x00', 0x2}, 0x0, 0x20000000, 0x7, r12, 0x0, 0x2, 'syz1\x00', &(0x7f00000002c0)})

0s ago: executing program 1 (id=147):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
r3 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0)
writev(r4, &(0x7f0000000840), 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x1000}}, 0x0, 0x0, 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0])
unshare(0x20000400)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2)
sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)={0x11d8, r8, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x30}}}}, [@NL80211_ATTR_FRAME_MATCH={0x74, 0x5b, "6f2b48aaf7b0b9cd02ce0dc428e35f0372214dfac9aefc9780dc2f8965e335117eb420d5f7e8137a1003e11c6f1e10ec44d224a517dc3e8bdebb050dafae3accc3b711fb6796c1f45acd26d3cfa36b3068766aafd9a9c12f885b088ae6d6d583fc85f70266522d1772d4fe2cda9c2295"}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "437c9897eac75ff239730324b0e0b9bb66e9ef64bdf52f5e07a18bfe0377b55e7a03e573967cb1a880236ce7dfe8faf8446880b2b01de9a1605b0f4286a2fbfb5d847dfc4d6c2d30128fd2159b9dcda5aa2433ad3175a5497864b24665cd99fa66e91d7f408e96b182923a8c887957394a2ab172580877095a87bfdfa3dd80225956ff4f0acd1b0427e185349f7c4588a935c9a19b73063620ca64ecee96931566f256633557b652447b6d9ecdc2e4c9df88fd4a8b682109f91dbbc7793765475cb4b731b6a56075a7976561fbfe9bd04ad82312f7e5a65b38c6f946d6881cea345e0fe902c11be460ae478767a50b33febb1a270b9f00edd65d81d6dea81356bf869e391bee5ede96aafd6c45075fa0598bf4a7b02d5349701c36750278df2c696c0337bbcd33722766c41526fb5bbdc7f0ab90bb47b612fd5b2db8a62896ec0271469d297b8d859cb72ccb496aa0a36d9d7b3222975b6b9ba7733feecb2031e2610835350688160b43fc10d959a38d0f4ade498b86d46d11d0af801493c132c946a876bb492509d226c5b0c0342d7f8d985c6308316f3fd50a6a75000673b486d260f6e54cc98fdd10329fa8ebc1875d86d621a7f8c407215caf19d9e346331b739afe938670493636b2b59bc0e112c2e0f51c8cc572d6a2d68d488f84788325bbde0c65d0082bcba8f242f0ce39d5b7362c1dad2aa57ae7d3d09582305407cb7f9749b1718335fe5511a2abd59127d1cf897f558a0c6fcbdb7d21115de39d2c3847fab460db8e1633d348716a0fa121c33a2a0b8b719ea290dd2ec4ffa51ded4f4bb41aa11e8c95fae024ba0d7bc303744544c90318b01bdd787930b096e320053466f9828a95df9ecb2420a886871bd2c6c52b65658fb79642ff878fb71e91f5be74c63c2f54907eb78f690f8c059a49f95993a4ea8664e1684b53bb308a040b95aad0366181cfa81f0612cdab1dd8b980916b8a9541f38f57976c41e627717a0517af3da946995be93893311d915ecce5f3060b8fcbd1f51655921ce23a69c12f00eaa7ca99b8270b2dc4d50d22b9ef5c7a806c0629f62f94e0d883e3a0c70e9a6275637ce9f655719d5866f93390c8ca23b2d27a7c53ba1c8ad9101deddc88004025b600b307313c7820ad2d2d764f4b3edf5abb1455107aaad08d5443ff30ad3ceb266fd14cea1844d4cf33a4d8077756531b8ff4e916d0bfcdce633b4aa2ad603228e2af5b184abe809051f06f15ace4934dcbfbb11613ce9cffd5f0f41f0981925ed78df67cab69fbe34c7f0e3d8579bc7c4e2db0be375eb7fffb8e77e0e622d52129863d91acb1b5f35f9d28803db7412ca2fc2843e70ed133ff8e7fe0efb598f3a1a185f09f31f110cff5714fc4919e83aabb1649dcfdcb5463e6d70643a03c2c1462f296a6d68abf9b70d3c525383159e7a0a3229d0b33388a93f519e541c649fbe43a28cf3dcb990b40269e2f415a396b9e45a56f4b809e9a14a72ac75daa221bb1b3056fb84bbb23e0cdd2a58d05978ca28a9479cbfd993053e9545bb10fe88686bd47536b790a620c7a2c4d5b6790a156a51d7f9a7428d7ff23705028c8d7508d49fab97c945ef6340ad32202eb3f98ae8ad83a5b1c642d7d28b60f61446fdce22f855e8539aba1f6b32e49150d04fd7a1ed3aa7069a10039cf59f19f1bda09e42790e3f26b33c2ff03bc25b026edd14464b60bdd624cd77fa25ce63739ccc1819bf46708b658ba1a6046a61a1bfd835937c8f027c0a92e60ea2fc48bcdcdd83b39ced8450c5759fe2fd060d74427b279435ae1f992ba4a9f7b6870f56e93dbb748c329afd9df56624d75ab50cc5c8aef7491c03c7eb2c17cbb2cb5de7f047f04fa2ede027c9d30f8e18c1ecd6839eeeda6ca5a02d42ef58ca2fdd28f35d03144ca96c23da10abcea4246cedb1e16127cb652272cef5dab2a1b148ec2bee47a97ac17bad7016e5c67c7ed9302fa4354a3486685928cb14cd2bc0b1347b8ebf39fdfc6515b084992a3cc74f5efbbff8431f3a9302f128defa027606b353c7cd64a6436187f3f9c46d84146b045baabcef2faf850b1c0ce6e0ca1b01d58d9099d2d5dae748c6db33c46954f407a8505c77397aec303088b48ae396ac83979f28b79d5e331ec0a0d293c9e70a980081cfa88fa702c904408e6d0de16f335f86eadef0bf00c97ecf257721fb920b221118f04fa2fd1fbe2d86ed6433d2b43436dfd0fdf14c2b24c4ea732cc80bd536229bf954ed72baa56df8308ff242d5af97c9be0834ca1e4c26f9ec952c73604e91d70d56767a2f6762b9eb1032788952419fa4da5868ff3c6fb9dd1c84a56e9fc2a83bf3d1b623a769b8303928e4b3d2516f407a8b71ed04daf921aa5629819df458e7e3458924ef4399c7cf8272504d8428641794715a939759a6acd75bbd3c6ddd37b67e4d18da8179c6949916f791d0b3917edb474e410b70379e0c3b3099871b72705970a90f19b3165fda5b085e961e8f6f9f634fcafa982fcdd8380d53d766da94d80539a8d0a46f896900fc55a11002219dd6298c30707e98d04c71923cab311a516cd6ee3c372face06f05a7ee3922bf9623887549df3ce1ce9584641c6c735d8d03b835b7aae9262900b8b213a65f864261d3802b0ddb3d95ffc7281acf6df3b6446349f0c0f1a32c2bda597c5d4b89890177bd5cc8dec27af7854f2af096fde65c20ea5877759fe7e29d5ed7b2f7ded1b1dded8a7936490b05cb37714039bd203baf3ff433c341778f2cdea10895914f6963459b024dec2c703431aebbe3d94a0730506e49fb57e5b387ab740757f9321bcd2fb047e6357dc946abc71af817d734601965c8abf84f40a6cf48b1096ee57f213da833ffdd9f2946b856e93dca02925468a9f4aa95d49b8bc5113c0d2e066ff9337d3e3873f46d6ca702904fb1a698f23673214a89aab5da022c1f711c01aa23b221f0a07490f80756045562adabc6640139d4b2c39e422d139cd409c1909bc469085b74d020c1113a71cc35f6991b66241e881bcc9cc95f4e12f9b01cf47fc3226f77f2ed35274deb627c9cfe8698bfa5444a2d12953f3bbc2efbfe983a1170e5c4cba44d9bcd28bfead117d5519c574be5baf9389be0b563013f487e874e87c629d0c8efb4e7cdceb5be5f1c1b6ec0c5ff86227064a5c285d153864c323933900a4b66800d44534a53affb29bf55b336e7f0811f2a21aba80b17958399c4494b028762f221d0eeab1830945ef81a6e74d76ff3725fff76dae0cb00c23b5d35fbb2509171e191c7e99258e28b6b2f3a7aad43d2c19aebff3d5a940f2af8f4ea0da6aacf46b4eb4f512dae8fda9caab93d6538407acf9946ad7483b50200eb915e9969929afb9ba5f48a7768e1c6da44a50d77d4ddd12d26c25a73edc3dcb297a6a48d20fc191e6b9bf944141189db6dff698f14e34c4adf2c24952c33121f1df974712bfbb829a3482892597b9bf2573890bdf1cd5e547f3c664a575a47252c8259b0f88f285308c0326f22fec2ea8878971b83f50b8f313a1bf147e81d832c2d9ede58ad77e9f4ed7678417c9853238c078fdb5e729a932afd4b8edceb9d434da01e398c24f5692ce844c4b5bf38f43d8ed5c8ea714ebf9fa3bdc1d3b85b5ff987155c2fe294212586c4944ad96bada445bda87735794d3bf0fa422497384efac29389509ae187c64842abe65f690e4fc642a30e976baa9802371d7549cdd851716515ef9416519d86b25db79455444b4333ff77268760c73097957f41b00dc1e345fbc94b3dc429529a25945ccef91ad7ef16dba1e31097ab6a6015bbad8d9ff00a03b5eb43a0d3719732c7f9761057ce3744ca4dd53d401c3263fa07605b5f84058e229e6f9ef0f89c30f065bd593b0a758d955887a11bc9e28c276e861ce7e08a08b92c597aa3a6b8ffde80dd286067cbe0fddca39623e975008b9e1948e857abcd771b9b5a8dfc1520e07942e928f8a946d56cda686a5c20c34bf436ff2e1e57b58dd23f0d654e02d9dd4289214f8fb995b0d5b51a02790d10d6741cfba7efac4da5cb88b390ebfc14018a5a6f26eb43b2a382468992ddddc635aaa8a410d73944c4df7616c2c8a686058fb832afc174d775df1ae1326887848914ca41069be4a5e118ee60f3102312f09e7c3abb05c60786b54a6b1ecd61c51e9946cc9fb59735dbb6f1344e363b44fcc074eaf2d84084c35f31f12567369943a39ad4a9b160c24065e3d9b7b785142ac45c0568c768e36f4fb531e964e6600db30d53fdc83b6196a3b4239a6fde0405f2dc857676f57d4503fb759f38c2ec01edaed6ace193b799178ffbcec642e0ac8de551d9a659792bdb8ac7b0d8536f6815a5c532e9f1287f2875aa9ad98f2f86267caf8639924cc10d0379295695eae7606eb6c01dd8570d9ada92908aca79a939a7a90337cafab0406ea3b0ec7ad90f9ecd981f4524dfd7a8eb7361e79283857e9ed632e6a023b6138f05ca808a8a4e60dfb1b9b51da4ca0a003068070cc26df4c26e86c4446beb5a562a61ed5247ba28ed76fd5e8f16a2684d10a36179482487978692e268a5cd476189467543a09ebaa8c66c67ee2028e9b0cf77d7b4fe3da8e7d627ddb0e7e8c7c6ab0a4f4d0465eac22df8beb3222ead03de84839a8abcdcac183bdcef071389c44bcef4cfe3cfb3806c75807abb5898a4cef7267b8ae587fdf6a4d4366df57e44c018012a3cf80cd934e5df247c078b6a7bc05d0943d5156ed0dfb877868106c991648d55a69e1c43649010425b691a87b72fd256646bc498df2e8c0ec633a1310e8c058b4607c2828000aef542165b9afcafc60d5b424277f690b89bfa4ca20155df92baee87cc6dbcf48aac2df5f520e453cd5a67ccc7822f31735ade7a7f2412a96517d3467af07a5e3311fa27641df7165e0153c20498146231013298e8f1efee8137bee2cd3bb86dcc372d75335e2441fd0b593046ed4887d13f53ff33cae3380f6c3e02f7f9fe720c83a1f0d738c9bb3d524d92e2158d23beb649e7790822abe658b91403a94bcdc302babe04be02820a49cca434ae8334c6054e0a8a89ca262dbfcf3e705c97b8059676c3e9580c77ad1554f15412420c4ec293bbbccd53e0b6bd1706d2796ca90b1a0e2a352a540132816ba96a91b9db958d975f548016efe2be68520a9b35b0b243a7edb3ad0fc4cef637c3ed245c265a18111da1235bc503357570e807bae081e11b12b25cac3f5ec23105047bf3f686d76d2af97e4a4ae9b841c83b8e524d19ca58795511b49d73eec11cee13f3a2293dd23a9617ced3812700f29faca7598710d8eb845c63c78114bd2d81a36eaf0deffd41044918b4dc7749ba0ff8a70da575f96e0f6422fa34c1ca32d56680c2b6687f0c46f19ab71d750c66705912dbb2c568b22489bb84153e7d30bb8a3c3e2668cff21f8e0487d5aad8774cfb0aeb12f62e27bb5a01a1eb2bed682656847578ed8f4e9a84624bb4a18b4fc3721af0bf70f130cf9b41d77b3179f3a2eaa53988023d87ee80f958d126512f39c7174a5640d6200423874d6b7da3e040013009f72049162273b500ff0bee44ad220a3b5ad62fac781ce3b8ce570a9adfc8e76358086211ec53b1299505504d48790c0448e23087a2b09e1ca14e2406510aacee4be00e09aa539dca18c9e6939f7e1492a76b442dd582c794e0ec79536a864d6ff5715d8aecea2c06726f9c898b4e97f94b2be5e261f89ce61f4444114c3f3a1a5873f07882121d9812081835234fc4b3d4a09fd32a3e07e8b87147110e94bb53ece56e4"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}, @NL80211_ATTR_FRAME_MATCH={0x36, 0x5b, "edb2f649582ec2a76e551e2ae82010e193ee55214c881092ade5677544f9fadf2346d654095c9b709586a48e237383034557"}, @NL80211_ATTR_FRAME_MATCH={0xc8, 0x5b, "2c03245f102f3929dda85cdccfbed4f944b60b9ce59a50d2abc144ce7c945a06df4227e3efb522653fd3256ff2e58fdfe81dc69dc0daa65e55ded143c71e28d5632974c3054f3aaf0bebaef02449181d0419507c99080db09902ea196bb6f21e3cdb1a6ba186cc0509dd3b7fba47ebab878e5413157caca665d516b1566cf4100841fd789198ac8b374a0f57f452ec0b856ef60ac43769e511c7f9f9e7c43e4b0ed458a46af8176e325064916e1edf1a6eb25eae911991fc963d6cdb5ee3264b5c0f2ae1"}, @NL80211_ATTR_FRAME_MATCH={0x1e, 0x5b, "2edcb12f5f85294f25c6908bc68ccd8eb181ba3285223e4e4c61"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xcc1}]}, 0x11d8}, 0x1, 0x0, 0x0, 0x40020}, 0xc0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
recvmsg(r5, 0x0, 0x0)
r9 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=<r10=>0x0, &(0x7f0000000280)=<r11=>0x0)
syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2b, 0x0, @fd, 0x0, 0x0})
io_uring_enter(r9, 0x54, 0x4, 0x5, 0x0, 0x0)
r12 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r12, 0x28, 0x8, &(0x7f0000000000)=0x15e, 0x8)
quotactl$Q_SYNC(0xffffffff80000111, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.199' (ED25519) to the list of known hosts.
[   84.692230][ T5820] cgroup: Unknown subsys name 'net'
[   84.806583][ T5820] cgroup: Unknown subsys name 'cpuset'
[   84.816027][ T5820] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   86.501493][ T5820] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   91.025300][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   91.034163][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   91.041885][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   91.057128][ T5153] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   91.070888][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   91.079078][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   91.088539][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   91.096304][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   91.105116][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   91.112976][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   91.118728][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   91.123425][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   91.127694][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   91.137291][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   91.148837][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   91.153118][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   91.165043][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   91.173680][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   91.190812][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   91.203314][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   91.211719][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   91.219655][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   91.228034][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   91.253069][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   91.264329][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   91.850804][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   92.146595][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   92.199017][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   92.212885][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   92.397797][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.405763][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.413840][ T5852] bridge_slave_0: entered allmulticast mode
[   92.421960][ T5852] bridge_slave_0: entered promiscuous mode
[   92.468202][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.475758][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.483059][ T5852] bridge_slave_1: entered allmulticast mode
[   92.490332][ T5852] bridge_slave_1: entered promiscuous mode
[   92.592470][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   92.607125][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.647236][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.654541][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.662277][ T5848] bridge_slave_0: entered allmulticast mode
[   92.669810][ T5848] bridge_slave_0: entered promiscuous mode
[   92.686549][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.733867][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.741611][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.749416][ T5848] bridge_slave_1: entered allmulticast mode
[   92.757593][ T5848] bridge_slave_1: entered promiscuous mode
[   92.801007][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.810329][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.819172][ T5851] bridge_slave_0: entered allmulticast mode
[   92.827327][ T5851] bridge_slave_0: entered promiscuous mode
[   92.873495][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.880676][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.888594][ T5850] bridge_slave_0: entered allmulticast mode
[   92.896433][ T5850] bridge_slave_0: entered promiscuous mode
[   92.904288][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.911531][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.919490][ T5851] bridge_slave_1: entered allmulticast mode
[   92.926968][ T5851] bridge_slave_1: entered promiscuous mode
[   92.965719][ T5852] team0: Port device team_slave_0 added
[   92.971519][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.978967][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.986731][ T5850] bridge_slave_1: entered allmulticast mode
[   92.994581][ T5850] bridge_slave_1: entered promiscuous mode
[   93.015539][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   93.032831][ T5852] team0: Port device team_slave_1 added
[   93.067299][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   93.110020][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   93.158605][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   93.170982][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   93.206087][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.213209][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   93.239853][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.245747][ T5839] Bluetooth: hci0: command tx timeout
[   93.253010][ T5838] Bluetooth: hci2: command tx timeout
[   93.256792][ T5836] Bluetooth: hci1: command tx timeout
[   93.269474][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   93.293738][ T5848] team0: Port device team_slave_0 added
[   93.299544][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.307040][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.314982][ T5849] bridge_slave_0: entered allmulticast mode
[   93.322356][ T5849] bridge_slave_0: entered promiscuous mode
[   93.323897][ T5836] Bluetooth: hci4: command tx timeout
[   93.329159][ T5838] Bluetooth: hci3: command tx timeout
[   93.340777][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.348606][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   93.374799][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.412043][ T5848] team0: Port device team_slave_1 added
[   93.418046][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.425990][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.433877][ T5849] bridge_slave_1: entered allmulticast mode
[   93.441100][ T5849] bridge_slave_1: entered promiscuous mode
[   93.469830][ T5851] team0: Port device team_slave_0 added
[   93.504252][ T5850] team0: Port device team_slave_0 added
[   93.511934][ T5851] team0: Port device team_slave_1 added
[   93.545846][ T5850] team0: Port device team_slave_1 added
[   93.564416][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.571475][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   93.598033][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.624115][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   93.658347][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.665599][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   93.692827][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.719216][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   93.741450][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.748517][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   93.774960][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.799062][ T5852] hsr_slave_0: entered promiscuous mode
[   93.805972][ T5852] hsr_slave_1: entered promiscuous mode
[   93.825652][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.832838][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   93.858870][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.870773][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.877860][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   93.904507][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.937024][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.944068][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   93.970250][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.010825][ T5849] team0: Port device team_slave_0 added
[   94.061975][ T5849] team0: Port device team_slave_1 added
[   94.092423][ T5851] hsr_slave_0: entered promiscuous mode
[   94.099469][ T5851] hsr_slave_1: entered promiscuous mode
[   94.106944][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   94.112834][ T5851] Cannot create hsr debugfs directory
[   94.139551][ T5848] hsr_slave_0: entered promiscuous mode
[   94.146464][ T5848] hsr_slave_1: entered promiscuous mode
[   94.152866][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   94.158763][ T5848] Cannot create hsr debugfs directory
[   94.215978][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.223662][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   94.250811][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.295306][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.302280][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   94.329671][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.346073][ T5850] hsr_slave_0: entered promiscuous mode
[   94.352507][ T5850] hsr_slave_1: entered promiscuous mode
[   94.359636][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   94.365522][ T5850] Cannot create hsr debugfs directory
[   94.610679][ T5849] hsr_slave_0: entered promiscuous mode
[   94.617477][ T5849] hsr_slave_1: entered promiscuous mode
[   94.624508][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   94.630252][ T5849] Cannot create hsr debugfs directory
[   94.953470][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   94.978989][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   95.006297][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   95.022452][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   95.077592][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   95.098800][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   95.113567][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   95.126304][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   95.207747][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   95.233836][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   95.250236][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   95.273895][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   95.323096][ T5838] Bluetooth: hci1: command tx timeout
[   95.324436][ T5836] Bluetooth: hci0: command tx timeout
[   95.334043][ T5836] Bluetooth: hci2: command tx timeout
[   95.361858][ T5850] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   95.397190][ T5850] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   95.404126][ T5836] Bluetooth: hci4: command tx timeout
[   95.413009][ T5836] Bluetooth: hci3: command tx timeout
[   95.427768][ T5850] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   95.467564][ T5850] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   95.538837][ T5849] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   95.554323][ T5849] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   95.566566][ T5849] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   95.578586][ T5849] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   95.664290][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.738634][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.748936][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   95.772098][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.801802][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.809300][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.828804][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.836009][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.850852][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   95.885788][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.893163][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.915450][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   95.936498][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.943716][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.977120][ T3799] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.984314][ T3799] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.007099][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.030935][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.038263][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.055526][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.125559][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   96.160894][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   96.178750][ T3799] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.187115][ T3799] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.220878][ T3799] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.228102][ T3799] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.255837][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.263081][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.292093][ T3799] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.299301][ T3799] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.380477][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.434581][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.511719][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.555757][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.592350][ T5852] veth0_vlan: entered promiscuous mode
[   96.606620][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.652496][ T5852] veth1_vlan: entered promiscuous mode
[   96.699484][ T5851] veth0_vlan: entered promiscuous mode
[   96.721223][ T5848] veth0_vlan: entered promiscuous mode
[   96.738654][ T5851] veth1_vlan: entered promiscuous mode
[   96.769722][ T5848] veth1_vlan: entered promiscuous mode
[   96.788351][ T5850] veth0_vlan: entered promiscuous mode
[   96.818346][ T5852] veth0_macvtap: entered promiscuous mode
[   96.827022][ T5849] veth0_vlan: entered promiscuous mode
[   96.841014][ T5852] veth1_macvtap: entered promiscuous mode
[   96.853912][ T5850] veth1_vlan: entered promiscuous mode
[   96.877092][ T5851] veth0_macvtap: entered promiscuous mode
[   96.900433][ T5849] veth1_vlan: entered promiscuous mode
[   96.924105][ T5851] veth1_macvtap: entered promiscuous mode
[   96.958636][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.970671][ T5848] veth0_macvtap: entered promiscuous mode
[   96.989558][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.004795][ T5848] veth1_macvtap: entered promiscuous mode
[   97.012348][ T5850] veth0_macvtap: entered promiscuous mode
[   97.038827][ T1113] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.050965][ T1113] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.066690][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.078513][ T1113] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.088740][ T1113] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.100339][ T5850] veth1_macvtap: entered promiscuous mode
[   97.120425][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.142004][ T5849] veth0_macvtap: entered promiscuous mode
[   97.169698][  T107] cfg80211: failed to load regulatory.db
[   97.184373][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.197016][ T1113] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.206344][ T1113] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.227065][ T5849] veth1_macvtap: entered promiscuous mode
[   97.234763][ T1113] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.249667][ T1113] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.274737][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.287565][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.328928][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.342095][ T3799] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.371582][ T3799] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.393857][ T3799] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.403784][ T5836] Bluetooth: hci2: command tx timeout
[   97.413026][ T5836] Bluetooth: hci0: command tx timeout
[   97.418281][ T5838] Bluetooth: hci1: command tx timeout
[   97.437148][ T3799] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.450113][ T3799] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.470568][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.479592][ T3799] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.488546][ T5838] Bluetooth: hci3: command tx timeout
[   97.488578][ T5838] Bluetooth: hci4: command tx timeout
[   97.506510][ T3799] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.528180][ T3481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.536232][ T3799] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.545332][ T3481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.561341][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.592198][   T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.601574][   T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.635137][   T65] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.644170][   T65] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.657932][   T65] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.668429][   T65] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.725136][ T3799] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.738423][ T3799] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.827027][   T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.835590][   T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.861894][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   97.972030][   T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.018279][   T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.042072][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.088310][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.178857][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.196888][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.375559][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.384734][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.413618][  T278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.424649][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   98.603257][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   98.625138][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   98.662973][  T278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.806725][   T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.826310][   T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.944846][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   99.075372][ T5939] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   99.225130][  T795] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   99.234080][    T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!!
[   99.483676][ T5838] Bluetooth: hci2: command tx timeout
[   99.484167][ T5836] Bluetooth: hci0: command tx timeout
[   99.496341][ T5839] Bluetooth: hci1: command tx timeout
[   99.525492][ T5947] Zero length message leads to an empty skb
[   99.645453][ T5838] Bluetooth: hci3: command tx timeout
[   99.652447][ T5839] Bluetooth: hci4: command tx timeout
[   99.654406][  T795] usb 3-1: Using ep0 maxpacket: 16
[   99.721174][  T795] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   99.777758][  T795] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   99.893883][  T795] usb 3-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00
[   99.952302][  T795] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.008087][  T795] usb 3-1: config 0 descriptor??
[  100.061359][  T795] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  100.173086][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  100.295153][ T5938] syz.2.7 uses obsolete (PF_INET,SOCK_PACKET)
[  100.313144][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  100.480381][   T44] usb 3-1: USB disconnect, device number 2
[  100.608193][ T5960] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  100.835116][ T5969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11'.
[  100.844309][ T5969] bridge_slave_1: left allmulticast mode
[  100.850002][ T5969] bridge_slave_1: left promiscuous mode
[  100.860594][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.910533][ T5975] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.919881][  T795] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  100.982177][ T5969] bridge_slave_0: left allmulticast mode
[  100.990744][ T5969] bridge_slave_0: left promiscuous mode
[  101.060104][ T5968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12'.
[  101.083626][  T795] usb 5-1: Using ep0 maxpacket: 8
[  101.088839][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  101.101828][  T795] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  101.124746][  T795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.152965][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.175082][  T795] pvrusb2: Hardware description: Terratec Grabster AV400
[  101.194309][  T795] pvrusb2: **********
[  101.242965][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  101.249754][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  101.271472][  T795] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  101.282110][  T795] pvrusb2: Important functionality might not be entirely working.
[  101.301684][  T795] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  101.531116][  T795] pvrusb2: **********
[  101.542016][ T2348] pvrusb2: Invalid write control endpoint
[  101.709749][ T2348] pvrusb2: Invalid write control endpoint
[  101.777012][ T2348] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  101.792056][ T2348] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  101.813321][ T2348] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  101.823920][ T2348] pvrusb2: Device being rendered inoperable
[  101.832405][ T5960] pvrusb2: Attempted to execute control transfer when device not ok
[  101.846779][ T2348] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  101.869638][ T2348] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  101.881996][ T5915] usb 5-1: USB disconnect, device number 2
[  101.991689][ T2348] pvrusb2: Attached sub-driver cx25840
[  102.017208][ T2348] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  102.042832][ T2348] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  103.492977][ T5901] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  103.622826][  T980] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  103.652714][ T5901] usb 1-1: Using ep0 maxpacket: 8
[  103.671247][ T5901] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  103.689656][ T5901] usb 1-1: config 179 has no interface number 0
[  103.713022][ T5901] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  103.725362][ T5901] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  103.754413][ T5901] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  103.782705][ T5901] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  103.822850][ T5901] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  103.846795][ T5901] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  103.856945][  T980] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  103.857065][  T980] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8
[  103.922718][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.942304][  T980] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  103.973522][  T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.975109][ T5996] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  103.981584][  T980] usb 4-1: Product: syz
[  103.981606][  T980] usb 4-1: Manufacturer: syz
[  104.019931][  T980] usb 4-1: SerialNumber: syz
[  104.254271][ T6002] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  104.321798][ T5901] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input5
[  104.505014][    C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  104.513443][    C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  104.522754][ T5901] usb 1-1: USB disconnect, device number 2
[  104.935982][  T107] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  105.177841][ T5922] IPVS: starting estimator thread 0...
[  105.202275][  T980] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed
[  105.253281][  T980] cdc_ncm 4-1:1.0: bind() failure
[  105.272830][ T6019] IPVS: using max 28 ests per chain, 67200 per kthread
[  105.296179][  T980] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  105.339738][  T980] cdc_ncm 4-1:1.1: bind() failure
[  105.366810][  T980] usb 4-1: USB disconnect, device number 2
[  105.582223][ T6031] netlink: 'syz.0.28': attribute type 10 has an invalid length.
[  105.598747][ T6031] netlink: 40 bytes leftover after parsing attributes in process `syz.0.28'.
[  105.768078][ T5922] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  105.857752][ T6029] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.910970][ T6029] bridge_slave_0 (unregistering): left allmulticast mode
[  105.942253][ T6029] bridge_slave_0 (unregistering): left promiscuous mode
[  105.949999][ T5922] usb 3-1: Using ep0 maxpacket: 8
[  105.967050][ T5922] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  105.977814][ T6029] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.989720][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.229457][ T5922] pvrusb2: Hardware description: Terratec Grabster AV400
[  106.252739][ T5922] pvrusb2: **********
[  106.257031][ T5922] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  106.270929][ T5922] pvrusb2: Important functionality might not be entirely working.
[  106.283660][ T5922] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  106.401750][ T6038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.29'.
[  106.413561][ T5922] pvrusb2: **********
[  106.416095][ T6031] dummy0: entered promiscuous mode
[  106.432944][ T2348] pvrusb2: Invalid write control endpoint
[  106.436639][ T6031] bridge0: port 1(dummy0) entered blocking state
[  106.522785][ T6031] bridge0: port 1(dummy0) entered disabled state
[  106.617315][ T6031] dummy0: entered allmulticast mode
[  106.643717][ T6026] pvrusb2: Invalid write control endpoint
[  106.652085][ T6031] bridge0: port 1(dummy0) entered blocking state
[  106.658641][ T6031] bridge0: port 1(dummy0) entered forwarding state
[  106.667162][  T107] usb 3-1: USB disconnect, device number 3
[  106.911939][ T2348] pvrusb2: Invalid write control endpoint
[  106.952701][ T2348] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  107.009107][ T2348] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  107.042681][ T2348] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  107.084448][ T6043] FAULT_INJECTION: forcing a failure.
[  107.084448][ T6043] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  107.089429][ T2348] pvrusb2: Device being rendered inoperable
[  107.138511][ T6043] CPU: 1 UID: 0 PID: 6043 Comm: syz.0.31 Not tainted syzkaller #0 PREEMPT(full) 
[  107.138541][ T6043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  107.138561][ T6043] Call Trace:
[  107.138570][ T6043]  <TASK>
[  107.138580][ T6043]  dump_stack_lvl+0xe8/0x150
[  107.138621][ T6043]  should_fail_ex+0x414/0x560
[  107.138662][ T6043]  _copy_to_iter+0x1de/0x1790
[  107.138701][ T6043]  ? __pfx__copy_to_iter+0x10/0x10
[  107.138729][ T6043]  ? chacha_block_generic+0x53/0xc80
[  107.138768][ T6043]  get_random_bytes_user+0x1a0/0x380
[  107.138801][ T6043]  ? __pfx_get_random_bytes_user+0x10/0x10
[  107.138837][ T6043]  ? __pfx_vfs_write+0x10/0x10
[  107.138868][ T6043]  ? import_ubuf+0xfb/0x1d0
[  107.138898][ T6043]  __x64_sys_getrandom+0x16d/0x260
[  107.138950][ T6043]  ? __pfx___x64_sys_getrandom+0x10/0x10
[  107.138975][ T6043]  ? ksys_write+0x22a/0x250
[  107.138998][ T6043]  ? __pfx_ksys_write+0x10/0x10
[  107.139030][ T6043]  do_syscall_64+0xec/0xf80
[  107.139055][ T6043]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.139075][ T6043]  ? trace_irq_disable+0x37/0x100
[  107.139103][ T6043]  ? clear_bhb_loop+0x60/0xb0
[  107.139129][ T6043]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.139150][ T6043] RIP: 0033:0x7fae89d8f749
[  107.139174][ T6043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  107.139192][ T6043] RSP: 002b:00007fae8accd038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e
[  107.139215][ T6043] RAX: ffffffffffffffda RBX: 00007fae89fe5fa0 RCX: 00007fae89d8f749
[  107.139230][ T6043] RDX: 0000000000000002 RSI: fffffffffffffdde RDI: 0000200000000040
[  107.139245][ T6043] RBP: 00007fae8accd090 R08: 0000000000000000 R09: 0000000000000000
[  107.139258][ T6043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  107.139270][ T6043] R13: 00007fae89fe6038 R14: 00007fae89fe5fa0 R15: 00007fae8a10fa28
[  107.139304][ T6043]  </TASK>
[  107.163998][ T2348] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  107.641742][ T2348] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  107.727290][ T2348] pvrusb2: Attached sub-driver cx25840
[  107.764716][ T2348] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  107.862698][ T2348] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  108.069941][ T6061] geneve2: entered promiscuous mode
[  108.372030][ T6063] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  108.430262][ T6063] bond1 (unregistering): Released all slaves
[  109.069236][    C0] IPv4: Oversized IP packet from 127.0.0.1
[  109.663268][ T6085] usb usb8: usbfs: process 6085 (syz.0.43) did not claim interface 0 before use
[  109.872710][  T980] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  110.083268][  T980] usb 5-1: Using ep0 maxpacket: 8
[  110.090841][  T980] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  110.103996][  T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.145771][  T980] pvrusb2: Hardware description: Terratec Grabster AV400
[  110.176438][  T980] pvrusb2: **********
[  110.208230][  T980] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  110.322690][  T980] pvrusb2: Important functionality might not be entirely working.
[  110.349644][  T980] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  110.387007][  T980] pvrusb2: **********
[  110.417875][ T2348] pvrusb2: Invalid write control endpoint
[  110.621002][ T6087] pvrusb2: Invalid write control endpoint
[  110.688392][ T1050] usb 5-1: USB disconnect, device number 4
[  110.793126][ T2348] pvrusb2: Invalid write control endpoint
[  110.831732][ T2348] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  110.900672][ T2348] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  110.960799][ T2348] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  110.999981][ T2348] pvrusb2: Device being rendered inoperable
[  111.019438][ T2348] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  111.042842][ T2348] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  111.079357][ T2348] pvrusb2: Attached sub-driver cx25840
[  111.100120][ T2348] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  111.128625][ T2348] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  111.633855][ T6114] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  111.833866][ T6115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.50'.
[  111.978420][    C1] IPv4: Oversized IP packet from 127.0.0.1
[  112.766540][ T6131] netlink: 28 bytes leftover after parsing attributes in process `syz.3.57'.
[  113.057859][ T6137] netlink: 'syz.3.59': attribute type 21 has an invalid length.
[  113.087176][ T6137] netlink: 'syz.3.59': attribute type 1 has an invalid length.
[  113.106381][ T6137] netlink: 144 bytes leftover after parsing attributes in process `syz.3.59'.
[  113.131145][ T6139] netlink: 80 bytes leftover after parsing attributes in process `syz.2.60'.
[  113.367710][ T6137] netlink: set zone limit has 4 unknown bytes
[  113.396580][ T6118] netlink: 24 bytes leftover after parsing attributes in process `syz.1.52'.
[  113.460792][ T6147] loop9: detected capacity change from 0 to 7
[  113.470893][ T6013] Buffer I/O error on dev loop9, logical block 0, async page read
[  113.506910][ T6148] capability: warning: `syz.4.62' uses deprecated v2 capabilities in a way that may be insecure
[  113.512472][ T6013] Buffer I/O error on dev loop9, logical block 0, async page read
[  113.546415][ T6013] Buffer I/O error on dev loop9, logical block 0, async page read
[  113.593870][ T6013] Buffer I/O error on dev loop9, logical block 0, async page read
[  113.608983][    C1] IPv4: Oversized IP packet from 127.0.0.1
[  113.630677][ T6013] Buffer I/O error on dev loop9, logical block 0, async page read
[  113.671939][ T6013] Buffer I/O error on dev loop9, logical block 0, async page read
[  113.705192][ T6013] Buffer I/O error on dev loop9, logical block 0, async page read
[  113.738723][ T6013] ldm_validate_partition_table(): Disk read failed.
[  113.769857][ T6013] Buffer I/O error on dev loop9, logical block 0, async page read
[  113.808144][ T6013] Buffer I/O error on dev loop9, logical block 0, async page read
[  113.847806][ T6013] Buffer I/O error on dev loop9, logical block 0, async page read
[  113.887046][ T6013] Dev loop9: unable to read RDB block 0
[  113.916429][ T6013]  loop9: unable to read partition table
[  113.922515][ T6013] loop9: partition table beyond EOD, truncated
[  113.968582][ T6147] ldm_validate_partition_table(): Disk read failed.
[  113.993279][ T6147] Dev loop9: unable to read RDB block 0
[  114.030283][ T6147]  loop9: unable to read partition table
[  114.052519][ T6147] loop9: partition table beyond EOD, truncated
[  114.099853][ T6147] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  114.099853][ T6147] 
) failed (rc=-5)
[  114.262762][ T1050] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  114.362132][ T6163] netlink: 28 bytes leftover after parsing attributes in process `syz.0.69'.
[  114.434697][ T6165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.68'.
[  114.474702][ T1050] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[  114.483591][ T1050] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.528828][ T1050] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  114.625015][ T1050] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  114.646770][ T1050] usb 2-1: Manufacturer: syz
[  114.841411][ T1050] usb 2-1: config 0 descriptor??
[  114.899798][ T6172] netlink: 80 bytes leftover after parsing attributes in process `syz.0.71'.
[  115.062747][ T1050] rc_core: IR keymap rc-hauppauge not found
[  115.072865][ T1050] Registered IR keymap rc-empty
[  115.084905][ T1050] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  115.104514][ T1050] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7
[  115.144170][    C0] igorplugusb 2-1:0.0: Error: urb status = -32
[  115.156765][ T1050] usb 2-1: USB disconnect, device number 2
[  115.622700][ T5994] usb 1-1: new low-speed USB device number 3 using dummy_hcd
[  115.787340][ T5994] usb 1-1: config index 0 descriptor too short (expected 1307, got 27)
[  115.805633][ T5994] usb 1-1: config 0 has an invalid interface number: 0 but max is -1
[  115.840912][ T5994] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[  115.871350][ T5994] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  115.916220][ T5994] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  115.958115][ T5994] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  115.986979][ T5994] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  116.125868][ T5994] usb 1-1: string descriptor 0 read error: -22
[  116.132155][ T5994] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  116.188678][ T5994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.211615][ T5994] usb 1-1: config 0 descriptor??
[  116.221779][ T5994] hub 1-1:0.0: bad descriptor, ignoring hub
[  116.228169][ T5994] hub 1-1:0.0: probe with driver hub failed with error -5
[  116.255778][ T5994] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input8
[  116.585097][ T6175] FAULT_INJECTION: forcing a failure.
[  116.585097][ T6175] name failslab, interval 1, probability 0, space 0, times 1
[  116.598196][ T1050] usb 1-1: USB disconnect, device number 3
[  116.632849][ T6175] CPU: 0 UID: 0 PID: 6175 Comm: syz.0.72 Not tainted syzkaller #0 PREEMPT(full) 
[  116.632878][ T6175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  116.632891][ T6175] Call Trace:
[  116.632899][ T6175]  <TASK>
[  116.632908][ T6175]  dump_stack_lvl+0xe8/0x150
[  116.632942][ T6175]  should_fail_ex+0x414/0x560
[  116.632981][ T6175]  should_failslab+0xa8/0x100
[  116.633010][ T6175]  kmem_cache_alloc_noprof+0x88/0x710
[  116.633042][ T6175]  ? alloc_empty_file+0x55/0x1d0
[  116.633068][ T6175]  ? kernel_text_address+0xa5/0xe0
[  116.633100][ T6175]  alloc_empty_file+0x55/0x1d0
[  116.633128][ T6175]  path_openat+0x108/0x3dd0
[  116.633157][ T6175]  ? stack_trace_save+0x9c/0xe0
[  116.633190][ T6175]  ? __pfx_stack_trace_save+0x10/0x10
[  116.633224][ T6175]  ? stack_depot_save_flags+0x33/0x810
[  116.633250][ T6175]  ? kasan_save_track+0x4f/0x80
[  116.633278][ T6175]  ? kasan_save_track+0x3e/0x80
[  116.633297][ T6175]  ? __kasan_slab_alloc+0x6c/0x80
[  116.633318][ T6175]  ? kmem_cache_alloc_noprof+0x37d/0x710
[  116.633347][ T6175]  ? getname_flags+0xb8/0x540
[  116.633369][ T6175]  ? do_sys_openat2+0xbc/0x200
[  116.633398][ T6175]  ? __pfx_path_openat+0x10/0x10
[  116.633420][ T6175]  ? __lock_acquire+0x6b6/0x2cf0
[  116.633456][ T6175]  do_filp_open+0x1fa/0x410
[  116.633477][ T6175]  ? __pfx_do_filp_open+0x10/0x10
[  116.633518][ T6175]  ? _raw_spin_unlock+0x28/0x50
[  116.633535][ T6175]  ? alloc_fd+0x64c/0x6c0
[  116.633566][ T6175]  do_sys_openat2+0x121/0x200
[  116.633596][ T6175]  ? __pfx_do_sys_openat2+0x10/0x10
[  116.633631][ T6175]  ? __pfx_ksys_write+0x10/0x10
[  116.633655][ T6175]  __x64_sys_openat+0x138/0x170
[  116.633688][ T6175]  do_syscall_64+0xec/0xf80
[  116.633712][ T6175]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.633733][ T6175]  ? trace_irq_disable+0x37/0x100
[  116.633760][ T6175]  ? clear_bhb_loop+0x60/0xb0
[  116.633785][ T6175]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.633805][ T6175] RIP: 0033:0x7fae89d8f749
[  116.633829][ T6175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  116.633847][ T6175] RSP: 002b:00007fae8accd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  116.633869][ T6175] RAX: ffffffffffffffda RBX: 00007fae89fe5fa0 RCX: 00007fae89d8f749
[  116.633884][ T6175] RDX: 00000000001ad100 RSI: 0000200000000140 RDI: 00000000ffffff9c
[  116.633899][ T6175] RBP: 00007fae8accd090 R08: 0000000000000000 R09: 0000000000000000
[  116.633912][ T6175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  116.633924][ T6175] R13: 00007fae89fe6038 R14: 00007fae89fe5fa0 R15: 00007fae8a10fa28
[  116.633955][ T6175]  </TASK>
[  118.148999][ T6207] netlink: 80 bytes leftover after parsing attributes in process `syz.4.82'.
[  118.772420][ T6215] netlink: 24 bytes leftover after parsing attributes in process `syz.3.84'.
[  118.810137][ T6215] netlink: 24 bytes leftover after parsing attributes in process `syz.3.84'.
[  119.814860][ T6239] netlink: 80 bytes leftover after parsing attributes in process `syz.4.93'.
[  119.862001][ T6229] @: renamed from vlan0 (while UP)
[  120.686304][ T6259] loop5: detected capacity change from 0 to 7
[  120.693664][ T6261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.715164][   T30] audit: type=1326 audit(1768801816.030:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.4.100" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc224d8f749 code=0x0
[  120.738812][ T6261] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  120.790247][ T6259] Dev loop5: unable to read RDB block 7
[  120.797173][ T6259]  loop5: unable to read partition table
[  120.803398][ T6259] loop5: partition table beyond EOD, truncated
[  120.810283][ T6259] loop_reread_partitions: partition scan of loop5 (���������C�j̖�P=ý?��%��`��ր���{��֐�ȵ4FLQk݊5) failed (rc=-5)
[  120.931021][  T107] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  121.012804][  T980] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  121.117537][ T6270] netlink: 16 bytes leftover after parsing attributes in process `syz.1.103'.
[  121.132695][  T107] usb 3-1: Using ep0 maxpacket: 16
[  121.161638][  T107] usb 3-1: config 0 has an invalid interface number: 60 but max is 0
[  121.169934][  T107] usb 3-1: config 0 has no interface number 0
[  121.180811][  T107] usb 3-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=fa.5a
[  121.189914][  T107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.198079][  T107] usb 3-1: Product: syz
[  121.202287][  T107] usb 3-1: Manufacturer: syz
[  121.208853][  T107] usb 3-1: SerialNumber: syz
[  121.241363][  T107] usb 3-1: config 0 descriptor??
[  121.247859][  T980] usb 1-1: config index 0 descriptor too short (expected 8192, got 68)
[  121.265525][  T980] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  121.316524][  T980] usb 1-1: config 0 has no interfaces?
[  121.322347][  T980] usb 1-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47
[  121.339735][  T107] gspca_main: spca500-2.14.0 probing 046d:0900
[  121.356156][  T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.393675][  T980] usb 1-1: config 0 descriptor??
[  121.675637][ T6258] netlink: 16 bytes leftover after parsing attributes in process `syz.0.99'.
[  121.706117][  T107] gspca_spca500: reg write: error -71
[  121.723863][ T5908] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  121.811433][  T107] gspca_spca500: reg write: error -71
[  121.826990][  T107] gspca_spca500: reg write: error -71
[  121.836983][  T107] gspca_spca500: reg write: error -71
[  121.847181][  T980] usb 1-1: string descriptor 0 read error: -71
[  121.854750][  T107] gspca_spca500: reg write: error -71
[  121.873896][  T107] gspca_spca500: reg write: error -71
[  121.879533][  T980] usb 1-1: USB disconnect, device number 4
[  121.902748][ T5908] usb 5-1: Using ep0 maxpacket: 32
[  121.909704][ T5908] usb 5-1: config 0 has an invalid interface number: 76 but max is 0
[  121.923118][ T5908] usb 5-1: config 0 has no interface number 0
[  121.931219][  T107] gspca_spca500: reg write: error -71
[  121.941962][  T107] gspca_spca500: reg write: error -71
[  121.949598][ T5908] usb 5-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c
[  121.963676][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.975579][  T107] gspca_spca500: reg write: error -71
[  121.982842][ T5908] usb 5-1: Product: syz
[  121.987053][ T5908] usb 5-1: Manufacturer: syz
[  121.993050][  T107] gspca_spca500: reg write: error -71
[  122.001708][  T107] gspca_spca500: reg write: error -71
[  122.007800][ T5908] usb 5-1: SerialNumber: syz
[  122.013375][  T107] gspca_spca500: reg write: error -71
[  122.033613][  T107] gspca_spca500: reg write: error -71
[  122.045370][  T107] gspca_spca500: reg write: error -71
[  122.050916][ T5908] usb 5-1: config 0 descriptor??
[  122.065773][  T107] usb 3-1: USB disconnect, device number 4
[  122.084407][ T5908] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state.
[  122.107637][ T5908] dw2102: su3000_power_ctrl: 1, initialized 0
[  122.120869][ T5908] dvb-usb: bulk message failed: -22 (2/0)
[  122.165908][ T5908] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  122.212260][ T5908] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0)
[  122.237620][ T5908] usb 5-1: media controller created
[  122.256207][ T5908] dvb-usb: bulk message failed: -22 (6/0)
[  122.272654][ T5908] dw2102: i2c transfer failed.
[  122.306233][ T6279] dvb-usb: bulk message failed: -22 (3/0)
[  122.324665][ T6279] dw2102: i2c transfer failed.
[  122.340395][ T6279] dvb-usb: bulk message failed: -22 (4/0)
[  122.379334][ T6279] dw2102: i2c transfer failed.
[  122.439179][ T5908] dvb-usb: bulk message failed: -22 (6/0)
[  122.453039][ T5908] dw2102: i2c transfer failed.
[  122.476116][ T5908] dvb-usb: bulk message failed: -22 (6/0)
[  122.503162][ T5908] dw2102: i2c transfer failed.
[  122.543071][ T5908] dvb-usb: bulk message failed: -22 (6/0)
[  122.555419][ T5908] dw2102: i2c transfer failed.
[  122.564002][ T5908] dvb-usb: bulk message failed: -22 (6/0)
[  122.579857][ T5908] dw2102: i2c transfer failed.
[  122.592746][ T5908] dvb-usb: bulk message failed: -22 (6/0)
[  122.662965][  T107] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  122.855583][ T5908] dw2102: i2c transfer failed.
[  123.069119][ T5908] dvb-usb: MAC address: 02:02:02:02:02:02
[  123.102652][  T107] usb 4-1: device descriptor read/64, error -71
[  123.116347][ T6296] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  123.169020][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  123.230441][ T5908] dvb-usb: bulk message failed: -22 (3/0)
[  123.236792][ T5908] dw2102: command 0x0e transfer failed.
[  123.252487][ T5908] dvb-usb: bulk message failed: -22 (3/0)
[  123.258844][ T5908] dw2102: command 0x0e transfer failed.
[  123.395269][  T107] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  123.540830][    C0] IPv4: Oversized IP packet from 127.0.0.1
[  123.572680][ T5908] dvb-usb: bulk message failed: -22 (3/0)
[  123.578519][  T107] usb 4-1: device descriptor read/64, error -71
[  123.586880][ T5908] dw2102: command 0x0e transfer failed.
[  123.593314][ T5908] dvb-usb: bulk message failed: -22 (3/0)
[  123.609134][ T5908] dw2102: command 0x0e transfer failed.
[  123.622308][ T5908] dvb-usb: bulk message failed: -22 (1/0)
[  123.630019][ T5908] dw2102: command 0x51 transfer failed.
[  123.703281][  T107] usb usb4-port1: attempt power cycle
[  123.751345][ T5908] DVB: Unable to find symbol ds3000_attach()
[  123.772948][ T5973] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  123.786187][ T5908] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0'
[  123.885262][ T5908] rc_core: IR keymap rc-su3000 not found
[  123.885294][ T5908] Registered IR keymap rc-empty
[  123.887393][ T5908] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  123.891803][ T5908] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input9
[  123.895762][ T5908] dvb-usb: schedule remote query interval to 150 msecs.
[  123.895780][ T5908] dw2102: su3000_power_ctrl: 0, initialized 1
[  123.895791][ T5908] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected.
[  124.059826][ T5908] dvb-usb: bulk message failed: -22 (1/0)
[  124.059874][ T5908] dw2102: i2c transfer failed.
[  124.061939][ T5973] usb 1-1: device descriptor read/64, error -71
[  124.112639][  T107] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  124.194081][  T107] usb 4-1: device descriptor read/8, error -71
[  124.234690][ T5908] dvb-usb: bulk message failed: -22 (1/0)
[  124.252786][ T5908] dw2102: i2c transfer failed.
[  124.316993][ T5973] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  124.412955][  T980] dvb-usb: bulk message failed: -22 (1/0)
[  124.419250][  T980] dw2102: i2c transfer failed.
[  124.453856][  T107] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  124.472693][ T5973] usb 1-1: device descriptor read/64, error -71
[  124.495930][  T107] usb 4-1: device descriptor read/8, error -71
[  124.592701][  T980] dvb-usb: bulk message failed: -22 (1/0)
[  124.599942][ T5973] usb usb1-port1: attempt power cycle
[  124.619842][  T980] dw2102: i2c transfer failed.
[  124.629150][  T107] usb usb4-port1: unable to enumerate USB device
[  124.644311][ T5915] usb 5-1: USB disconnect, device number 5
[  124.770983][ T5915] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected.
[  125.002924][ T5973] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  125.023404][ T5973] usb 1-1: device descriptor read/8, error -71
[  125.168100][ T5922] IPVS: starting estimator thread 0...
[  125.228289][ T6331] netlink: 76 bytes leftover after parsing attributes in process `syz.1.118'.
[  125.273935][ T6329] IPVS: using max 26 ests per chain, 62400 per kthread
[  125.342751][ T5973] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  125.413913][ T5973] usb 1-1: device descriptor read/8, error -71
[  125.576155][ T5973] usb usb1-port1: unable to enumerate USB device
[  125.618648][ T6339] FAULT_INJECTION: forcing a failure.
[  125.618648][ T6339] name failslab, interval 1, probability 0, space 0, times 0
[  125.631684][ T6339] CPU: 1 UID: 0 PID: 6339 Comm: syz.1.121 Not tainted syzkaller #0 PREEMPT(full) 
[  125.631712][ T6339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  125.631729][ T6339] Call Trace:
[  125.631738][ T6339]  <TASK>
[  125.631747][ T6339]  dump_stack_lvl+0xe8/0x150
[  125.631792][ T6339]  should_fail_ex+0x414/0x560
[  125.631839][ T6339]  should_failslab+0xa8/0x100
[  125.631868][ T6339]  __kmalloc_noprof+0xdf/0x800
[  125.631889][ T6339]  ? video_usercopy+0x18e/0x13f0
[  125.631917][ T6339]  video_usercopy+0x18e/0x13f0
[  125.631950][ T6339]  ? __pfx___video_do_ioctl+0x10/0x10
[  125.631973][ T6339]  ? __pfx_video_usercopy+0x10/0x10
[  125.632007][ T6339]  ? __fget_files+0x2a/0x420
[  125.632037][ T6339]  ? __fget_files+0x2a/0x420
[  125.632062][ T6339]  ? __fget_files+0x3a0/0x420
[  125.632093][ T6339]  v4l2_ioctl+0x18d/0x1e0
[  125.632115][ T6339]  ? __pfx_v4l2_ioctl+0x10/0x10
[  125.632136][ T6339]  __se_sys_ioctl+0xfc/0x170
[  125.632173][ T6339]  do_syscall_64+0xec/0xf80
[  125.632198][ T6339]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.632218][ T6339]  ? trace_irq_disable+0x37/0x100
[  125.632246][ T6339]  ? clear_bhb_loop+0x60/0xb0
[  125.632272][ T6339]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.632293][ T6339] RIP: 0033:0x7ff86c98f749
[  125.632315][ T6339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  125.632332][ T6339] RSP: 002b:00007ff86abf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  125.632355][ T6339] RAX: ffffffffffffffda RBX: 00007ff86cbe5fa0 RCX: 00007ff86c98f749
[  125.632371][ T6339] RDX: 0000200000001280 RSI: 00000000c0d05605 RDI: 0000000000000003
[  125.632385][ T6339] RBP: 00007ff86abf6090 R08: 0000000000000000 R09: 0000000000000000
[  125.632398][ T6339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  125.632410][ T6339] R13: 00007ff86cbe6038 R14: 00007ff86cbe5fa0 R15: 00007ff86cd0fa28
[  125.632444][ T6339]  </TASK>
[  126.150713][ T6343] fuse: Bad value for 'group_id'
[  126.162806][ T6343] fuse: Bad value for 'group_id'
[  126.175602][   T30] audit: type=1326 audit(1768801821.490:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6342 comm="syz.1.122" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff86c98f749 code=0x0
[  126.849317][ T6354] usb usb8: usbfs: process 6354 (syz.0.125) did not claim interface 0 before use
[  127.189742][ T6360] syzkaller0: entered promiscuous mode
[  127.250730][ T6360] syzkaller0: entered allmulticast mode
[  127.313128][  T107] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  127.482769][  T107] usb 5-1: Using ep0 maxpacket: 32
[  127.497089][ T6368] IPv6: Can't replace route, no match found
[  127.509476][  T107] usb 5-1: config 0 has an invalid interface number: 76 but max is 0
[  127.522613][  T107] usb 5-1: config 0 has no interface number 0
[  127.536259][ T6369] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  127.584025][  T107] usb 5-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c
[  127.610807][  T107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.659850][  T107] usb 5-1: Product: syz
[  127.681959][  T107] usb 5-1: Manufacturer: syz
[  127.712785][  T107] usb 5-1: SerialNumber: syz
[  127.746053][  T107] usb 5-1: config 0 descriptor??
[  127.765990][  T107] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state.
[  127.786500][  T107] dw2102: su3000_power_ctrl: 1, initialized 0
[  127.806202][  T107] dvb-usb: bulk message failed: -22 (2/0)
[  127.828775][  T107] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  127.857866][  T107] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0)
[  127.877623][  T107] usb 5-1: media controller created
[  127.907442][  T107] dvb-usb: bulk message failed: -22 (6/0)
[  127.926419][  T107] dw2102: i2c transfer failed.
[  127.939241][  T107] dvb-usb: bulk message failed: -22 (6/0)
[  127.955905][  T107] dw2102: i2c transfer failed.
[  127.974005][ T6358] dvb-usb: bulk message failed: -22 (3/0)
[  127.979930][ T6358] dw2102: i2c transfer failed.
[  127.993886][ T6358] dvb-usb: bulk message failed: -22 (4/0)
[  128.021972][ T6358] dw2102: i2c transfer failed.
[  128.033934][  T107] dvb-usb: bulk message failed: -22 (6/0)
[  128.050190][  T107] dw2102: i2c transfer failed.
[  128.070223][  T107] dvb-usb: bulk message failed: -22 (6/0)
[  128.086242][  T107] dw2102: i2c transfer failed.
[  128.100242][  T107] dvb-usb: bulk message failed: -22 (6/0)
[  128.110813][  T107] dw2102: i2c transfer failed.
[  128.151288][  T107] dvb-usb: bulk message failed: -22 (6/0)
[  128.187966][  T107] dw2102: i2c transfer failed.
[  128.200391][  T107] dvb-usb: MAC address: 02:02:02:02:02:02
[  128.342096][  T107] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  128.500225][  T107] dvb-usb: bulk message failed: -22 (3/0)
[  128.545814][  T107] dw2102: command 0x0e transfer failed.
[  128.567576][  T107] dvb-usb: bulk message failed: -22 (3/0)
[  128.595846][  T107] dw2102: command 0x0e transfer failed.
[  128.913613][  T107] dvb-usb: bulk message failed: -22 (3/0)
[  128.988704][  T107] dw2102: command 0x0e transfer failed.
[  129.718400][  T107] dvb-usb: bulk message failed: -22 (3/0)
[  129.724856][  T107] dw2102: command 0x0e transfer failed.
[  129.730671][  T107] dvb-usb: bulk message failed: -22 (1/0)
[  129.737054][  T107] dw2102: command 0x51 transfer failed.
[  129.983691][  T107] DVB: Unable to find symbol ds3000_attach()
[  130.015555][  T107] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0'
[  130.153894][  T107] rc_core: IR keymap rc-su3000 not found
[  130.160175][  T107] Registered IR keymap rc-empty
[  130.177471][  T107] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  130.225173][  T107] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input11
[  130.268600][  T107] dvb-usb: schedule remote query interval to 150 msecs.
[  130.276042][  T107] dw2102: su3000_power_ctrl: 0, initialized 1
[  130.297052][ T6396] syz.4.135 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  130.309271][ T6396] random: crng reseeded on system resumption
[  130.325280][  T107] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected.
[  130.356072][  T107] usb 5-1: USB disconnect, device number 6
[  130.458862][  T107] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected.
[  131.577960][ T6419] vivid-002: disconnect
[  131.662950][  T980] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  131.792957][ T5922] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  132.023210][  T980] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  132.033085][  T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.041549][  T980] usb 1-1: Product: syz
[  132.047243][  T980] usb 1-1: Manufacturer: syz
[  132.052237][  T980] usb 1-1: SerialNumber: syz
[  132.078908][  T980] hub 1-1:24.0: bad descriptor, ignoring hub
[  132.092173][  T980] hub 1-1:24.0: probe with driver hub failed with error -5
[  132.146445][ T5922] usb 5-1: config 0 has an invalid interface number: 106 but max is 0
[  132.155002][ T5922] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  132.166275][ T5922] usb 5-1: config 0 has no interface number 0
[  132.174288][ T5922] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11
[  132.187264][ T5922] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024
[  132.199287][ T5922] usb 5-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  132.223269][ T5922] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[  132.233374][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.243880][   T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  132.259700][ T5922] usb 5-1: config 0 descriptor??
[  132.266599][ T6413] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  132.280971][  T980] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[  132.306602][ T5922] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  132.347634][  T980] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  132.388663][  T980] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[  132.398631][ T6414] vivid-002: reconnect
[  132.410795][  T980] usb 1-1: media controller created
[  132.414054][   T10] usb 4-1: Using ep0 maxpacket: 32
[  132.426860][   T10] usb 4-1: config 0 has an invalid interface number: 76 but max is 0
[  132.454704][   T10] usb 4-1: config 0 has no interface number 0
[  132.466436][   T10] usb 4-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c
[  132.484716][  T980] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  132.497862][ T6410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  132.570699][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.600668][ T6410] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  132.623115][ T6413] netlink: 79 bytes leftover after parsing attributes in process `syz.4.139'.
[  132.629681][   T10] usb 4-1: Product: syz
[  132.648418][   T10] usb 4-1: Manufacturer: syz
[  132.658439][   T10] usb 4-1: SerialNumber: syz
[  132.680522][   T10] usb 4-1: config 0 descriptor??
[  132.711033][   T10] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state.
[  132.732692][   T10] dw2102: su3000_power_ctrl: 1, initialized 0
[  132.747017][   T10] dvb-usb: bulk message failed: -22 (2/0)
[  132.747039][  T980] DVB: Unable to find symbol dib7000p_attach()
[  132.747053][  T980] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[  132.775245][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  132.787133][   T10] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0)
[  132.799423][   T10] usb 4-1: media controller created
[  132.855211][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  132.877481][   T10] dw2102: i2c transfer failed.
[  132.889136][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  132.905988][ T6425] ------------[ cut here ]------------
[  132.911737][ T6425] usb 1-1: BOGUS control dir, pipe 80000980 doesn't match bRequestType c0
[  132.920593][ T6425] WARNING: drivers/usb/core/urb.c:414 at usb_submit_urb+0x105c/0x18d0, CPU#0: syz.3.145/6425
[  132.931947][ T6425] Modules linked in:
[  132.937005][ T6425] CPU: 0 UID: 0 PID: 6425 Comm: syz.3.145 Not tainted syzkaller #0 PREEMPT(full) 
[  132.946353][ T6425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  132.956645][ T6425] RIP: 0010:usb_submit_urb+0x111c/0x18d0
[  132.963542][ T6425] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b7 f2 ff ff 89 e9
[  132.983288][ T6425] RSP: 0018:ffffc90003ecf940 EFLAGS: 00010246
[  132.989442][ T6425] RAX: 0000000000000000 RBX: ffff8880330a9c00 RCX: 0000000080000980
[  132.997756][ T6425] RDX: ffff888053a77360 RSI: ffffffff8c140b20 RDI: ffffffff8f8ef290
[  133.006316][ T6425] RBP: 1ffff1102855ace8 R08: 00000000000000c0 R09: 0000000000000000
[  133.014708][ T6425] R10: ffffc90003ecfa40 R11: fffff520007d9f54 R12: ffff88801fab9100
[  133.023018][ T6425] R13: ffff888142ad6740 R14: 0000000080000980 R15: ffff888053a77360
[  133.032382][ T6425] FS:  00007fcd9bdc86c0(0000) GS:ffff888125e1b000(0000) knlGS:0000000000000000
[  133.042141][ T6425] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  133.048919][ T6425] CR2: 000000110c309f44 CR3: 0000000027656000 CR4: 00000000003526f0
[  133.057619][ T6425] Call Trace:
[  133.061187][ T6425]  <TASK>
[  133.064304][ T6425]  ? __init_swait_queue_head+0xa9/0x150
[  133.069936][ T6425]  usb_start_wait_urb+0x115/0x4f0
[  133.075236][ T6425]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  133.080878][ T6425]  usb_control_msg+0x232/0x3e0
[  133.086223][ T6425]  dib0700_i2c_xfer+0xba7/0xf70
[  133.091273][ T6425]  __i2c_transfer+0x79a/0x1f00
[  133.096430][ T6425]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  133.103289][ T6425]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  133.109162][ T6425]  ? i2c_transfer+0xc8/0x2d0
[  133.113918][ T6425]  i2c_transfer+0x1cc/0x2d0
[  133.118599][ T6425]  i2cdev_ioctl_rdwr+0x460/0x740
[  133.123692][ T6425]  i2cdev_ioctl+0x64b/0x820
[  133.128263][ T6425]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  133.134562][ T6425]  ? __fget_files+0x3a0/0x420
[  133.139409][ T6425]  ? __fget_files+0x2a/0x420
[  133.144796][ T6425]  ? bpf_lsm_file_ioctl+0x9/0x20
[  133.149902][ T6425]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  133.155046][ T6425]  __se_sys_ioctl+0xfc/0x170
[  133.159706][ T6425]  do_syscall_64+0xec/0xf80
[  133.164392][ T6425]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.170517][ T6425]  ? trace_irq_disable+0x37/0x100
[  133.175712][ T6425]  ? clear_bhb_loop+0x60/0xb0
[  133.180463][ T6425]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.186486][ T6425] RIP: 0033:0x7fcd9af8f749
[  133.190942][ T6425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  133.210899][ T6425] RSP: 002b:00007fcd9bdc8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  133.219510][ T6425] RAX: ffffffffffffffda RBX: 00007fcd9b1e6090 RCX: 00007fcd9af8f749
[  133.227641][ T6425] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000006
[  133.236380][ T6425] RBP: 00007fcd9b013f91 R08: 0000000000000000 R09: 0000000000000000
[  133.245608][ T6425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  133.254134][ T6425] R13: 00007fcd9b1e6128 R14: 00007fcd9b1e6090 R15: 00007fcd9b30fa28
[  133.262360][ T6425]  </TASK>
[  133.265644][ T6425] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  133.273077][ T6425] CPU: 0 UID: 0 PID: 6425 Comm: syz.3.145 Not tainted syzkaller #0 PREEMPT(full) 
[  133.282312][ T6425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  133.292540][ T6425] Call Trace:
[  133.295952][ T6425]  <TASK>
[  133.299017][ T6425]  vpanic+0x1e0/0x670
[  133.303141][ T6425]  panic+0xb9/0xc0
[  133.306970][ T6425]  ? __pfx_panic+0x10/0x10
[  133.311480][ T6425]  __warn+0x317/0x4b0
[  133.315520][ T6425]  ? usb_submit_urb+0x105c/0x18d0
[  133.320613][ T6425]  ? usb_submit_urb+0x105c/0x18d0
[  133.325699][ T6425]  __report_bug+0x288/0x500
[  133.330373][ T6425]  ? usb_submit_urb+0x105c/0x18d0
[  133.335552][ T6425]  ? __pfx___report_bug+0x10/0x10
[  133.340799][ T6425]  ? lockdep_hardirqs_on+0x7b/0x110
[  133.346079][ T6425]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  133.351947][ T6425]  report_bug_entry+0x19a/0x290
[  133.356881][ T6425]  ? usb_submit_urb+0x111c/0x18d0
[  133.361968][ T6425]  ? usb_submit_urb+0x1121/0x18d0
[  133.367134][ T6425]  handle_bug+0xca/0x200
[  133.371468][ T6425]  exc_invalid_op+0x1a/0x50
[  133.376032][ T6425]  asm_exc_invalid_op+0x1a/0x20
[  133.380936][ T6425] RIP: 0010:usb_submit_urb+0x111c/0x18d0
[  133.386784][ T6425] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b7 f2 ff ff 89 e9
[  133.406442][ T6425] RSP: 0018:ffffc90003ecf940 EFLAGS: 00010246
[  133.412558][ T6425] RAX: 0000000000000000 RBX: ffff8880330a9c00 RCX: 0000000080000980
[  133.420582][ T6425] RDX: ffff888053a77360 RSI: ffffffff8c140b20 RDI: ffffffff8f8ef290
[  133.428598][ T6425] RBP: 1ffff1102855ace8 R08: 00000000000000c0 R09: 0000000000000000
[  133.436884][ T6425] R10: ffffc90003ecfa40 R11: fffff520007d9f54 R12: ffff88801fab9100
[  133.444940][ T6425] R13: ffff888142ad6740 R14: 0000000080000980 R15: ffff888053a77360
[  133.453069][ T6425]  ? __init_swait_queue_head+0xa9/0x150
[  133.458693][ T6425]  usb_start_wait_urb+0x115/0x4f0
[  133.463784][ T6425]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  133.469477][ T6425]  usb_control_msg+0x232/0x3e0
[  133.474304][ T6425]  dib0700_i2c_xfer+0xba7/0xf70
[  133.479329][ T6425]  __i2c_transfer+0x79a/0x1f00
[  133.484331][ T6425]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  133.490192][ T6425]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  133.496049][ T6425]  ? i2c_transfer+0xc8/0x2d0
[  133.500832][ T6425]  i2c_transfer+0x1cc/0x2d0
[  133.505398][ T6425]  i2cdev_ioctl_rdwr+0x460/0x740
[  133.510423][ T6425]  i2cdev_ioctl+0x64b/0x820
[  133.514985][ T6425]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  133.520067][ T6425]  ? __fget_files+0x3a0/0x420
[  133.524809][ T6425]  ? __fget_files+0x2a/0x420
[  133.529474][ T6425]  ? bpf_lsm_file_ioctl+0x9/0x20
[  133.534510][ T6425]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  133.539627][ T6425]  __se_sys_ioctl+0xfc/0x170
[  133.544290][ T6425]  do_syscall_64+0xec/0xf80
[  133.548948][ T6425]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.555061][ T6425]  ? trace_irq_disable+0x37/0x100
[  133.560168][ T6425]  ? clear_bhb_loop+0x60/0xb0
[  133.564944][ T6425]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.570915][ T6425] RIP: 0033:0x7fcd9af8f749
[  133.575400][ T6425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  133.595062][ T6425] RSP: 002b:00007fcd9bdc8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  133.603686][ T6425] RAX: ffffffffffffffda RBX: 00007fcd9b1e6090 RCX: 00007fcd9af8f749
[  133.611733][ T6425] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000006
[  133.619864][ T6425] RBP: 00007fcd9b013f91 R08: 0000000000000000 R09: 0000000000000000
[  133.627875][ T6425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  133.636066][ T6425] R13: 00007fcd9b1e6128 R14: 00007fcd9b1e6090 R15: 00007fcd9b30fa28
[  133.644098][ T6425]  </TASK>
[  133.647991][ T6425] Kernel Offset: disabled
[  133.652344][ T6425] Rebooting in 86400 seconds..