last executing test programs:

8.209573521s ago: executing program 3 (id=1217):
r0 = userfaultfd(0x80800)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xca02})
close(r1)
socket$netlink(0x10, 0x3, 0x0)
preadv(r2, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x3}], 0x3e8, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x48})
io_setup(0x8, &(0x7f0000004200))

7.987220656s ago: executing program 1 (id=1219):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21090}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}, @IFLA_GENEVE_LABEL={0x8}]}}}]}, 0x44}}, 0x4c840)
socket$packet(0x11, 0x3, 0x300) (async)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00'}) (async)
sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21090}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}, @IFLA_GENEVE_LABEL={0x8}]}}}]}, 0x44}}, 0x4c840) (async)

7.745835526s ago: executing program 3 (id=1220):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r3=>0x0})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400fb015c291d00090509"], 0x0)
syz_open_dev$audion(&(0x7f0000000140), 0x3, 0x121003)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newqdisc={0x24, 0x24, 0xf0b, 0x8070bd2a, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0x4}, {0x0, 0xb}}}, 0x24}}, 0x0)
r4 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\rW\xef\x10\xd6d#\xf2\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8\x1f\xb2C\xf8\'?]\x16C\x166\xc0\xbcJT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8', 0x2)
pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000600)='\x00', 0x1}], 0x1, 0x7fffff, 0x8)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008b04"])
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ctr(camellia))\x00'}, 0x58)
r9 = accept$alg(r8, 0x0, 0x0)
sendfile(r9, r4, 0x0, 0x2000081)
sendmmsg$sock(r9, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4048811)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x0}, 0x0)
socket$kcm(0x29, 0x2, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000d80)={0x24, 0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r0], 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000050403010c"], 0x0, 0x0, 0x0}, 0x0)
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r10, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r11, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1})
read(r6, &(0x7f0000000400)=""/74, 0x4a)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r10, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r11, 0x0, <r12=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r10, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r12, 0x0, 0x10000, 0x0, 0x4, 0x1fc01b, 0x253a19})
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00030500f3ff0503d4cc65"], 0x0, 0x0}, 0x0)

7.681620692s ago: executing program 1 (id=1221):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000180000000001000000b7080000000010007baa00fe00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="00000000000c0000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3}, 0x94)

7.385601354s ago: executing program 1 (id=1224):
socket(0x1e, 0x4, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x37d}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)

6.362072347s ago: executing program 2 (id=1228):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x12b240, 0x0)
open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c00000000c603"], 0x10040) (fail_nth: 4)

5.894225001s ago: executing program 2 (id=1229):
r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x8, 0x0, "e211fcb9a53e8632aeee2a0aabe82e71278d27", 0x3, 0x5})
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000000c0), 0x1}, 0x38)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x80880, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)=0x101)
r2 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0)
syz_open_dev$video4linux(0x0, 0x5, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0xe})

5.4211978s ago: executing program 2 (id=1231):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
landlock_create_ruleset(&(0x7f0000000100)={0x4118, 0x2, 0x2}, 0x18, 0x2)
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000002c0)={0x0, 0xb, 0x5, "b354dcfd1b"}, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r1, @ANYRES16, @ANYRES16], 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fedbdf258900000008000300", @ANYRES32=0x0, @ANYBLOB="10001d800c080080060005001500000068f90e8032a37ee2d7c506aee2c05286ffe53d4c2b690350289f8fa5f4e784ad691efc02b07aadf5de281e021804640eaad43ea261bf1cac7fd88951058d4feb1356ba37c1574db5c411928a82d64e62ab4fc2a22b64a757cb6e9a644e9d09c4e607e48d5127b7d231e5f3ee7f121ffb"], 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000040)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x40, r3, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xd, 0x27}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1062}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xb10}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x4d1aba6c1a65ada)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x84, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="4ba6224a6818", @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xb, 0x10, [@private, @broadcast]}, @timestamp={0x44, 0x4, 0xba, 0x2}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)

5.317346548s ago: executing program 4 (id=1232):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000b00)=ANY=[@ANYBLOB="1201000000000008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000012c0)={0x40, 0x3, 0x5, {0x5, 0x4, "26ed60"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x1000000, 0x3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x84000)
ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000001300)={0xa35, "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"})
r2 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x41)
r3 = syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x10, 0xaf, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x1, 0x7f, "", {{{0x9, 0x5, 0x1, 0x2, 0x240, 0x1, 0x8, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0xff, 0x4b, 0x7d}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x6, 0xb, 0x5, 0x8, 0xf9}, 0xb, &(0x7f0000000180)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x8, [{0x6c, &(0x7f00000001c0)=@string={0x6c, 0x3, "7e8c7f82ccb68f7cea4893fec92cbfc69d530c29e1c586782b0355847a3bfd5a3a2e47076d846d206ce576532cdc528a7d024a5155bce9f45b25f2d041f74c89b703acbb160c518f390dd6d764dbfda397d8ec4b4c02db7ed1724b7c020ac88714e1e501e04cb2cd210e"}}, {0x4f, &(0x7f0000000280)=@string={0x4f, 0x3, "bb51c0daef7642399495755b3311727547b00e89e525beccf9ea2792cd8fe710369a961de0911de01a212e4f807c267632afc29193bbdd7268a61a92c965d1282a494b22a391ca9ff6134f3150"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x42a}}, {0x7a, &(0x7f0000000340)=@string={0x7a, 0x3, "13e0462475556fc51b4299d2bcb3575ca3a5f7f221bb34e0c8fe04d81aba7ac0a53c009644eeec3a01e5a8b307f5e0383b0dc5c92458b9476674349c0c3209dbf7c295b14b80fa20d99320d35bd39980af65477d38229407f473291dd207ee178017f1caf1498faeb64db415d18b52032dbcfcc00a5ab060"}}, {0xed, &(0x7f00000003c0)=@string={0xed, 0x3, "58b2b8f231e9d43bec00640e88988f5a68353160955e5a6301ca2bb5b14695c4a40ea7ff1a380f71752d8df4bd92058d1e248d3366d1cd119af6e022d7876b60f29d7900b257fb4cb7adb5f5800cade0040286a22d034402baabb92b73468afbcd3db4f1bc1d697d32993cad37ff2049b937f75529a286730d7db88cd4e9c968a43f507038a7c3040e6bf313a54f3d79e84f518a2bc82ab099ff3c2398358681fca929400fe972bc2d9f773a0aaf6b3e511d415bdfb07086e165e3c863d90ecf6616f208fc23a331e1606c0d2be701450cb6b06dc33a00f05fff5d1d2c2ec61a072b9080808c4e1990047c"}}, {0x19, &(0x7f00000004c0)=@string={0x19, 0x3, "60b3415d422a7d6e69f3dd06b805a8814dd26363689a6a"}}, {0x75, &(0x7f0000000500)=@string={0x75, 0x3, "89ffca727c207825a36951184165b97880e7db3f280c44b1c92f29c11d210055d7559676cc0ef0a7642c7a55356aaca4749461410025f9039be05f4224578f9d403178937160bc188f4a41a9a48503ba5a700b8d5e3c1a12d85d060900e89a92970578762208cd408930f4c7e5f092137f3e8e"}}, {0xbd, &(0x7f0000000580)=@string={0xbd, 0x3, "c83fa160662038890b8a74dd94c4b8dee779e505ad03f61581e13ac3b3d9239ea61b4a74535af83f810f72be2e5367131a8a43623d38f2395315aae9cd40fff92e8faa02fa4339ebb28d0d12affbb16030b5e91b4c54f320c565239b68a23ce2d2aec34e0a5e7546cfc5785fc60083cd5e873326787f70d4c4e545469a34b61b2e01037f2a13b357e017089dad5c8943b29b9e766034f01cd46bf074ff0e885382019a2ce7c98ce6b4985a7bfc1283e0de327894703e5643955ccc"}}]})
syz_usb_control_io$printer(r3, &(0x7f0000000780)={0x14, &(0x7f0000000700)={0x0, 0xb, 0x6, {0x6, 0x8, "56d2b14b"}}, &(0x7f0000000740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4001}}}, &(0x7f0000000a80)={0x34, &(0x7f00000007c0)={0x20, 0x16, 0xb8, "15e5908568c9e3099be7c7724b726dbb606d02b3c647484b0d3bc6177540a36903395b1e1f073cd19411d012f9fba5732d78bb2e6a2e61fb49f5b75558e72b3d01fabba4cb7762477194dd252549494eb95615a3f8ac83b9482921a5c70c4760cbbb6b8c75014da90a17fa36f184b94c896d50b7a43f62f7db18a0f1b1a1ee91de50635f13d80a72d8e18a8c345cd98b79baf87582f25daee648fc2cf79f961c9834ac0f4cfeeff5b1d885d35d89e0b3efb1f4183aa87be2"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x80}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000900)={0x20, 0x0, 0xd2, {0xd0, "75441a3e03efc4d42dd7298b43d1c588411619af705eb204e38ace5bc0ddf227642047e17221e961b2d51404bbf458d36364293514b4a13269201e523b3fc832c1ad95efb6de5dd9747b9e080550a42231a82c783b7a9c2fd9816e578a1bdebf181c2b6d7ba1baf99f6ee5ff93b4697ed2ba0ad4add95be8978407586f9ba7f56da9b2cfe5a228d5e187fe76ff3c83efa6aeaef0fe824f534ea1f0a73afd24f9db50f7612ef8000e46bc4e7e0bb38fd15bf983c27592e41f6dc1f75c41181df7bb94f6886a96a79b94d566e5404e9cbe"}}, &(0x7f0000000a00)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000000a40)={0x20, 0x0, 0x1, 0x5}})
ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x2, &(0x7f0000000000)={0x12, "a12fa1f55d27060f351be841cf293f0b1edef588aa6a31ad56cb7ee97fb2e2805e"}})

5.137689105s ago: executing program 3 (id=1233):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4f4e93d3f35d3a36)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$6lowpan_control(r2, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
r3 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)=0xffff0018)
ioctl$SOUND_PCM_READ_CHANNELS(r3, 0x80045006, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x210081, 0x19)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000300), 0xe0300, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x60800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r6, 0x0, 0x97, 0x8000000})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r6, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r6, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
fcntl$dupfd(r4, 0x0, r4)

5.136729559s ago: executing program 1 (id=1234):
lsm_set_self_attr(0x68, &(0x7f0000000800)={0x68, 0x4b, 0x20}, 0x20, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4a2000, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff})
setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x7c})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3})
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
syz_emit_ethernet(0xe6, &(0x7f0000002200)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0xb0, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x30, '\x00', {0xd, 0x6, '])k', 0x800, 0x2b, 0xff, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@srh={0x0, 0xe, 0x4, 0x7, 0x5, 0x0, 0x9, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}]}, @hopopts={0x8}]}}}}}}}, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1})

4.492439866s ago: executing program 4 (id=1237):
accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000100)=0x10) (async)
r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000100)=0x10)
ioctl$sock_proto_private(r0, 0x89e3, &(0x7f0000000140)="ac96c7628f8d53152fadf3d4952f59ba44974d5601a60aca1ba61012caf143a9a98339bf74302a400f630c512486d4fb489139703f29c33780b31111d586adc05fb6fb72313eb7341f4a4a2c701adaf522c0eadb10b8a0cb87b3bf374b77ab2cdf8926ea186915345532ceb5a8252b5655217c744fcce0af6c6582544a78f8e31780bc0e3df85784747b312a4c91fff1927208c9f3288e47d57b1f4e4f875b1323518dd9eaa26b29ab5d8b967119454d4e5f6fe3b3157345557200e3f77338fcf17f611ea9bad4648c5c7a7988f3e3")
syz_emit_ethernet(0x86, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0xa009, 0x4e21, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x0, "07902373f938184a06b70905153d4576d97ca9933a0a94e87fa3c5032a78a49b", "3d351400ffd82949e69ddace18263739", {"39e15df1fdb82799958128883b40e5c8", "f83a1bceb103b82f8a89beda99e01e4e"}}}}}}}, 0x0)

4.273297349s ago: executing program 4 (id=1238):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$kcm(0xa, 0x5, 0x0)
r2 = socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9beb01031800000000000000000000008000000002"], 0x0, 0x1a}, 0x28)
r3 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r3, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(r3, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/234, 0xea}, 0x275a}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/234, 0xea}, 0x4}], 0x2, 0x60010000, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x10000}, 0xc)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002d00010026bd7000fcdbdf2504"], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008010)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2})
r8 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x8916, &(0x7f0000000000)={r8})
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r2})
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0)
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r9, 0x3ba0, &(0x7f0000000180)={0x48, 0xb, r10})

4.15314756s ago: executing program 1 (id=1240):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x4082c1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8904, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x7101})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newchain={0x43c, 0x64, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xfff1}, {0xc, 0xe}}, [@f_rsvp6={{0xa}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x85, 0x8, 0x4, 0x9, 0x4, 0x9, 0xcf, 0x775, 0xfffffffa, 0x3, 0xa2, 0x4, 0x4, 0x7fff, 0x3, 0xf, 0x4, 0x3, 0x6, 0x2, 0x8, 0x7, 0x6, 0xffffffff, 0x9, 0x78, 0x1, 0x2, 0x4, 0x1, 0xfffffee8, 0x5, 0x9, 0xa, 0x5, 0x8000, 0xd9, 0x0, 0x16, 0x0, 0x8, 0xfffffffa, 0x1ff, 0x5, 0x3ff, 0x7, 0x0, 0x5, 0xfffffff7, 0x8, 0x50ea, 0x6, 0x8001, 0x9, 0xb0e0, 0xf, 0x5, 0x8, 0x3, 0x0, 0x4, 0x5b23, 0x5, 0x8, 0x2, 0xee, 0x7fffffff, 0x7fffffff, 0x3, 0x172, 0x5ae27a20, 0x5, 0x6, 0x4, 0x200, 0x1ff, 0x3, 0x400, 0xe6b3, 0xd171, 0x6, 0x1ff, 0x7, 0x699213b0, 0x9, 0xa, 0x12, 0x3, 0x4, 0x0, 0x100, 0x5, 0x6793, 0x0, 0x1, 0xfffffffa, 0x9, 0x80000000, 0x7, 0x5, 0x0, 0x80000000, 0x400, 0x7, 0x7, 0x5, 0x9, 0x6, 0x9, 0x0, 0x1, 0x5, 0x2, 0x2, 0x2, 0x7ff, 0x40, 0x7f, 0x5fece1ea, 0xbf7, 0x8, 0x78, 0xe, 0x80000000, 0x6, 0x8, 0x5, 0xe, 0x5, 0x200, 0x4, 0x4, 0x0, 0x0, 0x1, 0x3, 0xb, 0x70, 0x2, 0x1, 0x9, 0x1800000, 0x9, 0xbff, 0x4, 0x6, 0x800, 0x7, 0x5, 0x3, 0x9, 0x6, 0x0, 0x2, 0x6, 0x800, 0x3ff, 0x9, 0x3, 0xcc, 0xc60, 0x3, 0x8, 0x4, 0x1, 0x0, 0x7, 0x2, 0x6, 0xc, 0x4, 0x32, 0x2, 0x8, 0x1000, 0x2, 0x4, 0x4, 0x2, 0xffff, 0xb37, 0x7fff, 0xbec, 0x8, 0x5, 0x1, 0x5, 0x0, 0x1, 0xffff, 0x7f, 0x3, 0x94f, 0xc91, 0x9, 0x3, 0x2, 0xd46, 0xf, 0x200, 0x0, 0x8, 0x7fffffff, 0x0, 0x8, 0x2, 0xe6, 0xb, 0x18000000, 0x4, 0x5, 0xd756, 0x6, 0x3, 0x800, 0xd3, 0x2, 0x6, 0x9, 0x4, 0x7, 0x5, 0xaec, 0x100, 0x0, 0xfffffffb, 0x40, 0xfffffffe, 0x3, 0xa, 0x7f, 0x1, 0x9c, 0x400, 0x5, 0x8000, 0x8, 0x8, 0x9, 0x6, 0xffffff7f, 0xee2b, 0x7, 0xeaf, 0x3, 0x401, 0x7, 0x7f, 0x5f, 0x1000, 0x7, 0x9, 0x7, 0x8001, 0x9, 0x3]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x40881)
recvmmsg(r4, &(0x7f0000006fc0)=[{{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000d40)=""/13, 0xd}, {&(0x7f0000000d80)=""/247, 0xf7}], 0x2}, 0x3}], 0x1, 0x1, 0x0)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(r6, &(0x7f0000000140)="f4", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x9, 0x2ce8}, 0x8)
recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001580)=""/4090, 0xffa}], 0x1}, 0x0)

3.510358919s ago: executing program 4 (id=1241):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz1\x00', 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0)
getpid()
r5 = fsopen(&(0x7f0000000140)='fuse\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(,\xc7', 0x0)
gettid()
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r4, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000019c0)=[{0x68, 0x29, 0x4, "800ab640839c85f3ac38a2d3199c30d0a63a8a11c9ba496b220a0ae8d9b39cf7549a1df913d1c398171b6ad456f60a150a9040f8be78c0dbb65573fcf8e97ca68dbeefc7c017c0e5c7d0751336ceac2518"}], 0x68}}], 0x1, 0x4000000)
write$cgroup_int(r3, &(0x7f0000000100)=0x1, 0x12)
mount_setattr(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x100, &(0x7f0000000340)={0x1, 0xf1, 0x1e0000, {r3}}, 0x20)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x91, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3}}}, 0x1c)
r6 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0)
write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0x559af05a10134899, 0x0, {{0x4, 0x1, 0x5, 0xa, 0x3, 0x1, {0x1, 0x180, 0x8, 0x9, 0x100, 0x7cf4, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0xbff, 0x1}}, {0x0, 0x10}}}, 0xa0)
sendfile(r6, r6, &(0x7f0000000080)=0x2, 0x7f03)
sendmsg$nl_route(r3, 0x0, 0x2085)
timer_gettime(0x0, 0x0)

3.325515464s ago: executing program 4 (id=1242):
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000071000040000000000180"])
r3 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x9, {0xa, 0x4e20, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x4000)
writev(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$CAIFSO_REQ_PARAM(r6, 0x116, 0x80, &(0x7f0000000040)="9b3689d2", 0x4)
sync()
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b"], 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10)
connect$unix(r7, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
syz_open_dev$midi(0x0, 0x500, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f00000002c0)={{0x11, 0x8}, 'port1\x00', 0x80, 0x80010, 0x9, 0x1, 0x7, 0x5, 0x4, 0x0, 0x2, 0xf9})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="140000001000e65d00000000000000000000000a20000000000a03000000ffffffeb0000070000040900010073797a30000000008c000000090a010400000000000000000700000408000a40020000000900020073797a30000000000900010073797a3000000000080005400000000e48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000004100001800b00010064796e7365740000080003400000012014000000"], 0xd4}}, 0x20050800)

2.575311578s ago: executing program 1 (id=1244):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000240012800b000100627269646765000014000280050019000600000005001800010000"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={<r5=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)={r5})
read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x2020)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000002680)={'\x00', 0xb6, 0x7, 0x0, 0x7, 0x81, <r7=>0x0})
r8 = creat(&(0x7f0000002740)='./file0\x00', 0x40)
syz_clone3(&(0x7f0000002780)={0x200000600, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x10}, &(0x7f0000000440)=""/158, 0x9e, &(0x7f0000000500)=""/207, &(0x7f0000002700)=[0x0, 0x0, r6, r7], 0x4, {r8}}, 0x58)
r9 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1)
r10 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r10, 0xc040aed5, &(0x7f00000000c0)={0xdddd1000, 0x13000})
r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r12 = dup(r11)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r12, 0x2000)
madvise(&(0x7f0000889000/0x2000)=nil, 0x2000, 0x12)
open_by_handle_at(r9, &(0x7f0000000240)=ANY=[@ANYBLOB="280000004e000010cc000000000000000180e127d6fb000000822d0cfc0000000000000000000000ff7fffffffffd70e8cb3974479ee000000000636b6428b85551445fd5b3dc47e68ade701be286e7aa4613038a31f386ac23e87fadc61a6160a14a500"], 0x10000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)

2.165346364s ago: executing program 2 (id=1245):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x48)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_usb_connect(0x2, 0x251, &(0x7f00000009c0)={{0x12, 0x1, 0x310, 0x5d, 0xf6, 0x40, 0x10, 0x22b8, 0x7000, 0x2fa0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23f, 0x1, 0x2a, 0x15, 0x80, 0x6, [{{0x9, 0x4, 0x0, 0x9, 0x5, 0x2e, 0x3f, 0x6a, 0x3, [], [{{0x9, 0x5, 0x0, 0x1, 0x48, 0x0, 0x0, 0x7a, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xff, 0x100}]}}, {{0x9, 0x5, 0xd, 0x8, 0x40, 0xb, 0x4, 0x7e, [@generic={0x95, 0xf, "091beba9e94e4813d0203a249fd903fa66041343ba63882ff30691ae5cea934f17de75b80b9e400af81baaccc5d735044113df20217bf43e455bc73a8afe31ce8de072748e13de3a870465c978009cb92db763c3e27f11d82c99eaec61ca16bfb697489025b1f0ee5568d538e29a3651be8306602e114535fddb7af8311d3e334d3b1bc8be5f371a49cd6cb0dbb7a2c967fb72"}, @generic={0xb5, 0xa, "cc63634a5337e6d637aa68edd59fb9d55d20595cc4645b876aa7f347ad8903ebfed7c5fdfdfbcc2c9c0fa4dc3e86d0d9f8f0c6185acc44eddb12e2488a338079cb357a629a07747b1d3799392788757aec4c8963c9c41cf97cdff91785ad3e6d64e30c771d626d151863fe72f2bd6b840d15ce32500fde21daaf640f507e069b51e19108eacdbd9c2302caa7b5beba450af60095ce25c0c4ef1c3e235718b0d81de527e5904f994ff2df1147effcf4bdd2d13d"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0xfd, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0xc19e}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x81}]}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0x7, 0x6, 0x7, [@generic={0x9f, 0xb, "50cc3afc29151431ab55a35b2f74a1428c3b2b82981b3e77ed09ae2c0977e92d47bf4f571b44d99910f87c597d5886651a589c99a034ef00403e9232af989d3a5c78657c617df58248a582e94b262f00455ba6d3fee6bc00005a0ac1ee7885fe04a65cd3311ba4079cf571f63d8896ff32e1c0941476a8073d4e3316f33ae8cd4cf60f30e15a1310310500b3204ebeeb88a29c09705f465d72c183b64f"}, @generic={0x2, 0x1}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x7, 0x0, 0x80}}]}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x72, 0xf3, 0x6, 0xff}, 0x19, &(0x7f0000000180)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x4, 0x8, 0x80}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xb2, 0x9, 0xe}]}, 0x4, [{0x7d, &(0x7f00000001c0)=@string={0x7d, 0x3, "817a2d2907a78d45f082c65ba2659700a6d9f1e56d53e00891aa66cb44dbf0da5cab0398ef05ed993ea42c98b1a8c5a8d1680e2375cab96cca771a0a41d886bd2b3174024485d81b10f496d8224916d487c88c2a10d6e41bbdfcf53575650e0cca3e9421225a1816ace78aa2b5bdd5b4090d6a052bd9eca90287bf"}}, {0xde, &(0x7f0000000340)=@string={0xde, 0x3, "3bbfcaa1010340d2d5834b94659e406385a432ab52149010adb128d6a360e43005512faa59d942d6b09595f2b5f26b27e2b7f5015e97a8fd66667944851ddf6542a751bc93a56e24d993bb1ddb942a4f6972a86c632c747e5edb84bac0714e0e683db62cb541092b01140d148a700fec37d9853078d751a5a2c4055b5c1a28402b39da61a39f2cd8677077ccdd42ebf32a5a57e120b33413fbb3b2d2a110ddd9bc5fea798e4a806a0ea2edd984addf9844aa0d788bddb304fdbb746ea828496faca253e385b4110800f85a352fa8ffdd81ae51150ecd69f805ae8526"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x410}}]})
syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x8, 0x5, 0x0, 0x0, [0x0]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0xfffc}}}}}}, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x56, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0xfffe, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x2, 0x1, 0xc, 0x8, 0x73b}]}}}}}}}}, 0x0)

1.513207885s ago: executing program 2 (id=1248):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = mq_open(&(0x7f00000000c0)='${$\x00', 0x40, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x80, 0x5, 0x1}]})
r2 = socket$nl_route(0x10, 0x3, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
r3 = io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0xc46e, 0x400, 0x20001, 0x3})
futex(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x82)
r4 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e29, 0x0, 0x0, 0x28b, 0x0, r3})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x0, &(0x7f0000000140)}, 0x10)
io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, &(0x7f0000000000)=[r3], 0x1)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x40d, 0x200, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}, @IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0x1}]}}}]}, 0x44}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000180), 0xfea7)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x24, r7, 0x5, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40048}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r9=>0x0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000001b80)=""/4090, 0x0, 0xffa, 0xa}, 0x28)
r10 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000)
syz_emit_ethernet(0x36, &(0x7f0000000680)={@dev, @random, @void, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @multicast1, @multicast2}, {{0xfffc, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r7, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x29}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40009}, 0x80)

1.407371968s ago: executing program 0 (id=1249):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000001940)=[{{&(0x7f00000001c0)=@file={0x0, './file0/file1\x00'}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000300)="e2480a907ddbe40dd5ae0c4cfbc34b0ca759a95369d5f5bab9282f6afe6306e6e5b440640b3e540d8e2d9b468c4c9b7e8b6e43b5176fca3c3625f0a43328d92f0deecec296a1476fa967b63390ba89b0fd7990aa1c06d5e76275a739e276daf13c657d9a7b4f9ac6f634c7c90bb3c7a7bb63dd8d2a6aa71e01c735c60afe19283fb1e8a9540cb7331717ea7ea597348f2f364fa2b45084c783ad870609ae3c51f31757e2187932907caddb3145", 0xad}, {&(0x7f00000003c0)="768df1ad675325d35fac4340bda44df205612b1c0cb9c10e88285a5debf5e2eb2fd8ad9c4818a2ebdf92802f245622810ce6d7efb45e5697dc705dd863719d845aa8a81aba70d7121a17e4c18a156ecc53a2d9b2ba23858ec059315ba0145c2c12", 0x61}, {&(0x7f0000000440)="0c13605b3dc81ea8e84ff7bc8fcd43e7ade25981f4a2a67516d414267ec6bac926a6e72184f1288ee06d3b9065f9c0b637e040ca2bbfb12702ff394786df3db80cc825e6dfc157f5a17a785c36188a79e00e18871a90343a5181", 0x5a}, {&(0x7f00000004c0)="739869d79732757ea2f0cd871ab030253eeae89aeabfa4f0bd149d", 0x1b}, {&(0x7f0000000500)="9387756402720a1ec5a7221b2ecb990a841ef7d09e04582398545ea03edaebda02d1c260eac2dc6d027e3d4564cc4933", 0x30}, {&(0x7f0000000540)="5c1218e7d609f8f18b0a01395a8caf38c28d266ac74bd03008941924cc42450b86289dd2aade", 0x26}, {&(0x7f0000000580)="4a331d24d684cfc67e1fba21519d17b57d787c38b9cb760ae5e71833cd9975e44185251d476cec3b7fc0b3df74a2c29fa6e5db3b3aa38db182fc118ba34f27ebee88b88a4f718e379de6f4ab", 0x4c}, {&(0x7f0000000600)="dac7d0c819e391c5fd4dc04aa41fe415aaadabcc13a57be28d0d8690548055ac50b9bd31ac1b909070bb93f1d6fa94eb0d52b8ec8720b6df6bf44fd5c8d2b049fa339d57", 0x44}, {&(0x7f0000000680)="5cd8a3a72ca5c1a319e87d1a22993c9f68f302586526f6cae16248c5c1fb3e825638fba3ba7ac82c5e56abe8544a08fdafa1eda4da3f850efc9783b4b5dd16684f5cdc3a5ca263374606501893f1ee0095b3877cbf06d8d12db896091a619a3e97e11699dd9edf63baaeae2b4eb4fb7895ae3a78229a2d8ca8c355f9706f18eddbb1dff7524b9dfe", 0x88}], 0x9, &(0x7f0000000900)=ANY=[@ANYBLOB="28fffd0000003c41959a434d50febeec03600004cd98368668e3f03ba8699d8cec7e1efa57c0b9825160fc908f4d2810a3965016dfe5de52db2fa25506d3d113729c03f5d3090ffed553a1d468874f3bc847bba36e091b4c91dbc966d2adab97", @ANYRES32, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32=r1], 0x28, 0x1}}, {{&(0x7f0000000880)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000ac0)="6de8a5096ba8fabe571c84a49f8370eb8289bba4e0143281d4ba8eb1684d865e87362b0aa3e73ee13169dd81beb82ab1c37971d9ea7ccff34c13c3b393f5a2afa917edf9c718d7a957bc7556be1007b27ee6784226ff498e4e29b3cca7c9ea56b3fe355f1e2be2982f51b57c096548ff08811dbf0e45c3", 0x77}, {&(0x7f0000000980)="898453f82660b18020882982fbbd615a164236e8058188f88a00b834736dd2210527148e6bc8c4162deb7e4e723b64f796e5caa06139aee910a29a5420b8a345027ee97a4835d2d3f24933b2939bbaee8c2de79d41d47240da", 0x59}], 0x2, &(0x7f0000000c00)=ANY=[@ANYBLOB="1c000000000000000a725f0fd5000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x40, 0x10}}, {{&(0x7f0000000c40)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001380)=[{&(0x7f0000000cc0)="8ad0f98dac2d1751b3ffc13d9b5bfc283ad54395b4bad9a44ac7dd80a665b12a33e0", 0x22}, {&(0x7f0000000d00)="50b6b045cb9951343da88a9e73c3f632b7369f567269345a424eb7cd4fa09d6749536f061773689ed57d70ec7953e22a52cc5c9309cfdd4d558886470bf4c5b28f5c86914127cd195d3fe3d75d83a412fca15e263e7f4bb1c76a45a6dc926ea9be68d7578dbac9fe72547d89eee7f4813836f8423aadca471e2693e718570ea0f64808f9eb6e7255eab1c66e99d1db49c53ae3c86c2a24df8015d98c63b2747358c60d6a3408e8919bbac23aec46c48d6e9815618a4b28be0bbde886440dd163a4f149da721836ec391b54d6d2dcd58aa7c14306ec82e1d5f707a4fa8823334958f71ac7a328", 0xe6}, {&(0x7f0000000e00)="352600751af78850588bfbc381a507b8d0a4fc67cd29240cff4321a71f382cc48368ba186f0802e9ed54072d4f308415e3cdd6f260c18b7daf119a2ae76e76127e631c2cb024208717c4ea073c3a4abbe057a04f705374b4aaf4ba8dbb39960741f831888f138eb3bf46dd9300571bdc99183f974977ce3c87e6d910d2e905f95771d70497e10089ae85dfc517c8f3978acedba34b24fd640d1c40cc8ffa76d0e23fbcd15cf46d4170412b09f2a6c7b1091c42289ce7ac1a73a25279eb7026d6e5e5a2c78e74b4a8af39ed16567a51f1e75899a12231ae830cfc215c204b0aa67317947c472fd92d084c6e4d1a8abd80956b30a95975089f42548b4f", 0xfc}, {&(0x7f0000000f00)="c756e3062670145a003eaba87f47cc63fd2bcf1db55737ccca19bb6550858d2ef77c050000009aaca2c21f0d0e704d0cf21f3cfa0000000000000006665fac678925cae991d2b898d5c6", 0x4a}, {&(0x7f0000000f80)="cbaf210034093316ba5c5138d9cbc3ab45d79646e41b2ce3e4240e4e58f4bb980d619f483274d95bb675644463041277e43594c367378c038d7b2e04dcde5842442d2b53b024c077a1fe2b53f9b59d522eb69d700876482e867577cac1a12610a9", 0x61}, {&(0x7f0000001000)="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", 0xff}, {&(0x7f0000001100)="c5b882fa2921be7b2fe14a40e490f888b2dac525c20100a59483abf3e89c1fd478c33d9aec6b3352a9b3bbca968eeeeacc243f3f46d8a25eccde70d3ec76744a1492a693087802bc1bc6c99d384b70f72c8ce0f82a9563620b2a9387227d8b892ca1e931beaee5d684ac269a69314543aad52d4f8c1c5afbbf362ab9cb4f765a08dd962868b26101d766fc83ea0b04747ef3121e1f47ea5aeaacaf02de1dab779f684ccd8b4d2ec3ba", 0xa9}, {&(0x7f00000011c0)="fcf9523547c3211f1c4e3b970d83d742f1d82644e9d685da0dc765292514d280440ccec1531095baabf42d9f880d28de2d465faadceeac7badc36ed8d1910d0ff271437bcffca55deec076f8d7d4efd2bb74b3eae30aceedfa600ddb8f03b123bf5699f58daadd9049821679143d43e9881705d1e368502a6a2549221c79b93fb64fd4acd7063f6c9fc84a8c95eee1e71e46", 0x92}, {&(0x7f0000006380)="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", 0x1000}, {&(0x7f0000001280)="96cfdf4d14c5befe6731b9f0a22071fefb133b5babe1ed3c2d3db467671f3593bd6e66122b871466d2279c374aca9e11b1af36289cae34ec8e02d0908a86d23ebe355db5d82de4e52c3791c9c988636bdd06913b5dfa3d3d542ae066b2e06e5cd055d5c832eb17de724e035ae54b289116864e3ad07119fae12f817b8254c903e9a580d3b2ad5cfed05093fdc2f63395cbb10e5cd06c932e1d26b3181e27d19592e9b8e0f4eb5e262f08c15d1e84857cfd0d5248bc83bb6d7da5e99ba51a1946696997a805ad1827c73ba1058e45de1bac6881241243e103256948fd05b9", 0xde}], 0xa, &(0x7f0000001440)=ANY=[@ANYBLOB="fc05a4dd5ea5e96d4ab6ab63ece085a4", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r0, @ANYRES16=r2, @ANYRESHEX=r2, @ANYBLOB="000000001c0000000000000001000000020006f300000000000079898c4468", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES8=r0], 0x68, 0x2000040}}, {{&(0x7f0000001640)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001840)=[{&(0x7f00000016c0)="73471ede54417e4ad0ceb7633a9a823292efb321b95279c56ba44908a6e33556bb18fe561804dec2483ee922a7c65aabe566e05fd43777b6c2e892601e4f94bd5c3b19ba29f24a93caf17f3bf100174f9f7d8dfb794f83be81fa4df48e228184d5378ad6f94ef9be27cb7bc006721c895a418e05053f8e2f787458da5a10", 0x7e}, {&(0x7f0000001740)="aa8760c6aa08367b858f8fa1282082f586958b4606ac88b19d87e46bcd208cb6a8686ad7530bad7ae3c965f1f7797625fcb3a41e48bbd44095da1b5eed67caa17bc1ff05f77093b0b419946fabefb580524273151eaddaa5e5b55dff6e8353b23b365c902e7a0d4ab5ec7c24384486d27a9cebd6a12f93d2a7d70985b7ed6920b4d87745e8bca89a87981951c2fcd8b307058c45666c065f36a0df0071e54cd1a3a06258e2ef27fa58334bd8376ebb29f9d734b3cedd0ca62d6b20b3718fe20f5143e6f10f9471f3003cbd408502742cb80b6f8ff12436aba864cd3f4be662", 0xdf}], 0x2, &(0x7f00000007c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, r1, r0]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48, 0x40041}}], 0x4, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x40010100, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x401, @dev={0xfe, 0x80, '\x00', 0x25}, 0x9}, 0x1c)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000740)='./file0/file1\x00', 0x89901)
fchdir(r5)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r6 = landlock_create_ruleset(&(0x7f00000000c0)={0x1100, 0x0, 0x5}, 0x18, 0x3)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000140)={0x100}, 0x0)
openat2(r5, 0x0, &(0x7f00000002c0)={0x10100, 0x1, 0x20}, 0x18)
landlock_restrict_self(r6, 0x0)
shmctl$IPC_RMID(0x0, 0x0)
r7 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0)
socket(0x400000000010, 0x3, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x400000, 0x3)
socket$packet(0x11, 0x2, 0x300)

1.328348222s ago: executing program 3 (id=1250):
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0)
mknod(0x0, 0x9151a89c79b5ed67, 0x4)
syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0x10, 0x6, [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x5, 0xd, 0x76}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x10, 0x8, 0xfc, 0x40, 0xe8}, 0x48, &(0x7f00000001c0)={0x5, 0xf, 0x48, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0xc0, 0x9, 0x0, 0xfff9, 0x69}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x4, 0x2, 0xc}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x9, 0xf00, 0x7f}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "7fd488a981505803e396ecc983333e1f"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0x4, 0x1ff}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x7, 0x8, 0x9466}]}, 0x4, [{0x92, &(0x7f0000000240)=@string={0x92, 0x3, "f773cde437580e5879f661ff4484129dfbe8b9056673bc45eb7d658928bfe002a9bd89f80e12a240fab3aed4f6dd8891aeb990e2d031f5117085bdcd598e8464bf96bc9ac1af3db69fc2aabce8069d75023babdea60c0b6bb0aec10a3898bc66922e5e706884bcaac886ed4762be5fb5eb30ea09ebafad0d3331c1d7c23f5623a58310ec4e44b8b7017fa5223aa3adf2"}}, {0xbb, &(0x7f0000000300)=@string={0xbb, 0x3, "48c23e0b4ce036d8eb8c30c9dbfc1bedd4795618ace1a9312f048738f848eede29a93811010bbc7f8c8018eaa592c2c9b09a53dd5393b08e8b05b3faeda83f5f719b530512596ffbde8c854d46a13e460edc36074137b6ccf1eb4c6ce95027a172fd773c7e40f99d44e223b4494c8679120ab1775f34670cf6e53ae4b669f998e220882df400fa1c960b586768e6d816ee60ccb30005e787b65e71f0e9db08c512d06718ba7a3eda48897c4bc719a0f71a132f21922942bf8d"}}, {0x56, &(0x7f00000003c0)=@string={0x56, 0x3, "2a354fe9f8a509f5ff9782ccab90aeb140b6b5225b5b48faec94d2e03723ccf46753bf4be04052103066fb384a29da0b147f15d84a350f9dda4148e11b3c39ea9f9fab5f5e59d08d9100ee668086ca2332da321b"}}, {0x6e, &(0x7f0000000440)=@string={0x6e, 0x3, "64958dc2b082979754b050aad4b2b4a39c2461693be18ca4950594508e1df954c4da92a8f7d1fd13bc5ba31a1703612ec4176aaa816ccddf3c25f289b99f7c1c457f26c0819e80d0c4a469d20d820d03e133566d268ff3465a181aee372ca653a9e6caf54f5b85039f904204"}}]})

1.137691213s ago: executing program 0 (id=1251):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup3(r2, r2, 0x0)
munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) (async)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000fc0)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
syz_emit_ethernet(0x4a, &(0x7f00000014c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x41424344, @ANYRESDEC=r3, @ANYRES8], 0x0) (async)
r4 = socket$pppoe(0x18, 0x1, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) (async)
sendmmsg(r4, &(0x7f0000010dc0)=[{{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001000)="c8", 0x1}], 0x1}}], 0x1000e, 0x0) (async)
r5 = openat$cgroup_ro(r3, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRES8=r1], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async)
connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x2, @empty, 'netpci0\x00'}}, 0x1e) (async)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000002c0)=0x401, 0x4) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000fedbdf257300000008000300", @ANYRES32=0x0, @ANYBLOB="2b68ee5ffec2fc160e4dc54815d84220bde4b5ac5e4b228683cc0105753fb7767489cf0c0f2b27607139541a3e6738af706bc5af12c7921c260369d23017ea3e04e79dd14e11a1ebc31b9eeffc7582bbc9"], 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x8800) (async)
recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8102}], 0x1, 0x20, 0x0) (async)
r7 = socket$inet6(0xa, 0x3, 0xff)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e23, 0x9, @local, 0x9}, 0x1c) (async)
connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="ad56b6c5820f929d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
r9 = accept4(r8, 0x0, 0x0, 0x0)
recvmsg(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000004c0)=""/4081, 0xff1}], 0x2}, 0x40000031) (async)
r10 = socket$unix(0x1, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e000000ffffffffd300000092b09c6e40000000", @ANYRES32=r0, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRES32=r3, @ANYRES16=r10], 0x50)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000180)={0xc})

1.05075156s ago: executing program 0 (id=1252):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x42}, 0xfffffffc}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x40000004, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4)

933.793712ms ago: executing program 0 (id=1253):
r0 = socket$inet6(0xa, 0xa, 0xffffffe7)
getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0x926e, 0x3, 0x9, 0x5, 0xee7, 0x7fffffffffffffff]}, &(0x7f0000000080)=0x78)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl1\x00', &(0x7f00000001c0)={'erspan0\x00', <r3=>0x0, 0x20, 0x1, 0x1, 0x7, {{0x3e, 0x4, 0x0, 0x20, 0xf8, 0x68, 0x0, 0xfc, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x43}, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x34, 0x1, [{0x2, 0xa, "d650f6370b8a9fdb"}, {0x2, 0xe, "7fddf13580157b061558e43a"}, {0x1, 0xa, "666e92c99bd0ad6f"}, {0x1, 0xc, "f21976cc960dc843c186"}]}, @lsrr={0x83, 0x1b, 0xc9, [@empty, @empty, @private=0xa010102, @loopback, @remote, @loopback]}, @generic={0x88, 0x7, "64d9550a04"}, @ssrr={0x89, 0x23, 0x50, [@private=0xa010102, @broadcast, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x3d}, @local, @broadcast, @loopback]}, @generic={0x86, 0x2}, @timestamp_addr={0x44, 0x24, 0xa4, 0x1, 0x8, [{@empty, 0xb680}, {@loopback, 0x5}, {@remote, 0x4}, {@loopback, 0x400}]}, @lsrr={0x83, 0x17, 0xd9, [@local, @broadcast, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x19}, @rand_addr=0x64010101]}, @rr={0x7, 0x27, 0x5f, [@broadcast, @dev={0xac, 0x14, 0x14, 0x14}, @remote, @multicast1, @empty, @loopback, @multicast1, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})
sendmsg$nl_route(r1, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=@delneigh={0xc0, 0x1d, 0x200, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, r2, 0x4, 0x2, 0x3}, [@NDA_LINK_NETNSID={0x8, 0xa, 0x3}, @NDA_MASTER={0x8}, @NDA_IFINDEX={0x8, 0x8, r3}, @NDA_CACHEINFO={0x14, 0x3, {0x200, 0x5, 0x10, 0xb}}, @NDA_LINK_NETNSID={0x8, 0xa, 0x100}, @NDA_FDB_EXT_ATTRS={0x2c, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x5}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x1}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}]}, @NDA_NH_ID={0x8, 0xd, 0xffff8000}, @NDA_FDB_EXT_ATTRS={0x20, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}]}, @NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x15}}, @NDA_CACHEINFO={0x14, 0x3, {0x3fd, 0x0, 0x0, 0xb}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x2004004c}, 0x0)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x44000, 0x0)
ioctl$SNDCTL_TMR_TEMPO(r4, 0xc0045405, &(0x7f00000004c0)=0xe3)
r5 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000500))
sendto$packet(r5, &(0x7f0000000540)="aebd7607dbf89609376b96120ec2fecdc3760eb6b1057156e3e9559959988e9b4f81cd0e2121e3f4c240c851d422659c08e3de2d58616c3a39414c10af53a1876e7098846bd1fe1bb69fa3e51724f993c6c1ff6164b3949c73a34afdad9480", 0x5f, 0x20000040, &(0x7f00000005c0)={0x11, 0x6, r2, 0x1, 0xfb, 0x6, @local}, 0x14)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x44088}, 0x804)
r7 = io_uring_setup(0x712d, &(0x7f0000000700)={0x0, 0x3e17, 0x1000, 0x3, 0x2e8})
r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000780), 0x41, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{0x1, <r9=>0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20)
io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000880)=[r8, r4, r6, r0, r9, r6, r6, r1], 0x8)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f00000008c0)={<r10=>0x0, 0x7, "8f80d75956b2a5"}, &(0x7f0000000900)=0xf)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000940)={r10, 0x5}, 0x8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in6, @in=@empty}}, {{}, 0x0, @in6=@local}}, &(0x7f0000000a80)=0xe8)
r11 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f0000000b00)={&(0x7f0000000ac0)=""/36, 0x200000, 0x1800, 0x4, 0x2}, 0x20)
r12 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x30, r7, 0x8000000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x118, &(0x7f0000000b40)=0x7, 0x0, 0x4)
getpid()
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000b80)={r10, 0x6}, &(0x7f0000000bc0)=0x8)
r13 = syz_open_dev$usbfs(&(0x7f0000000c00), 0x8, 0x82)
ioctl$USBDEVFS_SUBMITURB(r13, 0x8038550a, &(0x7f0000000d80)=@urb_type_control={0x2, {0x9, 0x1}, 0x80000001, 0x42, &(0x7f0000000c40)={0x3, 0xc, 0x4a49, 0x30f, 0x8001}, 0x8, 0xc1, 0x0, 0x0, 0xa, 0x2, &(0x7f0000000c80)="750a5db41714e893bdf9578425b8de7f9a3a97f371e20df3cde81412d3064951a9d9f01ed26569d30c13a3fccba15247b38d8aefe17d366a0c2019ccd5d7ea53c8926412adbb240204292daa86d9edc88f382eef85ca8b78495c8df6f55996d21c01e78f33e8ac1aa84815b9b6fae5fb86150f176ae81f99dc092340bfbac4eb015efc6bd579bd387dc196c4fb0e913d42e40ac847aaf2926a518c16369117d4e903db580f861ad0837ee0b4f9b6213d47a15b41059278b21b5ce35ae67e8006df1c4717ec0bef738dd364c7c5b5c69c2ae5645ba71fae826b"})
ioctl$SNDCTL_TMR_START(r4, 0x5402)
syz_io_uring_setup(0x4a28, &(0x7f0000000dc0)={0x0, 0x2808, 0x2004, 0x0, 0x186, 0x0, r7}, &(0x7f0000000e40), &(0x7f0000000e80))
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000ec0)=0x3)

837.60308ms ago: executing program 0 (id=1254):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000790000000000000000e50000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, 0xffffffffffffffff, 0x8, 0x0, @val=@perf_event={0xfffffffffffffff7}}, 0x18)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="000000216938fa5aa889ca164e0faf208ed68f7234498fc29cb60b7670528f178c5f00df6e6536a1c4549eaca23511707220251f4186b71903fb3ebf0c3233289ecd01a60b999e66bedc3d916965aeca49a2bf01ee97b4de7fe539502304"], 0x0, 0x0})

572.172368ms ago: executing program 3 (id=1255):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x108)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f0000006340)={0x2020, 0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100))
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x1, 0xc18da8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x0, {0x0, 0x2, 0x0, {0x0, 0x4000000, 0x0, 0x100, 0x0, 0x0, 0x8000000, 0x8000, 0x200, 0x8000, 0x0, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x0)
write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef)
dup2(r5, r2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)

453.169915ms ago: executing program 2 (id=1256):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fsopen(0x0, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x40, 0x3}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r3, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}}], 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, 0x0, 0x0)
io_setup(0xffffff7f, &(0x7f0000000280))
openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001180)="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", 0x999)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r6, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r7, 0x0, 0x0, 0x0, <r8=>0x0})
ioctl$IOMMU_GET_HW_INFO(r5, 0x3b8a, &(0x7f0000000180)={0x28, 0x0, r8, 0x1000, &(0x7f0000001540)=""/4096})
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r9, 0x87, 0x81, &(0x7f0000000280)="1a000000", 0x4)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r9, &(0x7f00000000c0)="001086d990c97237a45b6616e513b6f7b106000800000000", 0x18, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x7, @loopback, 0xffffffff}, 0x1c)
syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x15)

173.499555ms ago: executing program 3 (id=1257):
r0 = syz_open_dev$ptys(0xc, 0x3, 0x1)
r1 = syz_open_pts(r0, 0x8080)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x8, <r3=>0xffffffffffffffff, 0x1})
ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r2, 0x4068aea3, &(0x7f0000000040))
r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x341402, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0xe8, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0xfffffffa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e22, @private=0xa010102}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e23, @private=0xa010100}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f}, @in6={0xa, 0x4e21, 0x81, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, @in6={0xa, 0x4e20, 0x9, @mcast2, 0x276}, @in6={0xa, 0x4e20, 0x4, @empty, 0xb0d}, @in6={0xa, 0x4e22, 0x40, @private0, 0x5}]}, &(0x7f0000000240)=0x10)
r5 = userfaultfd(0x80800)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r2, {0x7}}, './file0\x00'})
getsockopt$IP_VS_SO_GET_TIMEOUT(r6, 0x0, 0x486, &(0x7f00000002c0), &(0x7f0000000300)=0xc)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x280, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000380)={0x7, 0x0, [{0xbf9, 0x0, 0x8}, {0x586, 0x0, 0x100}, {0x985, 0x0, 0x3}, {0x991, 0x0, 0xee4b}, {0xa21, 0x0, 0xa}, {0x397, 0x0, 0x7ff}, {0x3b4, 0x0, 0x5be}]})
getsockopt$MRT(r6, 0x0, 0xd0, &(0x7f0000000400), &(0x7f0000000440)=0x4)
flock(r3, 0x7)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r7=>r2, {0x7fffffff}}, '\x00'})
sendmsg$kcm(r7, &(0x7f0000000d40)={&(0x7f00000004c0)=@l2tp={0x2, 0x0, @remote, 0x1}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000540)="8455d01bd726d512bb7b0f7c2615a116863f0f5976618b466292c25ec155492585610375db27bef6be72c379a95355535e1491c6ef242d2bf06b8f95bac2fe34caed74a7a2d4d5b1fe15fc532863381debe33191594bfc7044411ace0e9dc6f59b2d239cbf7f319c5c7544616789e81a8d0f136009a521446cabb83519f917ec7320253f23d8df10341a1ae038e28266a184c673255d360c57f6283bb93c1859a1ccf57d7a955bde3a5d8c5e53c9947bd22baa4d3cefb8692990851ff2c6b705b0030383ea1c8eed82630f01b084691111827e0ebad9062eb26015bd1a3d661327", 0xe1}, {&(0x7f0000000640)="0c15139f742a7bd7d3c6aae9427b562df768cdd69a4d5916506a4f355a169dcbff6f81c1899af66025310e8d97188eb1a8ced6c7aade3d74b7cb18dd815a99e8756c5fb5005519247519a990b946e32893e5e0b44cf438eb958102b773320fbb977d9e82f5fd8b909be1650616e7490e71788c4a21e925721d4935741633cee6e4917db751a12e808f077ea2aaba", 0x8e}, {&(0x7f0000000700)="c20825f1a684edbab1286e6e1d29fac71480b2bc966705a2", 0x18}, {&(0x7f0000000740)="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", 0xfd}, {&(0x7f0000000840)="8300e3191ff53f701d4c2b21c8a1e987eb729370a6a5cc39a3d55b614758859e4ff3af1157d56e144757148b92a891e3532987850ebfc244723d3f87ff7fe0235b4fd0e0a6414854e58762aecb6d151725c90c70ea90d189da592f3d7ee930b870d87592e6b9e9e7d92523c8c821352994f098abdae7936a50ce6335d40362a6a8ee07aa43e2", 0x86}, {0xfffffffffffffffe}, {&(0x7f0000000900)}, {&(0x7f0000000940)}, {&(0x7f0000000980)="ff0deb1fb6c38e429ffd61ac1c20de2b688af657ec452cac1f4483f6be298a7a229a421cf377cf0a6ec3379faaf6d4bf3e87ca0912c95fec814f0a5c6e003eec4ceeb09e2d2f9378f9b0d16c438c5902ea97abef0b0e362503a51d18a09ce1164d0d02b1a725d835633875097e68e649e6d7c45abc8b05bcd0a0b5b042c878b993bc7b96bd78356da9dcc6032ea7ff6e348005e933f0ed22c94878ab7ccc9bd11dd993a3d58d", 0xa6}, {&(0x7f0000000a40)="d8a392104a3c9deedea04817e5b3eaf72bfa3828ee4f41844998f427f304ea4d8c0463886a1304f39bdd8b251eab91133c4ea53054f3d628e44e91b6bf272d561a056410483b145a7f26d0c2e58d497044fafc6a4e9e167fef28ad2b1cfefd26c00530366042a2f311beac747702dc483b632ac308", 0x75}], 0xa, &(0x7f0000000b80)=[{0x90, 0x118, 0x101, "8624a5ab6727f74be6b9d4ed79321e7327398f2d93b090b01332ef014df3a38011fcc8ed4f1686aa0cbf8f292163e139ec76d53f687dc1695719bc8ebbfd327ad7e3ec4c54edda0c8818c49a3c38829bc251401c871cb7205bb43f75c2bf819318779b69c267e9a19a7a851ae412c5c51803e67155b54b747ab71e8916d0"}, {0x90, 0x117, 0x5, "b6d7d3b565ad7cbf134eeace63ba7701df7d670a256b0b3dae7150249d698d34981151156f55a54c0f568597634283585fc280ed7583a62acfa3e6863a3c24ffca067e41e2acaef6f39c649be08ee5930658ca88f74379dd8eaaede75f9669f67f01855fd48c72454d850baf63fb4e7dfd515b0b86b94c5a7b790b"}, {0x98, 0x111, 0x3, "756f94a71a153e57420e8bb6368738234d368119cf2897d8d792c080a6209e07df4e4156b8fcd6d86fcd4a394f5e8c8acd7f021717de6035bf6a069604390012b1bc5c045205868f70e152dc938688d2dce27870828fc7e6912e807f48368f7f1f2e81d205c48a1a61941935137336ec5155521f1aee7e1c45c15aaaa0bac4a62e71d3ec"}], 0x1b8}, 0x1)
syz_open_dev$vbi(&(0x7f0000000d80), 0x0, 0x2)
bind$inet(r1, &(0x7f0000000dc0)={0x2, 0x4e23, @broadcast}, 0x10)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r6, 0x84, 0x74, &(0x7f0000000e00)=""/116, &(0x7f0000000e80)=0x74)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000ec0)=0x1b)
syz_open_dev$vim2m(&(0x7f0000000f00), 0xd, 0x2)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000006, 0x40010, r7, 0x8deac000)
socket$nl_generic(0x10, 0x3, 0x10)
read$FUSE(r7, &(0x7f0000000f40)={0x2020, 0x0, <r8=>0x0}, 0x2020)
write$FUSE_INIT(r6, &(0x7f0000002f80)={0x50, 0x0, r8, {0x7, 0x2b, 0x4, 0x2440, 0x2, 0x7, 0x3, 0xfffffff8, 0x0, 0x0, 0x40, 0x2}}, 0x50)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
writev(r4, &(0x7f0000003600)=[{&(0x7f0000003000)="cd8b41c8f55957fcddaf1973662f76c1d9a949b7d99a21bc3b1f514118867744ad0bef36e679bcde49ded2b7471010c74169c74b51d1c7748ad6c180f0209f40a1389b5133efe0bbe8c0ef2b640ba19a9d2b37f286fe23e21d58c88a9336e1046134d0471d5feefcb32a8547aefb75618f6d1ad97df4cca00d88566f4c7fbe6709842433dee9dce81047802ea97bdb1c0055b94434d8db2cc9", 0x99}, {&(0x7f00000030c0)="633ce130ecdf79533457552449bb0c4de3889e0facfd462f0d17aeaf297c82b045dda16d167d63348ea80f09e302e096a9211d523c0f0c01404edaa735c675e3b1e2435bbc06d75d97e754b0bc1272fe92e9a44df17268d9da9788fa0b37c2e9d30e5163d063f6f87b71cb836eeb45f03752c66219d0a359a7558f1667e4451dac6641287d35ad9bbd602a92", 0x8c}, {&(0x7f0000003180)="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", 0xfb}, {&(0x7f0000003280)="a12eefdc93b4b258c0b757992b0db14e6599ac66c85b48a331d87b21ea26d68f507dcd657158b2d03641d6bf237d8d35aa7cd11088c0da7cd8bc4d0f97aeead496b7d1bf5de98a795528f120e1129957fd87c4393de30f5c207dc1a738be3b8b466e7931a67efdb5d7ae7554a6fe1ed88794e27cc9bafd6986a904929da06fe94db1f10e5c0d7e285466a25829d8101106050f0eeabf838bbe2c2f6acc7346a9505caff913399b3c96eda70a2ae5a48ac3f5c46bbec04b5ea626b49f89", 0xbd}, {&(0x7f0000003340)="ab7fd5ead75e7c9ff62292377f5cbc528c480fadc4650c0b5bc80aea28519638c1fe0efa436ec8c04ca69fafd6a17f8b7f6b3c1d5721c806ddb37697b292e9514849e27da523", 0x46}, {&(0x7f00000033c0)}, {&(0x7f0000003400)="e21ef8603284dfd220ee70b8301e4e3feddbcac4c1632c960a154cbb0b0bb312a9e4320e513950dbb6d52915c62ebc478aa7eb787b9bb323d7eadaaa1f3164a39ead15ce19b36438008667c026f0e6514a74b12753e24f6591910a36d791446f0786cc05e9625d4fc1d674c0f1a4bd5141cf07c2e45c880988ba50f1c23be9b69fc31db255dd981abf2c19ef40da27f8b7618456beb9cbae703cf0ca66eca80e5c79e6fddb71f166b55f49fe6019cc319f2cabb87d1f1f3ec7efaba23049e49825b27bcbd3ae3948ccd37bf0bb5028882a389a37ce6551c9ce1b52f21d67a6817da71baa39bf9be606", 0xe9}, {&(0x7f0000003500)="eb6204e446d80f06036b6b955e31a3bbdc9260abccb1bd397db84523f8ee605de85f4776dc7952b30ba36715f24cd0e58ec2f17b8b6a907cef34088ab2ce1bc34da434a669b8e2ec0592ef048d3f4fa8fdb6d2454dda0f9eb1d622846652de7dafba39db66376bb6fc0990f7ecb3df28777e89115ffbc316c0ff4917c0da343c0f53b22e96dd151d82b7c7cfa873a7aa02c863e1cfce05b23fb66c10ca623629ae0f4a80648998b369269cf5044aa56e1832fb090b51b881dd83f308917f9810482793e0cd97042d6c55a298e4b21521acd66e7230bd04334c609ce8", 0xdc}], 0x8)
syz_genetlink_get_family_id$ethtool(&(0x7f0000003680), r5)
read$watch_queue(r7, &(0x7f00000036c0)=""/6, 0x6)
connect$inet6(r7, &(0x7f0000003700)={0xa, 0x4e21, 0x6, @remote, 0x180}, 0x1c)

143.252385ms ago: executing program 4 (id=1258):
r0 = socket$packet(0x11, 0x3, 0x300)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES8=r0, @ANYRESDEC=r0], 0x34}, 0x1, 0x400000000000000}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
r1 = socket$inet6(0xa, 0x5, 0xbac)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fsopen(0x0, 0x1)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x101, 0x3}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x13, {{@in6=@remote, @in6=@private1, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffff}, {0x1, 0x0, 0x80, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@tmpl={0xc4, 0x5, [{{@in=@remote, 0x4d2, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in6=@remote, 0x0, 0x32}, 0x0, @in=@empty, 0x800000, 0x3}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3500, 0x3, 0x0, 0x1, 0x0, 0xabf}]}]}, 0x17c}}, 0x44)
sendmmsg$inet6(r4, &(0x7f00000002c0), 0x0, 0x4000010)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, 0x0, 0x0)
io_setup(0xffffff7f, &(0x7f0000000380))
openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x200540, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r7, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r8})
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x287, 0xc, &(0x7f00000002c0)="b95de915e35fd1cef298fe9823a02ad9d2068e4e497e6584106b", 0x1a)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r9, &(0x7f00000000c0)="001086d990c97237a45b6616e513b6f7b106000800000000", 0x18, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x7, @loopback, 0xffffffff}, 0x1c)

0s ago: executing program 0 (id=1259):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000b00)=ANY=[@ANYBLOB="1201000000000008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000012c0)={0x40, 0x3, 0x5, {0x5, 0x4, "26ed60"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x1000000, 0x3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x84000)
ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000001300)={0xa35, "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"})
r2 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x41)
r3 = syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x10, 0xaf, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x1, 0x7f, "", {{{0x9, 0x5, 0x1, 0x2, 0x240, 0x1, 0x8, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0xff, 0x4b, 0x7d}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x6, 0xb, 0x5, 0x8, 0xf9}, 0xb, &(0x7f0000000180)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x8, [{0x6c, &(0x7f00000001c0)=@string={0x6c, 0x3, "7e8c7f82ccb68f7cea4893fec92cbfc69d530c29e1c586782b0355847a3bfd5a3a2e47076d846d206ce576532cdc528a7d024a5155bce9f45b25f2d041f74c89b703acbb160c518f390dd6d764dbfda397d8ec4b4c02db7ed1724b7c020ac88714e1e501e04cb2cd210e"}}, {0x4f, &(0x7f0000000280)=@string={0x4f, 0x3, "bb51c0daef7642399495755b3311727547b00e89e525beccf9ea2792cd8fe710369a961de0911de01a212e4f807c267632afc29193bbdd7268a61a92c965d1282a494b22a391ca9ff6134f3150"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x42a}}, {0x7a, &(0x7f0000000340)=@string={0x7a, 0x3, "13e0462475556fc51b4299d2bcb3575ca3a5f7f221bb34e0c8fe04d81aba7ac0a53c009644eeec3a01e5a8b307f5e0383b0dc5c92458b9476674349c0c3209dbf7c295b14b80fa20d99320d35bd39980af65477d38229407f473291dd207ee178017f1caf1498faeb64db415d18b52032dbcfcc00a5ab060"}}, {0xed, &(0x7f00000003c0)=@string={0xed, 0x3, "58b2b8f231e9d43bec00640e88988f5a68353160955e5a6301ca2bb5b14695c4a40ea7ff1a380f71752d8df4bd92058d1e248d3366d1cd119af6e022d7876b60f29d7900b257fb4cb7adb5f5800cade0040286a22d034402baabb92b73468afbcd3db4f1bc1d697d32993cad37ff2049b937f75529a286730d7db88cd4e9c968a43f507038a7c3040e6bf313a54f3d79e84f518a2bc82ab099ff3c2398358681fca929400fe972bc2d9f773a0aaf6b3e511d415bdfb07086e165e3c863d90ecf6616f208fc23a331e1606c0d2be701450cb6b06dc33a00f05fff5d1d2c2ec61a072b9080808c4e1990047c"}}, {0x19, &(0x7f00000004c0)=@string={0x19, 0x3, "60b3415d422a7d6e69f3dd06b805a8814dd26363689a6a"}}, {0x75, &(0x7f0000000500)=@string={0x75, 0x3, "89ffca727c207825a36951184165b97880e7db3f280c44b1c92f29c11d210055d7559676cc0ef0a7642c7a55356aaca4749461410025f9039be05f4224578f9d403178937160bc188f4a41a9a48503ba5a700b8d5e3c1a12d85d060900e89a92970578762208cd408930f4c7e5f092137f3e8e"}}, {0xbd, &(0x7f0000000580)=@string={0xbd, 0x3, "c83fa160662038890b8a74dd94c4b8dee779e505ad03f61581e13ac3b3d9239ea61b4a74535af83f810f72be2e5367131a8a43623d38f2395315aae9cd40fff92e8faa02fa4339ebb28d0d12affbb16030b5e91b4c54f320c565239b68a23ce2d2aec34e0a5e7546cfc5785fc60083cd5e873326787f70d4c4e545469a34b61b2e01037f2a13b357e017089dad5c8943b29b9e766034f01cd46bf074ff0e885382019a2ce7c98ce6b4985a7bfc1283e0de327894703e5643955ccc"}}]})
syz_usb_control_io$printer(r3, &(0x7f0000000780)={0x14, &(0x7f0000000700)={0x0, 0xb, 0x6, {0x6, 0x8, "56d2b14b"}}, &(0x7f0000000740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4001}}}, &(0x7f0000000a80)={0x34, &(0x7f00000007c0)={0x20, 0x16, 0xb8, "15e5908568c9e3099be7c7724b726dbb606d02b3c647484b0d3bc6177540a36903395b1e1f073cd19411d012f9fba5732d78bb2e6a2e61fb49f5b75558e72b3d01fabba4cb7762477194dd252549494eb95615a3f8ac83b9482921a5c70c4760cbbb6b8c75014da90a17fa36f184b94c896d50b7a43f62f7db18a0f1b1a1ee91de50635f13d80a72d8e18a8c345cd98b79baf87582f25daee648fc2cf79f961c9834ac0f4cfeeff5b1d885d35d89e0b3efb1f4183aa87be2"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x80}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000900)={0x20, 0x0, 0xd2, {0xd0, "75441a3e03efc4d42dd7298b43d1c588411619af705eb204e38ace5bc0ddf227642047e17221e961b2d51404bbf458d36364293514b4a13269201e523b3fc832c1ad95efb6de5dd9747b9e080550a42231a82c783b7a9c2fd9816e578a1bdebf181c2b6d7ba1baf99f6ee5ff93b4697ed2ba0ad4add95be8978407586f9ba7f56da9b2cfe5a228d5e187fe76ff3c83efa6aeaef0fe824f534ea1f0a73afd24f9db50f7612ef8000e46bc4e7e0bb38fd15bf983c27592e41f6dc1f75c41181df7bb94f6886a96a79b94d566e5404e9cbe"}}, &(0x7f0000000a00)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000000a40)={0x20, 0x0, 0x1, 0x5}})
ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x2, &(0x7f0000000000)={0x12, "a12fa1f55d27060f351be841cf293f0b1edef588aa6a31ad56cb7ee97fb2e2805e"}})

kernel console output (not intermixed with test programs):

ht not be entirely working.
[  240.831516][   T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  240.907280][   T10] pvrusb2: **********
[  240.967790][   T10] usb 2-1: selecting invalid altsetting 0
[  241.069876][ T2344] pvrusb2: control-write URB failure, status=-71
[  241.096757][   T10] usb 2-1: USB disconnect, device number 35
[  241.134024][ T2344] pvrusb2: Device being rendered inoperable
[  241.171102][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  241.218462][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  241.638037][   T10] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  241.797158][   T10] usb 2-1: Using ep0 maxpacket: 16
[  241.809348][   T10] usb 2-1: config 0 has an invalid interface number: 4 but max is 0
[  241.831683][   T10] usb 2-1: config 0 has no interface number 0
[  241.946039][   T10] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  242.012478][   T10] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  242.043796][   T10] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  242.083972][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.140408][   T10] usb 2-1: config 0 descriptor??
[  242.763737][ T8271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  242.790437][ T8271] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  242.847749][ T8271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  242.858566][ T8271] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  242.871774][   T54] usb 2-1: USB disconnect, device number 36
[  243.870982][   T54] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  243.957231][ T5934] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  243.992636][ T8290] loop2: detected capacity change from 0 to 7
[  244.003241][ T8290] Dev loop2: unable to read RDB block 7
[  244.430246][ T8290]  loop2: unable to read partition table
[  244.456103][ T8290] loop2: partition table beyond EOD, truncated
[  244.517519][ T8290] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  244.554603][   T54] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  244.571014][   T54] usb 4-1: config 0 interface 0 has no altsetting 0
[  244.642501][   T54] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  244.665070][   T54] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  244.693645][   T54] usb 4-1: Product: syz
[  244.714032][   T54] usb 4-1: Manufacturer: syz
[  244.724196][   T54] usb 4-1: SerialNumber: syz
[  244.798389][   T54] usb 4-1: config 0 descriptor??
[  244.822104][   T54] usb 4-1: selecting invalid altsetting 0
[  245.017269][ T8279] batadv_slave_0: entered promiscuous mode
[  245.070711][ T8298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.633'.
[  245.146404][ T5901] usb 4-1: USB disconnect, device number 43
[  245.244718][ T8301] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  245.401953][ T5934] usb 2-1: device descriptor read/64, error -71
[  245.410681][ T8307] netlink: 'syz.2.641': attribute type 10 has an invalid length.
[  245.618961][ T8309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  245.628690][ T8309] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  245.667191][ T5934] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  245.873221][ T5934] usb 2-1: device descriptor read/64, error -71
[  245.883300][ T8306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.639'.
[  245.897007][ T8306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.639'.
[  246.017431][ T5934] usb usb2-port1: attempt power cycle
[  246.304735][ T8320] netlink: 40 bytes leftover after parsing attributes in process `syz.4.645'.
[  246.368591][ T5934] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  246.403917][ T5934] usb 2-1: device descriptor read/8, error -71
[  246.410316][ T5986] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  246.441484][ T8325] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  246.448025][ T8325] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  246.461579][ T8325] vhci_hcd vhci_hcd.0: Device attached
[  246.577256][ T5986] usb 4-1: Using ep0 maxpacket: 8
[  246.594381][ T8329] tipc: Started in network mode
[  246.626554][ T8329] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711
[  246.634136][ T8329] tipc: Enabled bearer <eth:syz_tun>, priority 10
[  246.635197][ T5986] usb 4-1: unable to get BOS descriptor or descriptor too short
[  246.648634][   T54] vhci_hcd: vhci_device speed not set
[  246.663187][ T5934] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  246.683166][ T5986] usb 4-1: config 4 interface 0 has no altsetting 0
[  246.695832][ T5986] usb 4-1: string descriptor 0 read error: -22
[  246.704212][ T5934] usb 2-1: device descriptor read/8, error -71
[  246.711385][ T5986] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  246.721007][ T5986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.729107][   T54] usb 41-1: new full-speed USB device number 3 using vhci_hcd
[  246.754564][ T8332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  246.760311][ T5986] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  246.781187][ T8332] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  246.796357][ T5986] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  246.808942][ T5986] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  246.816142][ T5986] usb 4-1: media controller created
[  246.821642][ T8332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  246.830510][ T5934] usb usb2-port1: unable to enumerate USB device
[  246.844610][ T8332] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  246.866804][ T5986] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  247.008533][ T8318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  247.018207][ T8318] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  247.270690][ T8326] vhci_hcd: connection reset by peer
[  247.276618][   T13] vhci_hcd: stop threads
[  247.281323][   T13] vhci_hcd: release socket
[  247.285868][   T13] vhci_hcd: disconnect device
[  247.600795][ T8343] netlink: 28 bytes leftover after parsing attributes in process `syz.3.650'.
[  247.610223][ T8343] netlink: 28 bytes leftover after parsing attributes in process `syz.3.650'.
[  247.735765][ T8346] loop2: detected capacity change from 0 to 7
[  247.746525][ T8346] Dev loop2: unable to read RDB block 7
[  247.752368][ T8346]  loop2: unable to read partition table
[  247.759903][ T5909] tipc: Node number set to 43690
[  247.767646][ T8346] loop2: partition table beyond EOD, truncated
[  247.773862][ T8346] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  247.894570][ T8349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  247.905131][ T8349] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  247.962168][ T5986] zl10353_read_register: readreg error (reg=127, ret==0)
[  248.560436][ T8368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.657'.
[  249.026636][ T8378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  249.036620][ T8378] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  249.084723][ T8378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  249.093628][ T8378] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  249.407256][ T8382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.661'.
[  249.836966][ T8388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  249.891671][ T8388] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  249.975848][ T8390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.025578][ T8390] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  250.070882][ T8399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.106493][ T8400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.116064][ T8399] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  250.132069][ T8400] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  250.158853][ T8399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.215788][ T8399] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  250.297516][ T5909] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  250.370530][ T8407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.666'.
[  250.400696][ T8407] netlink: 'syz.3.666': attribute type 10 has an invalid length.
[  250.441803][ T8409] loop2: detected capacity change from 0 to 7
[  250.448277][ T5909] usb 3-1: Using ep0 maxpacket: 8
[  250.464121][ T5909] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  250.470898][ T7024] Dev loop2: unable to read RDB block 7
[  250.484942][ T5909] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  250.495514][ T7024]  loop2: unable to read partition table
[  250.510088][ T5909] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  250.511917][ T7024] loop2: partition table beyond EOD, 
[  250.535744][ T5909] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  250.541019][ T7024] truncated
[  250.562207][ T5909] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  250.576601][ T8409] Dev loop2: unable to read RDB block 7
[  250.582595][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.582958][ T8409]  loop2: unable to read partition table
[  250.601874][ T8409] loop2: partition table beyond EOD, truncated
[  250.601915][ T8411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.613342][ T8409] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  250.660734][ T8411] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  250.842115][ T5909] usb 3-1: GET_CAPABILITIES returned 0
[  250.851268][ T5909] usbtmc 3-1:16.0: can't read capabilities
[  250.874330][ T8418] netlink: 44 bytes leftover after parsing attributes in process `syz.1.669'.
[  250.899777][ T5909] usb 3-1: USB disconnect, device number 53
[  251.304736][ T8428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  251.321093][ T8428] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.362747][ T8428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  251.373160][ T8428] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.425487][ T8431] sctp: [Deprecated]: syz.4.671 (pid 8431) Use of int in maxseg socket option.
[  251.425487][ T8431] Use struct sctp_assoc_value instead
[  251.443810][ T8431] netlink: 'syz.4.671': attribute type 10 has an invalid length.
[  251.463809][ T8431] veth0_vlan: left promiscuous mode
[  251.474013][ T8431] veth0_vlan: entered promiscuous mode
[  251.494288][ T8431] team0: Device veth0_vlan failed to register rx_handler
[  251.877754][   T54] vhci_hcd: vhci_device speed not set
[  252.257239][ T1548] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  252.583588][ T1548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  252.781577][ T1548] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  252.803715][ T1548] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  252.813118][ T1548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.854386][ T1548] usb 3-1: config 0 descriptor??
[  253.305053][ T8459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  253.326215][ T8459] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  253.382585][ T1548] kovaplus 0003:1E7D:2D50.001F: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0
[  253.561477][ T8459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  253.577936][ T8459] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  253.751190][ T1548] kovaplus 0003:1E7D:2D50.001F: couldn't init struct kovaplus_device
[  253.771324][ T1548] kovaplus 0003:1E7D:2D50.001F: couldn't install mouse
[  253.799413][ T1548] kovaplus 0003:1E7D:2D50.001F: probe with driver kovaplus failed with error -5
[  253.992740][ T8465] loop2: detected capacity change from 0 to 7
[  254.002661][ T8465] Dev loop2: unable to read RDB block 7
[  254.009555][ T8465]  loop2: unable to read partition table
[  254.015605][ T8465] loop2: partition table beyond EOD, truncated
[  254.024974][ T8465] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  254.084361][ T8467] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  254.092095][ T8467] IPv6: NLM_F_CREATE should be set when creating new route
[  254.106964][ T8467] lo: entered allmulticast mode
[  254.116552][ T8467] tunl0: entered allmulticast mode
[  254.125120][ T8467] gre0: entered allmulticast mode
[  254.142493][ T8467] gretap0: entered allmulticast mode
[  254.156407][ T8467] erspan0: entered allmulticast mode
[  254.174544][ T8467] ip_vti0: entered allmulticast mode
[  254.183614][ T8467] ip6_vti0: entered allmulticast mode
[  254.193685][ T8470] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  254.194250][ T8467] sit0: entered allmulticast mode
[  254.221375][ T8467] ip6tnl0: entered allmulticast mode
[  254.239130][ T8467] ip6gre0: entered allmulticast mode
[  254.250871][ T8467] syz_tun: entered allmulticast mode
[  254.265712][ T8467] ip6gretap0: entered allmulticast mode
[  254.313467][ T8467] bridge0: entered allmulticast mode
[  254.354426][ T8476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  254.356898][ T8467] vcan0: entered allmulticast mode
[  254.372890][ T8477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  254.382671][ T8476] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  254.393767][ T8467] bond0: entered allmulticast mode
[  254.394366][ T8477] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  254.407634][ T8467] bond_slave_0: entered allmulticast mode
[  254.415568][ T8467] bond_slave_1: entered allmulticast mode
[  254.428295][ T8467] team0: entered allmulticast mode
[  254.433526][ T8467] team_slave_0: entered allmulticast mode
[  254.442883][ T8467] team_slave_1: entered allmulticast mode
[  254.452956][ T8467] dummy0: entered allmulticast mode
[  254.464570][ T8467] nlmon0: entered allmulticast mode
[  254.471980][ T8467] caif0: entered allmulticast mode
[  254.479349][ T8467] batadv0: entered allmulticast mode
[  254.488686][ T8467] vxcan0: entered allmulticast mode
[  254.494808][ T8467] vxcan1: entered allmulticast mode
[  254.501583][ T8467] veth0: entered allmulticast mode
[  254.509667][ T8467] veth1: entered allmulticast mode
[  254.520064][ T8467] wg0: entered allmulticast mode
[  254.528209][ T8467] wg1: entered allmulticast mode
[  254.535305][ T8467] wg2: entered allmulticast mode
[  254.542573][ T8467] veth0_to_bridge: entered allmulticast mode
[  254.556056][ T8467] veth1_to_bridge: entered allmulticast mode
[  254.572677][ T8467] veth0_to_bond: entered allmulticast mode
[  254.586793][ T8467] veth1_to_bond: entered allmulticast mode
[  254.611516][ T8467] veth0_to_team: entered allmulticast mode
[  254.640363][ T8467] veth1_to_team: entered allmulticast mode
[  254.663876][ T8467] veth0_to_batadv: entered allmulticast mode
[  254.674500][ T8467] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  254.683292][ T8467] batadv_slave_0: entered allmulticast mode
[  254.692651][ T8467] veth1_to_batadv: entered allmulticast mode
[  254.702357][ T8467] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  254.711167][ T8467] batadv_slave_1: entered allmulticast mode
[  254.721762][ T8467] xfrm0: entered allmulticast mode
[  254.729634][ T8467] veth0_to_hsr: entered allmulticast mode
[  254.740039][ T8467] hsr_slave_0: entered allmulticast mode
[  254.747917][ T8467] veth1_to_hsr: entered allmulticast mode
[  254.755883][ T8467] hsr_slave_1: entered allmulticast mode
[  254.763799][ T8467] hsr0: entered allmulticast mode
[  254.778582][ T8467] veth1_virt_wifi: entered allmulticast mode
[  254.787499][ T8467] veth0_virt_wifi: entered allmulticast mode
[  254.795546][ T8467] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  254.803738][ T8467] veth1_vlan: entered allmulticast mode
[  254.811680][ T8467] veth0_vlan: entered allmulticast mode
[  254.820890][ T8467] vlan0: entered allmulticast mode
[  254.826174][ T8467] vlan1: entered allmulticast mode
[  254.832698][ T8467] macvlan0: entered allmulticast mode
[  254.840509][ T8467] macvlan1: entered allmulticast mode
[  254.850936][ T8467] ipvlan0: entered allmulticast mode
[  254.856465][ T8467] ipvlan1: entered allmulticast mode
[  254.862855][ T8467] veth1_macvtap: entered allmulticast mode
[  254.871375][ T8467] veth0_macvtap: entered allmulticast mode
[  254.885062][ T8467] macvtap0: entered allmulticast mode
[  254.894134][ T8467] macsec0: entered allmulticast mode
[  254.907239][   T54] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  254.920549][ T8467] geneve0: entered allmulticast mode
[  254.957772][ T8467] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  254.980352][ T8467] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  254.994819][ T8467] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  255.025223][   T10] usb 3-1: USB disconnect, device number 54
[  255.035273][ T8467] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  255.064979][ T8467] geneve1: entered allmulticast mode
[  255.085832][   T54] usb 2-1: Using ep0 maxpacket: 8
[  255.099637][ T8467] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  255.118126][   T54] usb 2-1: unable to get BOS descriptor or descriptor too short
[  255.133025][   T54] usb 2-1: config 4 interface 0 has no altsetting 0
[  255.144410][   T54] usb 2-1: string descriptor 0 read error: -22
[  255.152973][ T8467] netdevsim netdevsim0 netdevsim1: entered allmulticast mode
[  255.165319][   T54] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  255.183862][ T8467] netdevsim netdevsim0 netdevsim2: entered allmulticast mode
[  255.184702][   T54] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.222961][ T8467] netdevsim netdevsim0 netdevsim3: entered allmulticast mode
[  255.239946][ T8467] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  255.242435][   T54] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  255.253031][ T8467] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  255.277817][   T54] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  255.281350][ T8467] gretap1: entered allmulticast mode
[  255.292512][   T54] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  255.302060][ T8467] syztnl2: entered allmulticast mode
[  255.305256][   T54] usb 2-1: media controller created
[  255.364224][   T54] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  255.376890][ T8487] syzkaller1: entered promiscuous mode
[  255.400640][ T8487] syzkaller1: entered allmulticast mode
[  255.538151][ T8479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  255.547467][ T8479] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  255.570569][ T8501] netlink: 36 bytes leftover after parsing attributes in process `syz.0.691'.
[  255.705722][   T54] zl10353_read_register: readreg error (reg=127, ret==0)
[  255.722413][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  255.728972][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  255.776968][   T54] usb 2-1: USB disconnect, device number 41
[  255.785231][ T1548] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  255.963603][ T1548] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  255.979105][ T1548] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  255.992390][ T1548] usb 3-1: config 1 has no interface number 0
[  255.998610][ T1548] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  256.013487][ T1548] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  256.022830][ T1548] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.031385][ T1548] usb 3-1: Product: syz
[  256.035571][ T1548] usb 3-1: Manufacturer: syz
[  256.066321][ T1548] usb 3-1: SerialNumber: syz
[  256.080437][ T1548] usb 3-1: selecting invalid altsetting 1
[  256.288098][ T1548] cdc_ncm 3-1:1.1: bind() failure
[  256.322792][ T1548] usb 3-1: USB disconnect, device number 55
[  256.395375][ T8512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  256.413545][ T8512] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  256.807544][ T1548] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  256.912701][ T8524] netlink: 'syz.4.697': attribute type 21 has an invalid length.
[  256.912701][ T8526] netlink: 'syz.4.697': attribute type 21 has an invalid length.
[  256.912779][ T8524] netlink: 164 bytes leftover after parsing attributes in process `syz.4.697'.
[  256.938528][ T8526] netlink: 164 bytes leftover after parsing attributes in process `syz.4.697'.
[  256.957136][ T8527] sctp: [Deprecated]: syz.3.696 (pid 8527) Use of int in maxseg socket option.
[  256.957136][ T8527] Use struct sctp_assoc_value instead
[  256.981020][ T8527] netlink: 'syz.3.696': attribute type 10 has an invalid length.
[  256.990958][ T8527] veth0_vlan: left promiscuous mode
[  256.997548][ T1548] usb 2-1: Using ep0 maxpacket: 8
[  257.005287][ T8527] veth0_vlan: entered promiscuous mode
[  257.010686][ T1548] usb 2-1: unable to get BOS descriptor or descriptor too short
[  257.031395][ T8527] team0: Device veth0_vlan failed to register rx_handler
[  257.036742][ T1548] usb 2-1: config 4 has an invalid interface number: 147 but max is 0
[  257.046952][ T1548] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[  257.082841][ T1548] usb 2-1: config 4 has no interface number 0
[  257.116795][ T1548] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  257.126979][ T1548] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.140034][ T1548] usb 2-1: Product: syz
[  257.145411][ T1548] usb 2-1: Manufacturer: syz
[  257.151205][ T1548] usb 2-1: SerialNumber: syz
[  257.390808][ T1548] usb 2-1: Found UVC 0.02 device syz (04f2:b746)
[  257.399246][ T8539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  257.409792][ T1548] usb 2-1: No valid video chain found.
[  257.419826][ T1548] usb 2-1: USB disconnect, device number 42
[  257.440501][ T8539] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  257.965590][ T8550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.702'.
[  258.161770][ T8553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  258.172011][ T8553] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  258.244929][ T8553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  258.253716][ T8553] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  258.273153][   T10] psmouse serio2: Failed to reset mouse on : -5
[  258.707653][   T54] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  258.868132][   T54] usb 3-1: Using ep0 maxpacket: 8
[  258.879099][   T54] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 45, changing to 9
[  258.897181][   T54] usb 3-1: config 1 interface 0 has no altsetting 0
[  258.906799][   T54] usb 3-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40
[  258.917911][   T54] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.925949][   T54] usb 3-1: Product: syz
[  258.930681][   T54] usb 3-1: Manufacturer: syz
[  258.935742][   T54] usb 3-1: SerialNumber: syz
[  259.282868][ T8570] netlink: 14 bytes leftover after parsing attributes in process `syz.4.706'.
[  259.373223][   T54] usbhid 3-1:1.0: can't add hid device: -71
[  259.379428][   T54] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  259.402647][   T54] usb 3-1: USB disconnect, device number 56
[  259.473423][ T8570] team0: Port device bond0 removed
[  259.490743][ T8570] bond0 (unregistering): Released all slaves
[  259.951263][ T8573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  259.960370][ T8573] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  260.173390][ T8578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  260.204667][ T8578] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  260.912749][ T8594] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  262.203723][   T10] misc userio: Buffer overflowed, userio client isn't keeping up
[  262.860361][ T8611] sctp: [Deprecated]: syz.2.719 (pid 8611) Use of int in maxseg socket option.
[  262.860361][ T8611] Use struct sctp_assoc_value instead
[  262.881453][ T8611] netlink: 'syz.2.719': attribute type 10 has an invalid length.
[  262.889421][ T8611] veth0_vlan: left promiscuous mode
[  262.896061][ T8611] veth0_vlan: entered promiscuous mode
[  262.903220][ T8611] team0: Device veth0_vlan failed to register rx_handler
[  263.271297][   T10] input: PS/2 Generic Mouse as /devices/serio2/input/input42
[  263.587186][   T10] psmouse serio2: Failed to enable mouse on 
[  264.021291][ T8627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  264.053531][ T8627] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  264.223940][ T8628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.722'.
[  264.242324][ T8628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.722'.
[  264.264861][ T8628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.722'.
[  264.346239][ T8630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  264.358450][ T8630] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  266.367251][   T10] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  266.566209][   T10] usb 2-1: config 0 has no interfaces?
[  266.658019][   T10] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  266.669352][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.717427][   T10] usb 2-1: Product: syz
[  266.726122][   T10] usb 2-1: Manufacturer: syz
[  266.739318][   T10] usb 2-1: SerialNumber: syz
[  266.765147][   T10] usb 2-1: config 0 descriptor??
[  266.789460][ T8661] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  267.419165][ T8664] dvmrp0: entered allmulticast mode
[  267.757322][ T5934] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  267.940753][ T5934] usb 3-1: config 0 has no interfaces?
[  267.949224][ T5934] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  267.958660][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.981170][ T5934] usb 3-1: Product: syz
[  268.027021][ T5934] usb 3-1: Manufacturer: syz
[  268.037272][ T5934] usb 3-1: SerialNumber: syz
[  268.073490][ T5934] usb 3-1: config 0 descriptor??
[  268.968797][ T8682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  268.969038][ T8682] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  269.067106][ T5934] usb 2-1: USB disconnect, device number 43
[  269.428094][ T8700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  269.438877][ T8700] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  269.529350][ T8703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  269.538641][ T8703] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  269.565999][ T8704] sctp: [Deprecated]: syz.1.740 (pid 8704) Use of int in maxseg socket option.
[  269.565999][ T8704] Use struct sctp_assoc_value instead
[  269.606116][ T8704] netlink: 'syz.1.740': attribute type 10 has an invalid length.
[  269.639684][ T8704] veth0_vlan: left promiscuous mode
[  269.653026][ T8704] veth0_vlan: entered promiscuous mode
[  269.672664][ T8704] team0: Device veth0_vlan failed to register rx_handler
[  269.724221][ T8707] syzkaller1: entered promiscuous mode
[  269.733932][ T8707] syzkaller1: entered allmulticast mode
[  270.209623][ T5934] usb 3-1: USB disconnect, device number 57
[  270.603975][ T5934] usb 3-1: new full-speed USB device number 58 using dummy_hcd
[  270.785173][ T5934] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[  270.813851][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.866115][ T5934] usb 3-1: config 0 descriptor??
[  270.935358][ T5934] pwc: Samsung MPC-C10 USB webcam detected.
[  271.132128][ T5934] pwc: send_video_command error -71
[  271.143378][ T5934] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  271.152310][ T5934] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71
[  271.183872][ T5934] usb 3-1: USB disconnect, device number 58
[  271.530609][ T8724] loop2: detected capacity change from 0 to 7
[  271.541029][ T8724] Dev loop2: unable to read RDB block 7
[  271.546734][ T8724]  loop2: unable to read partition table
[  271.555529][ T8724] loop2: partition table beyond EOD, truncated
[  271.564001][ T8724] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  271.637348][ T5934] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  271.818673][ T5934] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[  271.827973][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.843599][ T5934] usb 3-1: config 0 descriptor??
[  271.879223][ T5934] pwc: Samsung MPC-C10 USB webcam detected.
[  272.025126][ T8728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  272.036979][ T8728] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  272.366670][ T8733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  272.397672][ T8733] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  273.207176][   T10] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  273.370812][ T8756] fuse: Unknown parameter '000000000000000000000150x000000000000000f'
[  273.434494][ T8757] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  273.443759][   T10] usb 2-1: Using ep0 maxpacket: 8
[  273.506232][   T10] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  273.523476][ T5934] pwc: recv_control_msg error -71 req 02 val 2b00
[  273.523530][   T10] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  273.549947][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  273.556807][   T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  273.570388][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.624553][   T10] usb 2-1: config 0 descriptor??
[  273.635730][ T5934] pwc: recv_control_msg error -71 req 02 val 2700
[  273.670227][ T5934] pwc: recv_control_msg error -71 req 04 val 1700
[  273.752662][ T5934] pwc: recv_control_msg error -71 req 02 val 2c00
[  273.769781][ T5934] pwc: recv_control_msg error -71 req 04 val 1000
[  273.781261][ T5934] pwc: recv_control_msg error -71 req 04 val 1300
[  273.939166][ T8763] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  273.972821][ T8763] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  274.008253][ T5934] pwc: recv_control_msg error -71 req 04 val 1400
[  274.130524][ T5934] pwc: recv_control_msg error -71 req 02 val 2000
[  274.188873][ T5934] pwc: recv_control_msg error -71 req 02 val 2100
[  274.207329][ T5934] pwc: recv_control_msg error -71 req 02 val 2200
[  274.258427][   T10] mcp2221 0003:04D8:00DD.0020: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  274.269471][ T5934] pwc: recv_control_msg error -71 req 06 val 0600
[  274.288741][ T5934] pwc: recv_control_msg error -71 req 04 val 1500
[  274.478069][ T5934] pwc: recv_control_msg error -71 req 02 val 2500
[  274.489532][ T5934] pwc: recv_control_msg error -71 req 02 val 2400
[  274.498416][ T5934] pwc: recv_control_msg error -71 req 02 val 2600
[  274.507277][ T5934] pwc: recv_control_msg error -71 req 02 val 2900
[  274.515531][ T5934] pwc: recv_control_msg error -71 req 02 val 2800
[  274.525730][ T5934] pwc: recv_control_msg error -71 req 04 val 1100
[  274.542935][ T5934] pwc: recv_control_msg error -71 req 04 val 1200
[  274.690756][   T10] usb 2-1: USB disconnect, device number 44
[  274.729863][ T5934] pwc: Registered as video103.
[  274.735917][ T5934] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input49
[  274.824848][ T5934] usb 3-1: USB disconnect, device number 59
[  275.194789][ T8777] loop2: detected capacity change from 0 to 7
[  275.207843][ T8777] Dev loop2: unable to read RDB block 7
[  275.251250][ T8777]  loop2: unable to read partition table
[  275.317522][ T8777] loop2: partition table beyond EOD, truncated
[  275.352583][ T8783] sctp: [Deprecated]: syz.3.760 (pid 8783) Use of int in maxseg socket option.
[  275.352583][ T8783] Use struct sctp_assoc_value instead
[  275.391087][ T8777] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  275.485959][ T8783] netlink: 'syz.3.760': attribute type 10 has an invalid length.
[  275.494172][ T8783] veth0_vlan: left promiscuous mode
[  275.518939][ T8783] veth0_vlan: entered promiscuous mode
[  275.561752][ T8783] team0: Device veth0_vlan failed to register rx_handler
[  275.573577][ T8787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  275.607698][ T8787] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  275.616509][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.761'.
[  275.655794][ T8789] netlink: 'syz.1.761': attribute type 10 has an invalid length.
[  275.826396][   T30] audit: type=1800 audit(1752236431.481:151): pid=8795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.764" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  275.846808][    C1] vkms_vblank_simulate: vblank timer overrun
[  276.314603][ T8805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  276.405758][ T8805] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  276.515126][ T8805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  276.524506][ T8805] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  276.724934][ T8810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  276.777692][ T8810] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  277.820522][ T8832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  277.856477][ T8832] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  278.127423][ T5986] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  278.368794][ T5986] usb 3-1: Using ep0 maxpacket: 32
[  278.378720][ T5986] usb 3-1: config 0 has an invalid interface number: 101 but max is 1
[  278.567118][ T5986] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  278.577613][ T8846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  278.588729][ T5986] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  278.602666][ T8846] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  278.607130][ T5986] usb 3-1: config 0 has no interface number 0
[  278.616565][ T5986] usb 3-1: config 0 interface 101 has no altsetting 0
[  278.636454][ T8848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  278.645690][ T5986] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=59.84
[  278.661211][ T8848] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  278.690856][ T5986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.746167][ T5986] usb 3-1: config 0 descriptor??
[  278.771664][ T5986] hub 3-1:0.101: bad descriptor, ignoring hub
[  278.779411][ T5986] hub 3-1:0.101: probe with driver hub failed with error -5
[  278.982456][ T5964] usb 2-1: new full-speed USB device number 45 using dummy_hcd
[  279.003192][ T8835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  279.051067][ T8848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  279.145273][ T5964] usb 2-1: config 0 has an invalid interface number: 69 but max is 0
[  279.168829][ T8848] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  279.192780][ T5964] usb 2-1: config 0 has no interface number 0
[  279.196663][ T8835] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  279.209647][ T5964] usb 2-1: New USB device found, idVendor=05d8, idProduct=8107, bcdDevice=64.06
[  279.218946][ T5964] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.243523][ T5964] usb 2-1: Product: syz
[  279.251634][ T5964] usb 2-1: Manufacturer: syz
[  279.275076][ T5964] usb 2-1: SerialNumber: syz
[  279.306684][ T5964] usb 2-1: config 0 descriptor??
[  279.327431][ T5986] usb 3-1: USB disconnect, device number 60
[  279.332438][ T5964] dvb-usb: found a 'Artec T1 USB1.1 TVBOX with AN2235' in cold state, will try to load a firmware
[  279.359570][ T5964] usb 2-1: Direct firmware load for dvb-usb-dibusb-an2235-01.fw failed with error -2
[  279.375350][ T5964] usb 2-1: Falling back to sysfs fallback for: dvb-usb-dibusb-an2235-01.fw
[  279.434077][ T8858] team0: Port device bond0 removed
[  279.441399][ T8858] bridge_slave_0: left promiscuous mode
[  279.450038][ T8858] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.463895][ T8858] bridge_slave_1: left promiscuous mode
[  279.470171][ T8858] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.483442][ T8858] bond0: (slave bond_slave_0): Releasing backup interface
[  279.496803][ T8858] bond0: (slave bond_slave_1): Releasing backup interface
[  279.515639][ T8858] team0: Port device team_slave_0 removed
[  279.533075][ T8858] team0: Port device team_slave_1 removed
[  279.539627][ T8858] batman_adv: batadv0: Removing interface: batadv_slave_0
[  279.553765][ T8858] batman_adv: batadv0: Removing interface: batadv_slave_1
[  280.708992][ T8864] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  280.812448][ T8864] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  280.823207][ T8864] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  280.830527][ T8864] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  280.836680][ T8864] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  281.136087][ T8885] syzkaller0: entered promiscuous mode
[  281.141923][ T8885] syzkaller0: entered allmulticast mode
[  281.147194][ T5986] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  281.272298][ T8887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  281.310177][ T8887] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  281.333019][ T5986] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  281.349716][ T5986] usb 3-1: config 0 interface 0 has no altsetting 0
[  281.359324][ T8887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  281.368574][ T8887] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  281.408356][ T5986] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  281.417814][ T5986] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  281.426190][ T5986] usb 3-1: Product: syz
[  281.460736][ T5986] usb 3-1: Manufacturer: syz
[  281.465558][ T5986] usb 3-1: SerialNumber: syz
[  281.473793][ T5986] usb 3-1: config 0 descriptor??
[  281.485691][ T5986] usb 3-1: selecting invalid altsetting 0
[  281.939063][ T5909] usb 3-1: USB disconnect, device number 61
[  282.215452][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout
[  282.837420][ T5844] Bluetooth: hci4: command 0x0405 tx timeout
[  282.843688][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout
[  282.850156][   T50] Bluetooth: hci2: command 0x0c1a tx timeout
[  282.856261][ T5852] Bluetooth: hci1: command 0x0c1a tx timeout
[  283.226843][ T8912] FAULT_INJECTION: forcing a failure.
[  283.226843][ T8912] name failslab, interval 1, probability 0, space 0, times 1
[  283.274051][ T8912] CPU: 0 UID: 0 PID: 8912 Comm: syz.0.796 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  283.274077][ T8912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  283.274093][ T8912] Call Trace:
[  283.274099][ T8912]  <TASK>
[  283.274107][ T8912]  dump_stack_lvl+0x189/0x250
[  283.274138][ T8912]  ? __pfx____ratelimit+0x10/0x10
[  283.274163][ T8912]  ? __pfx_dump_stack_lvl+0x10/0x10
[  283.274181][ T8912]  ? __pfx__printk+0x10/0x10
[  283.274205][ T8912]  ? __pfx___might_resched+0x10/0x10
[  283.274221][ T8912]  ? fs_reclaim_acquire+0x7d/0x100
[  283.274249][ T8912]  should_fail_ex+0x414/0x560
[  283.274277][ T8912]  ? xt_alloc_table_info+0x3b/0xa0
[  283.274298][ T8912]  should_failslab+0xa8/0x100
[  283.274318][ T8912]  __kvmalloc_node_noprof+0x161/0x5f0
[  283.274339][ T8912]  ? xt_alloc_table_info+0x3b/0xa0
[  283.274366][ T8912]  xt_alloc_table_info+0x3b/0xa0
[  283.274389][ T8912]  do_ipt_set_ctl+0x881/0xcd0
[  283.274415][ T8912]  ? rcu_is_watching+0x15/0xb0
[  283.274433][ T8912]  ? __pfx_do_ipt_set_ctl+0x10/0x10
[  283.274472][ T8912]  ? __pfx___mutex_lock+0x10/0x10
[  283.274490][ T8912]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  283.274506][ T8912]  ? aa_sk_perm+0x81e/0x950
[  283.274533][ T8912]  ? __pfx_aa_sk_perm+0x10/0x10
[  283.274563][ T8912]  nf_setsockopt+0x26f/0x290
[  283.274586][ T8912]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  283.274606][ T8912]  do_sock_setsockopt+0x25a/0x3e0
[  283.274630][ T8912]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  283.274654][ T8912]  ? __fget_files+0x2a/0x420
[  283.274681][ T8912]  __x64_sys_setsockopt+0x18b/0x220
[  283.274713][ T8912]  do_syscall_64+0xfa/0x3b0
[  283.274729][ T8912]  ? lockdep_hardirqs_on+0x9c/0x150
[  283.274752][ T8912]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.274768][ T8912]  ? clear_bhb_loop+0x60/0xb0
[  283.274790][ T8912]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.274806][ T8912] RIP: 0033:0x7fb262b8e929
[  283.274828][ T8912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  283.274842][ T8912] RSP: 002b:00007fb263941038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  283.274860][ T8912] RAX: ffffffffffffffda RBX: 00007fb262db5fa0 RCX: 00007fb262b8e929
[  283.274872][ T8912] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003
[  283.274882][ T8912] RBP: 00007fb263941090 R08: 0000000000000428 R09: 0000000000000000
[  283.274893][ T8912] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000001
[  283.274904][ T8912] R13: 0000000000000000 R14: 00007fb262db5fa0 R15: 00007fb262edfa28
[  283.274931][ T8912]  </TASK>
[  283.943270][ T8920] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  284.170451][ T8930] loop2: detected capacity change from 0 to 7
[  284.199308][ T8930] Dev loop2: unable to read RDB block 7
[  284.237163][ T8930]  loop2: unable to read partition table
[  284.278737][ T8930] loop2: partition table beyond EOD, truncated
[  284.341097][ T8930] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  284.771466][ T5934] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  284.973436][ T5934] usb 3-1: Using ep0 maxpacket: 8
[  284.996460][ T5934] usb 3-1: unable to get BOS descriptor or descriptor too short
[  285.025502][ T5934] usb 3-1: config 4 interface 0 has no altsetting 0
[  285.042692][ T5934] usb 3-1: string descriptor 0 read error: -22
[  285.051085][ T5934] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  285.061212][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.073988][ T8940] fuse: Bad value for 'fd'
[  285.090455][ T5934] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  285.117206][ T5934] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  285.335100][ T5934] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  285.397692][ T5934] usb 3-1: media controller created
[  285.431131][ T8933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.443488][ T8933] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.522287][ T5934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  285.637515][ T8955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.700058][ T8955] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.922580][ T8955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.957291][ T5844] Bluetooth: hci4: command 0x0405 tx timeout
[  286.065869][ T8963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  286.066247][ T8955] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  286.077572][ T8963] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  286.677389][ T5934] zl10353_read_register: readreg error (reg=127, ret==0)
[  287.166119][ T8976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  287.216950][ T8976] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  287.634306][   T30] audit: type=1800 audit(1752236443.291:152): pid=8978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.813" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  287.691460][ T8982] netlink: 'syz.0.813': attribute type 13 has an invalid length.
[  287.892665][ T8982] 8021q: adding VLAN 0 to HW filter on device bond0
[  287.914036][ T8982] 8021q: adding VLAN 0 to HW filter on device team0
[  287.949027][ T8982] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  288.030899][ T8984] could not allocate digest TFM handle sha1_mb
[  288.537142][ T8996] bond1: entered promiscuous mode
[  288.821889][ T8999] loop2: detected capacity change from 0 to 7
[  288.833669][ T8999] Dev loop2: unable to read RDB block 7
[  288.843832][ T8999]  loop2: AHDI p3
[  288.850140][ T8999] loop2: partition table partially beyond EOD, truncated
[  289.869277][ T9005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.898349][ T9005] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.929081][ T9007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.940387][ T9007] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.962921][ T9005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.971844][ T9005] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.990770][ T8982] syz.0.813 (8982) used greatest stack depth: 18536 bytes left
[  290.213381][ T9018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  290.223998][ T9018] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  291.032959][ T9029] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  291.781423][ T9046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  291.793585][ T9046] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  291.822885][ T9041] loop2: detected capacity change from 0 to 7
[  291.834822][ T9041] Dev loop2: unable to read RDB block 7
[  291.907423][ T9041]  loop2: unable to read partition table
[  291.914502][ T9041] loop2: partition table beyond EOD, truncated
[  291.923074][ T9041] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  292.419036][ T5217] Dev loop2: unable to read RDB block 7
[  292.425681][ T5217]  loop2: unable to read partition table
[  292.433671][ T5217] loop2: partition table beyond EOD, truncated
[  292.495214][ T9051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  292.509473][ T9051] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  292.667300][ T1548] delete_channel: no stack
[  293.208098][ T9066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  293.219962][ T9066] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  293.237677][ T9066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  293.250800][ T9066] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  294.160055][ T9079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  294.170238][ T9079] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  294.183969][ T9079] kvm: pic: non byte write
[  294.928901][ T9100] syzkaller1: entered promiscuous mode
[  294.928926][ T9100] syzkaller1: entered allmulticast mode
[  296.140228][ T9130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  296.220713][ T9130] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  296.503975][ T9137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  296.521017][ T9137] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  296.554901][ T9137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  296.569556][ T9137] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  296.583784][ T9137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  296.596075][ T9137] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  296.614356][ T9137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  296.639868][ T9137] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  296.655647][ T9137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  296.667990][ T9137] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  296.676639][ T9137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  296.691966][ T9137] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  297.586528][ T9165] sctp: [Deprecated]: syz.2.866 (pid 9165) Use of int in maxseg socket option.
[  297.586528][ T9165] Use struct sctp_assoc_value instead
[  297.612898][ T9165] netlink: 'syz.2.866': attribute type 10 has an invalid length.
[  297.647304][ T9165] veth0_vlan: left promiscuous mode
[  297.667956][ T9165] veth0_vlan: entered promiscuous mode
[  297.675042][ T9165] team0: Device veth0_vlan failed to register rx_handler
[  297.850082][ T9171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  297.866117][ T9171] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  298.134108][ T9177] sctp: [Deprecated]: syz.3.869 (pid 9177) Use of int in maxseg socket option.
[  298.134108][ T9177] Use struct sctp_assoc_value instead
[  298.153489][ T9177] netlink: 'syz.3.869': attribute type 10 has an invalid length.
[  298.162479][ T9177] veth0_vlan: left promiscuous mode
[  298.170900][ T9177] veth0_vlan: entered promiscuous mode
[  298.178694][ T9177] team0: Device veth0_vlan failed to register rx_handler
[  299.241398][ T9190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  299.254261][ T9190] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  299.366325][ T9195] loop2: detected capacity change from 0 to 7
[  299.379056][ T9195] Dev loop2: unable to read RDB block 7
[  299.386147][ T9195]  loop2: unable to read partition table
[  299.394243][ T9195] loop2: partition table beyond EOD, truncated
[  299.403219][ T9195] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  299.468038][ T9197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.875'.
[  299.480143][ T9197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.875'.
[  299.495231][ T9197] bridge0: entered promiscuous mode
[  299.502609][ T9197] macsec1: entered allmulticast mode
[  299.508129][ T9197] bridge0: entered allmulticast mode
[  299.572321][   T30] audit: type=1326 audit(1752236455.231:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9199 comm="syz.4.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6a158e929 code=0x7ffc0000
[  299.597499][   T30] audit: type=1326 audit(1752236455.231:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9199 comm="syz.4.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc6a158e929 code=0x7ffc0000
[  299.620121][   T30] audit: type=1326 audit(1752236455.231:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9199 comm="syz.4.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6a158e929 code=0x7ffc0000
[  299.642673][   T30] audit: type=1326 audit(1752236455.231:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9199 comm="syz.4.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6a158e929 code=0x7ffc0000
[  299.668887][   T30] audit: type=1326 audit(1752236455.231:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9199 comm="syz.4.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc6a158e929 code=0x7ffc0000
[  299.693569][   T30] audit: type=1326 audit(1752236455.231:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9199 comm="syz.4.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6a158e929 code=0x7ffc0000
[  299.737863][   T30] audit: type=1326 audit(1752236455.231:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9199 comm="syz.4.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6a158e929 code=0x7ffc0000
[  299.762635][   T30] audit: type=1326 audit(1752236455.231:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9199 comm="syz.4.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc6a158e929 code=0x7ffc0000
[  299.787588][   T30] audit: type=1326 audit(1752236455.231:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9199 comm="syz.4.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6a158e929 code=0x7ffc0000
[  299.810345][   T30] audit: type=1326 audit(1752236455.231:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9199 comm="syz.4.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6a158e929 code=0x7ffc0000
[  300.006227][ T9204] netlink: 28 bytes leftover after parsing attributes in process `syz.0.877'.
[  300.017507][ T9204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.877'.
[  300.146033][ T9212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  300.163954][ T9212] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  300.264681][ T9213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  300.279452][ T9213] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  300.336654][ T9215] kvm: requested 7542 ns i8254 timer period limited to 200000 ns
[  300.728553][ T9234] tipc: Started in network mode
[  300.740593][ T9234] tipc: Node identity 4a6de00ed951, cluster identity 4711
[  300.765446][ T9234] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  300.780800][ T9241] syzkaller0: entered promiscuous mode
[  300.787375][ T9241] syzkaller0: entered allmulticast mode
[  300.812188][ T9234] tipc: Resetting bearer <eth:syzkaller0>
[  300.820572][ T9232] tipc: Resetting bearer <eth:syzkaller0>
[  300.875960][ T9232] tipc: Disabling bearer <eth:syzkaller0>
[  301.673560][ T9267] netlink: 'syz.3.892': attribute type 7 has an invalid length.
[  301.762560][ T9270] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  302.318496][ T9277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  302.370467][ T9277] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  302.798945][ T9281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  302.810555][ T9281] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  302.932657][ T9281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  302.962083][ T9281] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  303.113156][ T9293] loop6: detected capacity change from 0 to 2560
[  303.121425][ T9293] Buffer I/O error on dev loop6, logical block 0, async page read
[  303.140259][ T9293] Buffer I/O error on dev loop6, logical block 0, async page read
[  303.150363][ T9293] Buffer I/O error on dev loop6, logical block 0, async page read
[  303.160158][ T9293] Buffer I/O error on dev loop6, logical block 0, async page read
[  303.169370][ T9293] Buffer I/O error on dev loop6, logical block 0, async page read
[  303.190133][ T9293] Buffer I/O error on dev loop6, logical block 0, async page read
[  303.213253][ T9293] Buffer I/O error on dev loop6, logical block 0, async page read
[  303.227453][ T9293] Buffer I/O error on dev loop6, logical block 0, async page read
[  303.235961][ T9298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  303.247974][ T9293] ldm_validate_partition_table(): Disk read failed.
[  303.252782][ T9298] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  303.266545][ T9293] Buffer I/O error on dev loop6, logical block 0, async page read
[  303.287909][ T9293] Buffer I/O error on dev loop6, logical block 0, async page read
[  303.296003][ T9293] Dev loop6: unable to read RDB block 0
[  303.327694][ T9293]  loop6: unable to read partition table
[  303.333513][ T9293] loop_reread_partitions: partition scan of loop6 (3�����) failed (rc=-5)
[  303.694952][ T9306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  303.710432][ T9306] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  303.733846][   T10] IPVS: starting estimator thread 0...
[  303.827373][ T9309] IPVS: using max 33 ests per chain, 79200 per kthread
[  304.625024][ T9335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  304.682531][ T9335] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  304.710926][ T9335] lo: entered promiscuous mode
[  304.715935][ T9335] lo: left allmulticast mode
[  304.736288][ T9335] tunl0: entered promiscuous mode
[  304.742678][ T9335] tunl0: left allmulticast mode
[  304.771737][ T9335] gre0: entered promiscuous mode
[  304.831317][ T9335] gre0: left allmulticast mode
[  304.851028][ T9335] gretap0: entered promiscuous mode
[  304.876263][ T9335] gretap0: left allmulticast mode
[  304.884113][ T9335] erspan0: entered promiscuous mode
[  304.892446][ T9335] erspan0: left allmulticast mode
[  304.961026][ T9335] ip_vti0: entered promiscuous mode
[  304.968952][ T9335] ip_vti0: left allmulticast mode
[  304.980027][ T9335] ip6_vti0: entered promiscuous mode
[  305.025531][ T9335] ip6_vti0: left allmulticast mode
[  305.032152][ T9350] x_tables: duplicate underflow at hook 2
[  305.040562][ T9350] PKCS7: Unknown OID: [5] (bad)
[  305.045983][ T9350] PKCS7: Only support pkcs7_signedData type
[  305.055051][ T9335] sit0: entered promiscuous mode
[  305.064763][ T9335] sit0: left allmulticast mode
[  305.071064][ T9335] ip6tnl0: entered promiscuous mode
[  305.076970][ T9335] ip6tnl0: left allmulticast mode
[  305.090354][ T9335] ip6gre0: entered promiscuous mode
[  305.096179][ T9335] ip6gre0: left allmulticast mode
[  305.102894][ T9335] syz_tun: entered promiscuous mode
[  305.108825][ T9335] syz_tun: left allmulticast mode
[  305.115674][ T9335] ip6gretap0: entered promiscuous mode
[  305.121880][ T9335] ip6gretap0: left allmulticast mode
[  305.178246][ T9335] bridge0: entered promiscuous mode
[  305.183520][ T9335] bridge0: left allmulticast mode
[  305.287132][ T9335] vcan0: entered promiscuous mode
[  305.297934][ T9335] vcan0: left allmulticast mode
[  305.310985][ T9335] bond0: entered promiscuous mode
[  305.316062][ T9335] bond0: left allmulticast mode
[  305.322202][ T9335] team0: entered promiscuous mode
[  305.327480][ T9335] team0: left allmulticast mode
[  305.336302][ T9335] dummy0: entered promiscuous mode
[  305.345431][ T9335] dummy0: left allmulticast mode
[  305.366585][ T9335] nlmon0: entered promiscuous mode
[  305.379261][ T9335] nlmon0: left allmulticast mode
[  305.420997][ T9335] caif0: entered promiscuous mode
[  305.431417][ T9335] caif0: left allmulticast mode
[  305.443509][ T9335] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  305.956046][ T9364] FAULT_INJECTION: forcing a failure.
[  305.956046][ T9364] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  305.970942][ T9364] CPU: 1 UID: 0 PID: 9364 Comm: syz.2.920 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  305.970966][ T9364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  305.970976][ T9364] Call Trace:
[  305.970983][ T9364]  <TASK>
[  305.970991][ T9364]  dump_stack_lvl+0x189/0x250
[  305.971016][ T9364]  ? __pfx____ratelimit+0x10/0x10
[  305.971041][ T9364]  ? __pfx_dump_stack_lvl+0x10/0x10
[  305.971062][ T9364]  ? __pfx__printk+0x10/0x10
[  305.971095][ T9364]  should_fail_ex+0x414/0x560
[  305.971124][ T9364]  _copy_to_user+0x31/0xb0
[  305.971145][ T9364]  simple_read_from_buffer+0xe1/0x170
[  305.971171][ T9364]  proc_fail_nth_read+0x1df/0x250
[  305.971197][ T9364]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  305.971223][ T9364]  ? rw_verify_area+0x258/0x650
[  305.971242][ T9364]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  305.971265][ T9364]  vfs_read+0x200/0x980
[  305.971297][ T9364]  ? __pfx___mutex_lock+0x10/0x10
[  305.971314][ T9364]  ? __pfx_vfs_read+0x10/0x10
[  305.971335][ T9364]  ? __fget_files+0x2a/0x420
[  305.971361][ T9364]  ? __fget_files+0x3a0/0x420
[  305.971380][ T9364]  ? __fget_files+0x2a/0x420
[  305.971408][ T9364]  ksys_read+0x145/0x250
[  305.971426][ T9364]  ? __fget_files+0x2a/0x420
[  305.971448][ T9364]  ? __pfx_ksys_read+0x10/0x10
[  305.971473][ T9364]  ? do_syscall_64+0xbe/0x3b0
[  305.971494][ T9364]  do_syscall_64+0xfa/0x3b0
[  305.971510][ T9364]  ? lockdep_hardirqs_on+0x9c/0x150
[  305.971534][ T9364]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.971551][ T9364]  ? clear_bhb_loop+0x60/0xb0
[  305.971573][ T9364]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.971589][ T9364] RIP: 0033:0x7fa15e78d33c
[  305.971606][ T9364] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  305.971621][ T9364] RSP: 002b:00007fa15f6b6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  305.971641][ T9364] RAX: ffffffffffffffda RBX: 00007fa15e9b5fa0 RCX: 00007fa15e78d33c
[  305.971654][ T9364] RDX: 000000000000000f RSI: 00007fa15f6b60a0 RDI: 0000000000000004
[  305.971666][ T9364] RBP: 00007fa15f6b6090 R08: 0000000000000000 R09: 0000000000000000
[  305.971676][ T9364] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  305.971688][ T9364] R13: 0000000000000000 R14: 00007fa15e9b5fa0 R15: 00007fa15eadfa28
[  305.971718][ T9364]  </TASK>
[  306.850262][ T9384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  306.926981][ T9384] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  307.290772][ T9396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  307.299804][ T9396] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  307.892644][ T9400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  307.920803][ T9400] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  308.049211][ T9401] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  308.062065][ T9401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  308.117845][ T9401] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  309.216918][ T9426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  309.228212][ T9426] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  309.792094][ T5858] cgroup: fork rejected by pids controller in /syz2
[  309.823525][   T30] kauditd_printk_skb: 10 callbacks suppressed
[  309.823543][   T30] audit: type=1804 audit(1752236465.471:173): pid=9440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.938" name="/newroot/191/file1" dev="fuse" ino=1 res=1 errno=0
[  309.960118][   T10] usb 3-1: USB disconnect, device number 62
[  311.067759][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  311.078050][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  311.089713][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  311.103834][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  311.113044][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  311.310685][ T9458] chnl_net:caif_netlink_parms(): no params data found
[  311.725662][ T9474] netlink: 'syz.3.949': attribute type 21 has an invalid length.
[  311.769839][ T9475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.948'.
[  311.806250][ T9474] netlink: 132 bytes leftover after parsing attributes in process `syz.3.949'.
[  311.847221][ T9458] bridge0: port 1(bridge_slave_0) entered blocking state
[  311.874346][ T9458] bridge0: port 1(bridge_slave_0) entered disabled state
[  311.912251][ T9458] bridge_slave_0: entered allmulticast mode
[  312.059424][ T9458] bridge_slave_0: entered promiscuous mode
[  312.061169][ T9482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  312.096085][ T9482] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  312.179810][ T9458] bridge0: port 2(bridge_slave_1) entered blocking state
[  312.197549][ T9458] bridge0: port 2(bridge_slave_1) entered disabled state
[  312.207637][ T9458] bridge_slave_1: entered allmulticast mode
[  312.224124][ T9458] bridge_slave_1: entered promiscuous mode
[  312.340512][ T9458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  312.362628][ T9486] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  312.392180][ T9458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  312.404406][ T9486] syzkaller0: entered promiscuous mode
[  312.411368][ T9486] syzkaller0: entered allmulticast mode
[  312.441772][ T9486] tipc: Resetting bearer <eth:syzkaller0>
[  312.471431][ T9458] team0: Port device team_slave_0 added
[  312.488725][ T9458] team0: Port device team_slave_1 added
[  312.652797][ T9485] tipc: Resetting bearer <eth:syzkaller0>
[  312.696759][ T9485] tipc: Disabling bearer <eth:syzkaller0>
[  312.836638][ T9458] batman_adv: batadv0: Adding interface: batadv_slave_0
[  312.852050][ T9458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  312.904688][ T9458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  312.921093][ T9458] batman_adv: batadv0: Adding interface: batadv_slave_1
[  312.928499][ T9458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  313.069487][ T9458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  313.160121][ T5844] Bluetooth: hci3: command tx timeout
[  313.442173][ T9510] netlink: 80 bytes leftover after parsing attributes in process `syz.4.958'.
[  313.451571][ T9510] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  313.458915][ T9510] IPv6: NLM_F_CREATE should be set when creating new route
[  313.515645][ T9458] hsr_slave_0: entered promiscuous mode
[  313.539687][ T9458] hsr_slave_1: entered promiscuous mode
[  313.566627][ T9458] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  313.585485][ T9458] Cannot create hsr debugfs directory
[  313.597588][ T9503] veth1_macvtap: left promiscuous mode
[  313.603575][ T9503] macsec0: entered promiscuous mode
[  313.617507][ T9508] veth1_macvtap: entered promiscuous mode
[  313.628011][ T9508] macsec0: left promiscuous mode
[  314.206094][ T9521] No such timeout policy "syz0"
[  314.212164][ T9517] hsr0: entered promiscuous mode
[  314.218267][ T9517] macvtap0: entered promiscuous mode
[  314.248304][ T9517] macvtap0: entered allmulticast mode
[  314.254437][ T9517] hsr0: entered allmulticast mode
[  314.261451][ T9517] hsr_slave_0: entered allmulticast mode
[  314.269711][ T9517] hsr_slave_1: entered allmulticast mode
[  314.290554][ T9517] hsr0: left allmulticast mode
[  314.295365][ T9517] hsr_slave_0: left allmulticast mode
[  314.301036][ T9517] hsr_slave_1: left allmulticast mode
[  314.453695][ T9525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  314.471905][ T9525] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  314.699823][ T9532] netlink: 56 bytes leftover after parsing attributes in process `syz.0.965'.
[  315.237376][ T5844] Bluetooth: hci3: command tx timeout
[  315.422601][ T9458] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  315.440814][ T9458] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  315.478744][ T9458] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  315.537543][ T9458] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  315.569176][ T9556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  315.592584][ T9556] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  315.706251][ T9556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  315.739053][ T9556] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  315.942251][ T9458] 8021q: adding VLAN 0 to HW filter on device bond0
[  315.962445][ T9571] netlink: 'syz.1.977': attribute type 1 has an invalid length.
[  316.066539][ T9575] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  316.093151][ T9575] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  316.149973][ T9571] gretap2: entered promiscuous mode
[  316.169655][ T9571] bond2: (slave gretap2): making interface the new active one
[  316.180168][ T9571] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  316.207295][ T9577] macvlan3: entered promiscuous mode
[  316.213717][ T9577] macvlan3: entered allmulticast mode
[  316.251283][ T9577] bond2: entered promiscuous mode
[  316.269815][ T9577] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  316.306827][ T9577] bond2: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap2
[  316.346342][ T9577] bond2: left promiscuous mode
[  316.424197][ T9458] 8021q: adding VLAN 0 to HW filter on device team0
[  316.481303][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  316.488530][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  316.576895][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  316.584117][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  316.824081][ T9591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  316.864542][ T9458] 8021q: adding VLAN 0 to HW filter on device batadv0
[  316.867908][ T9591] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  317.029416][ T9458] veth0_vlan: entered promiscuous mode
[  317.081645][ T9458] veth1_vlan: entered promiscuous mode
[  317.169962][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  317.176310][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  317.202901][ T9458] veth0_macvtap: entered promiscuous mode
[  317.215952][ T9458] veth1_macvtap: entered promiscuous mode
[  317.301622][ T9604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.986'.
[  317.311344][ T9604] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  317.319357][ T9604] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  317.328453][ T5844] Bluetooth: hci3: command tx timeout
[  317.386282][ T9458] batman_adv: batadv0: Interface activated: batadv_slave_0
[  317.400618][ T9458] batman_adv: batadv0: Interface activated: batadv_slave_1
[  317.411521][ T9458] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  317.421412][ T9458] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  317.430431][ T9458] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  317.439550][ T9458] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  317.586747][ T9615] netlink: 51 bytes leftover after parsing attributes in process `syz.3.991'.
[  317.613553][ T9611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  317.671073][ T9611] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  317.796675][ T9620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  317.864416][ T9620] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  317.885425][ T9622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  317.919458][ T9622] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  317.998283][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  318.006373][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  318.202005][ T9627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  318.211397][ T9627] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  318.288068][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  318.320088][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  318.824563][ T9637] unknown channel width for channel at 909000KHz?
[  318.939081][ T9637] unknown channel width for channel at 909000KHz?
[  318.967737][ T9637] unknown channel width for channel at 909000KHz?
[  319.113106][ T9631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  319.177812][ T9631] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  319.402660][ T5844] Bluetooth: hci3: command tx timeout
[  319.527175][   T10] usb 3-1: new full-speed USB device number 63 using dummy_hcd
[  319.700078][   T10] usb 3-1: config 0 has an invalid interface number: 189 but max is 0
[  319.712023][   T10] usb 3-1: config 0 has no interface number 0
[  319.736419][   T10] usb 3-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  319.788007][ T9648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  319.794520][   T10] usb 3-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  319.823409][   T10] usb 3-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64
[  319.832634][ T9648] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  319.856719][   T10] usb 3-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  319.880955][   T10] usb 3-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  319.898177][   T10] usb 3-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02
[  319.912525][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  319.922724][   T10] usb 3-1: Product: syz
[  319.929358][   T10] usb 3-1: Manufacturer: syz
[  319.934404][   T10] usb 3-1: SerialNumber: syz
[  319.945715][   T10] usb 3-1: config 0 descriptor??
[  319.951998][ T9640] raw-gadget.11 gadget.2: fail, usb_ep_enable returned -22
[  319.972021][   T10] ums-alauda 3-1:0.189: USB Mass Storage device detected
[  319.982836][ T9653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  319.996475][ T9653] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  320.033508][   T10] scsi host1: usb-storage 3-1:0.189
[  320.274299][   T59] tipc: Subscription rejected, illegal request
[  320.308927][ T5934] usb 3-1: USB disconnect, device number 63
[  321.242907][ T9665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  321.253014][ T9665] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  321.265406][   T30] audit: type=1326 audit(1752236476.921:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9664 comm="syz.3.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30f678e929 code=0x7ffc0000
[  321.297370][   T30] audit: type=1326 audit(1752236476.921:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9664 comm="syz.3.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30f678e929 code=0x7ffc0000
[  321.327205][ T5934] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  321.477996][ T5934] usb 3-1: too many configurations: 22, using maximum allowed: 8
[  321.496916][ T5934] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  321.506399][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.521510][ T5934] usb 3-1: Product: syz
[  321.526254][ T5934] usb 3-1: Manufacturer: syz
[  321.532433][ T5934] usb 3-1: SerialNumber: syz
[  321.544022][ T5934] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  321.561881][   T54] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  321.584331][ T9674] sctp: [Deprecated]: syz.3.1009 (pid 9674) Use of int in maxseg socket option.
[  321.584331][ T9674] Use struct sctp_assoc_value instead
[  321.621555][ T9674] netlink: 'syz.3.1009': attribute type 10 has an invalid length.
[  321.632224][ T9674] veth0_vlan: left promiscuous mode
[  321.643091][ T9674] veth0_vlan: entered promiscuous mode
[  321.652383][ T9674] team0: Device veth0_vlan failed to register rx_handler
[  321.986881][ T9661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  322.000201][ T9661] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  322.012215][ T9661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  322.022816][ T9661] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  322.033648][   T10] usb 3-1: USB disconnect, device number 64
[  322.839158][   T54] usb 3-1: Service connection timeout for: 256
[  322.895236][   T54] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services
[  322.939278][   T54] ath9k_htc: Failed to initialize the device
[  322.973742][   T10] usb 3-1: ath9k_htc: USB layer deinitialized
[  323.034214][ T9685] netlink: 'syz.4.1012': attribute type 4 has an invalid length.
[  323.220140][ T9691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  323.269353][ T9691] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  323.542441][ T9698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  323.605765][ T9698] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  323.968814][ T9705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  324.014198][ T9705] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  324.316375][ T9715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  324.352000][ T9715] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  324.394091][ T9719] binder: BINDER_SET_CONTEXT_MGR already set
[  324.433335][ T9719] binder: 9708:9719 ioctl 4018620d 200000000040 returned -16
[  324.472137][ T9722] binder: 9708:9722 ioctl c0306201 2000000003c0 returned -14
[  324.938011][ T9739] loop2: detected capacity change from 0 to 7
[  324.968686][ T9739] Dev loop2: unable to read RDB block 7
[  324.976259][ T9739]  loop2: unable to read partition table
[  324.984901][ T9739] loop2: partition table beyond EOD, truncated
[  325.017940][ T9739] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  325.357363][   T54] usb 3-1: new full-speed USB device number 65 using dummy_hcd
[  325.519308][   T54] usb 3-1: not running at top speed; connect to a high speed hub
[  325.535643][   T54] usb 3-1: config 42 contains an unexpected descriptor of type 0x1, skipping
[  325.552004][   T54] usb 3-1: config 42 interface 0 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  325.584606][   T54] usb 3-1: config 42 interface 0 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  325.603637][   T54] usb 3-1: config 42 interface 0 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  325.623172][   T54] usb 3-1: config 42 interface 0 has no altsetting 0
[  325.633120][   T54] usb 3-1: New USB device found, idVendor=22b8, idProduct=7000, bcdDevice=2f.a0
[  325.649533][   T54] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.664462][   T54] usb 3-1: Product: 䀊
[  325.669483][   T54] usb 3-1: Manufacturer: 뼻ꇊ́퉀菕鑋鹥捀ꒅꬲᑒ႐놭혨患ヤ儅ꨯ홂閰❫럢ǵ非ﶨ晦䑹ᶅ旟Ꝃ뱑ꖓ⑮鏙ᶻ铛伪物沨Ᵽ繴몄燀๎㵨Ⲷ䆵⬉ᐁᐍ炊ゅ흸ꕑ쒢嬅ᩜ䀨㤫懚龣灧챷䋝娪댠ጴ돻튲Ⴁ徼秪䪎檀ꈎ궄食ꩄ砍ҳ믽湴⢨潉ꊬ뒅ࠑ㕚꠯꺁ᕑ촎긅⚅
[  325.703276][   T54] usb 3-1: SerialNumber: А
[  325.723673][ T9753] sctp: [Deprecated]: syz.3.1036 (pid 9753) Use of int in maxseg socket option.
[  325.723673][ T9753] Use struct sctp_assoc_value instead
[  325.743279][ T9753] netlink: 'syz.3.1036': attribute type 10 has an invalid length.
[  325.752748][ T9753] veth0_vlan: left promiscuous mode
[  325.772853][ T9753] veth0_vlan: entered promiscuous mode
[  325.783665][ T9753] team0: Device veth0_vlan failed to register rx_handler
[  325.982209][   T54] usb 3-1: USB disconnect, device number 65
[  326.797354][ T5909] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  326.958537][ T5909] usb 3-1: Using ep0 maxpacket: 16
[  326.971917][ T5909] usb 3-1: config 0 has an invalid descriptor of length 101, skipping remainder of the config
[  326.983657][ T5909] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  327.005315][ T5909] usb 3-1: New USB device found, idVendor=e995, idProduct=1729, bcdDevice=f7.f4
[  327.019328][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.031058][ T5909] usb 3-1: Product: syz
[  327.035374][ T5909] usb 3-1: Manufacturer: syz
[  327.042554][ T5909] usb 3-1: SerialNumber: syz
[  327.054894][ T5909] usb 3-1: config 0 descriptor??
[  327.145466][ T9775] syzkaller0: entered allmulticast mode
[  328.103331][ T9785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  328.112232][ T9785] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  328.333016][   T30] audit: type=1326 audit(1752236483.991:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9786 comm="syz.4.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6a158e929 code=0x7ffc0000
[  328.362783][ T9788] syzkaller1: entered promiscuous mode
[  328.368420][ T9788] syzkaller1: entered allmulticast mode
[  328.378008][   T30] audit: type=1326 audit(1752236483.991:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9786 comm="syz.4.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6a158e929 code=0x7ffc0000
[  328.400615][   T30] audit: type=1326 audit(1752236484.011:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9786 comm="syz.4.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7fc6a158e929 code=0x7ffc0000
[  328.426933][ T9788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  328.436028][ T9788] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  328.449716][ T9788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  328.468658][ T9788] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  328.480064][   T30] audit: type=1326 audit(1752236484.011:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9786 comm="syz.4.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6a158e929 code=0x7ffc0000
[  328.496950][ T9787] binder: 9786:9787 ioctl c018620c 200000000640 returned -22
[  328.557425][   T30] audit: type=1326 audit(1752236484.011:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9786 comm="syz.4.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc6a158e929 code=0x7ffc0000
[  328.593902][   T30] audit: type=1326 audit(1752236484.061:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9786 comm="syz.4.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6a158e929 code=0x7ffc0000
[  328.660001][   T30] audit: type=1326 audit(1752236484.061:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9786 comm="syz.4.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc6a158e929 code=0x7ffc0000
[  328.685742][   T30] audit: type=1326 audit(1752236484.061:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9786 comm="syz.4.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6a158e929 code=0x7ffc0000
[  328.718122][   T30] audit: type=1326 audit(1752236484.061:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9786 comm="syz.4.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6a158e929 code=0x7ffc0000
[  328.773967][   T30] audit: type=1326 audit(1752236484.061:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9786 comm="syz.4.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc6a158e929 code=0x7ffc0000
[  328.796237][    C0] vkms_vblank_simulate: vblank timer overrun
[  329.666855][   T54] usb 3-1: USB disconnect, device number 66
[  330.038904][ T9811] sctp: [Deprecated]: syz.2.1053 (pid 9811) Use of struct sctp_assoc_value in delayed_ack socket option.
[  330.038904][ T9811] Use struct sctp_sack_info instead
[  330.237995][ T9816] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  330.244552][ T9816] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  330.254226][ T9816] vhci_hcd vhci_hcd.0: Device attached
[  330.451522][   T10] vhci_hcd: vhci_device speed not set
[  330.527221][   T10] usb 33-1: new full-speed USB device number 3 using vhci_hcd
[  330.715316][ T9832] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1057'.
[  330.820605][ T9826] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1054'.
[  330.833708][ T9834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1057'.
[  330.861991][ T9834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1057'.
[  330.912857][ T9834] netlink: 'syz.3.1057': attribute type 15 has an invalid length.
[  331.113776][ T9817] vhci_hcd: connection reset by peer
[  331.150983][   T13] vhci_hcd: stop threads
[  331.172855][   T13] vhci_hcd: release socket
[  331.249971][   T13] vhci_hcd: disconnect device
[  331.434191][ T9841] sctp: [Deprecated]: syz.2.1058 (pid 9841) Use of int in maxseg socket option.
[  331.434191][ T9841] Use struct sctp_assoc_value instead
[  331.491487][ T9841] netlink: 'syz.2.1058': attribute type 10 has an invalid length.
[  331.513056][ T9841] veth0_vlan: left promiscuous mode
[  331.525664][ T9841] veth0_vlan: entered promiscuous mode
[  331.535426][ T9841] team0: Device veth0_vlan failed to register rx_handler
[  332.848711][ T9875] 8021q: VLANs not supported on xfrm0
[  333.352494][ T9884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1067'.
[  333.368187][ T9884] netlink: 'syz.3.1067': attribute type 10 has an invalid length.
[  333.641242][ T9890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  333.651403][ T9890] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  335.827349][   T10] vhci_hcd: vhci_device speed not set
[  336.640305][ T9936] sctp: [Deprecated]: syz.2.1081 (pid 9936) Use of int in maxseg socket option.
[  336.640305][ T9936] Use struct sctp_assoc_value instead
[  336.673445][ T9936] netlink: 'syz.2.1081': attribute type 10 has an invalid length.
[  336.691330][ T9933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1079'.
[  336.725608][ T9936] veth0_vlan: left promiscuous mode
[  336.734012][ T9936] veth0_vlan: entered promiscuous mode
[  336.744481][ T9936] team0: Device veth0_vlan failed to register rx_handler
[  338.303485][ T9957] loop2: detected capacity change from 0 to 7
[  338.311252][ T9957] Dev loop2: unable to read RDB block 7
[  338.316963][ T9957]  loop2: unable to read partition table
[  338.323671][ T9957] loop2: partition table beyond EOD, truncated
[  338.330432][ T9957] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  338.797340][ T9964] usb usb8: usbfs: process 9964 (syz.0.1085) did not claim interface 0 before use
[  339.588121][ T9976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1091'.
[  339.649200][ T9976] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  339.666292][ T9978] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1089'.
[  339.717676][ T9978] netlink: 'syz.3.1089': attribute type 10 has an invalid length.
[  340.153698][ T9991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  340.237762][ T9991] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  341.650683][T10010] loop2: detected capacity change from 0 to 7
[  341.662639][ T5893] Dev loop2: unable to read RDB block 7
[  341.669600][ T5893]  loop2: unable to read partition table
[  341.679959][ T5893] loop2: partition table beyond EOD, truncated
[  341.705146][T10010] Dev loop2: unable to read RDB block 7
[  341.711097][T10010]  loop2: unable to read partition table
[  341.717234][T10010] loop2: partition table beyond EOD, truncated
[  341.723633][T10010] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  342.219479][T10015] tipc: Enabled bearer <udp:syz0>, priority 10
[  342.567180][ T5981] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  342.580971][T10022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  342.610136][T10024] sctp: [Deprecated]: syz.1.1101 (pid 10024) Use of int in maxseg socket option.
[  342.610136][T10024] Use struct sctp_assoc_value instead
[  342.627819][T10022] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  342.677509][T10024] netlink: 'syz.1.1101': attribute type 10 has an invalid length.
[  342.686441][T10024] veth0_vlan: left promiscuous mode
[  342.699411][T10024] veth0_vlan: entered promiscuous mode
[  342.714820][T10024] team0: Device veth0_vlan failed to register rx_handler
[  342.788562][ T5964] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-an2235-01.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  342.863946][ T5964] dvb_usb_dibusb_mb 2-1:0.69: probe with driver dvb_usb_dibusb_mb failed with error -22
[  342.907166][ T5981] usb 3-1: Using ep0 maxpacket: 8
[  343.047618][ T5981] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  343.116768][ T5981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  343.135288][ T5964] usb 2-1: USB disconnect, device number 45
[  343.207482][ T5981] usb 3-1: Product: syz
[  343.213100][ T5981] usb 3-1: Manufacturer: syz
[  343.220862][ T5981] usb 3-1: SerialNumber: syz
[  343.236129][ T5981] usb 3-1: config 0 descriptor??
[  343.272866][ T5981] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  343.337285][ T5909] tipc: Node number set to 1508879788
[  343.523933][T10030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1104'.
[  343.591807][T10034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  343.601854][T10034] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  344.577871][T10043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  344.607815][T10043] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  344.646354][T10043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  344.682787][T10043] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  344.700802][T10043] libceph: resolve '.
[  344.700802][T10043] #)|.��f��ǝ�a���2s�o�w���?�'�%ЏKAq�f��C���z�e�Sb3L)Hy�o����������Ǥ�Y�M�����h�E$
[  344.700802][T10043] ' (ret=-3): failed
[  345.363366][T10055] loop2: detected capacity change from 0 to 7
[  345.396564][T10055] Dev loop2: unable to read RDB block 7
[  345.441251][T10052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  345.450108][T10055]  loop2: unable to read partition table
[  345.456082][T10052] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  345.456101][T10055] loop2: partition table beyond EOD, truncated
[  345.456133][T10055] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  345.827217][ T5909] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  345.987362][ T5909] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  345.996478][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.011708][ T5909] usb 2-1: config 0 descriptor??
[  346.020943][ T5909] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  346.092632][T10063] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1112'.
[  346.102937][T10063] netlink: 'syz.0.1112': attribute type 10 has an invalid length.
[  346.111794][T10063] bond0: left promiscuous mode
[  346.120454][T10063] 8021q: adding VLAN 0 to HW filter on device bond0
[  346.131308][T10063] bond0: entered promiscuous mode
[  346.139611][T10063] team0: Port device bond0 added
[  346.208168][T10065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  346.225107][T10065] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  346.244033][T10065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1113'.
[  346.836017][T10078] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  346.849937][ T5981] gspca_sonixj: i2c_w8 err -71
[  346.877230][ T5981] sonixj 3-1:0.0: probe with driver sonixj failed with error -71
[  347.029130][ T5981] usb 3-1: USB disconnect, device number 67
[  347.210045][T10085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  347.218847][T10085] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  347.242620][T10085] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus
[  347.255451][T10085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  347.265450][T10085] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  347.798637][T10095] sctp: [Deprecated]: syz.2.1121 (pid 10095) Use of int in maxseg socket option.
[  347.798637][T10095] Use struct sctp_assoc_value instead
[  347.999824][ T5909] usb 2-1: USB disconnect, device number 46
[  348.036206][T10095] netlink: 'syz.2.1121': attribute type 10 has an invalid length.
[  348.082214][T10095] veth0_vlan: left promiscuous mode
[  348.104103][T10095] veth0_vlan: entered promiscuous mode
[  348.170976][T10095] team0: Device veth0_vlan failed to register rx_handler
[  348.924509][T10104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  348.936337][T10104] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  349.112275][   T30] kauditd_printk_skb: 42 callbacks suppressed
[  349.112293][   T30] audit: type=1326 audit(1752236504.771:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.0.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb262b8e929 code=0x7ffc0000
[  349.147205][   T30] audit: type=1326 audit(1752236504.771:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.0.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb262b8e929 code=0x7ffc0000
[  349.170311][    C0] vkms_vblank_simulate: vblank timer overrun
[  349.179249][   T30] audit: type=1326 audit(1752236504.781:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.0.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7fb262b8e929 code=0x7ffc0000
[  349.201590][    C0] vkms_vblank_simulate: vblank timer overrun
[  349.214346][   T30] audit: type=1326 audit(1752236504.781:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.0.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb262b8e929 code=0x7ffc0000
[  349.236681][    C0] vkms_vblank_simulate: vblank timer overrun
[  349.244152][   T30] audit: type=1326 audit(1752236504.801:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.0.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb262b8e929 code=0x7ffc0000
[  349.266502][    C0] vkms_vblank_simulate: vblank timer overrun
[  349.272913][   T30] audit: type=1326 audit(1752236504.801:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.0.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb262b8e929 code=0x7ffc0000
[  349.295597][   T30] audit: type=1326 audit(1752236504.801:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.0.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb262b8e929 code=0x7ffc0000
[  349.318031][    C0] vkms_vblank_simulate: vblank timer overrun
[  349.325417][   T30] audit: type=1326 audit(1752236504.801:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.0.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb262b8e929 code=0x7ffc0000
[  349.351670][   T30] audit: type=1326 audit(1752236504.801:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.0.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb262b8e929 code=0x7ffc0000
[  349.374360][   T30] audit: type=1326 audit(1752236504.801:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.0.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb262b8e929 code=0x7ffc0000
[  350.099979][T10132] sit1: entered allmulticast mode
[  350.232302][T10139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  350.274383][T10139] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  350.296030][T10138] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  350.304886][ T5985] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  350.316133][T10130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1130'.
[  350.324666][T10138] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  350.341303][T10130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1130'.
[  350.368527][T10136] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  350.467314][ T5985] usb 2-1: Using ep0 maxpacket: 8
[  350.483074][ T5985] usb 2-1: config 0 has no interfaces?
[  350.498407][ T5985] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  350.538100][ T5985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.554863][ T5985] usb 2-1: Product: syz
[  350.559767][ T5985] usb 2-1: Manufacturer: syz
[  350.564448][ T5985] usb 2-1: SerialNumber: syz
[  350.575627][ T5985] usb 2-1: config 0 descriptor??
[  350.832902][ T5985] usb 2-1: USB disconnect, device number 47
[  351.164716][T10150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  351.217754][T10150] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  352.142689][T10168] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1140'.
[  352.397016][T10174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  352.414134][T10174] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  352.597218][ T5985] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  352.707221][   T54] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  352.758578][ T5985] usb 2-1: Using ep0 maxpacket: 32
[  352.801028][ T5985] usb 2-1: config 0 has an invalid interface number: 247 but max is 0
[  352.809477][ T5985] usb 2-1: config 0 has no interface number 0
[  352.817631][ T5985] usb 2-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b
[  352.858968][   T54] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 20
[  352.967565][ T5985] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0
[  352.977530][ T5985] usb 2-1: Product: syz
[  352.981918][ T5985] usb 2-1: Manufacturer: syz
[  352.987634][   T54] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  353.009431][ T5985] usb 2-1: config 0 descriptor??
[  353.018014][   T54] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  353.053653][   T54] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  353.129381][   T54] usb 3-1: Product: syz
[  353.146824][   T54] usb 3-1: Manufacturer: syz
[  353.196421][   T54] usb 3-1: SerialNumber: syz
[  353.258404][T10177] raw-gadget.8 gadget.2: fail, usb_ep_enable returned -22
[  353.285647][ T5985] usb 2-1: USB disconnect, device number 48
[  353.470183][   T54] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 68 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  353.673709][    C1] usblp0: nonzero write bulk status received: -71
[  353.690062][ T5909] usb 3-1: USB disconnect, device number 68
[  353.709570][T10200] sctp: [Deprecated]: syz.4.1145 (pid 10200) Use of int in maxseg socket option.
[  353.709570][T10200] Use struct sctp_assoc_value instead
[  353.730537][ T5909] usblp0: removed
[  353.751352][T10200] netlink: 'syz.4.1145': attribute type 10 has an invalid length.
[  353.759645][T10200] veth0_vlan: left promiscuous mode
[  353.765527][T10200] veth0_vlan: entered promiscuous mode
[  353.773524][T10200] team0: Device veth0_vlan failed to register rx_handler
[  353.785331][T10202] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  354.400158][T10215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  354.455663][T10215] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  354.515592][T10215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  354.584549][T10215] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  354.790387][T10222] vti0: entered promiscuous mode
[  355.102122][T10230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  355.241538][T10230] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  355.941087][T10246] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1158'.
[  356.270650][T10250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  356.282830][T10250] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  356.658526][T10257] netlink: 'syz.4.1161': attribute type 29 has an invalid length.
[  356.756704][T10258] netlink: 'syz.4.1161': attribute type 29 has an invalid length.
[  357.303595][T10264] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9)
[  357.310141][T10264] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  357.321721][T10264] vhci_hcd vhci_hcd.0: Device attached
[  357.424480][T10274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  357.456269][T10274] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  357.497347][ T5981] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[  357.557261][   T54] usb 33-1: new low-speed USB device number 4 using vhci_hcd
[  357.697180][ T5981] usb 3-1: Using ep0 maxpacket: 8
[  357.704621][ T5981] usb 3-1: unable to get BOS descriptor or descriptor too short
[  357.714288][ T5981] usb 3-1: config 4 interface 0 has no altsetting 0
[  357.724281][ T5981] usb 3-1: string descriptor 0 read error: -22
[  357.733440][ T5981] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  357.743472][ T5981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.763125][ T5981] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  357.785586][ T5981] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  357.800553][ T5981] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  357.809156][ T5981] usb 3-1: media controller created
[  357.835562][ T5981] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  357.988187][T10266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  357.996890][T10266] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  358.059105][T10282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1167'.
[  358.084986][T10282] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  358.094003][T10282] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  358.102979][T10282] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  358.111745][T10282] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  358.130320][T10269] vhci_hcd: connection reset by peer
[  358.152032][   T13] vhci_hcd: stop threads
[  358.161628][   T13] vhci_hcd: release socket
[  358.166558][T10288] xt_hashlimit: max too large, truncated to 1048576
[  358.179726][   T13] vhci_hcd: disconnect device
[  358.193068][T10288] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not ''
[  358.204466][T10282] vxlan0: entered promiscuous mode
[  358.937303][ T5981] zl10353_read_register: readreg error (reg=127, ret==0)
[  359.011562][T10297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1170'.
[  359.710051][T10308] trusted_key: encrypted_key: insufficient parameters specified
[  359.827160][ T5981] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  360.038060][ T5981] usb 2-1: Using ep0 maxpacket: 16
[  360.069400][ T5981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  360.099544][ T5981] usb 2-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00
[  360.274596][ T5981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.312918][ T5981] usb 2-1: config 0 descriptor??
[  360.630081][T10314] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1176'.
[  360.770891][ T5981] aquacomputer_d5next 0003:0C70:F003.0021: hidraw0: USB HID v0.00 Device [HID 0c70:f003] on usb-dummy_hcd.1-1/input0
[  361.238983][T10306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  361.259180][T10322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  361.259541][T10306] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  361.296510][T10322] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  361.560911][T10327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  361.603820][T10327] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  361.765869][T10327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  361.806253][T10327] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  361.900731][ T5981] usb 2-1: USB disconnect, device number 49
[  362.400496][T10345] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1184'.
[  362.410188][T10345] netlink: 'syz.3.1184': attribute type 10 has an invalid length.
[  362.667200][   T54] vhci_hcd: vhci_device speed not set
[  362.851131][T10350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1186'.
[  362.995726][T10350] PKCS7: Unknown OID: [5] (bad)
[  363.038654][T10350] PKCS7: Only support pkcs7_signedData type
[  363.190619][T10354] FAULT_INJECTION: forcing a failure.
[  363.190619][T10354] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  363.297299][T10354] CPU: 1 UID: 0 PID: 10354 Comm: syz.4.1187 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  363.297326][T10354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  363.297337][T10354] Call Trace:
[  363.297345][T10354]  <TASK>
[  363.297353][T10354]  dump_stack_lvl+0x189/0x250
[  363.297380][T10354]  ? __pfx____ratelimit+0x10/0x10
[  363.297406][T10354]  ? __pfx_dump_stack_lvl+0x10/0x10
[  363.297426][T10354]  ? __pfx__printk+0x10/0x10
[  363.297449][T10354]  ? __might_fault+0xb0/0x130
[  363.297480][T10354]  should_fail_ex+0x414/0x560
[  363.297509][T10354]  _copy_from_user+0x2d/0xb0
[  363.297530][T10354]  do_handle_open+0x39c/0x850
[  363.297558][T10354]  ? __pfx_do_handle_open+0x10/0x10
[  363.297579][T10354]  ? ksys_write+0x22a/0x250
[  363.297602][T10354]  ? __pfx_ksys_write+0x10/0x10
[  363.297619][T10354]  ? rcu_is_watching+0x15/0xb0
[  363.297644][T10354]  ? do_syscall_64+0xbe/0x3b0
[  363.297666][T10354]  do_syscall_64+0xfa/0x3b0
[  363.297681][T10354]  ? lockdep_hardirqs_on+0x9c/0x150
[  363.297705][T10354]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  363.297722][T10354]  ? clear_bhb_loop+0x60/0xb0
[  363.297743][T10354]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  363.297759][T10354] RIP: 0033:0x7fc6a158e929
[  363.297775][T10354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  363.297791][T10354] RSP: 002b:00007fc6a2354038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130
[  363.297817][T10354] RAX: ffffffffffffffda RBX: 00007fc6a17b5fa0 RCX: 00007fc6a158e929
[  363.297831][T10354] RDX: 0000000000010040 RSI: 0000200000000040 RDI: 0000000000000003
[  363.297842][T10354] RBP: 00007fc6a2354090 R08: 0000000000000000 R09: 0000000000000000
[  363.297854][T10354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  363.297864][T10354] R13: 0000000000000000 R14: 00007fc6a17b5fa0 R15: 00007fc6a18dfa28
[  363.297893][T10354]  </TASK>
[  363.693792][T10352] usb usb8: usbfs: process 10352 (syz.2.1186) did not claim interface 0 before use
[  363.812813][T10352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1186'.
[  363.961444][T10364] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1188'.
[  364.196839][T10368] FAULT_INJECTION: forcing a failure.
[  364.196839][T10368] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  364.212432][T10368] CPU: 0 UID: 0 PID: 10368 Comm: syz.4.1192 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  364.212458][T10368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  364.212473][T10368] Call Trace:
[  364.212480][T10368]  <TASK>
[  364.212489][T10368]  dump_stack_lvl+0x189/0x250
[  364.212513][T10368]  ? __pfx____ratelimit+0x10/0x10
[  364.212539][T10368]  ? __pfx_dump_stack_lvl+0x10/0x10
[  364.212559][T10368]  ? __pfx__printk+0x10/0x10
[  364.212595][T10368]  should_fail_ex+0x414/0x560
[  364.212625][T10368]  _copy_to_user+0x31/0xb0
[  364.212648][T10368]  simple_read_from_buffer+0xe1/0x170
[  364.212675][T10368]  proc_fail_nth_read+0x1df/0x250
[  364.212701][T10368]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  364.212727][T10368]  ? rw_verify_area+0x258/0x650
[  364.212760][T10368]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  364.212785][T10368]  vfs_read+0x200/0x980
[  364.212810][T10368]  ? __pfx___mutex_lock+0x10/0x10
[  364.212828][T10368]  ? __pfx_vfs_read+0x10/0x10
[  364.212849][T10368]  ? __fget_files+0x2a/0x420
[  364.212875][T10368]  ? __fget_files+0x3a0/0x420
[  364.212895][T10368]  ? __fget_files+0x2a/0x420
[  364.212926][T10368]  ksys_read+0x145/0x250
[  364.212943][T10368]  ? __fget_files+0x2a/0x420
[  364.212972][T10368]  ? __pfx_ksys_read+0x10/0x10
[  364.212997][T10368]  ? do_syscall_64+0xbe/0x3b0
[  364.213018][T10368]  do_syscall_64+0xfa/0x3b0
[  364.213034][T10368]  ? lockdep_hardirqs_on+0x9c/0x150
[  364.213058][T10368]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.213074][T10368]  ? clear_bhb_loop+0x60/0xb0
[  364.213095][T10368]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.213115][T10368] RIP: 0033:0x7fc6a158d33c
[  364.213131][T10368] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  364.213146][T10368] RSP: 002b:00007fc6a2354030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  364.213165][T10368] RAX: ffffffffffffffda RBX: 00007fc6a17b5fa0 RCX: 00007fc6a158d33c
[  364.213178][T10368] RDX: 000000000000000f RSI: 00007fc6a23540a0 RDI: 0000000000000004
[  364.213189][T10368] RBP: 00007fc6a2354090 R08: 0000000000000000 R09: 0000000000000000
[  364.213200][T10368] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  364.213212][T10368] R13: 0000000000000000 R14: 00007fc6a17b5fa0 R15: 00007fc6a18dfa28
[  364.213240][T10368]  </TASK>
[  364.583173][T10370] fuse: Bad value for 'user_id'
[  364.592960][T10370] fuse: Bad value for 'user_id'
[  364.627216][ T5964] usb 2-1: new full-speed USB device number 50 using dummy_hcd
[  364.723553][   T30] kauditd_printk_skb: 53 callbacks suppressed
[  364.723570][   T30] audit: type=1326 audit(1752236520.381:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10371 comm="syz.4.1194" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc6a158e929 code=0x0
[  364.817294][   T30] audit: type=1800 audit(1752236520.471:292): pid=10374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1195" name="event7" dev="devtmpfs" ino=3431 res=0 errno=0
[  364.847189][T10366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  364.891056][T10366] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  364.904210][T10366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  364.914789][T10366] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  364.928742][T10378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  364.945313][ T5964] usb 2-1: unable to get BOS descriptor or descriptor too short
[  364.957491][ T5964] usb 2-1: unable to read config index 0 descriptor/start: -71
[  364.965636][ T5964] usb 2-1: can't read configurations, error -71
[  364.976462][T10378] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  365.101562][T10381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  365.125929][T10381] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  365.343756][T10383] FAULT_INJECTION: forcing a failure.
[  365.343756][T10383] name failslab, interval 1, probability 0, space 0, times 0
[  365.356860][T10383] CPU: 1 UID: 0 PID: 10383 Comm: syz.3.1198 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  365.356885][T10383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  365.356896][T10383] Call Trace:
[  365.356904][T10383]  <TASK>
[  365.356911][T10383]  dump_stack_lvl+0x189/0x250
[  365.356937][T10383]  ? __pfx____ratelimit+0x10/0x10
[  365.356962][T10383]  ? __pfx_dump_stack_lvl+0x10/0x10
[  365.356981][T10383]  ? __pfx__printk+0x10/0x10
[  365.357010][T10383]  ? __pfx___might_resched+0x10/0x10
[  365.357029][T10383]  ? fs_reclaim_acquire+0x7d/0x100
[  365.357058][T10383]  should_fail_ex+0x414/0x560
[  365.357086][T10383]  should_failslab+0xa8/0x100
[  365.357108][T10383]  __kmalloc_noprof+0xcb/0x4f0
[  365.357126][T10383]  ? do_handle_open+0x41b/0x850
[  365.357150][T10383]  do_handle_open+0x41b/0x850
[  365.357177][T10383]  ? __pfx_do_handle_open+0x10/0x10
[  365.357198][T10383]  ? ksys_write+0x22a/0x250
[  365.357219][T10383]  ? __pfx_ksys_write+0x10/0x10
[  365.357243][T10383]  ? do_syscall_64+0xbe/0x3b0
[  365.357263][T10383]  do_syscall_64+0xfa/0x3b0
[  365.357279][T10383]  ? lockdep_hardirqs_on+0x9c/0x150
[  365.357303][T10383]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.357319][T10383]  ? clear_bhb_loop+0x60/0xb0
[  365.357340][T10383]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.357356][T10383] RIP: 0033:0x7f30f678e929
[  365.357372][T10383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  365.357386][T10383] RSP: 002b:00007f30f762a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130
[  365.357405][T10383] RAX: ffffffffffffffda RBX: 00007f30f69b5fa0 RCX: 00007f30f678e929
[  365.357418][T10383] RDX: 0000000000010040 RSI: 0000200000000040 RDI: 0000000000000003
[  365.357429][T10383] RBP: 00007f30f762a090 R08: 0000000000000000 R09: 0000000000000000
[  365.357440][T10383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  365.357449][T10383] R13: 0000000000000000 R14: 00007f30f69b5fa0 R15: 00007f30f6adfa28
[  365.357477][T10383]  </TASK>
[  366.118107][T10395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  366.152788][T10395] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  366.396024][T10395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  366.434713][T10395] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  367.018433][T10421] binder: BINDER_SET_CONTEXT_MGR already set
[  367.024516][T10421] binder: 10415:10421 ioctl 4018620d 200000000040 returned -16
[  367.392474][T10437] FAULT_INJECTION: forcing a failure.
[  367.392474][T10437] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  367.406004][T10437] CPU: 0 UID: 0 PID: 10437 Comm: syz.2.1212 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  367.406029][T10437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  367.406039][T10437] Call Trace:
[  367.406047][T10437]  <TASK>
[  367.406054][T10437]  dump_stack_lvl+0x189/0x250
[  367.406079][T10437]  ? __pfx____ratelimit+0x10/0x10
[  367.406104][T10437]  ? __pfx_dump_stack_lvl+0x10/0x10
[  367.406124][T10437]  ? __pfx__printk+0x10/0x10
[  367.406146][T10437]  ? __might_fault+0xb0/0x130
[  367.406178][T10437]  should_fail_ex+0x414/0x560
[  367.406206][T10437]  _copy_from_user+0x2d/0xb0
[  367.406228][T10437]  do_handle_open+0x4a0/0x850
[  367.406254][T10437]  ? __pfx_do_handle_open+0x10/0x10
[  367.406276][T10437]  ? ksys_write+0x22a/0x250
[  367.406296][T10437]  ? __pfx_ksys_write+0x10/0x10
[  367.406313][T10437]  ? rcu_is_watching+0x15/0xb0
[  367.406339][T10437]  ? do_syscall_64+0xbe/0x3b0
[  367.406361][T10437]  do_syscall_64+0xfa/0x3b0
[  367.406386][T10437]  ? lockdep_hardirqs_on+0x9c/0x150
[  367.406418][T10437]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.406436][T10437]  ? clear_bhb_loop+0x60/0xb0
[  367.406456][T10437]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.406471][T10437] RIP: 0033:0x7fe26358e929
[  367.406487][T10437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  367.406501][T10437] RSP: 002b:00007fe2643c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130
[  367.406520][T10437] RAX: ffffffffffffffda RBX: 00007fe2637b5fa0 RCX: 00007fe26358e929
[  367.406533][T10437] RDX: 0000000000010040 RSI: 0000200000000040 RDI: 0000000000000003
[  367.406545][T10437] RBP: 00007fe2643c3090 R08: 0000000000000000 R09: 0000000000000000
[  367.406556][T10437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  367.406566][T10437] R13: 0000000000000000 R14: 00007fe2637b5fa0 R15: 00007fe2638dfa28
[  367.406593][T10437]  </TASK>
[  367.642235][T10439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  367.832517][T10439] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  367.896239][T10450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  367.933226][T10450] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  367.990809][T10453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  368.041503][T10453] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  368.103573][T10457] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1218'.
[  368.483786][T10472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  368.537498][T10472] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  368.702647][T10472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  368.751991][T10472] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  369.927565][T10510] FAULT_INJECTION: forcing a failure.
[  369.927565][T10510] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  369.956120][T10510] CPU: 1 UID: 0 PID: 10510 Comm: syz.2.1228 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  369.956147][T10510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  369.956157][T10510] Call Trace:
[  369.956164][T10510]  <TASK>
[  369.956171][T10510]  dump_stack_lvl+0x189/0x250
[  369.956198][T10510]  ? __pfx____ratelimit+0x10/0x10
[  369.956221][T10510]  ? __pfx_dump_stack_lvl+0x10/0x10
[  369.956241][T10510]  ? __pfx__printk+0x10/0x10
[  369.956275][T10510]  should_fail_ex+0x414/0x560
[  369.956304][T10510]  _copy_to_user+0x31/0xb0
[  369.956325][T10510]  simple_read_from_buffer+0xe1/0x170
[  369.956352][T10510]  proc_fail_nth_read+0x1df/0x250
[  369.956377][T10510]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  369.956406][T10510]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  369.956430][T10510]  vfs_read+0x200/0x980
[  369.956456][T10510]  ? __pfx___mutex_lock+0x10/0x10
[  369.956474][T10510]  ? __pfx_vfs_read+0x10/0x10
[  369.956501][T10510]  ? __fget_files+0x2a/0x420
[  369.956527][T10510]  ? __fget_files+0x3a0/0x420
[  369.956547][T10510]  ? __fget_files+0x2a/0x420
[  369.956577][T10510]  ksys_read+0x145/0x250
[  369.956599][T10510]  ? __pfx_ksys_read+0x10/0x10
[  369.956615][T10510]  ? rcu_is_watching+0x15/0xb0
[  369.956639][T10510]  ? do_syscall_64+0xbe/0x3b0
[  369.956660][T10510]  do_syscall_64+0xfa/0x3b0
[  369.956674][T10510]  ? lockdep_hardirqs_on+0x9c/0x150
[  369.956698][T10510]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.956713][T10510]  ? clear_bhb_loop+0x60/0xb0
[  369.956732][T10510]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.956747][T10510] RIP: 0033:0x7fe26358d33c
[  369.956763][T10510] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  369.956776][T10510] RSP: 002b:00007fe2643c3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  369.956796][T10510] RAX: ffffffffffffffda RBX: 00007fe2637b5fa0 RCX: 00007fe26358d33c
[  369.956810][T10510] RDX: 000000000000000f RSI: 00007fe2643c30a0 RDI: 0000000000000004
[  369.956821][T10510] RBP: 00007fe2643c3090 R08: 0000000000000000 R09: 0000000000000000
[  369.956832][T10510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  369.956843][T10510] R13: 0000000000000000 R14: 00007fe2637b5fa0 R15: 00007fe2638dfa28
[  369.956873][T10510]  </TASK>
[  370.801077][T10529] binder: 10527:10529 ioctl c0306201 200000000640 returned -22
[  370.833960][T10530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  370.861576][T10530] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  370.911354][T10530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  370.935761][T10533] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1230'.
[  370.973331][T10530] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  370.976728][T10532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  371.011766][T10532] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  372.096996][T10557] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1238'.
[  372.187936][T10555] fuse: root generation should be zero
[  372.219696][T10564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  372.262424][T10564] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  373.068306][T10574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  373.077483][T10574] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  373.256367][T10576] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1243'.
[  373.317493][   T50] Bluetooth: hci3: command 0x0405 tx timeout
[  374.009754][T10584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  374.024465][T10584] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  374.158069][T10588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  374.166729][T10588] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  374.823958][T10593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  374.834438][   T30] audit: type=1326 audit(1752236530.481:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10590 comm="syz.2.1248" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe26358e929 code=0x0
[  374.862482][T10593] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  374.958721][T10593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  374.971573][T10593] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  375.359672][T10606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  375.370622][T10606] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  376.326983][T10623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  376.413574][T10623] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  376.482861][T10626] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  376.587501][T10615] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  376.693389][   T31] INFO: task kworker/1:3:5843 blocked for more than 143 seconds.
[  376.709610][   T31]       Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0
[  376.720777][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  376.736237][   T31] task:kworker/1:3     state:D stack:19480 pid:5843  tgid:5843  ppid:2      task_flags:0x4208060 flags:0x00004000
[  377.019789][   T31] Workqueue: events request_firmware_work_func
[  377.318954][   T31] Call Trace:
[  377.357129][   T31]  <TASK>
[  377.360656][   T31]  __schedule+0x16f5/0x4d00
[  377.365247][   T31]  ? __lock_acquire+0x9f0/0xd20
[  377.371973][   T31]  ? schedule+0x165/0x360
[  377.385490][   T31]  ? __pfx___schedule+0x10/0x10
[  377.393064][   T31]  ? schedule+0x91/0x360
[  377.400462][   T31]  schedule+0x165/0x360
[  377.432283][   T31]  schedule_preempt_disabled+0x13/0x30
[  377.443736][   T31]  __mutex_lock+0x724/0xe80
[  377.451595][   T31]  ? __mutex_lock+0x51b/0xe80
[  377.456354][   T31]  ? ath9k_hif_usb_firmware_cb+0x332/0x4c0
[  377.462241][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  377.472122][   T31]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  377.478492][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  377.484924][   T31]  ? complete_all+0x11c/0x330
[  377.505188][   T31]  ath9k_hif_usb_firmware_cb+0x332/0x4c0
[  377.563692][   T31]  ? __pfx_ath9k_hif_usb_firmware_cb+0x10/0x10
[  377.691776][   T31]  request_firmware_work_func+0x105/0x1c0
[  377.702803][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  377.710128][   T31]  process_scheduled_works+0xae1/0x17b0
[  377.716240][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  377.805153][   T31]  worker_thread+0x8a0/0xda0
[  377.817431][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  377.855870][   T31]  ? __kthread_parkme+0x7b/0x200
[  377.869469][   T31]  kthread+0x70e/0x8a0
[  377.882802][   T31]  ? __pfx_worker_thread+0x10/0x10
[  377.897501][   T31]  ? __pfx_kthread+0x10/0x10
[  377.904479][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  377.910172][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  377.915769][   T31]  ? __pfx_kthread+0x10/0x10
[  377.925617][   T31]  ret_from_fork+0x3fc/0x770
[  377.930930][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  378.303244][   T31]  ? __switch_to_asm+0x39/0x70
[  378.308296][   T31]  ? __switch_to_asm+0x33/0x70
[  378.313160][   T31]  ? __pfx_kthread+0x10/0x10
[  378.343272][   T31]  ret_from_fork_asm+0x1a/0x30
[  378.388044][   T31]  </TASK>
[  378.394185][   T31] INFO: task kworker/1:5:5929 blocked for more than 145 seconds.
[  378.422960][   T31]       Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0
[  378.447765][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  378.471329][   T31] task:kworker/1:5     state:D stack:20936 pid:5929  tgid:5929  ppid:2      task_flags:0x4208060 flags:0x00004000
[  378.524035][   T31] Workqueue: usb_hub_wq hub_event
[  378.541535][   T31] Call Trace:
[  378.559671][   T31]  <TASK>
[  378.616006][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  378.619625][   T31]  __schedule+0x16f5/0x4d00
[  378.623434][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  378.627687][   T31]  ? schedule+0x165/0x360
[  378.647032][   T31]  ? __pfx___schedule+0x10/0x10
[  378.655687][   T31]  ? schedule+0x91/0x360
[  378.663146][   T31]  schedule+0x165/0x360
[  378.677202][   T31]  schedule_timeout+0x9a/0x270
[  378.682298][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  378.690855][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  378.696324][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  378.701886][   T31]  ? wait_for_completion+0x267/0x5d0
[  378.710286][   T31]  wait_for_completion+0x2bf/0x5d0
[  378.715676][   T31]  ? __pfx_wait_for_completion+0x10/0x10
[  378.721692][   T31]  i2c_del_adapter+0x581/0x6e0
[  378.726804][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  378.735403][   T31]  ? __pfx_i2c_del_adapter+0x10/0x10
[  378.741032][   T31]  ? dvb_usbv2_exit+0x85a/0x9e0
[  378.751877][   T31]  dvb_usbv2_probe+0x4ae/0x41a0
[  378.758032][   T31]  ? __pfx_dvb_usbv2_probe+0x10/0x10
[  378.765320][   T31]  ? __pm_runtime_set_status+0x785/0xa50
[  378.771553][   T31]  usb_probe_interface+0x641/0xbc0
[  378.776715][   T31]  ? __pfx_usb_probe_interface+0x10/0x10
[  378.782458][   T31]  really_probe+0x26a/0x9a0
[  378.786994][   T31]  __driver_probe_device+0x18c/0x2f0
[  378.792423][   T31]  driver_probe_device+0x4f/0x430
[  378.797604][   T31]  __device_attach_driver+0x2ce/0x530
[  378.803091][   T31]  bus_for_each_drv+0x251/0x2e0
[  378.808228][   T31]  ? __pfx___device_attach_driver+0x10/0x10
[  378.814175][   T31]  ? __pfx_bus_for_each_drv+0x10/0x10
[  378.819631][   T31]  __device_attach+0x2b8/0x400
[  378.824462][   T31]  ? __pfx___device_attach+0x10/0x10
[  378.829905][   T31]  ? do_raw_spin_unlock+0x122/0x240
[  378.835156][   T31]  bus_probe_device+0x185/0x260
[  378.840424][   T31]  device_add+0x7b6/0xb50
[  378.844827][   T31]  usb_set_configuration+0x1a87/0x20e0
[  378.850548][   T31]  usb_generic_driver_probe+0x8d/0x150
[  378.856087][   T31]  usb_probe_device+0x1c4/0x390
[  378.863343][   T31]  ? __pfx_usb_probe_device+0x10/0x10
[  378.871132][   T31]  really_probe+0x26a/0x9a0
[  378.875681][   T31]  __driver_probe_device+0x18c/0x2f0
[  378.881107][   T31]  driver_probe_device+0x4f/0x430
[  378.886267][   T31]  __device_attach_driver+0x2ce/0x530
[  378.891959][   T31]  bus_for_each_drv+0x251/0x2e0
[  378.896836][   T31]  ? __pfx___device_attach_driver+0x10/0x10
[  378.902794][   T31]  ? __pfx_bus_for_each_drv+0x10/0x10
[  378.908840][   T31]  __device_attach+0x2b8/0x400
[  378.913646][   T31]  ? __pfx___device_attach+0x10/0x10
[  378.919117][   T31]  ? do_raw_spin_unlock+0x122/0x240
[  378.924376][   T31]  bus_probe_device+0x185/0x260
[  378.929421][   T31]  device_add+0x7b6/0xb50
[  378.933840][   T31]  usb_new_device+0xa39/0x16c0
[  378.938683][   T31]  ? __pfx_usb_new_device+0x10/0x10
[  378.943955][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  378.949400][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  378.954646][   T31]  hub_event+0x2941/0x4a00
[  378.959182][   T31]  ? __pfx_hub_event+0x10/0x10
[  378.964077][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  378.973870][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  378.979176][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  378.984928][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  378.990915][   T31]  process_scheduled_works+0xae1/0x17b0
[  378.996520][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  379.002792][   T31]  worker_thread+0x8a0/0xda0
[  379.007513][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  379.014041][   T31]  ? __kthread_parkme+0x7b/0x200
[  379.019045][   T31]  kthread+0x70e/0x8a0
[  379.023136][   T31]  ? __pfx_worker_thread+0x10/0x10
[  379.028339][   T31]  ? __pfx_kthread+0x10/0x10
[  379.032950][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  379.038219][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  379.043439][   T31]  ? __pfx_kthread+0x10/0x10
[  379.048181][   T31]  ret_from_fork+0x3fc/0x770
[  379.052809][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  379.058095][   T31]  ? __switch_to_asm+0x39/0x70
[  379.062888][   T31]  ? __switch_to_asm+0x33/0x70
[  379.067764][   T31]  ? __pfx_kthread+0x10/0x10
[  379.072392][   T31]  ret_from_fork_asm+0x1a/0x30
[  379.077294][   T31]  </TASK>
[  379.080436][   T31] 
[  379.080436][   T31] Showing all locks held in the system:
[  379.089001][   T31] 2 locks held by kworker/u8:0/12:
[  379.094126][   T31]  #0: ffff888146ee7148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  379.123875][   T31]  #1: ffffc90000117bc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  379.142691][   T31] 1 lock held by khungtaskd/31:
[  379.147677][   T31]  #0: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  379.159812][   T31] 2 locks held by kworker/u8:8/3008:
[  379.165275][   T31]  #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140
[  379.178690][   T31]  #1: ffffc9000c057bc0 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  379.191991][   T31] 2 locks held by getty/5606:
[  379.196697][   T31]  #0: ffff888030e9f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  379.206510][   T31]  #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  379.216768][   T31] 3 locks held by kworker/1:3/5843:
[  379.222084][   T31]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  379.233175][   T31]  #1: ffffc9000409fbc0 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  379.245900][   T31]  #2: ffff88814572d198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x332/0x4c0
[  379.256746][   T31] 5 locks held by kworker/1:5/5929:
[  379.262189][   T31]  #0: ffff88814468d548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  379.273750][   T31]  #1: ffffc9000468fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  379.285867][   T31]  #2: ffff88814572d198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00
[  379.294828][   T31]  #3: ffff88803004a198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400
[  379.304120][   T31]  #4: ffff88802f6f7160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400
[  379.313484][   T31] 
[  379.315825][   T31] =============================================
[  379.315825][   T31] 
[  379.326144][   T31] NMI backtrace for cpu 1
[  379.326156][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  379.326168][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  379.326174][   T31] Call Trace:
[  379.326179][   T31]  <TASK>
[  379.326184][   T31]  dump_stack_lvl+0x189/0x250
[  379.326203][   T31]  ? __wake_up_klogd+0xd9/0x110
[  379.326229][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  379.326248][   T31]  ? __pfx__printk+0x10/0x10
[  379.326281][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  379.326306][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  379.326317][   T31]  ? _printk+0xcf/0x120
[  379.326332][   T31]  ? __pfx__printk+0x10/0x10
[  379.326345][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  379.326356][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  379.326371][   T31]  watchdog+0xfee/0x1030
[  379.326381][   T31]  ? watchdog+0x1de/0x1030
[  379.326394][   T31]  kthread+0x70e/0x8a0
[  379.326409][   T31]  ? __pfx_watchdog+0x10/0x10
[  379.326417][   T31]  ? __pfx_kthread+0x10/0x10
[  379.326431][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  379.326453][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  379.326475][   T31]  ? __pfx_kthread+0x10/0x10
[  379.326496][   T31]  ret_from_fork+0x3fc/0x770
[  379.326516][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  379.326540][   T31]  ? __switch_to_asm+0x39/0x70
[  379.326556][   T31]  ? __switch_to_asm+0x33/0x70
[  379.326567][   T31]  ? __pfx_kthread+0x10/0x10
[  379.326580][   T31]  ret_from_fork_asm+0x1a/0x30
[  379.326600][   T31]  </TASK>
[  379.326604][   T31] Sending NMI from CPU 1 to CPUs 0:
[  379.485485][    C0] NMI backtrace for cpu 0
[  379.485501][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  379.485520][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  379.485530][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  379.485556][    C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 fd 18 00 f3 0f 1e fa fb f4 <e9> c8 dd 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  379.485570][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c6
[  379.485585][    C0] RAX: afe4c046edea3b00 RBX: ffffffff81976c78 RCX: afe4c046edea3b00
[  379.485597][    C0] RDX: 0000000000000001 RSI: ffffffff8d998b43 RDI: ffffffff8be29dc0
[  379.485608][    C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb
[  379.485620][    C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa1f3f0
[  379.485631][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50
[  379.485642][    C0] FS:  0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000
[  379.485656][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  379.485667][    C0] CR2: 0000200000404030 CR3: 0000000034638000 CR4: 00000000003526f0
[  379.485682][    C0] Call Trace:
[  379.485688][    C0]  <TASK>
[  379.485694][    C0]  default_idle+0x13/0x20
[  379.485710][    C0]  default_idle_call+0x74/0xb0
[  379.485726][    C0]  do_idle+0x1e8/0x510
[  379.485747][    C0]  ? __pfx_do_idle+0x10/0x10
[  379.485771][    C0]  cpu_startup_entry+0x44/0x60
[  379.485788][    C0]  rest_init+0x2de/0x300
[  379.485805][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[  379.485822][    C0]  start_kernel+0x47d/0x500
[  379.485844][    C0]  x86_64_start_reservations+0x24/0x30
[  379.485870][    C0]  x86_64_start_kernel+0x143/0x1c0
[  379.485886][    C0]  common_startup_64+0x13e/0x147
[  379.485914][    C0]  </TASK>
[  379.486959][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  379.675686][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  379.687572][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  379.697621][   T31] Call Trace:
[  379.700914][   T31]  <TASK>
[  379.703860][   T31]  dump_stack_lvl+0x99/0x250
[  379.708470][   T31]  ? __asan_memcpy+0x40/0x70
[  379.713066][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  379.718266][   T31]  ? __pfx__printk+0x10/0x10
[  379.722863][   T31]  panic+0x2db/0x790
[  379.726755][   T31]  ? __pfx_panic+0x10/0x10
[  379.731164][   T31]  ? nmi_backtrace_stall_check+0x433/0x440
[  379.736966][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  379.742332][   T31]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  379.748488][   T31]  watchdog+0x102d/0x1030
[  379.752858][   T31]  ? watchdog+0x1de/0x1030
[  379.757385][   T31]  kthread+0x70e/0x8a0
[  379.761467][   T31]  ? __pfx_watchdog+0x10/0x10
[  379.766153][   T31]  ? __pfx_kthread+0x10/0x10
[  379.770759][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  379.775967][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  379.781171][   T31]  ? __pfx_kthread+0x10/0x10
[  379.785761][   T31]  ret_from_fork+0x3fc/0x770
[  379.790348][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  379.795454][   T31]  ? __switch_to_asm+0x39/0x70
[  379.800213][   T31]  ? __switch_to_asm+0x33/0x70
[  379.804969][   T31]  ? __pfx_kthread+0x10/0x10
[  379.809573][   T31]  ret_from_fork_asm+0x1a/0x30
[  379.814344][   T31]  </TASK>
[  379.817730][   T31] Kernel Offset: disabled
[  379.822042][   T31] Rebooting in 86400 seconds..