last executing test programs:

9.972816699s ago: executing program 2 (id=284):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
socket$packet(0x11, 0xa, 0x300)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000)
sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]})
mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, &(0x7f0000000000))

9.801375305s ago: executing program 2 (id=286):
r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={r1, 0xfd}, 0x0, &(0x7f00000008c0)="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", 0x0)

9.522458698s ago: executing program 2 (id=291):
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f00000001c0)={{@any, 0xa}, @host, 0x0, 0xcfce, 0x6, 0x1, 0x2, 0x5, 0xd0})
syz_usb_connect(0x2, 0x1a2, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0)

7.987669716s ago: executing program 2 (id=297):
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) (async)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f00000000c0)}, 0x20)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0xe, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000061108000000000009500000000000000fff49df8e9cffba66fe7178c171e2ea87e4a53c5eafd4588c87a10118351481d26234b5c1b3f865ee43df2ec4656297d2552beb4e3b0ebb7ee9525333c9cbc8daa558bb31f4519ebc2777d74f18b4744dd7ca890a534f27399665f54222aa51f13fd2029f02c0a988410e00b6608bd958fa1fd55e062d1aca5f009ffc463237ce3c49c435e23fe1c10016948f0b61b657faf50f8368d41a22bb4"], &(0x7f0000000100)='GPL\x00'}, 0x80)

7.577231081s ago: executing program 2 (id=298):
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000080)=[0x0], 0x1, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000200)={0x6, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0]})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00'})
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000300)={&(0x7f0000000240)=[0x0, 0x0, 0x0], 0x3, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[r1, r2, r4], 0x3, 0x80000})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000002500010029bd7000fddbdf25040000004230dfe6beb433d935ab9c96d9a59a41065aee7a80120ff506cb592b03105245362d2c9e064aec68c3ae4d7754bb65e848c66f64c3"], 0x14}}, 0x8000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_group_source_req(r7, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e24, @remote}}}, 0x108)
setsockopt$inet_group_source_req(r7, 0x0, 0x2b, &(0x7f0000000000)={0x2, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x4e22, @empty}}}, 0x108)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000000c0)=0x1d, 0x4)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r8)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r10=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r10, @ANYBLOB="68cc17f87cf550590000000000"], 0x1c}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000000)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r11)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r12, 0x701, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x10044880)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfa, 0x1, 0xffffffffffffffff, 0x1}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan1\x00'})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan1\x00', <r14=>0x0})
sendmsg$IEEE802154_SET_MACPARAMS(r8, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)={0x60, r12, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x9}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x7fffffff}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x4}, @IEEE802154_ATTR_TXPOWER={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x1}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x3}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r14}]}, 0x60}, 0x1, 0x0, 0x0, 0x24040011}, 0x4004)
getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x2, &(0x7f0000000140)=""/138, &(0x7f00000002c0)=0x8a)

7.216151016s ago: executing program 4 (id=301):
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x1ff)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\a\x00\x00'], 0x50)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000200001000000000000000000020000957b0000020000000008000400fbff190008000600ffffff"], 0x2c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="5808000084000000000000200000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000010000000240012800c0001006d6163766c616e001400028008000900ffffffff0800030002000000140035006d6163766c616e300000000000000000"], 0x58}}, 0x8000)
r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x0, 0x980)
r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140))
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000180)=0x15, 0x4)
ioctl$FS_IOC_SETFLAGS(r3, 0xc0606610, 0x0)
syz_usb_connect(0x0, 0x32, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/stat\x00')
lseek(r4, 0x3, 0x0)
getdents64(r4, 0xffffffffffffffff, 0x47)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r5, &(0x7f0000000340)="0a000300010000", 0x7)
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f0000000140))
r6 = openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE(r6, 0x50009401, 0x0)
mount(&(0x7f0000000800)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000a00)='cifs\x00', 0x0, &(0x7f0000000b00)='echo_interval=1,user=root,pass=root,ip=127.0.0.1,soft\x00')
r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r4)
sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r7, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x840)

6.891002833s ago: executing program 1 (id=304):
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50)
r4 = syz_open_procfs(0x0, &(0x7f0000000200)='oom_adj\x00')
write$tcp_mem(r4, &(0x7f00000000c0)={0x200000000080, 0x20, 0x0, 0x20, 0xfffc}, 0x48)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0xfff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 2)

5.760900596s ago: executing program 1 (id=305):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, 0x0, 0x0)
listen(r0, 0xfffffffc)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0)

4.585561757s ago: executing program 1 (id=308):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b702000000000000850300005103000000000000000000"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x66}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000500)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x69cc6d86, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe10804000000af8e0e3dc11d875397bdb22d0000b420a1a93e527d3d458d080000000000000000000000000000000000000000004300", "f4bd00000080190000efffca0000000000001a000000ff00", [0x2]}})

4.582284731s ago: executing program 2 (id=309):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='vhci_hcd.0', 0xa)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r2 = syz_open_dev$media(0x0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000200001002dbd7000000000000a008004ff0000010000000014000200fc020000000000000000000000000000050019"], 0x38}}, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000480)={0x80000000, 0xffffffffffffffff, 0x0})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x5, 0x4, 0x8, 0xb}, 0x50)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed1000008000500", @ANYRES32=r6], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000001040)=[{}], &(0x7f0000000100)=0x8)
sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfc)
r7 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$keyring(&(0x7f00000001c0), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, r7)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8000000})
r8 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r8, 0x5406, &(0x7f0000000200)={0xfff, 0xa925, 0x9, 0x8007, 0x8, "7a3800e5ffffff00"})
ioctl$TIOCL_GETMOUSEREPORTING(r8, 0x5412, &(0x7f00000006c0)=0x16)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup, 0xe, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r9 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x544, r7)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r9}, &(0x7f0000000840)=ANY=[], 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map=r4, r0, 0x7}, 0x10)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8)

4.191314993s ago: executing program 1 (id=311):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f00000005c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x44, 0x0, r0, 0x0, 0x0, 0x0, 0x40000000})
syz_ublk_add_dev(r1, r2, r3, r4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000080)={0x9, 0xffffffffffffffff, 0xc, {0xfff, 0x7}}, 0x1)

4.154185386s ago: executing program 4 (id=312):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="6800000010000104ffffffff03000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a3000128008000100767469002400028008000400ffffffff08000100", @ANYRES32=0x0, @ANYBLOB="08000600f0ffffff08000100", @ANYRES32=0x0, @ANYBLOB="080004000500fcff"], 0x68}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040)

3.048661828s ago: executing program 1 (id=313):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x10000, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0])
statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0)
read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000004300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064dd2f9ac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc2ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c252074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e13c4a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b670400d59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b6dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca365892a2b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b300", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x130, 0x0, 0xfffffffffffffff5, {0x1, 0xaae, 0x0, '\x00', {0x2, 0x0, 0xae0, 0x2, r2, r3, 0x6000, '\x00', 0x6, 0xffff, 0x1, 0xfffffffffffffff7, {0x4, 0x3}, {0x1, 0xc}, {0x4, 0x20000d}, {0x1000000001, 0xa00}, 0x40002, 0x574, 0x9d7, 0xbb5}}}})
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x10400005}}, 0x50)

3.034779814s ago: executing program 4 (id=314):
r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={r1, 0x147}, 0x0, &(0x7f00000008c0)="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", 0x0)

2.562131241s ago: executing program 1 (id=315):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0)
socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8000, 0x1800, 0x6, 0xac, 0x5}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33)
syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x101000)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611881000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000010850000008200000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0x0, &(0x7f00000004c0)="d9ddd531f921f6f919721ee7ed4e", 0x0, 0x60fe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCGSTAMP(r3, 0x8906, 0x0)
syz_emit_ethernet(0x7a, &(0x7f00000003c0)={@local, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "000401", 0x44, 0x2f, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8}, {}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0xfffc}}}}}}}}}, 0x0)
r4 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x5452, &(0x7f0000000000))
sendmsg(r4, &(0x7f00000026c0)={0x0, 0x0, 0x0}, 0x884)

2.348813393s ago: executing program 3 (id=316):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, 0x0)

2.343203592s ago: executing program 4 (id=317):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}}, 0x24}}, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20008050)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4080)

2.064152471s ago: executing program 3 (id=318):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, 0x0, 0x0)
listen(r0, 0xfffffffc)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0)

1.780187441s ago: executing program 3 (id=319):
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000080)=[0x0], 0x1, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000200)={0x6, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0]})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00'})
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000300)={&(0x7f0000000240)=[0x0, 0x0, 0x0], 0x3, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[r1, r2, r4], 0x3, 0x80000})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000002500010029bd7000fddbdf25040000004230dfe6beb433d935ab9c96d9a59a41065aee7a80120ff506cb592b03105245362d2c9e064aec68c3ae4d7754bb65e848c66f64c3"], 0x14}}, 0x8000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_group_source_req(r7, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e24, @remote}}}, 0x108)
setsockopt$inet_group_source_req(r7, 0x0, 0x2b, &(0x7f0000000000)={0x2, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x4e22, @empty}}}, 0x108)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000000c0)=0x1d, 0x4)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r8)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r10=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r10, @ANYBLOB="68cc17f87cf550590000000000"], 0x1c}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000000)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r11)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r12, 0x701, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x10044880)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfa, 0x1, 0xffffffffffffffff, 0x1}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan1\x00', <r14=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan1\x00', <r15=>0x0})
sendmsg$IEEE802154_SET_MACPARAMS(r8, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)={0x68, r12, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r14}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x9}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x7fffffff}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x4}, @IEEE802154_ATTR_TXPOWER={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x1}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x3}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r15}]}, 0x68}, 0x1, 0x0, 0x0, 0x24040011}, 0x4004)
getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x2, 0x0, &(0x7f00000002c0))

1.497838594s ago: executing program 3 (id=320):
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
getpeername(r0, &(0x7f0000000380)=@xdp, &(0x7f0000000400)=0x80)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x9f6d, 0x4000, 0x2, 0x324}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x79be, 0x2000, 0x2, 0x1a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9f31, 0x400, 0x0, 0x178}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc939, 0x1000, 0x1, 0x15f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5097, 0x0, 0x2, 0x38}}], 0x4, 0x0, &(0x7f0000001a80))
r1 = syz_io_uring_setup(0x4853, &(0x7f0000000540)={0x0, 0xf468, 0x1000, 0x4, 0xfffffffe}, &(0x7f0000000240)=<r2=>0x0, 0x0, 0x0)
syz_io_uring_submit(r2, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_FUTEX_WAITV={0x35, 0x2, 0x0, 0x0, 0x0, &(0x7f0000002180)=[{0x5, 0x0, 0x82}], 0x1, 0x0, 0x1})
io_uring_enter(r1, 0x6, 0x0, 0x0, 0x0, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000100)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa5f}}, 0x24)
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0x279})
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x101800, 0x0)
r4 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r4, 0xc06c4124, &(0x7f0000000080))
ioctl$COMEDI_BUFINFO(r3, 0xc02c640e, &(0x7f0000000040)={0x2, 0x9, 0x1e, 0xc, 0x8, 0x4, 0x6})
syz_pidfd_open(0x0, 0x0)

1.434262236s ago: executing program 4 (id=321):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70200000000000085030000510300"/40], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x66}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000500)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x69cc6d86, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe10804000000af8e0e3dc11d875397bdb22d0000b420a1a93e527d3d458d080000000000000000000000000000000000000000004300", "f4bd00000080190000efffca0000000000001a000000ff00", [0x2]}})

1.247287624s ago: executing program 3 (id=322):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20500, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, 0x0)
close(r1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r3 = landlock_create_ruleset(0x0, 0x0, 0x0)
landlock_restrict_self(r3, 0xf)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f00000000c0)={{0xb, 0x7fff, 0x4, 0x9}, 'syz0\x00', 0x28})
landlock_restrict_self(0xffffffffffffffff, 0xa)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1)

931.426192ms ago: executing program 4 (id=323):
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48)
r1 = syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000540)='net/sockstat\x00')
pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0xfffffdff8)
sched_setattr(r1, &(0x7f0000000140)={0x38, 0x0, 0x8, 0x6, 0x1, 0x4596, 0x9, 0xf, 0x0, 0x7ff}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000004000000000000000a60b000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0920000000000066090100000003e716000000edffffff180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b7030000df04000056000000060000003c32000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804)
r3 = io_uring_setup(0x1cf8, &(0x7f0000000040)={0x0, 0xe83e, 0xc000, 0x2000008, 0x4c1})
socket$packet(0x11, 0x3, 0x300)
r4 = epoll_create1(0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
close(r5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r6)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="98000000", @ANYRES16=r7, @ANYBLOB="01002dbd7000fedbdf250100000014000200776732000000000000000000000000002400030000000080000000008000000000000000000000000000000000000000000000004c0008804800008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922200009801c0000800600010002000000080002007f0000010500030001000000"], 0x98}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040)
r8 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000500)={0x0, 0xa355, 0x10000, 0x2, 0x15a}, &(0x7f0000000100)=<r9=>0x0, &(0x7f0000000440)=<r10=>0x0, &(0x7f00000000c0)=<r11=>0x0)
syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xc1f, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=<r12=>0x0)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
r14 = dup(r13)
syz_ublk_setup_queues(r14, r12, &(0x7f0000000180)={0x0, 0xaada, 0x1f00, 0x1, 0xb6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000000, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x2000, 0x20003, 0x1, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r14, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x2, 0xf3b, 0x2, 0x8e83}})
setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0xa002803f})
pselect6(0x40, &(0x7f0000000380)={0x101, 0xfffffffffffffffc, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x400000000001}, &(0x7f0000000000)={0x800002100000001e, 0x0, 0x927b, 0x3, 0x0, 0x2000000000401, 0xfffffffffffffffe}, 0x0, 0x0, 0x0)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)

489.758894ms ago: executing program 0 (id=325):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x10000, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0])
statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0)
read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x130, 0x0, 0xfffffffffffffff5, {0x1, 0xaae, 0x0, '\x00', {0x2, 0x0, 0xae0, 0x2, r2, r3, 0x6000, '\x00', 0x6, 0xffff, 0x1, 0xfffffffffffffff7, {0x4, 0x3}, {0x1, 0xc}, {0x4, 0x20000d}, {0x1000000001, 0xa00}, 0x40002, 0x574, 0x9d7, 0xbb5}}}})
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x10400005}}, 0x50)

417.714552ms ago: executing program 0 (id=326):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@can_newroute={0x14, 0x18, 0x1, 0x70bd2a, 0x0, {0x1d, 0x1, 0x5}}, 0x14}}, 0x0) (fail_nth: 2)

292.775435ms ago: executing program 0 (id=327):
r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={r1, 0x147}, 0x0, &(0x7f00000008c0)="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", 0x0)

258.208007ms ago: executing program 0 (id=328):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, 0x0)

240.264363ms ago: executing program 3 (id=329):
socket$nl_route(0x10, 0x3, 0x0)
futex(0x0, 0x9, 0x0, 0x0, 0x0, 0x0)
getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x83, 0x3af}, &(0x7f0000000100), &(0x7f0000000440), &(0x7f0000000180))
connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000240)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000000)="00000000000000000000512288fb", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
fchdir(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)

180.507177ms ago: executing program 0 (id=330):
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000080)=[0x0], 0x1, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000200)={0x6, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0]})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00'})
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000300)={&(0x7f0000000240)=[0x0, 0x0, 0x0], 0x3, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[r1, r2, r4], 0x3, 0x80000})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000002500010029bd7000fddbdf25040000004230dfe6beb433d935ab9c96d9a59a41065aee7a80120ff506cb592b03105245362d2c9e064aec68c3ae4d7754bb65e848c66f64c3"], 0x14}}, 0x8000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_group_source_req(r7, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e24, @remote}}}, 0x108)
setsockopt$inet_group_source_req(r7, 0x0, 0x2b, &(0x7f0000000000)={0x2, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x4e22, @empty}}}, 0x108)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000000c0)=0x1d, 0x4)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r8)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r10=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r10, @ANYBLOB="68cc17f87cf550590000000000"], 0x1c}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000000)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r11)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r12, 0x701, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x10044880)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfa, 0x1, 0xffffffffffffffff, 0x1}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan1\x00', <r14=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan1\x00', <r15=>0x0})
sendmsg$IEEE802154_SET_MACPARAMS(r8, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)={0x68, r12, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r14}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x9}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x7fffffff}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x4}, @IEEE802154_ATTR_TXPOWER={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x1}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x3}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r15}]}, 0x68}, 0x1, 0x0, 0x0, 0x24040011}, 0x4004)
getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x2, 0x0, &(0x7f00000002c0))

0s ago: executing program 0 (id=331):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}}, 0x24}}, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20008050)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4080)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.180' (ED25519) to the list of known hosts.
[   87.160778][  T997] cfg80211: failed to load regulatory.db
[   88.004949][ T5569] cgroup: Unknown subsys name 'net'
[   88.255515][ T5569] cgroup: Unknown subsys name 'cpuset'
[   88.320834][ T5569] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   90.203062][ T5569] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   92.776068][ T4897] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   92.794119][ T5590] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   92.804600][ T5590] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   92.813532][ T5590] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   92.814855][ T5590] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   92.816540][ T5590] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   92.817913][ T5590] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   92.823511][ T5590] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   92.875586][ T4897] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   92.877250][ T4897] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   92.880101][ T4897] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   92.890635][   T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   92.891864][   T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   92.900073][ T4897] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   92.908389][ T4897] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   92.922880][ T4897] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   92.929240][ T4897] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   92.948556][ T5590] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   92.973070][ T5590] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   92.974031][ T5590] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   93.004238][   T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   93.022301][   T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   93.024330][   T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   93.049966][   T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   93.053109][   T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   94.902405][   T59] Bluetooth: hci0: command tx timeout
[   94.980414][ T4897] Bluetooth: hci1: command tx timeout
[   94.980607][   T59] Bluetooth: hci2: command tx timeout
[   95.061574][   T59] Bluetooth: hci3: command tx timeout
[   95.140351][   T59] Bluetooth: hci4: command tx timeout
[   95.706056][ T5587] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.706204][ T5587] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.709874][ T5587] bridge_slave_0: entered allmulticast mode
[   95.713223][ T5587] bridge_slave_0: entered promiscuous mode
[   95.721825][ T5588] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.721946][ T5588] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.722473][ T5588] bridge_slave_0: entered allmulticast mode
[   95.726191][ T5588] bridge_slave_0: entered promiscuous mode
[   95.755715][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.755850][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.756005][ T5589] bridge_slave_0: entered allmulticast mode
[   95.759012][ T5589] bridge_slave_0: entered promiscuous mode
[   95.766293][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.766415][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.766590][ T5585] bridge_slave_0: entered allmulticast mode
[   95.769803][ T5585] bridge_slave_0: entered promiscuous mode
[   95.776931][ T5587] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.777069][ T5587] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.777663][ T5587] bridge_slave_1: entered allmulticast mode
[   95.783615][ T5587] bridge_slave_1: entered promiscuous mode
[   95.785497][ T5588] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.785654][ T5588] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.786456][ T5588] bridge_slave_1: entered allmulticast mode
[   95.789446][ T5588] bridge_slave_1: entered promiscuous mode
[   95.819167][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.819291][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.819442][ T5589] bridge_slave_1: entered allmulticast mode
[   95.823846][ T5589] bridge_slave_1: entered promiscuous mode
[   95.827143][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.827280][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.827850][ T5585] bridge_slave_1: entered allmulticast mode
[   95.831600][ T5585] bridge_slave_1: entered promiscuous mode
[   95.876403][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.876545][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.876707][ T5586] bridge_slave_0: entered allmulticast mode
[   95.882293][ T5586] bridge_slave_0: entered promiscuous mode
[   95.972363][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.972554][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.972738][ T5586] bridge_slave_1: entered allmulticast mode
[   95.974803][ T5586] bridge_slave_1: entered promiscuous mode
[   96.019047][ T5587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.025743][ T5588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.053648][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.057976][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.061484][ T5587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.064960][ T5588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.093236][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.099819][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.139240][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.200743][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.232241][ T5587] team0: Port device team_slave_0 added
[   96.234939][ T5588] team0: Port device team_slave_0 added
[   96.255222][ T5589] team0: Port device team_slave_0 added
[   96.257429][ T5585] team0: Port device team_slave_0 added
[   96.259652][ T5587] team0: Port device team_slave_1 added
[   96.264369][ T5588] team0: Port device team_slave_1 added
[   96.286588][ T5589] team0: Port device team_slave_1 added
[   96.288443][ T5585] team0: Port device team_slave_1 added
[   96.328422][ T5586] team0: Port device team_slave_0 added
[   96.387906][ T5586] team0: Port device team_slave_1 added
[   96.418192][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.418206][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.418222][ T5587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.421252][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.421268][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.421291][ T5588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.445948][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.445965][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.445989][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.452291][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.452306][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.452329][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.455301][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.455315][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.455340][ T5587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.458021][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.458035][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.458058][ T5588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.486367][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.486384][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.486409][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.487954][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.487966][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.487989][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.523487][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.523503][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.523536][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.564061][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.564078][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.564103][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.774293][ T5587] hsr_slave_0: entered promiscuous mode
[   96.775903][ T5587] hsr_slave_1: entered promiscuous mode
[   96.835326][ T5588] hsr_slave_0: entered promiscuous mode
[   96.836668][ T5588] hsr_slave_1: entered promiscuous mode
[   96.838676][ T5588] debugfs: 'hsr0' already exists in 'hsr'
[   96.838776][ T5588] Cannot create hsr debugfs directory
[   96.850329][ T5585] hsr_slave_0: entered promiscuous mode
[   96.851930][ T5585] hsr_slave_1: entered promiscuous mode
[   96.852867][ T5585] debugfs: 'hsr0' already exists in 'hsr'
[   96.852889][ T5585] Cannot create hsr debugfs directory
[   96.866341][ T5589] hsr_slave_0: entered promiscuous mode
[   96.867660][ T5589] hsr_slave_1: entered promiscuous mode
[   96.868573][ T5589] debugfs: 'hsr0' already exists in 'hsr'
[   96.868595][ T5589] Cannot create hsr debugfs directory
[   96.927804][ T5586] hsr_slave_0: entered promiscuous mode
[   96.935070][ T5586] hsr_slave_1: entered promiscuous mode
[   96.937403][ T5586] debugfs: 'hsr0' already exists in 'hsr'
[   96.937443][ T5586] Cannot create hsr debugfs directory
[   96.981657][   T59] Bluetooth: hci0: command tx timeout
[   97.060741][   T59] Bluetooth: hci2: command tx timeout
[   97.060774][   T59] Bluetooth: hci1: command tx timeout
[   97.140415][ T4897] Bluetooth: hci3: command tx timeout
[   97.220379][ T4897] Bluetooth: hci4: command tx timeout
[   98.186161][ T5587] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   98.233958][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   98.246344][ T5587] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   98.288279][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   98.290041][ T5587] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   98.324189][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   98.351512][ T5587] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   98.386320][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   98.506157][ T5588] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   98.535183][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   98.540073][ T5588] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   98.587245][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   98.589514][ T5588] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   98.609531][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   98.646172][ T5588] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   98.685136][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   98.826176][ T5589] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   98.857145][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   98.871816][ T5589] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   98.914559][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   98.928171][ T5589] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   98.953610][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   98.982876][ T5589] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   99.015341][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   99.061350][ T4897] Bluetooth: hci0: command tx timeout
[   99.140424][ T4897] Bluetooth: hci1: command tx timeout
[   99.140456][ T4897] Bluetooth: hci2: command tx timeout
[   99.197503][ T5585] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   99.220592][   T59] Bluetooth: hci3: command tx timeout
[   99.224095][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   99.243942][ T5585] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   99.273273][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   99.279944][ T5585] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   99.300609][   T59] Bluetooth: hci4: command tx timeout
[   99.304936][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   99.344167][ T5585] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   99.378103][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   99.468074][ T5587] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.548188][ T5586] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   99.584828][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   99.598926][ T5586] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   99.629548][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   99.639408][ T5586] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   99.664855][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   99.678476][ T5586] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   99.704035][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   99.717070][ T5587] 8021q: adding VLAN 0 to HW filter on device team0
[   99.782168][  T105] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.782324][  T105] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.818364][ T5588] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.844951][  T105] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.845068][  T105] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.931732][ T5588] 8021q: adding VLAN 0 to HW filter on device team0
[   99.987223][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.987368][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.012541][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.044888][ T2067] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.044993][ T2067] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.152893][ T5589] 8021q: adding VLAN 0 to HW filter on device team0
[  100.197818][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.252354][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.252593][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.313173][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.313345][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.434263][ T5585] 8021q: adding VLAN 0 to HW filter on device team0
[  100.466892][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.541021][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.541207][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.614914][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.615106][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.721964][ T5586] 8021q: adding VLAN 0 to HW filter on device team0
[  100.796160][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.796387][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.846491][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.846708][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.140425][   T59] Bluetooth: hci0: command tx timeout
[  101.220446][   T59] Bluetooth: hci2: command tx timeout
[  101.220482][   T59] Bluetooth: hci1: command tx timeout
[  101.300333][ T4897] Bluetooth: hci3: command tx timeout
[  101.380347][ T4897] Bluetooth: hci4: command tx timeout
[  101.703365][ T5587] 8021q: adding VLAN 0 to HW filter on device batadv0
[  101.964881][ T5588] 8021q: adding VLAN 0 to HW filter on device batadv0
[  102.198742][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0
[  102.308725][ T5587] veth0_vlan: entered promiscuous mode
[  102.446155][ T5587] veth1_vlan: entered promiscuous mode
[  102.487954][ T5588] veth0_vlan: entered promiscuous mode
[  102.606204][ T5588] veth1_vlan: entered promiscuous mode
[  102.626267][ T5589] veth0_vlan: entered promiscuous mode
[  102.644531][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0
[  102.689055][ T5589] veth1_vlan: entered promiscuous mode
[  102.779652][ T5587] veth0_macvtap: entered promiscuous mode
[  102.827591][ T5587] veth1_macvtap: entered promiscuous mode
[  102.884111][ T5588] veth0_macvtap: entered promiscuous mode
[  102.966124][ T5588] veth1_macvtap: entered promiscuous mode
[  102.985712][ T5589] veth0_macvtap: entered promiscuous mode
[  103.012064][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_0
[  103.039898][ T5589] veth1_macvtap: entered promiscuous mode
[  103.064839][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.089276][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_1
[  103.138109][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_0
[  103.178358][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_1
[  103.212645][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0
[  103.297442][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1
[  103.984242][ T5586] veth0_vlan: entered promiscuous mode
[  104.041279][   T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.041295][   T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.165343][ T5586] veth1_vlan: entered promiscuous mode
[  104.187127][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.187150][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.193762][ T5585] veth0_vlan: entered promiscuous mode
[  104.277095][ T5585] veth1_vlan: entered promiscuous mode
[  104.296504][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.296537][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.369509][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.369530][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.457535][ T5586] veth0_macvtap: entered promiscuous mode
[  104.538887][ T5586] veth1_macvtap: entered promiscuous mode
[  104.557295][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.557317][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.757692][ T5585] veth0_macvtap: entered promiscuous mode
[  104.774630][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0
[  104.775572][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.775591][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.818060][ T5585] veth1_macvtap: entered promiscuous mode
[  104.886813][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1
[  104.998689][ T5769] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  105.099586][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0
[  105.299962][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.204058][  T415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.204082][  T415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.325937][ T5788] loop2: detected capacity change from 0 to 7
[  106.376216][ T5788] Dev loop2: unable to read RDB block 7
[  106.376266][ T5788]  loop2: unable to read partition table
[  106.376504][ T5788] loop2: partition table beyond EOD, truncated
[  106.376523][ T5788] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  106.998484][ T5793] syz_tun: entered allmulticast mode
[  107.126933][ T1122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.126954][ T1122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.338032][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.338056][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.360437][  T415] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.430423][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.431807][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.431842][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.465829][ T5799] 0x000000000000-0x000000020000 : ""
[  107.488135][  T415] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.489061][  T415] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.888783][ T5799] ftl_cs: FTL header not found.
[  107.951935][ T1122] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.956261][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.956506][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.229047][ T5808] sch_tbf: burst 1520 is lower than device lo mtu (65550) !
[  108.292014][ T1237] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[  108.374191][  T415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.374215][  T415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.377393][ T5813] netlink: 'syz.2.3': attribute type 2 has an invalid length.
[  108.552968][ T1237] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[  108.592642][ T1237] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  108.592671][ T1237] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  108.592721][ T1237] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  108.598639][ T1237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.598668][ T1237] usb 2-1: Product: syz
[  108.598684][ T1237] usb 2-1: Manufacturer: syz
[  108.598699][ T1237] usb 2-1: SerialNumber: syz
[  108.713988][ T1237] usb 2-1: config 0 descriptor??
[  108.815177][ T1237] uvcvideo 2-1:0.0: probe with driver uvcvideo failed with error -22
[  108.894930][ T5813] : entered promiscuous mode
[  109.031644][  T415] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.031835][  T415] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.082462][   T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.086241][ T1122] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.086480][ T1122] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.086698][ T1122] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.087141][ T1122] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.093960][ T2067] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.095428][ T2067] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.095467][ T2067] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.095500][ T2067] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.350958][ T4964] usb 2-1: USB disconnect, device number 2
[  110.590195][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  110.610191][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  110.620186][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  110.630199][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  110.640211][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  110.650186][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  110.660186][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  110.670190][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  110.680185][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  111.480181][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!!
[  112.577182][ T5844] netlink: 32 bytes leftover after parsing attributes in process `syz.4.25'.
[  112.797986][ T5848] sch_tbf: burst 1520 is lower than device lo mtu (65550) !
[  116.101348][ T4964] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  116.358483][ T4964] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[  116.369950][ T4964] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  116.369978][ T4964] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  116.370032][ T4964] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  116.411747][ T4964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.411777][ T4964] usb 5-1: Product: syz
[  116.411793][ T4964] usb 5-1: Manufacturer: syz
[  116.411807][ T4964] usb 5-1: SerialNumber: syz
[  116.567059][ T4964] usb 5-1: config 0 descriptor??
[  116.669819][ T5877] sch_tbf: burst 1520 is lower than device lo mtu (65550) !
[  116.842220][ T4964] uvcvideo 5-1:0.0: probe with driver uvcvideo failed with error -22
[  117.099860][ T4964] usb 5-1: USB disconnect, device number 2
[  118.336060][ T5882] fuse: Bad value for 'fd'
[  118.792119][ T5893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27'.
[  119.305957][ T5899] netlink: 52 bytes leftover after parsing attributes in process `syz.1.46'.
[  119.383622][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.418449][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.046799][ T5902] syz.3.47 (5902) used greatest stack depth: 18888 bytes left
[  124.113105][ T5922] warning: `syz.3.52' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  124.511190][ T1237] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  124.540449][ T5710] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  124.573214][ T5922] Zero length message leads to an empty skb
[  124.681320][ T1237] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  124.682874][ T1237] usb 5-1: config index 0 descriptor too short (expected 39, got 27)
[  124.682935][ T1237] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  124.682959][ T1237] usb 5-1: config 0 interface 0 has no altsetting 0
[  124.686108][ T1237] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  124.686154][ T1237] usb 5-1: Product: syz
[  124.686168][ T1237] usb 5-1: Manufacturer: syz
[  124.686183][ T1237] usb 5-1: SerialNumber: syz
[  124.721351][ T5710] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[  124.722812][ T5710] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  124.722834][ T5710] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  124.722893][ T5710] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  124.727887][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.727912][ T5710] usb 2-1: Product: syz
[  124.727926][ T5710] usb 2-1: Manufacturer: syz
[  124.727939][ T5710] usb 2-1: SerialNumber: syz
[  124.925968][ T1237] usb 5-1: config 0 descriptor??
[  125.044441][ T1237] hub 5-1:0.0: bad descriptor, ignoring hub
[  125.044484][ T1237] hub 5-1:0.0: probe with driver hub failed with error -5
[  125.051392][ T5710] usb 2-1: config 0 descriptor??
[  125.106442][ T1237] usb 5-1: selecting invalid altsetting 0
[  125.157291][ T5710] uvcvideo 2-1:0.0: probe with driver uvcvideo failed with error -22
[  125.372327][ T5709] usb 2-1: USB disconnect, device number 3
[  126.703762][ T1237] usb 5-1: USB disconnect, device number 3
[  127.201294][ T5709] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  127.415186][ T5709] usb 1-1: New USB device found, idVendor=1199, idProduct=9063, bcdDevice=94.d3
[  127.431653][ T5709] usb 1-1: config 2 has an invalid interface number: 55 but max is 0
[  127.431683][ T5709] usb 1-1: config 2 has no interface number 0
[  127.431718][ T5709] usb 1-1: config 2 interface 55 has no altsetting 0
[  127.443137][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.443166][ T5709] usb 1-1: Product: syz
[  127.443199][ T5709] usb 1-1: Manufacturer: syz
[  127.443214][ T5709] usb 1-1: SerialNumber: syz
[  128.002160][ T5709] usb 1-1: USB disconnect, device number 2
[  132.071402][ T5979] netlink: 52 bytes leftover after parsing attributes in process `syz.2.69'.
[  132.090101][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.120412][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.352868][ T1237] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  132.512793][ T1237] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[  132.518528][ T1237] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  132.518558][ T1237] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  132.518610][ T1237] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  132.567223][ T1237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.567253][ T1237] usb 1-1: Product: syz
[  132.567268][ T1237] usb 1-1: Manufacturer: syz
[  132.567284][ T1237] usb 1-1: SerialNumber: syz
[  132.608775][ T1237] usb 1-1: config 0 descriptor??
[  134.125000][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[  134.125103][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  134.496259][ T1237] uvcvideo 1-1:0.0: probe with driver uvcvideo failed with error -22
[  134.539465][ T1237] usb 1-1: USB disconnect, device number 3
[  135.813341][ T5999] loop2: detected capacity change from 0 to 7
[  135.882035][ T5999] Dev loop2: unable to read RDB block 7
[  135.882074][ T5999]  loop2: AHDI p1 p2 p3
[  135.882095][ T5999] loop2: partition table partially beyond EOD, truncated
[  135.911799][ T5999] loop2: p1 start 1601398130 is beyond EOD, truncated
[  135.911832][ T5999] loop2: p2 start 1702059890 is beyond EOD, truncated
[  138.474692][ T6019] fuse: Bad value for 'fd'
[  141.980091][ T6049] =======================================================
[  141.980091][ T6049] WARNING: The mand mount option has been deprecated and
[  141.980091][ T6049]          and is ignored by this kernel. Remove the mand
[  141.980091][ T6049]          option from the mount to silence this warning.
[  141.980091][ T6049] =======================================================
[  142.191912][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.84'.
[  142.375823][ T6050] overlayfs: overlapping lowerdir path
[  143.110452][   T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  143.260431][   T31] usb 1-1: Using ep0 maxpacket: 32
[  143.261396][   T31] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  143.283245][   T31] usb 1-1: config 0 has an invalid interface number: 188 but max is 0
[  143.283293][   T31] usb 1-1: config 0 has no interface number 0
[  143.283455][   T31] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  143.325612][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.325644][   T31] usb 1-1: Product: syz
[  143.325659][   T31] usb 1-1: Manufacturer: syz
[  143.325673][   T31] usb 1-1: SerialNumber: syz
[  143.433455][   T31] usb 1-1: config 0 descriptor??
[  143.449015][ T6036] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  143.695318][   T31] asix 1-1:0.188: probe with driver asix failed with error -71
[  143.808568][   T31] usb 1-1: USB disconnect, device number 4
[  144.320361][ T5710] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  144.470346][ T5710] usb 2-1: Using ep0 maxpacket: 32
[  144.471627][ T5710] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  144.472645][ T5710] usb 2-1: config 0 has no interfaces?
[  144.472683][ T5710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.502731][ T5710] usb 2-1: config 0 descriptor??
[  145.679075][   T36] usb 2-1: USB disconnect, device number 4
[  147.271764][ T6094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.98'.
[  147.271791][ T6094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.98'.
[  147.702171][ T6105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.103'.
[  147.702266][ T6105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.103'.
[  147.950869][  T997] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  148.125674][  T997] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  148.128801][  T997] usb 1-1: config index 0 descriptor too short (expected 39, got 27)
[  148.128862][  T997] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  148.128886][  T997] usb 1-1: config 0 interface 0 has no altsetting 0
[  148.136654][  T997] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  148.136684][  T997] usb 1-1: Product: syz
[  148.136697][  T997] usb 1-1: Manufacturer: syz
[  148.136710][  T997] usb 1-1: SerialNumber: syz
[  148.179881][  T997] usb 1-1: config 0 descriptor??
[  148.210974][  T997] hub 1-1:0.0: bad descriptor, ignoring hub
[  148.211015][  T997] hub 1-1:0.0: probe with driver hub failed with error -5
[  148.228045][  T997] usb 1-1: selecting invalid altsetting 0
[  148.411038][   T36] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  148.479042][ T6118] device-mapper: ioctl: name not supplied when creating device
[  148.570245][   T36] usb 4-1: Using ep0 maxpacket: 32
[  148.571229][   T36] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  148.572296][   T36] usb 4-1: config 0 has no interfaces?
[  148.572333][   T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.677384][   T36] usb 4-1: config 0 descriptor??
[  149.951293][  T997] usb 1-1: USB disconnect, device number 5
[  149.987460][   T36] usb 4-1: USB disconnect, device number 2
[  151.413024][ T6139] overlayfs: overlapping lowerdir path
[  151.681547][ T6145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.116'.
[  151.681573][ T6145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.116'.
[  151.988919][ T5767] udevd[5767]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  152.134568][ T6147] fuse: Bad value for 'fd'
[  154.818874][ T6146] uprobe: syz.3.117:6146 failed to unregister, leaking uprobe
[  154.948786][ T6146] uprobe: syz.3.117:6146 failed to unregister, leaking uprobe
[  155.136693][ T6171] fuse: Bad value for 'fd'
[  155.703702][ T6168] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.781619][ T6168] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.535652][ T5702] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  157.681522][ T6168] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  157.693185][ T5702] usb 1-1: Using ep0 maxpacket: 32
[  157.694937][ T5702] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  157.696332][ T5702] usb 1-1: config 0 has no interfaces?
[  157.696365][ T5702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.732447][ T6168] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  157.740011][ T5702] usb 1-1: config 0 descriptor??
[  157.769041][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.130'.
[  157.769068][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.130'.
[  158.048680][ T5710] usb 1-1: USB disconnect, device number 6
[  158.460514][ T5591] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  158.649317][ T5591] usb 4-1: New USB device found, idVendor=1199, idProduct=9063, bcdDevice=94.d3
[  158.661224][ T5591] usb 4-1: config 2 has an invalid interface number: 55 but max is 0
[  158.661255][ T5591] usb 4-1: config 2 has no interface number 0
[  158.661285][ T5591] usb 4-1: config 2 interface 55 has no altsetting 0
[  158.664290][ T5591] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.664308][ T5591] usb 4-1: Product: syz
[  158.664317][ T5591] usb 4-1: Manufacturer: syz
[  158.664326][ T5591] usb 4-1: SerialNumber: syz
[  160.673601][ T5591] usb 4-1: USB disconnect, device number 3
[  160.692936][ T5805] udevd[5805]: setting mode of /dev/bus/usb/004/003 to 020664 failed: No such file or directory
[  160.693136][ T5805] udevd[5805]: setting owner of /dev/bus/usb/004/003 to uid=0, gid=0 failed: No such file or directory
[  161.080330][   T43] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  161.080384][   T43] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  161.080423][   T43] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  161.080461][   T43] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  162.445320][ T6223] overlayfs: overlapping lowerdir path
[  165.110437][ T5710] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  165.260359][ T5710] usb 4-1: Using ep0 maxpacket: 32
[  165.261413][ T5710] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  165.266003][ T5710] usb 4-1: config 0 has no interfaces?
[  165.266044][ T5710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.308229][ T5710] usb 4-1: config 0 descriptor??
[  165.542578][ T5710] usb 4-1: USB disconnect, device number 4
[  168.967685][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.152'.
[  168.967714][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.152'.
[  172.155022][ T6283] netlink: 16 bytes leftover after parsing attributes in process `syz.4.159'.
[  172.155059][ T6283] netlink: 24 bytes leftover after parsing attributes in process `syz.4.159'.
[  172.570372][   T36] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  172.731090][   T36] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[  172.734337][   T36] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  172.734364][   T36] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  172.734415][   T36] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  172.804219][   T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.804251][   T36] usb 3-1: Product: syz
[  172.804267][   T36] usb 3-1: Manufacturer: syz
[  172.804282][   T36] usb 3-1: SerialNumber: syz
[  172.897344][   T36] usb 3-1: config 0 descriptor??
[  173.017059][   T36] uvcvideo 3-1:0.0: probe with driver uvcvideo failed with error -22
[  173.657781][ T1237] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  173.705672][ T5709] usb 3-1: USB disconnect, device number 2
[  173.831955][ T1237] usb 1-1: New USB device found, idVendor=1199, idProduct=9063, bcdDevice=94.d3
[  173.833250][ T1237] usb 1-1: config 2 has an invalid interface number: 55 but max is 0
[  173.833267][ T1237] usb 1-1: config 2 has no interface number 0
[  173.833286][ T1237] usb 1-1: config 2 interface 55 has no altsetting 0
[  173.837008][ T1237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.837026][ T1237] usb 1-1: Product: syz
[  173.837034][ T1237] usb 1-1: Manufacturer: syz
[  173.837043][ T1237] usb 1-1: SerialNumber: syz
[  174.102495][ T6300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.164'.
[  174.102522][ T6300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.164'.
[  174.200161][ T1237] usb 1-1: USB disconnect, device number 7
[  178.940283][ T5710] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  179.030247][ T6328] FAULT_INJECTION: forcing a failure.
[  179.030247][ T6328] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  179.030281][ T6328] CPU: 1 UID: 0 PID: 6328 Comm: syz.0.172 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  179.030302][ T6328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  179.030312][ T6328] Call Trace:
[  179.030319][ T6328]  <TASK>
[  179.030325][ T6328]  dump_stack_lvl+0xe8/0x150
[  179.030368][ T6328]  should_fail_ex+0x467/0x600
[  179.030397][ T6328]  _copy_from_iter+0x1d3/0x1660
[  179.030425][ T6328]  ? rcu_is_watching+0x15/0xb0
[  179.030445][ T6328]  ? trace_kmem_cache_alloc+0x29/0xe0
[  179.030474][ T6328]  ? __pfx__copy_from_iter+0x10/0x10
[  179.030498][ T6328]  ? __alloc_skb+0x276/0x7a0
[  179.030514][ T6328]  ? __alloc_skb+0x276/0x7a0
[  179.030535][ T6328]  ? netlink_sendmsg+0x650/0xb40
[  179.030557][ T6328]  ? skb_put+0x112/0x210
[  179.030578][ T6328]  netlink_sendmsg+0x6c0/0xb40
[  179.030608][ T6328]  ? __pfx_netlink_sendmsg+0x10/0x10
[  179.030629][ T6328]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  179.030653][ T6328]  ? __kernel_text_address+0xd/0x30
[  179.030678][ T6328]  ? unwind_get_return_address+0x4d/0x90
[  179.030699][ T6328]  ? __pfx_netlink_sendmsg+0x10/0x10
[  179.030718][ T6328]  sock_sendmsg_nosec+0x13a/0x180
[  179.030747][ T6328]  ____sys_sendmsg+0x565/0x870
[  179.030769][ T6328]  ? __might_fault+0xaf/0x130
[  179.030791][ T6328]  ? __pfx_____sys_sendmsg+0x10/0x10
[  179.030820][ T6328]  ? import_iovec+0x73/0xa0
[  179.030842][ T6328]  ___sys_sendmsg+0x2a5/0x360
[  179.030860][ T6328]  ? __lock_acquire+0x683/0x2ce0
[  179.030880][ T6328]  ? __pfx____sys_sendmsg+0x10/0x10
[  179.030935][ T6328]  ? __fget_files+0x2a/0x420
[  179.030952][ T6328]  ? __fget_files+0x3a8/0x420
[  179.030980][ T6328]  __x64_sys_sendmsg+0x1b7/0x290
[  179.031003][ T6328]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  179.031040][ T6328]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.031058][ T6328]  do_syscall_64+0x174/0x580
[  179.031087][ T6328]  ? trace_irq_disable+0x3b/0x140
[  179.031112][ T6328]  ? clear_bhb_loop+0x70/0xc0
[  179.031133][ T6328]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.031149][ T6328] RIP: 0033:0x7f8329cfe0d9
[  179.031167][ T6328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  179.031181][ T6328] RSP: 002b:00007f8327f56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  179.031212][ T6328] RAX: ffffffffffffffda RBX: 00007f8329f85fa0 RCX: 00007f8329cfe0d9
[  179.031224][ T6328] RDX: 0000000000040040 RSI: 0000200000000040 RDI: 0000000000000006
[  179.031235][ T6328] RBP: 00007f8327f56090 R08: 0000000000000000 R09: 0000000000000000
[  179.031245][ T6328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  179.031255][ T6328] R13: 00007f8329f86038 R14: 00007f8329f85fa0 R15: 00007ffc155cd918
[  179.031284][ T6328]  </TASK>
[  180.352063][ T6337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.175'.
[  180.352091][ T6337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.175'.
[  180.880287][ T1237] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  180.946493][ T5710] usb 2-1: unable to get BOS descriptor or descriptor too short
[  180.949408][ T5710] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  180.969485][ T5710] usb 2-1: unable to read config index 0 descriptor/start: -71
[  180.969527][ T5710] usb 2-1: can't read configurations, error -71
[  180.980641][ T6343] fuse: Bad value for 'fd'
[  181.108063][ T1237] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[  181.122908][ T1237] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  181.122937][ T1237] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  181.122991][ T1237] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  181.151386][ T1237] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.151412][ T1237] usb 5-1: Product: syz
[  181.151426][ T1237] usb 5-1: Manufacturer: syz
[  181.151439][ T1237] usb 5-1: SerialNumber: syz
[  181.185623][ T1237] usb 5-1: config 0 descriptor??
[  181.370389][ T5709] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  181.377177][ T1237] uvcvideo 5-1:0.0: probe with driver uvcvideo failed with error -22
[  181.515541][ T1237] usb 5-1: USB disconnect, device number 4
[  181.588906][ T5709] usb 3-1: New USB device found, idVendor=1199, idProduct=9063, bcdDevice=94.d3
[  181.593138][ T5709] usb 3-1: config 2 has an invalid interface number: 55 but max is 0
[  181.593167][ T5709] usb 3-1: config 2 has no interface number 0
[  181.593199][ T5709] usb 3-1: config 2 interface 55 has no altsetting 0
[  181.597360][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.597384][ T5709] usb 3-1: Product: syz
[  181.597397][ T5709] usb 3-1: Manufacturer: syz
[  181.597411][ T5709] usb 3-1: SerialNumber: syz
[  181.813161][ T4964] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  181.970327][ T4964] usb 1-1: Using ep0 maxpacket: 16
[  181.970888][ T5709] usb 3-1: USB disconnect, device number 3
[  181.971102][ T4964] usb 1-1: New USB device found, idVendor=18d1, idProduct=502d, bcdDevice= 0.00
[  181.972525][ T4964] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  181.972552][ T4964] usb 1-1: config 0 interface 0 has no altsetting 0
[  181.972586][ T4964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.451060][ T4964] usb 1-1: config 0 descriptor??
[  184.224957][ T6360] netlink: 40 bytes leftover after parsing attributes in process `syz.0.183'.
[  185.173732][ T4964] usb 1-1: string descriptor 0 read error: -71
[  185.278749][ T4964] usbhid 1-1:0.0: can't add hid device: -71
[  185.278886][ T4964] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  185.317337][ T4964] usb 1-1: USB disconnect, device number 8
[  185.422561][ T6383] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  186.156888][ T6369] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  186.179248][ T6369] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  187.439286][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  187.439378][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  187.439416][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  187.439453][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.470868][ T4964] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  191.620235][ T4964] usb 1-1: Using ep0 maxpacket: 32
[  191.621459][ T4964] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  191.623196][ T4964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  191.623228][ T4964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  191.623270][ T4964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.703848][ T4964] usb 1-1: config 0 descriptor??
[  191.719213][ T4964] hub 1-1:0.0: USB hub found
[  191.753141][ T6436] loop2: detected capacity change from 0 to 7
[  191.825059][ T6436] Dev loop2: unable to read RDB block 7
[  191.825129][ T6436]  loop2: unable to read partition table
[  191.851484][ T6436] loop2: partition table beyond EOD, truncated
[  191.851525][ T6436] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  191.931321][ T4964] hub 1-1:0.0: 11 ports detected
[  191.935732][ T4964] hub 1-1:0.0: insufficient power available to use all downstream ports
[  192.294095][ T6439] netlink: 164 bytes leftover after parsing attributes in process `syz.4.209'.
[  192.725587][ T6448] fuse: Bad value for 'fd'
[  193.088502][ T4964] hub 1-1:0.0: hub_hub_status failed (err = -32)
[  193.088532][ T4964] hub 1-1:0.0: config failed, can't get hub status (err -32)
[  193.114268][ T4964] usbhid 1-1:0.0: can't add hid device: -32
[  193.114394][ T4964] usbhid 1-1:0.0: probe with driver usbhid failed with error -32
[  193.356121][ T6458] netlink: 32 bytes leftover after parsing attributes in process `syz.2.205'.
[  193.371166][ T6445] uprobe: syz.1.210:6445 failed to unregister, leaking uprobe
[  193.443712][ T6445] uprobe: syz.1.210:6445 failed to unregister, leaking uprobe
[  195.148207][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[  195.148290][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  195.351389][ T5709] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  195.431342][ T1237] usb 1-1: USB disconnect, device number 9
[  195.500979][ T5709] usb 4-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00
[  195.502094][ T5709] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[  195.502119][ T5709] usb 4-1: config 0 has no interface number 0
[  195.502166][ T5709] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  195.502193][ T5709] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  195.502208][ T5709] usb 4-1: config 0 interface 128 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  195.502245][ T5709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.547711][ T5709] usb 4-1: config 0 descriptor??
[  196.292622][ T6482] netlink: 72 bytes leftover after parsing attributes in process `syz.0.222'.
[  197.268072][ T5709] logitech-hidpp-device 0003:046D:C262.0001: item fetching failed at offset 22/24
[  197.275107][ T5709] logitech-hidpp-device 0003:046D:C262.0001: hidpp_probe:parse failed
[  197.275229][ T5709] logitech-hidpp-device 0003:046D:C262.0001: probe with driver logitech-hidpp-device failed with error -22
[  197.423256][ T5709] usb 4-1: USB disconnect, device number 5
[  197.895011][ T6495] sctp: [Deprecated]: syz.0.226 (pid 6495) Use of struct sctp_assoc_value in delayed_ack socket option.
[  197.895011][ T6495] Use struct sctp_sack_info instead
[  197.935649][ T4964] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  198.070297][ T4964] usb 5-1: device descriptor read/64, error -71
[  198.105526][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.228'.
[  198.105586][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.228'.
[  198.450301][ T4964] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  198.525235][ T6506] FAULT_INJECTION: forcing a failure.
[  198.525235][ T6506] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  198.525273][ T6506] CPU: 0 UID: 0 PID: 6506 Comm: syz.3.231 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  198.525297][ T6506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  198.525309][ T6506] Call Trace:
[  198.525317][ T6506]  <TASK>
[  198.525325][ T6506]  dump_stack_lvl+0xe8/0x150
[  198.525361][ T6506]  should_fail_ex+0x467/0x600
[  198.525396][ T6506]  _copy_to_user+0x31/0xb0
[  198.525420][ T6506]  simple_read_from_buffer+0xe1/0x170
[  198.525448][ T6506]  proc_fail_nth_read+0x1be/0x230
[  198.525475][ T6506]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  198.525502][ T6506]  ? rw_verify_area+0x250/0x4d0
[  198.525525][ T6506]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  198.525560][ T6506]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  198.525580][ T6506]  vfs_read+0x219/0xa90
[  198.525612][ T6506]  ? __pfx_vfs_read+0x10/0x10
[  198.525640][ T6506]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  198.525667][ T6506]  ? lockdep_hardirqs_on+0x7a/0x110
[  198.525695][ T6506]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  198.525722][ T6506]  ? mutex_lock_nested+0x152/0x1d0
[  198.525743][ T6506]  ? fdget_pos+0x252/0x320
[  198.525773][ T6506]  ksys_read+0x156/0x270
[  198.525799][ T6506]  ? __pfx_ksys_read+0x10/0x10
[  198.525820][ T6506]  ? __se_sys_kcmp+0x53b/0x8f0
[  198.525858][ T6506]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.525881][ T6506]  do_syscall_64+0x174/0x580
[  198.525907][ T6506]  ? trace_irq_disable+0x3b/0x140
[  198.525937][ T6506]  ? clear_bhb_loop+0x70/0xc0
[  198.525963][ T6506]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.525984][ T6506] RIP: 0033:0x7f2bfd5fe90e
[  198.526004][ T6506] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  198.526022][ T6506] RSP: 002b:00007f2bfb895fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  198.526044][ T6506] RAX: ffffffffffffffda RBX: 00007f2bfb8966c0 RCX: 00007f2bfd5fe90e
[  198.526059][ T6506] RDX: 000000000000000f RSI: 00007f2bfb8960a0 RDI: 0000000000000006
[  198.526072][ T6506] RBP: 00007f2bfb896090 R08: 0000000000000000 R09: 0000000000000000
[  198.526094][ T6506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  198.526106][ T6506] R13: 00007f2bfd8c6038 R14: 00007f2bfd8c5fa0 R15: 00007ffe4a525e38
[  198.526141][ T6506]  </TASK>
[  198.590256][ T4964] usb 5-1: device descriptor read/64, error -71
[  198.620358][ T5591] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  198.711792][ T4964] usb usb5-port1: attempt power cycle
[  198.819247][ T5591] usb 1-1: unable to get BOS descriptor or descriptor too short
[  198.819310][ T5591] usb 1-1: New USB device found, idVendor=1199, idProduct=9063, bcdDevice=94.d3
[  198.820918][ T5591] usb 1-1: unable to read config index 0 descriptor/start: -71
[  198.820953][ T5591] usb 1-1: can't read configurations, error -71
[  198.868004][ T6509] netlink: 72 bytes leftover after parsing attributes in process `syz.3.233'.
[  203.511351][ T6532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.239'.
[  203.511379][ T6532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.239'.
[  203.640252][ T5709] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  204.034282][ T6543] FAULT_INJECTION: forcing a failure.
[  204.034282][ T6543] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  204.034354][ T6543] CPU: 0 UID: 0 PID: 6543 Comm: syz.2.241 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  204.034387][ T6543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  204.034400][ T6543] Call Trace:
[  204.034409][ T6543]  <TASK>
[  204.034418][ T6543]  dump_stack_lvl+0xe8/0x150
[  204.034465][ T6543]  should_fail_ex+0x467/0x600
[  204.034503][ T6543]  _copy_from_user+0x2d/0xb0
[  204.034528][ T6543]  sg_write+0x9f0/0xf10
[  204.034566][ T6543]  ? __pfx_sg_write+0x10/0x10
[  204.034640][ T6543]  ? bpf_lsm_file_permission+0x9/0x20
[  204.034671][ T6543]  ? security_file_permission+0x75/0x260
[  204.034695][ T6543]  ? rw_verify_area+0x209/0x4d0
[  204.034723][ T6543]  ? __pfx_sg_write+0x10/0x10
[  204.034770][ T6543]  vfs_write+0x29f/0xbb0
[  204.034805][ T6543]  ? __pfx_vfs_write+0x10/0x10
[  204.034833][ T6543]  ? __fget_files+0x2a/0x420
[  204.034858][ T6543]  ? __fget_files+0x2a/0x420
[  204.034877][ T6543]  ? __fget_files+0x3a8/0x420
[  204.034896][ T6543]  ? __fget_files+0x2a/0x420
[  204.034926][ T6543]  ksys_write+0x156/0x270
[  204.034954][ T6543]  ? __pfx_ksys_write+0x10/0x10
[  204.034977][ T6543]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.035008][ T6543]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.035031][ T6543]  do_syscall_64+0x174/0x580
[  204.035065][ T6543]  ? clear_bhb_loop+0x70/0xc0
[  204.035092][ T6543]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.035112][ T6543] RIP: 0033:0x7f715667e0d9
[  204.035133][ T6543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  204.035150][ T6543] RSP: 002b:00007f7154894028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  204.035174][ T6543] RAX: ffffffffffffffda RBX: 00007f7156906180 RCX: 00007f715667e0d9
[  204.035190][ T6543] RDX: 00000000000000b2 RSI: 0000200000000040 RDI: 0000000000000005
[  204.035203][ T6543] RBP: 00007f7154894090 R08: 0000000000000000 R09: 0000000000000000
[  204.035216][ T6543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  204.035229][ T6543] R13: 00007f7156906218 R14: 00007f7156906180 R15: 00007ffe546355c8
[  204.035264][ T6543]  </TASK>
[  204.199850][ T5709] usb 4-1: Using ep0 maxpacket: 32
[  204.209417][ T5709] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  204.233296][ T5709] usb 4-1: config 0 has an invalid interface number: 81 but max is 0
[  204.233327][ T5709] usb 4-1: config 0 has no interface number 0
[  204.242664][ T5709] usb 4-1: too many endpoints for config 0 interface 81 altsetting 101: 196, using maximum allowed: 30
[  204.242732][ T5709] usb 4-1: config 0 interface 81 altsetting 101 has 0 endpoint descriptors, different from the interface descriptor's value: 196
[  204.242764][ T5709] usb 4-1: config 0 interface 81 has no altsetting 0
[  204.242802][ T5709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.402503][ T6545] netlink: 72 bytes leftover after parsing attributes in process `syz.4.244'.
[  204.620543][ T5709] usb 4-1: config 0 descriptor??
[  204.664458][ T5709] gspca_main: sunplus-2.14.0 probing 041e:400b
[  205.050850][ T5591] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  205.100243][ T4964] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  205.251882][ T5591] usb 5-1: unable to get BOS descriptor or descriptor too short
[  205.251967][ T5591] usb 5-1: New USB device found, idVendor=1199, idProduct=9063, bcdDevice=94.d3
[  205.253145][ T4964] usb 1-1: Using ep0 maxpacket: 32
[  205.254478][ T4964] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  205.258195][ T4964] usb 1-1: config 0 has no interfaces?
[  205.258246][ T4964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.265072][ T5591] usb 5-1: unable to read config index 0 descriptor/start: -71
[  205.265112][ T5591] usb 5-1: can't read configurations, error -71
[  205.325147][ T4964] usb 1-1: config 0 descriptor??
[  205.659812][   T10] usb 1-1: USB disconnect, device number 12
[  205.675742][ T5709] gspca_sunplus: reg_w_riv err -71
[  205.675861][ T5709] sunplus 4-1:0.81: probe with driver sunplus failed with error -71
[  205.699322][ T5709] usb 4-1: USB disconnect, device number 6
[  206.427633][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.253'.
[  206.427659][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.253'.
[  209.550288][ T5591] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  209.764900][ T5591] usb 3-1: New USB device found, idVendor=1199, idProduct=9063, bcdDevice=94.d3
[  209.816415][ T5591] usb 3-1: config 2 has an invalid interface number: 55 but max is 0
[  209.816448][ T5591] usb 3-1: config 2 has no interface number 0
[  209.816485][ T5591] usb 3-1: config 2 interface 55 has no altsetting 0
[  209.863557][ T5591] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.863587][ T5591] usb 3-1: Product: syz
[  209.863602][ T5591] usb 3-1: Manufacturer: syz
[  209.863617][ T5591] usb 3-1: SerialNumber: syz
[  209.998343][ T6613] fuse: Unknown parameter 'grou00000000000000000000'
[  210.340404][ T5591] usb 3-1: USB disconnect, device number 4
[  214.626066][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.271'.
[  214.626094][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.271'.
[  214.724130][ T6645] netlink: 88 bytes leftover after parsing attributes in process `syz.0.275'.
[  214.938775][ T6653] fuse: Unknown parameter 'grou00000000000000000000'
[  216.272941][ T6671] new mount options do not match the existing superblock, will be ignored
[  216.629607][ T6682] FAULT_INJECTION: forcing a failure.
[  216.629607][ T6682] name failslab, interval 1, probability 0, space 0, times 1
[  216.629642][ T6682] CPU: 0 UID: 0 PID: 6682 Comm: syz.3.285 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  216.629665][ T6682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  216.629676][ T6682] Call Trace:
[  216.629684][ T6682]  <TASK>
[  216.629691][ T6682]  dump_stack_lvl+0xe8/0x150
[  216.629729][ T6682]  should_fail_ex+0x467/0x600
[  216.629764][ T6682]  ? alloc_slab_obj_exts+0x4d/0x170
[  216.629798][ T6682]  should_failslab+0xa8/0x100
[  216.629824][ T6682]  __kmalloc_flags_noprof+0x12c/0x850
[  216.629848][ T6682]  ? alloc_slab_obj_exts+0x4d/0x170
[  216.629883][ T6682]  alloc_slab_obj_exts+0x4d/0x170
[  216.629916][ T6682]  __memcg_slab_post_alloc_hook+0x602/0xf60
[  216.629970][ T6682]  kmem_cache_alloc_noprof+0x415/0x650
[  216.630001][ T6682]  ? dst_alloc+0x105/0x170
[  216.630025][ T6682]  ? dst_alloc+0x105/0x170
[  216.630052][ T6682]  ? __pfx_ip6_dst_gc+0x10/0x10
[  216.630087][ T6682]  dst_alloc+0x105/0x170
[  216.630111][ T6682]  ? __rt6_find_exception_rcu+0x13b/0x4e0
[  216.630146][ T6682]  ip6_rt_cache_alloc+0x3ae/0xa10
[  216.630177][ T6682]  ? __pfx_ip6_rt_cache_alloc+0x10/0x10
[  216.630199][ T6682]  ? fib6_select_path+0x114/0xb50
[  216.630231][ T6682]  ip6_pol_route+0x1237/0x14d0
[  216.630253][ T6682]  ? ip6_pol_route+0x163/0x14d0
[  216.630280][ T6682]  ? __pfx_ip6_pol_route+0x10/0x10
[  216.630302][ T6682]  ? __lock_acquire+0x683/0x2ce0
[  216.630329][ T6682]  ? ip6_addr_string+0x263/0x300
[  216.630364][ T6682]  fib6_rule_lookup+0x222/0x730
[  216.630387][ T6682]  ? __pfx_ip6_pol_route_output+0x10/0x10
[  216.630406][ T6682]  ? __pfx_fib6_rule_lookup+0x10/0x10
[  216.630427][ T6682]  ? ip6_route_output_flags+0x2e/0x5d0
[  216.630452][ T6682]  ? ip6_route_output_flags+0x2e/0x5d0
[  216.630490][ T6682]  ip6_route_output_flags+0x364/0x5d0
[  216.630513][ T6682]  ? ip6_route_output_flags+0x2e/0x5d0
[  216.630539][ T6682]  ip6_dst_lookup_tail+0x1a1/0x1610
[  216.630569][ T6682]  ? txopt_get+0x79/0x3f0
[  216.630597][ T6682]  ? txopt_get+0x79/0x3f0
[  216.630625][ T6682]  ? __pfx_ip6_dst_lookup_tail+0x10/0x10
[  216.630652][ T6682]  ? txopt_get+0x79/0x3f0
[  216.630679][ T6682]  ? txopt_get+0x79/0x3f0
[  216.630703][ T6682]  ? txopt_get+0x79/0x3f0
[  216.630731][ T6682]  ? txopt_get+0x343/0x3f0
[  216.630762][ T6682]  ? __pfx_txopt_get+0x10/0x10
[  216.630796][ T6682]  ip6_dst_lookup_flow+0x89/0x150
[  216.630826][ T6682]  rawv6_sendmsg+0xdd0/0x18c0
[  216.630865][ T6682]  ? smack_ipv6host_label+0x824/0x8e0
[  216.630894][ T6682]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  216.630931][ T6682]  ? smack_socket_sendmsg+0x4b4/0x590
[  216.630957][ T6682]  ? __pfx_smack_socket_sendmsg+0x10/0x10
[  216.631000][ T6682]  ? sock_rps_record_flow+0x19/0x350
[  216.631025][ T6682]  ? inet_sendmsg+0x298/0x320
[  216.631050][ T6682]  ? __pfx_inet_sendmsg+0x10/0x10
[  216.631071][ T6682]  sock_sendmsg_nosec+0x10e/0x180
[  216.631113][ T6682]  ____sys_sendmsg+0x565/0x870
[  216.631146][ T6682]  ? __pfx_____sys_sendmsg+0x10/0x10
[  216.631182][ T6682]  ? import_iovec+0x73/0xa0
[  216.631207][ T6682]  ___sys_sendmsg+0x2a5/0x360
[  216.631230][ T6682]  ? __lock_acquire+0x683/0x2ce0
[  216.631254][ T6682]  ? __pfx____sys_sendmsg+0x10/0x10
[  216.631318][ T6682]  ? __fget_files+0x2a/0x420
[  216.631337][ T6682]  ? __fget_files+0x3a8/0x420
[  216.631370][ T6682]  __x64_sys_sendmsg+0x1b7/0x290
[  216.631396][ T6682]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  216.631439][ T6682]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.631463][ T6682]  do_syscall_64+0x174/0x580
[  216.631491][ T6682]  ? trace_irq_disable+0x3b/0x140
[  216.631523][ T6682]  ? clear_bhb_loop+0x70/0xc0
[  216.631548][ T6682]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.631569][ T6682] RIP: 0033:0x7f2bfd63e0d9
[  216.631589][ T6682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  216.631606][ T6682] RSP: 002b:00007f2bfb896028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  216.631629][ T6682] RAX: ffffffffffffffda RBX: 00007f2bfd8c5fa0 RCX: 00007f2bfd63e0d9
[  216.631645][ T6682] RDX: 0000000020000b88 RSI: 0000200000001c00 RDI: 0000000000000004
[  216.631658][ T6682] RBP: 00007f2bfb896090 R08: 0000000000000000 R09: 0000000000000000
[  216.631671][ T6682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  216.631683][ T6682] R13: 00007f2bfd8c6038 R14: 00007f2bfd8c5fa0 R15: 00007ffe4a525e38
[  216.631717][ T6682]  </TASK>
[  216.685848][ T6684] fuse: Unknown parameter 'group_i00000000000000000000'
[  216.995716][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.292'.
[  216.995739][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.292'.
[  217.110292][ T5709] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  217.158719][ T6697] netlink: 88 bytes leftover after parsing attributes in process `syz.1.293'.
[  217.230278][ T6658] Bluetooth: hci0: command 0x0406 tx timeout
[  217.264294][ T6657] Bluetooth: hci2: command 0x0406 tx timeout
[  217.264340][ T6657] Bluetooth: hci1: command 0x0406 tx timeout
[  217.303322][ T6658] Bluetooth: hci4: command 0x0406 tx timeout
[  217.303362][ T6658] Bluetooth: hci3: command 0x0406 tx timeout
[  217.312577][ T5709] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[  217.314021][ T5709] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  217.314044][ T5709] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  217.314099][ T5709] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  217.317809][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.317832][ T5709] usb 3-1: Product: syz
[  217.317846][ T5709] usb 3-1: Manufacturer: syz
[  217.317859][ T5709] usb 3-1: SerialNumber: syz
[  217.332432][ T5709] usb 3-1: config 0 descriptor??
[  217.351517][ T5709] uvcvideo 3-1:0.0: probe with driver uvcvideo failed with error -22
[  217.539889][ T1237] usb 3-1: USB disconnect, device number 5
[  217.760256][ T5709] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  217.944385][ T5709] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  217.945521][ T5709] usb 4-1: config index 0 descriptor too short (expected 39, got 27)
[  217.945580][ T5709] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  217.945604][ T5709] usb 4-1: config 0 interface 0 has no altsetting 0
[  217.971415][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  217.971447][ T5709] usb 4-1: Product: syz
[  217.971464][ T5709] usb 4-1: Manufacturer: syz
[  217.971479][ T5709] usb 4-1: SerialNumber: syz
[  218.032864][ T5709] usb 4-1: config 0 descriptor??
[  218.084995][ T5709] hub 4-1:0.0: bad descriptor, ignoring hub
[  218.085043][ T5709] hub 4-1:0.0: probe with driver hub failed with error -5
[  218.120649][ T5709] usb 4-1: selecting invalid altsetting 0
[  218.126695][ T6711] FAULT_INJECTION: forcing a failure.
[  218.126695][ T6711] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  218.126731][ T6711] CPU: 1 UID: 0 PID: 6711 Comm: syz.1.296 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  218.126755][ T6711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  218.126767][ T6711] Call Trace:
[  218.126776][ T6711]  <TASK>
[  218.126785][ T6711]  dump_stack_lvl+0xe8/0x150
[  218.126823][ T6711]  should_fail_ex+0x467/0x600
[  218.126860][ T6711]  _copy_from_user+0x2d/0xb0
[  218.126885][ T6711]  kstrtouint_from_user+0xd6/0x180
[  218.126921][ T6711]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  218.126950][ T6711]  ? __lock_acquire+0x683/0x2ce0
[  218.126989][ T6711]  proc_fail_nth_write+0x8e/0x210
[  218.127013][ T6711]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  218.127045][ T6711]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  218.127065][ T6711]  vfs_write+0x29f/0xbb0
[  218.127108][ T6711]  ? __pfx_vfs_write+0x10/0x10
[  218.127137][ T6711]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  218.127168][ T6711]  ? lockdep_hardirqs_on+0x7a/0x110
[  218.127198][ T6711]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  218.127228][ T6711]  ? mutex_lock_nested+0x152/0x1d0
[  218.127251][ T6711]  ? fdget_pos+0x252/0x320
[  218.127282][ T6711]  ksys_write+0x156/0x270
[  218.127310][ T6711]  ? __pfx_ksys_write+0x10/0x10
[  218.127347][ T6711]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.127371][ T6711]  do_syscall_64+0x174/0x580
[  218.127399][ T6711]  ? trace_irq_disable+0x3b/0x140
[  218.127430][ T6711]  ? clear_bhb_loop+0x70/0xc0
[  218.127454][ T6711]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.127474][ T6711] RIP: 0033:0x7f97a17ee90e
[  218.127494][ T6711] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  218.127511][ T6711] RSP: 002b:00007f979fa64fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  218.127533][ T6711] RAX: ffffffffffffffda RBX: 00007f979fa656c0 RCX: 00007f97a17ee90e
[  218.127549][ T6711] RDX: 0000000000000001 RSI: 00007f979fa650a0 RDI: 0000000000000004
[  218.127561][ T6711] RBP: 00007f979fa65090 R08: 0000000000000000 R09: 0000000000000000
[  218.127575][ T6711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  218.127587][ T6711] R13: 00007f97a1ab6128 R14: 00007f97a1ab6090 R15: 00007ffcc8c86a28
[  218.127622][ T6711]  </TASK>
[  218.285064][ T6698] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.341184][ T6698] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.158397][ T6734] fuse: Unknown parameter 'group_i00000000000000000000'
[  219.263263][ T6698] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  219.298505][ T6698] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  219.486859][ T6741] FAULT_INJECTION: forcing a failure.
[  219.486859][ T6741] name failslab, interval 1, probability 0, space 0, times 0
[  219.486897][ T6741] CPU: 1 UID: 0 PID: 6741 Comm: syz.1.304 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  219.486921][ T6741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  219.486933][ T6741] Call Trace:
[  219.486942][ T6741]  <TASK>
[  219.486950][ T6741]  dump_stack_lvl+0xe8/0x150
[  219.486987][ T6741]  should_fail_ex+0x467/0x600
[  219.487025][ T6741]  should_failslab+0xa8/0x100
[  219.487051][ T6741]  __kmalloc_cache_node_noprof+0xa9/0x6a0
[  219.487076][ T6741]  ? __get_vm_area_node+0x136/0x300
[  219.487106][ T6741]  ? __get_vm_area_node+0x136/0x300
[  219.487144][ T6741]  __get_vm_area_node+0x136/0x300
[  219.487180][ T6741]  __vmalloc_node_range_noprof+0x358/0x1730
[  219.487214][ T6741]  ? bpf_prog_alloc_no_stats+0x47/0x4f0
[  219.487244][ T6741]  ? is_bpf_text_address+0x26/0x2b0
[  219.487287][ T6741]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  219.487320][ T6741]  ? is_bpf_text_address+0x26/0x2b0
[  219.487346][ T6741]  ? kernel_text_address+0xa5/0xe0
[  219.487387][ T6741]  ? bpf_prog_alloc_no_stats+0x47/0x4f0
[  219.487406][ T6741]  __vmalloc_noprof+0xd2/0x120
[  219.487438][ T6741]  ? bpf_prog_alloc_no_stats+0x47/0x4f0
[  219.487469][ T6741]  bpf_prog_alloc_no_stats+0x47/0x4f0
[  219.487484][ T6741]  ? bpf_prog_alloc+0x2a/0x1a0
[  219.487502][ T6741]  bpf_prog_alloc+0x3c/0x1a0
[  219.487519][ T6741]  bpf_prog_load+0x7f8/0x1c00
[  219.487546][ T6741]  ? __pfx_bpf_prog_load+0x10/0x10
[  219.487583][ T6741]  __sys_bpf+0xd0d/0xd90
[  219.487606][ T6741]  ? __pfx___sys_bpf+0x10/0x10
[  219.487624][ T6741]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  219.487651][ T6741]  ? rt_mutex_slowunlock+0x219/0x460
[  219.487685][ T6741]  ? ksys_write+0x248/0x270
[  219.487707][ T6741]  ? __pfx_ksys_write+0x10/0x10
[  219.487724][ T6741]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.487746][ T6741]  __x64_sys_bpf+0xba/0xd0
[  219.487769][ T6741]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.487786][ T6741]  do_syscall_64+0x174/0x580
[  219.487810][ T6741]  ? clear_bhb_loop+0x70/0xc0
[  219.487830][ T6741]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.487846][ T6741] RIP: 0033:0x7f97a182e0d9
[  219.487862][ T6741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  219.487875][ T6741] RSP: 002b:00007f979fa44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  219.487894][ T6741] RAX: ffffffffffffffda RBX: 00007f97a1ab6180 RCX: 00007f97a182e0d9
[  219.487906][ T6741] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005
[  219.487916][ T6741] RBP: 00007f979fa44090 R08: 0000000000000000 R09: 0000000000000000
[  219.487926][ T6741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  219.487936][ T6741] R13: 00007f97a1ab6218 R14: 00007f97a1ab6180 R15: 00007ffcc8c86a28
[  219.487963][ T6741]  </TASK>
[  219.488219][ T6741] syz.1.304: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  219.491703][ T6741] CPU: 1 UID: 0 PID: 6741 Comm: syz.1.304 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  219.491729][ T6741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  219.491741][ T6741] Call Trace:
[  219.491750][ T6741]  <TASK>
[  219.491759][ T6741]  dump_stack_lvl+0xe8/0x150
[  219.491796][ T6741]  warn_alloc+0x24c/0x270
[  219.491825][ T6741]  ? __pfx_warn_alloc+0x10/0x10
[  219.491858][ T6741]  ? __get_vm_area_node+0x2af/0x300
[  219.491897][ T6741]  __vmalloc_node_range_noprof+0x37d/0x1730
[  219.491939][ T6741]  ? is_bpf_text_address+0x26/0x2b0
[  219.491982][ T6741]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  219.492013][ T6741]  ? is_bpf_text_address+0x26/0x2b0
[  219.492040][ T6741]  ? kernel_text_address+0xa5/0xe0
[  219.492078][ T6741]  ? bpf_prog_alloc_no_stats+0x47/0x4f0
[  219.492096][ T6741]  __vmalloc_noprof+0xd2/0x120
[  219.492126][ T6741]  ? bpf_prog_alloc_no_stats+0x47/0x4f0
[  219.492144][ T6741]  bpf_prog_alloc_no_stats+0x47/0x4f0
[  219.492159][ T6741]  ? bpf_prog_alloc+0x2a/0x1a0
[  219.492176][ T6741]  bpf_prog_alloc+0x3c/0x1a0
[  219.492194][ T6741]  bpf_prog_load+0x7f8/0x1c00
[  219.492227][ T6741]  ? __pfx_bpf_prog_load+0x10/0x10
[  219.492265][ T6741]  __sys_bpf+0xd0d/0xd90
[  219.492287][ T6741]  ? __pfx___sys_bpf+0x10/0x10
[  219.492305][ T6741]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  219.492332][ T6741]  ? rt_mutex_slowunlock+0x219/0x460
[  219.492365][ T6741]  ? ksys_write+0x248/0x270
[  219.492386][ T6741]  ? __pfx_ksys_write+0x10/0x10
[  219.492409][ T6741]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.492430][ T6741]  __x64_sys_bpf+0xba/0xd0
[  219.492461][ T6741]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.492479][ T6741]  do_syscall_64+0x174/0x580
[  219.492503][ T6741]  ? clear_bhb_loop+0x70/0xc0
[  219.492523][ T6741]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.492539][ T6741] RIP: 0033:0x7f97a182e0d9
[  219.492555][ T6741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  219.492568][ T6741] RSP: 002b:00007f979fa44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  219.492585][ T6741] RAX: ffffffffffffffda RBX: 00007f97a1ab6180 RCX: 00007f97a182e0d9
[  219.492596][ T6741] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005
[  219.492607][ T6741] RBP: 00007f979fa44090 R08: 0000000000000000 R09: 0000000000000000
[  219.492617][ T6741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  219.492627][ T6741] R13: 00007f97a1ab6218 R14: 00007f97a1ab6180 R15: 00007ffcc8c86a28
[  219.492653][ T6741]  </TASK>
[  219.492691][ T6741] Mem-Info:
[  219.492750][ T6741] active_anon:184 inactive_anon:7016 isolated_anon:0
[  219.492750][ T6741]  active_file:26061 inactive_file:37560 isolated_file:0
[  219.492750][ T6741]  unevictable:8 dirty:180 writeback:0
[  219.492750][ T6741]  slab_reclaimable:11796 slab_unreclaimable:100442
[  219.492750][ T6741]  mapped:35198 shmem:523 pagetables:1459
[  219.492750][ T6741]  sec_pagetables:0 bounce:0
[  219.492750][ T6741]  kernel_misc_reclaimable:0
[  219.492750][ T6741]  free:1311704 free_pcp:1460 free_cma:0
[  219.492831][ T6741] Node 0 active_anon:736kB inactive_anon:28064kB active_file:104048kB inactive_file:150240kB unevictable:32kB isolated(anon):0kB isolated(file):0kB mapped:140792kB dirty:720kB writeback:0kB shmem:2092kB kernel_stack:13680kB pagetables:5676kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  219.492910][ T6741] Node 1 active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:32kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  219.492982][ T6741] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  219.493094][ T6741] lowmem_reserve[]: 0 2500 2502 2502 2502
[  219.493315][ T6741] Node 0 DMA32 free:1287324kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:736kB inactive_anon:28064kB active_file:104048kB inactive_file:150240kB unevictable:32kB writepending:720kB zspages:0kB present:3129332kB managed:2560652kB mlocked:32kB bounce:0kB free_pcp:5824kB local_pcp:2276kB free_cma:0kB
[  219.493431][ T6741] lowmem_reserve[]: 0 0 1 1 1
[  219.493526][ T6741] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1856kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB
[  219.493616][ T6741] lowmem_reserve[]: 0 0 0 0 0
[  219.493828][ T6741] Node 1 Normal free:3944132kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  219.493947][ T6741] lowmem_reserve[]: 0 0 0 0 0
[  219.494137][ T6741] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  219.494569][ T6741] Node 0 DMA32: 823*4kB (UME) 1566*8kB (UME) 1067*16kB (UM) 533*32kB (UME) 400*64kB (UME) 209*128kB (UME) 153*256kB (UME) 82*512kB (ME) 16*1024kB (UM) 1*2048kB (M) 265*4096kB (M) = 1287324kB
[  219.495472][ T6741] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  219.495740][ T6741] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 9*16kB (UM) 7*32kB (UM) 11*64kB (UM) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3944132kB
[  219.496570][ T6741] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  219.496612][ T6741] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  219.496665][ T6741] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  219.496682][ T6741] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  219.496698][ T6741] 64140 total pagecache pages
[  219.496711][ T6741] 0 pages in swap cache
[  219.496718][ T6741] Free swap  = 124996kB
[  219.496725][ T6741] Total swap = 124996kB
[  219.496734][ T6741] 2097051 pages RAM
[  219.496767][ T6741] 0 pages HighMem/MovableOnly
[  219.496799][ T6741] 424809 pages reserved
[  219.496831][ T6741] 0 pages cma reserved
[  221.480855][  T149] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  221.485750][  T149] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  221.486639][  T149] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  221.486717][  T149] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  221.701406][ T4964] usb 4-1: USB disconnect, device number 7
[  221.793757][ T6753] loop2: detected capacity change from 0 to 7
[  221.801520][ T6754] capability: warning: `syz.2.309' uses deprecated v2 capabilities in a way that may be insecure
[  221.905372][ T6753] Dev loop2: unable to read RDB block 7
[  221.905417][ T6753]  loop2: unable to read partition table
[  221.905650][ T6753] loop2: partition table beyond EOD, truncated
[  221.905670][ T6753] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  221.912991][ T6750] vhci_hcd vhci_hcd.0: remove, state 4
[  221.974269][ T6750] usb usb34: USB disconnect, device number 1
[  222.000355][  T997] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  222.955610][  T997] usb 1-1: Using ep0 maxpacket: 32
[  222.959074][  T997] usb 1-1: unable to get BOS descriptor or descriptor too short
[  222.959138][  T997] usb 1-1: New USB device found, idVendor=0421, idProduct=04df, bcdDevice=d9.93
[  222.962635][  T997] usb 1-1: config 0 has an invalid interface number: 206 but max is 0
[  222.962663][  T997] usb 1-1: config 0 has no interface number 0
[  222.962716][  T997] usb 1-1: config 0 interface 206 has no altsetting 0
[  222.972236][  T997] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.972265][  T997] usb 1-1: Product: syz
[  222.972281][  T997] usb 1-1: Manufacturer: syz
[  222.972296][  T997] usb 1-1: SerialNumber: syz
[  223.004808][ T6764] netlink: 72 bytes leftover after parsing attributes in process `syz.4.312'.
[  223.547978][ T6767] fuse: Unknown parameter 'group_i00000000000000000000'
[  223.791118][  T997] usb 1-1: config 0 descriptor??
[  224.273351][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.318'.
[  224.273378][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.318'.
[  224.382748][   T31] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  224.550354][   T31] usb 2-1: device descriptor read/64, error -71
[  224.810235][   T31] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  224.940260][   T31] usb 2-1: device descriptor read/64, error -71
[  224.953847][ T6786] loop2: detected capacity change from 0 to 7
[  225.051033][   T31] usb usb2-port1: attempt power cycle
[  225.137097][ T6786] Dev loop2: unable to read RDB block 7
[  225.137154][ T6786]  loop2: unable to read partition table
[  225.137391][ T6786] loop2: partition table beyond EOD, truncated
[  225.137802][ T6786] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  225.424510][  T997] rndis_host 1-1:0.206: skipping garbage
[  225.424534][  T997] rndis_host 1-1:0.206: rndis: master #0/0000000000000000 slave #1/0000000000000000
[  225.425541][  T997] cdc_acm 1-1:0.206: skipping garbage
[  225.455361][   T31] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  225.501178][  T997] usb 1-1: USB disconnect, device number 13
[  225.523266][   T31] usb 2-1: device descriptor read/8, error -71
[  225.751168][ T6800] fuse: Unknown parameter 'group_id00000000000000000000'
[  225.763156][   T31] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  225.783168][   T31] usb 2-1: device descriptor read/8, error -71
[  225.890620][   T31] usb usb2-port1: unable to enumerate USB device
[  226.046201][  T415] vhci_hcd vhci_hcd.0: stop threads
[  226.046223][  T415] vhci_hcd vhci_hcd.0: release socket
[  226.046258][  T415] vhci_hcd vhci_hcd.0: disconnect device
[  226.051973][  T415] vhci_hcd vhci_hcd.0: stop threads
[  226.051992][  T415] vhci_hcd vhci_hcd.0: release socket
[  226.052031][  T415] vhci_hcd vhci_hcd.0: disconnect device
[  226.058237][  T415] vhci_hcd vhci_hcd.0: stop threads
[  226.058256][  T415] vhci_hcd vhci_hcd.0: release socket
[  226.058285][  T415] vhci_hcd vhci_hcd.0: disconnect device
[  226.058463][  T415] vhci_hcd vhci_hcd.0: stop threads
[  226.058475][  T415] vhci_hcd vhci_hcd.0: release socket
[  226.058501][  T415] vhci_hcd vhci_hcd.0: disconnect device
[  226.058663][  T415] vhci_hcd vhci_hcd.0: stop threads
[  226.058675][  T415] vhci_hcd vhci_hcd.0: release socket
[  226.058701][  T415] vhci_hcd vhci_hcd.0: disconnect device
[  226.058848][  T415] vhci_hcd vhci_hcd.0: stop threads
[  226.058860][  T415] vhci_hcd vhci_hcd.0: release socket
[  226.058885][  T415] vhci_hcd vhci_hcd.0: disconnect device
[  226.059032][  T415] vhci_hcd vhci_hcd.0: stop threads
[  226.059044][  T415] vhci_hcd vhci_hcd.0: release socket
[  226.059069][  T415] vhci_hcd vhci_hcd.0: disconnect device
[  226.059232][  T415] vhci_hcd vhci_hcd.0: stop threads
[  226.059244][  T415] vhci_hcd vhci_hcd.0: release socket
[  226.059269][  T415] vhci_hcd vhci_hcd.0: disconnect device
[  226.059324][ T6750] vhci_hcd vhci_hcd.0: USB bus 34 deregistered
[  226.350337][ T6750] vhci_hcd vhci_hcd.0: remove, state 4
[  226.350371][ T6750] usb usb33: USB disconnect, device number 1
[  226.569343][   T12] vhci_hcd vhci_hcd.0: stop threads
[  226.569366][   T12] vhci_hcd vhci_hcd.0: release socket
[  226.569395][   T12] vhci_hcd vhci_hcd.0: disconnect device
[  226.569506][   T12] vhci_hcd vhci_hcd.0: stop threads
[  226.569520][   T12] vhci_hcd vhci_hcd.0: release socket
[  226.569550][   T12] vhci_hcd vhci_hcd.0: disconnect device
[  226.569604][   T12] vhci_hcd vhci_hcd.0: stop threads
[  226.569616][   T12] vhci_hcd vhci_hcd.0: release socket
[  226.569646][   T12] vhci_hcd vhci_hcd.0: disconnect device
[  226.569698][   T12] vhci_hcd vhci_hcd.0: stop threads
[  226.569714][   T12] vhci_hcd vhci_hcd.0: release socket
[  226.569715][ T6750] vhci_hcd vhci_hcd.0: USB bus 33 deregistered
[  226.669433][   T12] ==================================================================
[  226.669448][   T12] BUG: KASAN: slab-use-after-free in vhci_cleanup_unlink_list+0x447/0x450
[  226.669481][   T12] Read of size 4 at addr ffff8880299c0ea0 by task kworker/u8:0/12
[  226.669497][   T12] 
[  226.669507][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  226.669528][   T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  226.669540][   T12] Workqueue: usbip_event event_handler
[  226.669564][   T12] Call Trace:
[  226.669571][   T12]  <TASK>
[  226.669578][   T12]  dump_stack_lvl+0xe8/0x150
[  226.669603][   T12]  print_address_description+0x55/0x1e0
[  226.669626][   T12]  ? vhci_cleanup_unlink_list+0x447/0x450
[  226.669648][   T12]  print_report+0x58/0x70
[  226.669668][   T12]  kasan_report+0x117/0x150
[  226.669687][   T12]  ? vhci_cleanup_unlink_list+0x447/0x450
[  226.669713][   T12]  vhci_cleanup_unlink_list+0x447/0x450
[  226.669737][   T12]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  226.669764][   T12]  vhci_shutdown_connection+0x287/0x630
[  226.669788][   T12]  event_handler+0x2b0/0x4a0
[  226.669808][   T12]  ? process_scheduled_works+0xa20/0x14e0
[  226.669827][   T12]  process_scheduled_works+0xa8e/0x14e0
[  226.669855][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  226.669876][   T12]  ? assign_work+0x3cf/0x5d0
[  226.669895][   T12]  worker_thread+0xa47/0xfb0
[  226.669924][   T12]  kthread+0x388/0x470
[  226.669950][   T12]  ? __pfx_worker_thread+0x10/0x10
[  226.669971][   T12]  ? __pfx_kthread+0x10/0x10
[  226.669993][   T12]  ret_from_fork+0x514/0xb70
[  226.670019][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  226.670088][   T12]  ? __switch_to+0xc89/0x1420
[  226.670109][   T12]  ? __pfx_kthread+0x10/0x10
[  226.670130][   T12]  ret_from_fork_asm+0x1a/0x30
[  226.670163][   T12]  </TASK>
[  226.670169][   T12] 
[  226.670173][   T12] Allocated by task 1:
[  226.670180][   T12]  kasan_save_track+0x3e/0x80
[  226.670204][   T12]  __kasan_kmalloc+0x93/0xb0
[  226.670217][   T12]  __kmalloc_noprof+0x41a/0x780
[  226.670232][   T12]  __usb_create_hcd+0x67/0x900
[  226.670250][   T12]  vhci_hcd_probe+0x104/0x3f0
[  226.670269][   T12]  platform_probe+0xf9/0x190
[  226.670286][   T12]  really_probe+0x254/0xae0
[  226.670306][   T12]  __driver_probe_device+0x1e8/0x360
[  226.670326][   T12]  driver_probe_device+0x4f/0x240
[  226.670345][   T12]  __device_attach_driver+0[  226.670345][   T12]  __device_attach_driver+0x270/0x410
[  226.670364][   T12]  bus_for_each_drv+0x25b/0x2f0
[  226.670378][   T12]  __device_attach+0x2c7/0x450
[  226.670395][   T12]  device_initial_probe+0xa1/0xd0
[  226.670413][   T12]  bus_probe_device+0x12d/0x220
[  226.670425][   T12]  device_add+0x7d7/0xb80
[  226.670440][   T12]  platform_device_add+0x4bd/0x860
[  226.670456][   T12]  platform_device_register_full+0x62d/0x710
[  226.670472][   T12]  vhci_hcd_init+0x227/0x370
[  226.670489][   T12]  do_one_initcall+0x250/0x870
[  226.670510][   T12]  do_initcall_level+0x10a/0x1a0
[  226.670528][   T12]  do_initcalls+0x59/0xa0
[  226.670545][   T12]  kernel_init_freeable+0x29d/0x3e0
[  226.670561][   T12]  kernel_init+0x1d/0x1d0
[  226.670576][   T12]  ret_from_fork+0x514/0xb70
[  226.670597][   T12]  ret_from_fork_asm+0x1a/0x30
[  226.670617][   T12] 
[  226.670621][   T12] Freed by task 6750:
[  226.670629][   T12]  kasan_save_track+0x3e/0x80
[  226.670652][   T12]  kasan_save_free_info+0x40/0x50
[  226.670670][   T12]  __kasan_slab_free+0x5c/0x80
[  226.670684][   T12]  kfree+0x1c5/0x6c0
[  226.670704][   T12]  vhci_hcd_remove+0xed/0x110
[  226.670722][   T12]  device_release_driver_internal+0x48b/0x880
[  226.670743][   T12]  unbind_store+0x1a4/0x1d0
[  226.670759][   T12]  kernfs_fop_write_iter+0x3a5/0x540
[  226.670780][   T12]  vfs_write+0x61e/0xbb0
[  226.670796][   T12]  ksys_write+0x156/0x270
[  226.670811][   T12]  do_syscall_64+0x174/0x580
[  226.670833][   T12]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.670848][   T12] 
[  226.670852][   T12] Last potentially related work creation:
[  226.670859][   T12]  kasan_save_stack+0x3e/0x60
[  226.670880][   T12]  kasan_record_aux_stack+0xbd/0xd0
[  226.670898][   T12]  insert_work+0x3d/0x330
[  226.670913][   T12]  __queue_work+0xd1d/0x10f0
[  226.670934][   T12]  queue_work_on+0x106/0x1d0
[  226.670953][   T12]  unlink1+0x33d/0x3e0
[  226.670970][   T12]  usb_hcd_unlink_urb+0xda/0x1d0
[  226.670985][   T12]  usb_kill_urb+0x10b/0x2f0
[  226.671004][   T12]  hub_quiesce+0x20f/0x320
[  226.671016][   T12]  hub_suspend+0x904/0xad0
[  226.671039][   T12]  usb_suspend_both+0x285/0x1040
[  226.671055][   T12]  usb_runtime_suspend+0x58/0x110
[  226.671073][   T12]  __rpm_callback+0x2d6/0x930
[  226.671093][   T12]  rpm_suspend+0x8a0/0x17a0
[  226.671110][   T12]  __pm_runtime_suspend+0x12c/0x1a0
[  226.671128][   T12]  usb_new_device+0xade/0x1680
[  226.671148][   T12]  register_root_hub+0x250/0x5c0
[  226.671167][   T12]  usb_add_hcd+0xac7/0xf80
[  226.671186][   T12]  vhci_hcd_probe+0x141/0x3f0
[  226.671205][   T12]  platform_probe+0xf9/0x190
[  226.671222][   T12]  really_probe+0x254/0xae0
[  226.671240][   T12]  __driver_probe_device+0x1e8/0x360
[  226.671258][   T12]  driver_probe_device+0x4f/0x240
[  226.671278][   T12]  __device_attach_driver+0x270/0x410
[  226.671297][   T12]  bus_for_each_drv+0x25b/0x2f0
[  226.671310][   T12]  __device_attach+0x2c7/0x450
[  226.671327][   T12]  device_initial_probe+0xa1/0xd0
[  226.671344][   T12]  bus_probe_device+0x12d/0x220
[  226.671357][   T12]  device_add+0x7d7/0xb80
[  226.671372][   T12]  platform_device_add+0x4bd/0x860
[  226.671387][   T12]  platform_device_register_full+0x62d/0x710
[  226.671403][   T12]  vhci_hcd_init+0x227/0x370
[  226.671419][   T12]  do_one_initcall+0x250/0x870
[  226.671439][   T12]  do_initcall_level+0x10a/0x1a0
[  226.671455][   T12]  do_initcalls+0x59/0xa0
[  226.671471][   T12]  kernel_init_freeable+0x29d/0x3e0
[  226.671488][   T12]  kernel_init+0x1d/0x1d0
[  226.671502][   T12]  ret_from_fork+0x514/0xb70
[  226.671522][   T12]  ret_from_fork_asm+0x1a/0x30
[  226.671545][   T12] 
[  226.671549][   T12] Second to last potentially related work creation:
[  226.671555][   T12]  kasan_save_stack+0x3e/0x60
[  226.671578][   T12]  kasan_record_aux_stack+0xbd/0xd0
[  226.671596][   T12]  insert_work+0x3d/0x330
[  226.671609][   T12]  __queue_work+0xd1d/0x10f0
[  226.671625][   T12]  queue_work_on+0x106/0x1d0
[  226.671642][   T12]  usb_hcd_submit_urb+0xa2d/0x1b40
[  226.671659][   T12]  usb_start_wait_urb+0x13f/0x5b0
[  226.671681][   T12]  usb_control_msg+0x234/0x3e0
[  226.671702][   T12]  hub_ext_port_status+0x114/0x810
[  226.671721][   T12]  hub_activate+0x740/0x1b10
[  226.671736][   T12]  process_scheduled_works+0xa8e/0x14e0
[  226.671755][   T12]  worker_thread+0xa47/0xfb0
[  226.671774][   T12]  kthread+0x388/0x470
[  226.671797][   T12]  ret_from_fork+0x514/0xb70
[  226.671820][   T12]  ret_from_fork_asm+0x1a/0x30
[  226.671845][   T12] 
[  226.671849][   T12] The buggy address belongs to the object at ffff8880299c0000
[  226.671849][   T12]  which belongs to the cache kmalloc-8k of size 8192
[  226.671867][   T12] The buggy address is located 3744 bytes inside of
[  226.671867][   T12]  freed 8192-byte region [ffff8880299c0000, ffff8880299c2000)
[  226.671887][   T12] 
[  226.671893][   T12] The buggy address belongs to the physical page:
[  226.671904][   T12] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x299c0
[  226.671923][   T12] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  226.671939][   T12] flags: 0x80000000000040(head|node=0|zone=1)
[  226.671955][   T12] page_type: f5(slab)
[  226.671974][   T12] raw: 0080000000000040 ffff88813ffb2280 dead000000000122 0000000000000000
[  226.671992][   T12] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[  226.672009][   T12] head: 0080000000000040 ffff88813ffb2280 dead000000000122 0000000000000000
[  226.672036][   T12] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[  226.672054][   T12] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  226.672071][   T12] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[  226.672082][   T12] page dumped because: kasan: bad access detected
[  226.672092][   T12] page_owner tracks the page as allocated
[  226.672099][   T12] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 11064102312, free_ts 11017607369
[  226.672135][   T12]  post_alloc_hook+0x1f9/0x250
[  226.672164][   T12]  get_page_from_freelist+0x262a/0x26a0
[  226.672186][   T12]  __alloc_frozen_pages_noprof+0x18d/0x380
[  226.672207][   T12]  allocate_slab+0x79/0x5e0
[  226.672230][   T12]  refill_objects+0x2d8/0x350
[  226.672254][   T12]  __pcs_replace_empty_main+0x330/0x690
[  226.672277][   T12]  __kmalloc_cache_noprof+0x468/0x6b0
[  226.672295][   T12]  dummy_hcd_init+0x3e2/0xd00
[  226.672312][   T12]  do_one_initcall+0x250/0x870
[  226.672338][   T12]  do_initcall_level+0x10a/0x1a0
[  226.672359][   T12]  do_initcalls+0x59/0xa0
[  226.672380][   T12]  kernel_init_freeable+0x29d/0x3e0
[  226.672401][   T12]  kernel_init+0x1d/0x1d0
[  226.672418][   T12]  ret_from_fork+0x514/0xb70
[  226.672444][   T12]  ret_from_fork_asm+0x1a/0x30
[  226.672472][   T12] page last free pid 1237 tgid 1237 stack trace:
[  226.672483][   T12]  free_pages_prepare+0x946/0xa40
[  226.672511][   T12]  __free_contig_range_common+0x174/0x340
[  226.672534][   T12]  free_pages_bulk+0x48/0x120
[  226.672553][   T12]  vfree+0x26f/0x510
[  226.672579][   T12]  delayed_vfree_work+0x55/0x80
[  226.672597][   T12]  process_scheduled_works+0xa8e/0x14e0
[  226.672617][   T12]  worker_thread+0xa47/0xfb0
[  226.672637][   T12]  kthread+0x388/0x470
[  226.672663][   T12]  ret_from_fork+0x514/0xb70
[  226.672689][   T12]  ret_from_fork_asm+0x1a/0x30
[  226.672717][   T12] 
[  226.672721][   T12] Memory state around the buggy address:
[  226.672733][   T12]  ffff8880299c0d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  226.672747][   T12]  ffff8880299c0e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  226.672761][   T12] >ffff8880299c0e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  226.672771][   T12]                                ^
[  226.672782][   T12]  ffff8880299c0f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  226.672796][   T12]  ffff8880299c0f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  226.672806][   T12] ==================================================================
[  228.467487][   T12] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  228.467511][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  228.467538][   T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  228.467552][   T12] Workqueue: usbip_event event_handler
[  228.467579][   T12] Call Trace:
[  228.467585][   T12]  <TASK>
[  228.467590][   T12]  vpanic+0x56c/0xa60
[  228.467611][   T12]  ? __pfx_vpanic+0x10/0x10
[  228.467629][   T12]  ? __pfx___schedule+0x10/0x10
[  228.467646][   T12]  panic+0xc5/0xd0
[  228.467662][   T12]  ? __pfx_panic+0x10/0x10
[  228.467678][   T12]  ? preempt_schedule_thunk+0x16/0x40
[  228.467693][   T12]  ? vhci_cleanup_unlink_list+0x447/0x450
[  228.467709][   T12]  check_panic_on_warn+0x89/0xb0
[  228.467727][   T12]  ? vhci_cleanup_unlink_list+0x447/0x450
[  228.467743][   T12]  end_report+0x73/0x170
[  228.467755][   T12]  ? vhci_cleanup_unlink_list+0x447/0x450
[  228.467770][   T12]  kasan_report+0x128/0x150
[  228.467783][   T12]  ? vhci_cleanup_unlink_list+0x447/0x450
[  228.467801][   T12]  vhci_cleanup_unlink_list+0x447/0x450
[  228.467817][   T12]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  228.467834][   T12]  vhci_shutdown_connection+0x287/0x630
[  228.467863][   T12]  event_handler+0x2b0/0x4a0
[  228.467885][   T12]  ? process_scheduled_works+0xa20/0x14e0
[  228.467898][   T12]  process_scheduled_works+0xa8e/0x14e0
[  228.467917][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  228.467930][   T12]  ? assign_work+0x3cf/0x5d0
[  228.467943][   T12]  worker_thread+0xa47/0xfb0
[  228.467963][   T12]  kthread+0x388/0x470
[  228.467979][   T12]  ? __pfx_worker_thread+0x10/0x10
[  228.467991][   T12]  ? __pfx_kthread+0x10/0x10
[  228.468014][   T12]  ret_from_fork+0x514/0xb70
[  228.468032][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  228.468048][   T12]  ? __switch_to+0xc89/0x1420
[  228.468062][   T12]  ? __pfx_kthread+0x10/0x10
[  228.468078][   T12]  ret_from_fork_asm+0x1a/0x30
[  228.468099][   T12]  </TASK>
[  228.468408][   T12] Kernel Offset: disabled