last executing test programs:

3m37.065009664s ago: executing program 2 (id=954):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = userfaultfd(0x80801)
r1 = getpid()
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
openat$kvm(0xffffffffffffff9c, 0x0, 0x44000, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000541000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
socket$kcm(0x29, 0x2, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="bf529a5af70a6c1d0b9ac24c9af2200800", @ANYRES16=0x0, @ANYRESDEC=r1, @ANYRES32=0x0, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=0x0, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r1, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008c00010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32, @ANYBLOB], 0x100}}, 0x90)
get_robust_list(0x0, &(0x7f0000000340)=&(0x7f00000002c0)={&(0x7f0000000140), 0x0, &(0x7f0000000240)={&(0x7f00000001c0)}}, &(0x7f00000003c0)=0x18)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
ioctl$SIOCGETNODEID(r4, 0x89e1, &(0x7f0000000040)={0x2})
setsockopt$inet_tcp_int(r5, 0x6, 0x3, &(0x7f00000000c0)=0x3, 0xfffffffffffffc73)
connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)
shutdown(0xffffffffffffffff, 0x1)
sendto$inet(r5, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0)
splice(r5, 0x0, r4, 0x0, 0xfea8, 0xa)
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1})

3m35.209973607s ago: executing program 2 (id=960):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440))
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x18)

3m34.780162851s ago: executing program 2 (id=961):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000780)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000002a40)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f00000000c0)="ebe3a0e90073060000000080e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e03b2052579c5084df41f536aca738f025335caf900b1a5c6871", 0x3e}, {&(0x7f00000002c0)="c9aaa552", 0x4}], 0x3, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x40}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/91, 0x5b}], 0x1}, 0x10101)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x0)

3m34.714703097s ago: executing program 2 (id=962):
r0 = socket(0x22, 0x2, 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x108) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x108)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') (async)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000440)='./file0\x00')
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020100030e000000fcffffff0400000005000600000000000a00000000000000fc01ff80000000000000000000000000000000000000000005000500000000000a0000002efcb098950a0ec00000000000000000000000aa000000000000000002001b00"], 0x70}}, 0x0)
getsockopt$sock_int(r0, 0x1, 0x13, 0x0, &(0x7f0000000380)) (async)
getsockopt$sock_int(r0, 0x1, 0x13, 0x0, &(0x7f0000000380))
r4 = socket$unix(0x1, 0x5, 0x0)
getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f0000000180), &(0x7f0000000200)=0x8)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x100}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x4844) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x100}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x4844)

3m34.548153883s ago: executing program 2 (id=964):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "25ace3f62b00ee00", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3ffd9afd96e6c0"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
poll(&(0x7f0000000200), 0x51, 0x0)
shutdown(r0, 0x1)

3m34.310926697s ago: executing program 2 (id=966):
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r4 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
read$FUSE(r3, &(0x7f0000007100)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000240)={0x50, 0x0, r5, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50)
read$FUSE(r3, &(0x7f0000002900)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r6}, 0x10)
syz_fuse_handle_req(r3, &(0x7f0000004940)="4f50356c9e70ce6dcbe3d22a41991ada3384a3cc61e92a72df663226dcad115a3308ae59bd26134ca5b1d27458f3aebf34acb004e78edccd1c3d66ebfda95d8369a12684acfd2a04e36c20ef64cbf1b5bbc16a9783fcf708a9b8b981d1439e1a70c847592b26218c9a35c8cbf385a246ac35fb857113366f18ebf2038f6f5fe538f19afed142f05dfa55e8e5ec4234f6bd050a4d3033bb36ec207606c74bdbb57dc854f6df4c8c9baa253c94555881384fe2f47514f5b07ec99616b751cfb680bc45603bd053c910f9cd9f7d954178f2385becf76f2acacd3a5f570f9ec36203fdd74b03259ce7df7c4c833708d24e1da50717cf88499739f009f6a0d0f9cfeee33134e807ff90cd8984a2f377c22595be32493ade61f85925cb5803dad77b642a067d357d05fd01e6af9a0b3c1d8e2f871bf2e5d082fb410ca5b5a8b67471a2024d8d8a8f54bb82fc7a858223aed1a741e89cd539823ff5417f0bdd5963502c243a126d3a9bbf66adf1631148a90693467a4d255260760389a5717c9b3c79a0057061c4cfe3ca8d9d5d179526090dad4ea4816f291bb8649ed07de9128e6881f581a7989c9533c7bb6186c1c4266f813ad201d0ac241d9dc7990092b0f59d11bd5d457f722ededd6a147bc22e11d28c48d80f5ed97b66eed8f974ad611c03c76420332deb2bdccf260c7182b5ce9aaef10bfad7241d285bf4beea9d3ffd4e5933c4048ca9a041dac8a712836fafe4988ec3849330c6e929f5a0520bfd21079f603b990986202c08f589c3017c10b087f8fdec4fc56d0f89c2b00bcd5d931daa4219e6efc054f60d0988a3ac98f81324d22b5909bfc1f4d1b7172b30e0ec3b21f776553a4507ef0bd813a94d76733e84b0c7067457650e9fcde01840bf5a04399cf4d40b4c66ac1bb55b1aca704afbae4db5744953acb0e6cb0448153f848c774f74282e6c541f9bd1bec0e1b5044423425f182b95949edc8074e257056241df49812c2cf7ceb0b8d28f65f317523b4a47b9e2b693a89ef7c95d180b318ef70b7ee2d6e0a0cad96043c1df61f09613c1cd6f6d6461a761c8ef9c1338cd918318774502da24b0b9d38030533ff6c0359d3b273a18815a1f0a71df5e6452252fa0ddeefe55e6f9d6e3f7941ee84d76143ffb4d32093351ed67674c9862c5df14ae5f430012ebad4d8bd546e8149facb0c2b15ae86f38588ee617ff2874a668e7f755061460094f8e7e56590ba3f30582fa5341b0339b3d6115d631178424f2d8698a2efd847a5567f54e67eb555d4d8a8b548edaa48d47a7b9c06b04d03ee1ecfdfbda40049d0e2eac6150866bc3102bcd5feb4a62b0ac49601adc9c19450530685d54cd53c654fa4bcee4862b010cf6875a97a77e8c6dd1395d440c003091f241baa97eb2995e363b54e1f23f143e3c45af005100fc582e7730c0abf1ef58170942740709f9946f1d29765ed85f3d13bdeb7816afff414d806d80c2033493d2f3fa80a7ad476037891feca18d7625b27779ec4cd8d14de8afdc6c428005513e795f2e7a1e3410201474d9cf4e315f8e05ba591b242f14094149bfe42812ee05e387b5e791107a32578e2a8297238a0075bbda9a4427f379841ea86508c5fba5e235ed4a3754c846569e9a329494d579d066777ec2f189de2aa55a3549e87bf7cda53b7e9af98355b04264189cc95205bf2955e4ffc692e0e6c48d816758ff322244b4268f69a0b72274c429128d8489e13064c925b9d5f3c82be62445860545927b2ea2f3e439888795780e7c4a2b3f3ff62ff2d25e4a44013f9df631c3a0b68bbad82ebe551bf4ff36f1a260f6347c59685ba09d9d9871ef910cce643ba01c5d3f17a50d7daffa2010d274da5570dd19acdd373b55e55701e638f8d31c6d31315a50cdeda2aaad2b71bccd321619120be8cc92dbc696d810b188119ddfb578054bbd343fd5e9e889719dffdae9488c410bc2ce68ec2f85a337ec8fd5bd522bde64b930813efdd670193d91b37fd93aa02f68f67e884130ada337fcf873a984d91467896a703e15b3718e6fd5f6993da9288dabb6f3876a6db06bd8be05b14a5bc63db5ee4f55103640cf30746cdafa8563f5e8c1cccbb58e538b484e0565ed140f2de8437a20ca422f173c829311919a2156d22f3b8bf349f299494c5e37283b1a373390e08df6a551c608ba42ee6e1577043adf6b9e7c0edbd20be866279cd9ae36af67f198e43fd31737cf70312776f4e695327b4fe957641cd3a46b48b198c32a8fd1998b20ace3d9780d1258b3e131ac51c946d022ddec1daebd8b2d225580efd68c7035b301860f6070daf273637e626c3380226a550a33a0346ebb3b87c2b26f15c923b9a490d97a05fb6fcaa5cab19101ce26adb3dc5bbd9604bd5299ceaa872a8ea956a48772852d5702ae3f322f8bb97e79805f7355b781c4fb7dc55e0f1fbc3125def8973302fb48052605366082dce1c8d92fdfa5d8f56f12bd2f73ae2c3c8a12215428861fdd247f36538c8ef0dacd594a709c656124fd8bdf36d69ff1cbb3903c35ae0a36129f64f65190fe37fa22c173ba32d22d61ba7411b3ca9d94a48022c0f0d305e5986cf008cc3e775b683ce5600f25f85dbed4b6c4a3a596da796b03d67ed072991ecfab88a8c7b5fced1bdd8c6049da0b3caec8e46eb9606ba6e53ad058cf8f7da4f107878ab0208c7324e125440d54749b10f64fb27b236feae37a427b287e0ef6a54cd5e864faedc4fb2125a0dd88ac96732ca025f5989e33ab7b521e6fa98ed3af16c83a6661864dc067b9072c980f64e2d008fafc676e60a26703f1fc7330a0c9503d88872d780bebb6c815e52608c04e74e48bbe66e1c0dab838f36c705957cfaab2ed98692db57ebac0c48b257e9386a8584aba15f86019e20cbcfe0b3b57be3b3407c48256e4531efdeca186c93bc3e9bfbc8f45ec864f32f7b38a63479a3bb4fa75a8b25f606f35b1147c1b53ebfd590418f926bad68807279027617af0d06651e5f977c615055f4dc91819bff755f8e6a2e0fb46dd7b1283de2652944d2b1cde5c72f43fd6456149ab2bda78e4cb8de135c160877e0b0820f95c4524e4cd386d44991055ea3accd2a698fb23793e57e49913f3cb86501bce08795695bfef260dd2d14761e404ce593e3b1e661a01d16b492a3cedf683736840178d08ea575534865c699bef830dbd0d259da79e5c05d7003af642412fa55b59ee5f2c032f1919af3c5067afe6876b154e29065d14224481971f94bc5ed45e48371053d69635e78b7a46cf76d999418011b58cff533c009316e33e87093117951fa4821241eaeef61d1122cd4e2962d6596259b7acf9e46d23d4efe9739189d99a9cf8776a34ad90a6e901872fd377c4f58886787baf9c2785ea437aa54195fbd34f2c5f5b4c4a76a018f5689feeccb6b153b34fc23cd0a8fa0699bff806521cb11172e4d4d45a1fad1cc8c4646b1846f1ba04f99a91db12da738ac1ee104ba3193119f325c600ab4f10e1e664dd7c17e285924487d394c7323ced471fd42728ceb9c25822885c1c6ab6b012d7a9b876958b2819e1a708afaacc537e6ac588e58c33934cea32ed3bfa27bb3d63554539e19bf69f30d03e0f47db84132a39a6dbbfddfdb673dd5cabe21d6d552317db8be0477536a69e2fe4f2e9a772dedc8a3ef34256565090c488c08fef2a3dd247fcbc2864d1862676ad5cfed2fd86871cce47b2ba28625ee67dd7518a6da3345614ff18307f20c27f68a69e4a1a6a3c8f76cf31df45b3b0b660aadbcf9698a32d36829c8aef481b09dabc8c9e449b96a2571af8eeef04bcb1785b596709f5aa1ace3804fc703ed9ec544667f350cb8bfb40a86caad45feb77d58aa1888f203cd963bcd9296feb0b68e0a695ed5cf8e7bca26a77d2bd61662f07bc721233a868805202469d8ee504be1d7cf135bc1bf7a215bbb96ff5514eeba1c0ffb68e4b3d6c20e1afadd2a3cecb002fc5ae0c59315dbf8f775ae5c63da31056a9c088e18477e2f925f7ff88df2786e8d014f0c98c58f218e931cd8cdb258c4d8ed82b7f9beab0db9ae0b35b2790ff7e02d11fcf992b365ce82b94eaa0d5b2fec4aeb984f29c6af84e10ce4aa6df7e9c6b0ee842027c8d2552efc6b4084ef9af751524b3acbca12c5c313381b443cd44e862d8c8b0394dda05aeccda371226ebdf5aed6efd6dfcba73b09ae8e92ad54d4b43db9b7f84b46b307c66a4ec69933e47ef22244250f1c82fe42683fc13fcbfcd1c2ed1b537adb2e83885bb368209f89cfe8d4bc59e6df61ec794fa310f290e56320b39fb843163752a726240236b3a45b59927333e94d0c0b30a862d61c6144ac0a59f96e08651fba2d299a37a1a1010ac12ead549404421bce2b95a05d54d44f0df5d08ac469cbc7e1988e4fc913d98e3eb9a8102ed7d40021274948acf58a10c43f1078076e36ee7cbe548638b273a40347415d20dd153885b6429af1c8e82d8d9f22bcd5b48f60484aca751c29c0ac031001e8d5dd49a889665e4ec41e257e8f3013eeab0e382b281c3463c035d3412a0ab0fadf5753ed735f250e56f24bedce1748accb4af749b12f8cf660127d7b9e710f19483cd9bb09d292355103188625a5fb4b81f22a87498d63a5dbdd78e64b4d2feecba4a3dd881a1c4103f9697e09a23ed1db866e40dcb51aba96b83766028b653cabc365fe5694b4f946ad32d9681252373e6017a9413f5fd02ec689dd9e1e179fa9d607b6a8ede028420b0fe6da5f9a678b3b717df1d48e862c2485f789947dd5baf8c3a4a641e460279827354fee33d97bea7ed36546160354bce0f2f58815e28622590418b99b1499250d5469a66d1d461852b384e99073906c64e0aba5d6a0dc7813ff58c63d32e3992b0fb89be5811a646056714718a7039cfbb82678eebeec54bc4350ea85446ba062e53e239d74509dea0d2c1d5c803e333d37761d311f5c402bf43e6b8d84d036d35c0fbe98d7eb9d5bc6165a5771d048647ad16061c55e57c53dbf64c1a08a2a639672d650b4cc6c0f90ab3b8b3ebfc1ff1844e9791ead72b167ef6b57b81f7b6c751fba73a0835edb2c68a55b5e2d2b2c350bac375153c15e6a1180f09f9c2b984ccab971926ad85980026c4610b7dbcae8bb86b98136ed27facd94e571270187a6bb194cc0ebf24b7acada441b23dbe380c7c3221d1677e5af7bc81c3264a958fb5ceee61e4795dc863da2f13cc59a2fce73070af121983410df1a99fdd864bb62d67c30ab0a98300597d7160646bd2759b950bc0468fe74918dca8fc59c9dbdcff736f0f61d234328f1b560bdf6df54663c7f80be5175d67fc37eb85e491650cac6a8da06d3dbb0743ef8d0a9ae90d2d67c11a77ea52545d53c64991b9005b6e3aae54f1cc39672ed59f3d881d65d6b9da133c1201c105972efd039d2210bafbd2f9d964459a4bc72877c51b7ca9ce6fae62ec3bbdd6d09e4fefaeaac5145b141eb06e7c9537e58a7e78526dc7d0511e399ea983d471eb5e88507952df4afd85f8c296e678a221055e89451e0920f7fd38ac866a54b932a0a608d3e2126dedba84af8fe86f719647e9fe44f4c85641dcb3347c580fa2e1d6e863ca30625f56da0b6125e6c35075451eb93ce3ce6478c474dae7df27737fd2a37fed7c1d9d793cde4728d80a3480d19771876375be29cc9f9d30433be1c999cc6d6b4295b5963f248baae070c609d49a68ef7db094a7c3bb442c9908b7251a2b1d3058bc71c450bacb88bbded6c99943b618fe9d3c7df4834323942a9b13ea821ce062d85904c5078156e3325da50bce2848598eade14f121ee9de8f6b98ef6bf592933103f567cbaf4b5b082b24ccc461118bc081ca925a0f6d0ab84b9eaaf64a956af511d254d6d1c09299ece040905f7c8fd1d6007907ef795d38744a5b0d9476f7e59476addf0b5f4abb0f7da7b5e21eb9842a7df6b4466913b41a08b06e9684ddf5ef1ba3e730f12be4c80d79ea573549dd3badaded7b7a9f5274e44154ddddf3907c08b977b19820eba4a5a0a40bfd4773d91f3c6329ddb88dd923e2b611cf4fc64fed3c98f9402d2a6c5179ace6f0ac50875e361cabd6610dd789138444ebefd72d0608272716a2359dc3e660ba047970991ac1aa83a665bb5245d9fb16eb4a8db99389d3f1386af7f2931fd09979475f0f4489aa99e6628f9cea46790be34f9d7e3aeceafc2b174650850fdabd4af0e6f84c8620cb0bba96b67f1599fec9406060be53b0c0e626e5cc88b0abb74f2c99f3157076e68cbc6593c544862aaa43b8489c1bf6b0bee80c9a608619e4641447d5422172f46774686b7efa3cedc8a837fc7debbe8598874c52c48c85df82e2f796daf04489458e74936e95ca63aa1594dac0a6708462f342747a43ca99fce71488794166fd1cedda1d444ca877ee10b56194a3ebf2114c2924210de0fb0698a6082ba171145150cf0c433adc7617520ca7626a9842929ab1831da8ccc128ba534ff27ae20f063d16b46f67654e372217e9d5f908d35cb1993b23dd4a83796009b68533270434744bc18b608c3bdc0ffcf64f691455795628987185ae688994e34541f630179533cf6b6ab12d0a150761aa490652a987e9906050c3ccb1fc677dde544296d35410c2f8b70bcc8b1927869db81cf1cdcabf190a9e946dce8439f09a98ae39e08f4d54a489cb7bab7795173c3c0dd0be506f9f8d38425b4e78882a028fd8fb2b9051d3eafcbad61a4a78f4caeab1c2041cdf7b55d3fff546f37beb9454c795e9e19a678cd087d74191e27c8a35584dc548d8fc57c5f92ec630723b335848ea5405c56631d58fa365d9fb88c2ab13d262403518dd862e9111bff48db9554fe512e2e40f96c47186aab5b9365c09692c7b2ff2e1bc5514726396abfc36263922e58be98abd1ddaef1ad23fb0f6f31e2c67315fe19d3a38477ce82d965b2c6c14ebb6872eb2acf6ca9a5860c2ea4d691d46b9cbd19352cb6b328486a07c6bf38af80e423cd6394bd9b7fc892011672833ce3d4c02561887a546d27837ca2662b5d72f595c035018a0511e22b72b8682ab65f8d59edab36389c69b5d8e64c35dd9dc78e6261fa3d141258ed9e9e8553f98e152751d5c9ba8712647e46b093a61984fc08172419a5a2aa08aacc487af4a7854d2ed34c812e96c3c56d8b7beaca74db439b1447b5102e6f66f686fb91e16cd82dc52182bbe5a6f2648d09163b3ef9c17f1b4c9867351913b2653cf4e60c5d44706245989da8f0a8392c941af9d7067496809102608fe8b60734b0c90da122c3432b40eaccafed5f5b37948dc9764337eb7016c24d717ae5ecff4d4f8c5c4aea686680a4b5a79b7f254acb0b46530782484cf8041fab719a3549c70767574c7e6aaa87e60b384ce53180540a6448e2c6743890d8eb6a5c38255cf6f86343bb82e2e57f2cd89ff8029e60267f821b7994199c741098be16e9fcdfd08d76a150761c6094776e270833d8d0cb83d2aeb13ecf2146dd46768338b4ecd8124252c2e620fd98b11d50728aed97a475c36e92b07a12792be948e95e3d26d15f4cc7c669d23d93f7cbead515f7f996afe9119415ed3b03d15e59474ba9e3c9a7c1476f3b8f66c099d85689785b712e82316f5afb6e16db12911b2d19b650e547608ea35af216561d61f36c5bcd3af7f64d9c56732f999e6e33c6e63aef13b3cf3ef69c773b4d0def25269296d535dae2948abd7918b95ffcfbce0236dac8b08b91d91aba716668bd5556d1aaf4e50d296af985a52cf35669b3aa29ea1b733000000000000c7242648c6fe22abafeb2b9bf349276eb55d0a9ec35399d98aa8ecb5613ffe530c6a5b93d4f713f3256e7a74cbf40e15a402df80c2bc287fc7ad1d1f665dba5139f56a865c0dae06048698a886da045ebb6bdddc29755947d090a6cddfe14f23dc400245211d55314160d2d852a659de834af8e24effd2e0396982c03e29fb94d3f10cd8bd57bbbb9e0945d5deacc5b33969aea3f7af0821327b9a976e8e4a82a41635c4137dee27741ccd001e559f6f6165e0b2d8062d352442689e7aa747438412c4a43dab94ac7f839eefe38c81b8277e565143e4a550c122ab0eef1cf3ddb6e41fd95ec763b636ed3aa62a85da14b1278d93d4e0ce8efb5ae1ada9dccc8c07dee130991098521bdba59399f7f0ad5f3349fe60745cf19f84e4f060a1efadd7c0a864177b46ee853a5d51e6da6382228cab564aee9a688f96e4f0e992dbb9be22629204910f4185085461ae92c5fdda4683212b1f8203d6730dcce43f0932b6ad3866dbaa9e40493889c7857822e8ea1d498e2690bd232e4a383dee59071fe7cbc0db53d23d60ecf1a7adab5116eda840c57440f1e20989202d6b010d0fd58dc57a83ab1f5ee19c79d7d0819995ebaa36d4c952a861c0958911997d84f2c249a0e29f602966adce8f41f9b8bc051bf4c127aa39b26632e81a00b365d6447725311bdcb9db6a5d62aa46c2049fd2d54b670e308c2f62c9c58a6343905f34fb7a12fdadca999ca13e7bbfba72100ec625eec11d9ffdbf898d57ce95fd606aa57e3d259c6889e2af4e4ead2d9c38327b42d68f65453be8f2798df47ae392817ae9ae6200c3659ee9b8622c948943e5aaee24be9d35a333a20a803c18d3a4f18c22018f4a1f4dca3fef010f00150badbf90c04bfcba748329e835eeeb0783cc2f5246b01e853a84e391a9bf0332fd6fac22c64b83987b51040d09110d0b66a24fe213c72281eef8e79021c9b445056bca406ba1a4f805672f724247b7b2d0bc712cac7bf6e7a8d9a3206762633fd663760c4183309e3209a017514f7f23b350d80c009ae501f46e053b2eefde5f2b8a7ee1d3d4128cc1fd9cd8fc42b5504e2176eb802b21ae7a57d6e6928b82982fcf96615bc4d5b3f8cec1e4a6193961ba5493d9e992ffc933aa3e0d2c47b1217e199223d48e69800ed9a4d2fa5d9d4a8f16e86062b0ee2ca9f11fdfb4331effbda733a1764136e192f49a439910d67056cfed89d05558adcdf54e7eb014d510c35250bf6bffefbf7c3f6ac3d4f26fa205b8857f38256378006209644587d4c56a06eebbfe9cfb0d20a214797699a8960db62dcf84595014a8bcd60d626bbfa0d0647d966635f24111f2ce5a9dedadf34f38217879d27c4e9745b068fb0acc30d4b9a78f753aa286a4cb08ee58a451bc47f64b41cd1cd602db92f691befefbd139a1f919d275dad6e4fef7266999f1ec6f0018435b578032eba39a15b0cdc34ee53acbacbf4a7eca103bec5ff72b08068bf2183643fa24ff1aa69d5125a0d1f666d648550193ccb22f6692590ddfac8866f63fc33eb14844ea6b3b4e18bc613c1d6561506f933d1e8f72b7aa43f7c47e34b921459e230ccf7e333215025482e67f1df4db4aedf4566d5783a64c4511367b69d08ee5076878a22c8db871018ea8d581fb5c0f9e6a9e61f2dc9758c06a6647e4f09c1eff6061ab095b76a60a22ec7cb8a5528d218ef3484ac7574a7b3f63915d867e26b155400b50e1cf6a9d03b8a10ec8e2c4768cf1d2c02de656e7114ffc030ced3f94c0dd0b875cb1ad5cd64e2cf318118d50b45254e0a000a2cb09627489840ce0f4f7c9cecb8e19f01ddff7573a4183e4ff4f85991a15dd5c677f940b57667728b53126a4b45b53c25b6bdf6902ff5ab974995709babdeea1a5c484463fe349efe694c02035a2c149eb3fd813e4d71398503d0a4286443891cd0caf5d9450e27c9142b77565594935c590f44eca1a7d0a74d7059e4017d92e3cb53d3a13f6de6d4ab62800ab64afedfe678f500d8ca51c4e88765247fe88160e4c1ebebee15d0dfdcb138f81d290cb77c0270d7a8666de54e0f255454df5877c7b78bc694175a7e6cf5ce997c9776c208b03b6e11df17d1570d17f7614b5c1da400871268e010727ee8c54db25736d2bac7c56eabf0a8a3aa1e1801f00d24b56f2e30559c39d6bdd655c0e2bed036b616bdac6f11feb41d33608bb9d262c069e102e3079b2ba55614ee7ca498311e72897544db3e6dcb2cb3cd6f1ada2b4f71318b2d5b443cc76907774eaff4c7bed9c77fe264058b5becabc79bf185c0b5a3ad7aed92c28326a188328aedc9cf405541cf2ea2941102cfa5b52f261c550753ecc1ce767015e782f74f2ab3b913d7aff321c138368f77239fce68e9205718f9a87cd8590d1ca56659373e18d951744774b69831f0e51f04a1c5a86462b168890f6f5e12fc0248aeb245f26885a504a0962fb95b1448c629c3c3cb36d3d15bd7d56076c867002f9e58e12fe0d2f86b7508215896c839ea071c5507f30737e34d791f4614687dd0aea9c4debdc95a7dd6d436e9baaac51bffad1ada7d683387eabc5fd384c70469c971342599c6c90c90a57b23df95c7730e25220a8f830d9f9f978945859a1267072a8475d4e5e5011ce6144a6eec6d01d2be2cc558bffee47f7feeb87aa4c38aab5938b444e314c2939322fe81aaf0d32ba9d1c43c4b9f85c84e9284a50a169c65e2100064eb587ace01e361ee6c1bad211867dac692932e23e84795bf6cc58dd06fa1c1c31544e5dce729bb25ca3691b9470d5fa26c627e55127a9fdd4028ae2320192c0df9061db198445c0fcadca9862f0c29f3e62898c00479d0e8c8fb1d619c53ce8181d2b14240da714f82c8c50815ce059fc954595036e41d36bca909b6c8555d152c13ef5f4ff9f6fe7ac6632ebdcf19238d11c2359e6ffd7dd2053378e57ba44704eef580aae7cdf553eed5b0c6892b86e522e6a0912c8d9ccfb639e1f6ea7fccd6c9d04a676ce7e17642b61125329665e21aaa704b2679d698b32ae8388f1f7438e6b50b3d1c5dda7958e0be0be4e286a7a37ea3a6863a99bd4056e80a16866c6d6a121f4d936db302d5335033412ada903ad9bc492f3eb61b3384a4a86717df9e517cf593caab9b4ac8b229a80b934783cae88357c4cc7da8f0d819ebd1eb2961acb7b014411d23ee42e853e85f4f3863005a0a8356cacc15a26f90c549cfd307bdc88bf1c5a21778301ebd20054cfed89acc59cf29237e6c382f2e4f43e6eef14dabce06df261e2bcbadab8c60b9bfc684aceece9e1cf2f0b3751564a037aed891c2686547cb01c6982f073cb0b2882860b6daf111a034f5738d3ea1f67a0e7f4097eec1f9c355c6a9cd5646feed86f4ba075969ad71406f56e16fd5f3e05fc05fe18ea724d114aba4a2d7f312fc77b7b0d1616b00a124ded31251f2218eb95fb444241eca65c051205e7c1a04a6096a0cf9b9a8831907d569ec6de4a92610cf9147bfc0838e1b232d1642d16dcfd7de72c0ecd45c45506ec5641b526c40866c465e8bb64656677e8c1c81fbb00e26b8f775065298e6274a8ab8ca63e8c43a90edce5bede53526e7c2d37808a010627635e1b0d397850edcf6108e5ef1d85233be77b3838a4efda50de1662b9ee643416f92be4896bc6636c9eeddc4a87eb2b5e44635331aadd7cf9a49a4218e941dc76151c6d2363083fcd3f9cb5afb32345ad9b307a5625122fdca8b930cb7864362d890ded2df208ffec06085ab9404199ae419475360abec16d2800", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20}, 0x0})
ioctl$FS_IOC_RESVSP(r4, 0x400866da, &(0x7f0000002740))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2c, r8, 0x1, 0x0, 0x8000000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4810}, 0x10)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r10 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r2, &(0x7f0000000340)={@val={0x8, 0x800}, @val={0x2, 0x3, 0x9, 0x68, 0x8000, 0x9}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @local}, {0x4f20, 0x4e22, 0x6a, 0x0, @gue={{0x1, 0x0, 0x3, 0x2, 0x0, @void}, "6279cb22459ff50866ff829694a603d3c443eead410baf7b35c112fa15932138ee8f6a6d2afdde33d5a4ff97f976b3ac6d8c10e10601a959b4bf18b7d52cd3b5a4c19759c5eb55c033fbf5a6b311de39874510aa6af127d5df17d78aef01"}}}}, 0x8c)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000100)=0x2)
r11 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00')
read$FUSE(r11, &(0x7f0000002240)={0x2020}, 0x2020)

3m33.981220919s ago: executing program 32 (id=966):
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r4 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
read$FUSE(r3, &(0x7f0000007100)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000240)={0x50, 0x0, r5, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50)
read$FUSE(r3, &(0x7f0000002900)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r6}, 0x10)
syz_fuse_handle_req(r3, &(0x7f0000004940)="4f50356c9e70ce6dcbe3d22a41991ada3384a3cc61e92a72df663226dcad115a3308ae59bd26134ca5b1d27458f3aebf34acb004e78edccd1c3d66ebfda95d8369a12684acfd2a04e36c20ef64cbf1b5bbc16a9783fcf708a9b8b981d1439e1a70c847592b26218c9a35c8cbf385a246ac35fb857113366f18ebf2038f6f5fe538f19afed142f05dfa55e8e5ec4234f6bd050a4d3033bb36ec207606c74bdbb57dc854f6df4c8c9baa253c94555881384fe2f47514f5b07ec99616b751cfb680bc45603bd053c910f9cd9f7d954178f2385becf76f2acacd3a5f570f9ec36203fdd74b03259ce7df7c4c833708d24e1da50717cf88499739f009f6a0d0f9cfeee33134e807ff90cd8984a2f377c22595be32493ade61f85925cb5803dad77b642a067d357d05fd01e6af9a0b3c1d8e2f871bf2e5d082fb410ca5b5a8b67471a2024d8d8a8f54bb82fc7a858223aed1a741e89cd539823ff5417f0bdd5963502c243a126d3a9bbf66adf1631148a90693467a4d255260760389a5717c9b3c79a0057061c4cfe3ca8d9d5d179526090dad4ea4816f291bb8649ed07de9128e6881f581a7989c9533c7bb6186c1c4266f813ad201d0ac241d9dc7990092b0f59d11bd5d457f722ededd6a147bc22e11d28c48d80f5ed97b66eed8f974ad611c03c76420332deb2bdccf260c7182b5ce9aaef10bfad7241d285bf4beea9d3ffd4e5933c4048ca9a041dac8a712836fafe4988ec3849330c6e929f5a0520bfd21079f603b990986202c08f589c3017c10b087f8fdec4fc56d0f89c2b00bcd5d931daa4219e6efc054f60d0988a3ac98f81324d22b5909bfc1f4d1b7172b30e0ec3b21f776553a4507ef0bd813a94d76733e84b0c7067457650e9fcde01840bf5a04399cf4d40b4c66ac1bb55b1aca704afbae4db5744953acb0e6cb0448153f848c774f74282e6c541f9bd1bec0e1b5044423425f182b95949edc8074e257056241df49812c2cf7ceb0b8d28f65f317523b4a47b9e2b693a89ef7c95d180b318ef70b7ee2d6e0a0cad96043c1df61f09613c1cd6f6d6461a761c8ef9c1338cd918318774502da24b0b9d38030533ff6c0359d3b273a18815a1f0a71df5e6452252fa0ddeefe55e6f9d6e3f7941ee84d76143ffb4d32093351ed67674c9862c5df14ae5f430012ebad4d8bd546e8149facb0c2b15ae86f38588ee617ff2874a668e7f755061460094f8e7e56590ba3f30582fa5341b0339b3d6115d631178424f2d8698a2efd847a5567f54e67eb555d4d8a8b548edaa48d47a7b9c06b04d03ee1ecfdfbda40049d0e2eac6150866bc3102bcd5feb4a62b0ac49601adc9c19450530685d54cd53c654fa4bcee4862b010cf6875a97a77e8c6dd1395d440c003091f241baa97eb2995e363b54e1f23f143e3c45af005100fc582e7730c0abf1ef58170942740709f9946f1d29765ed85f3d13bdeb7816afff414d806d80c2033493d2f3fa80a7ad476037891feca18d7625b27779ec4cd8d14de8afdc6c428005513e795f2e7a1e3410201474d9cf4e315f8e05ba591b242f14094149bfe42812ee05e387b5e791107a32578e2a8297238a0075bbda9a4427f379841ea86508c5fba5e235ed4a3754c846569e9a329494d579d066777ec2f189de2aa55a3549e87bf7cda53b7e9af98355b04264189cc95205bf2955e4ffc692e0e6c48d816758ff322244b4268f69a0b72274c429128d8489e13064c925b9d5f3c82be62445860545927b2ea2f3e439888795780e7c4a2b3f3ff62ff2d25e4a44013f9df631c3a0b68bbad82ebe551bf4ff36f1a260f6347c59685ba09d9d9871ef910cce643ba01c5d3f17a50d7daffa2010d274da5570dd19acdd373b55e55701e638f8d31c6d31315a50cdeda2aaad2b71bccd321619120be8cc92dbc696d810b188119ddfb578054bbd343fd5e9e889719dffdae9488c410bc2ce68ec2f85a337ec8fd5bd522bde64b930813efdd670193d91b37fd93aa02f68f67e884130ada337fcf873a984d91467896a703e15b3718e6fd5f6993da9288dabb6f3876a6db06bd8be05b14a5bc63db5ee4f55103640cf30746cdafa8563f5e8c1cccbb58e538b484e0565ed140f2de8437a20ca422f173c829311919a2156d22f3b8bf349f299494c5e37283b1a373390e08df6a551c608ba42ee6e1577043adf6b9e7c0edbd20be866279cd9ae36af67f198e43fd31737cf70312776f4e695327b4fe957641cd3a46b48b198c32a8fd1998b20ace3d9780d1258b3e131ac51c946d022ddec1daebd8b2d225580efd68c7035b301860f6070daf273637e626c3380226a550a33a0346ebb3b87c2b26f15c923b9a490d97a05fb6fcaa5cab19101ce26adb3dc5bbd9604bd5299ceaa872a8ea956a48772852d5702ae3f322f8bb97e79805f7355b781c4fb7dc55e0f1fbc3125def8973302fb48052605366082dce1c8d92fdfa5d8f56f12bd2f73ae2c3c8a12215428861fdd247f36538c8ef0dacd594a709c656124fd8bdf36d69ff1cbb3903c35ae0a36129f64f65190fe37fa22c173ba32d22d61ba7411b3ca9d94a48022c0f0d305e5986cf008cc3e775b683ce5600f25f85dbed4b6c4a3a596da796b03d67ed072991ecfab88a8c7b5fced1bdd8c6049da0b3caec8e46eb9606ba6e53ad058cf8f7da4f107878ab0208c7324e125440d54749b10f64fb27b236feae37a427b287e0ef6a54cd5e864faedc4fb2125a0dd88ac96732ca025f5989e33ab7b521e6fa98ed3af16c83a6661864dc067b9072c980f64e2d008fafc676e60a26703f1fc7330a0c9503d88872d780bebb6c815e52608c04e74e48bbe66e1c0dab838f36c705957cfaab2ed98692db57ebac0c48b257e9386a8584aba15f86019e20cbcfe0b3b57be3b3407c48256e4531efdeca186c93bc3e9bfbc8f45ec864f32f7b38a63479a3bb4fa75a8b25f606f35b1147c1b53ebfd590418f926bad68807279027617af0d06651e5f977c615055f4dc91819bff755f8e6a2e0fb46dd7b1283de2652944d2b1cde5c72f43fd6456149ab2bda78e4cb8de135c160877e0b0820f95c4524e4cd386d44991055ea3accd2a698fb23793e57e49913f3cb86501bce08795695bfef260dd2d14761e404ce593e3b1e661a01d16b492a3cedf683736840178d08ea575534865c699bef830dbd0d259da79e5c05d7003af642412fa55b59ee5f2c032f1919af3c5067afe6876b154e29065d14224481971f94bc5ed45e48371053d69635e78b7a46cf76d999418011b58cff533c009316e33e87093117951fa4821241eaeef61d1122cd4e2962d6596259b7acf9e46d23d4efe9739189d99a9cf8776a34ad90a6e901872fd377c4f58886787baf9c2785ea437aa54195fbd34f2c5f5b4c4a76a018f5689feeccb6b153b34fc23cd0a8fa0699bff806521cb11172e4d4d45a1fad1cc8c4646b1846f1ba04f99a91db12da738ac1ee104ba3193119f325c600ab4f10e1e664dd7c17e285924487d394c7323ced471fd42728ceb9c25822885c1c6ab6b012d7a9b876958b2819e1a708afaacc537e6ac588e58c33934cea32ed3bfa27bb3d63554539e19bf69f30d03e0f47db84132a39a6dbbfddfdb673dd5cabe21d6d552317db8be0477536a69e2fe4f2e9a772dedc8a3ef34256565090c488c08fef2a3dd247fcbc2864d1862676ad5cfed2fd86871cce47b2ba28625ee67dd7518a6da3345614ff18307f20c27f68a69e4a1a6a3c8f76cf31df45b3b0b660aadbcf9698a32d36829c8aef481b09dabc8c9e449b96a2571af8eeef04bcb1785b596709f5aa1ace3804fc703ed9ec544667f350cb8bfb40a86caad45feb77d58aa1888f203cd963bcd9296feb0b68e0a695ed5cf8e7bca26a77d2bd61662f07bc721233a868805202469d8ee504be1d7cf135bc1bf7a215bbb96ff5514eeba1c0ffb68e4b3d6c20e1afadd2a3cecb002fc5ae0c59315dbf8f775ae5c63da31056a9c088e18477e2f925f7ff88df2786e8d014f0c98c58f218e931cd8cdb258c4d8ed82b7f9beab0db9ae0b35b2790ff7e02d11fcf992b365ce82b94eaa0d5b2fec4aeb984f29c6af84e10ce4aa6df7e9c6b0ee842027c8d2552efc6b4084ef9af751524b3acbca12c5c313381b443cd44e862d8c8b0394dda05aeccda371226ebdf5aed6efd6dfcba73b09ae8e92ad54d4b43db9b7f84b46b307c66a4ec69933e47ef22244250f1c82fe42683fc13fcbfcd1c2ed1b537adb2e83885bb368209f89cfe8d4bc59e6df61ec794fa310f290e56320b39fb843163752a726240236b3a45b59927333e94d0c0b30a862d61c6144ac0a59f96e08651fba2d299a37a1a1010ac12ead549404421bce2b95a05d54d44f0df5d08ac469cbc7e1988e4fc913d98e3eb9a8102ed7d40021274948acf58a10c43f1078076e36ee7cbe548638b273a40347415d20dd153885b6429af1c8e82d8d9f22bcd5b48f60484aca751c29c0ac031001e8d5dd49a889665e4ec41e257e8f3013eeab0e382b281c3463c035d3412a0ab0fadf5753ed735f250e56f24bedce1748accb4af749b12f8cf660127d7b9e710f19483cd9bb09d292355103188625a5fb4b81f22a87498d63a5dbdd78e64b4d2feecba4a3dd881a1c4103f9697e09a23ed1db866e40dcb51aba96b83766028b653cabc365fe5694b4f946ad32d9681252373e6017a9413f5fd02ec689dd9e1e179fa9d607b6a8ede028420b0fe6da5f9a678b3b717df1d48e862c2485f789947dd5baf8c3a4a641e460279827354fee33d97bea7ed36546160354bce0f2f58815e28622590418b99b1499250d5469a66d1d461852b384e99073906c64e0aba5d6a0dc7813ff58c63d32e3992b0fb89be5811a646056714718a7039cfbb82678eebeec54bc4350ea85446ba062e53e239d74509dea0d2c1d5c803e333d37761d311f5c402bf43e6b8d84d036d35c0fbe98d7eb9d5bc6165a5771d048647ad16061c55e57c53dbf64c1a08a2a639672d650b4cc6c0f90ab3b8b3ebfc1ff1844e9791ead72b167ef6b57b81f7b6c751fba73a0835edb2c68a55b5e2d2b2c350bac375153c15e6a1180f09f9c2b984ccab971926ad85980026c4610b7dbcae8bb86b98136ed27facd94e571270187a6bb194cc0ebf24b7acada441b23dbe380c7c3221d1677e5af7bc81c3264a958fb5ceee61e4795dc863da2f13cc59a2fce73070af121983410df1a99fdd864bb62d67c30ab0a98300597d7160646bd2759b950bc0468fe74918dca8fc59c9dbdcff736f0f61d234328f1b560bdf6df54663c7f80be5175d67fc37eb85e491650cac6a8da06d3dbb0743ef8d0a9ae90d2d67c11a77ea52545d53c64991b9005b6e3aae54f1cc39672ed59f3d881d65d6b9da133c1201c105972efd039d2210bafbd2f9d964459a4bc72877c51b7ca9ce6fae62ec3bbdd6d09e4fefaeaac5145b141eb06e7c9537e58a7e78526dc7d0511e399ea983d471eb5e88507952df4afd85f8c296e678a221055e89451e0920f7fd38ac866a54b932a0a608d3e2126dedba84af8fe86f719647e9fe44f4c85641dcb3347c580fa2e1d6e863ca30625f56da0b6125e6c35075451eb93ce3ce6478c474dae7df27737fd2a37fed7c1d9d793cde4728d80a3480d19771876375be29cc9f9d30433be1c999cc6d6b4295b5963f248baae070c609d49a68ef7db094a7c3bb442c9908b7251a2b1d3058bc71c450bacb88bbded6c99943b618fe9d3c7df4834323942a9b13ea821ce062d85904c5078156e3325da50bce2848598eade14f121ee9de8f6b98ef6bf592933103f567cbaf4b5b082b24ccc461118bc081ca925a0f6d0ab84b9eaaf64a956af511d254d6d1c09299ece040905f7c8fd1d6007907ef795d38744a5b0d9476f7e59476addf0b5f4abb0f7da7b5e21eb9842a7df6b4466913b41a08b06e9684ddf5ef1ba3e730f12be4c80d79ea573549dd3badaded7b7a9f5274e44154ddddf3907c08b977b19820eba4a5a0a40bfd4773d91f3c6329ddb88dd923e2b611cf4fc64fed3c98f9402d2a6c5179ace6f0ac50875e361cabd6610dd789138444ebefd72d0608272716a2359dc3e660ba047970991ac1aa83a665bb5245d9fb16eb4a8db99389d3f1386af7f2931fd09979475f0f4489aa99e6628f9cea46790be34f9d7e3aeceafc2b174650850fdabd4af0e6f84c8620cb0bba96b67f1599fec9406060be53b0c0e626e5cc88b0abb74f2c99f3157076e68cbc6593c544862aaa43b8489c1bf6b0bee80c9a608619e4641447d5422172f46774686b7efa3cedc8a837fc7debbe8598874c52c48c85df82e2f796daf04489458e74936e95ca63aa1594dac0a6708462f342747a43ca99fce71488794166fd1cedda1d444ca877ee10b56194a3ebf2114c2924210de0fb0698a6082ba171145150cf0c433adc7617520ca7626a9842929ab1831da8ccc128ba534ff27ae20f063d16b46f67654e372217e9d5f908d35cb1993b23dd4a83796009b68533270434744bc18b608c3bdc0ffcf64f691455795628987185ae688994e34541f630179533cf6b6ab12d0a150761aa490652a987e9906050c3ccb1fc677dde544296d35410c2f8b70bcc8b1927869db81cf1cdcabf190a9e946dce8439f09a98ae39e08f4d54a489cb7bab7795173c3c0dd0be506f9f8d38425b4e78882a028fd8fb2b9051d3eafcbad61a4a78f4caeab1c2041cdf7b55d3fff546f37beb9454c795e9e19a678cd087d74191e27c8a35584dc548d8fc57c5f92ec630723b335848ea5405c56631d58fa365d9fb88c2ab13d262403518dd862e9111bff48db9554fe512e2e40f96c47186aab5b9365c09692c7b2ff2e1bc5514726396abfc36263922e58be98abd1ddaef1ad23fb0f6f31e2c67315fe19d3a38477ce82d965b2c6c14ebb6872eb2acf6ca9a5860c2ea4d691d46b9cbd19352cb6b328486a07c6bf38af80e423cd6394bd9b7fc892011672833ce3d4c02561887a546d27837ca2662b5d72f595c035018a0511e22b72b8682ab65f8d59edab36389c69b5d8e64c35dd9dc78e6261fa3d141258ed9e9e8553f98e152751d5c9ba8712647e46b093a61984fc08172419a5a2aa08aacc487af4a7854d2ed34c812e96c3c56d8b7beaca74db439b1447b5102e6f66f686fb91e16cd82dc52182bbe5a6f2648d09163b3ef9c17f1b4c9867351913b2653cf4e60c5d44706245989da8f0a8392c941af9d7067496809102608fe8b60734b0c90da122c3432b40eaccafed5f5b37948dc9764337eb7016c24d717ae5ecff4d4f8c5c4aea686680a4b5a79b7f254acb0b46530782484cf8041fab719a3549c70767574c7e6aaa87e60b384ce53180540a6448e2c6743890d8eb6a5c38255cf6f86343bb82e2e57f2cd89ff8029e60267f821b7994199c741098be16e9fcdfd08d76a150761c6094776e270833d8d0cb83d2aeb13ecf2146dd46768338b4ecd8124252c2e620fd98b11d50728aed97a475c36e92b07a12792be948e95e3d26d15f4cc7c669d23d93f7cbead515f7f996afe9119415ed3b03d15e59474ba9e3c9a7c1476f3b8f66c099d85689785b712e82316f5afb6e16db12911b2d19b650e547608ea35af216561d61f36c5bcd3af7f64d9c56732f999e6e33c6e63aef13b3cf3ef69c773b4d0def25269296d535dae2948abd7918b95ffcfbce0236dac8b08b91d91aba716668bd5556d1aaf4e50d296af985a52cf35669b3aa29ea1b733000000000000c7242648c6fe22abafeb2b9bf349276eb55d0a9ec35399d98aa8ecb5613ffe530c6a5b93d4f713f3256e7a74cbf40e15a402df80c2bc287fc7ad1d1f665dba5139f56a865c0dae06048698a886da045ebb6bdddc29755947d090a6cddfe14f23dc400245211d55314160d2d852a659de834af8e24effd2e0396982c03e29fb94d3f10cd8bd57bbbb9e0945d5deacc5b33969aea3f7af0821327b9a976e8e4a82a41635c4137dee27741ccd001e559f6f6165e0b2d8062d352442689e7aa747438412c4a43dab94ac7f839eefe38c81b8277e565143e4a550c122ab0eef1cf3ddb6e41fd95ec763b636ed3aa62a85da14b1278d93d4e0ce8efb5ae1ada9dccc8c07dee130991098521bdba59399f7f0ad5f3349fe60745cf19f84e4f060a1efadd7c0a864177b46ee853a5d51e6da6382228cab564aee9a688f96e4f0e992dbb9be22629204910f4185085461ae92c5fdda4683212b1f8203d6730dcce43f0932b6ad3866dbaa9e40493889c7857822e8ea1d498e2690bd232e4a383dee59071fe7cbc0db53d23d60ecf1a7adab5116eda840c57440f1e20989202d6b010d0fd58dc57a83ab1f5ee19c79d7d0819995ebaa36d4c952a861c0958911997d84f2c249a0e29f602966adce8f41f9b8bc051bf4c127aa39b26632e81a00b365d6447725311bdcb9db6a5d62aa46c2049fd2d54b670e308c2f62c9c58a6343905f34fb7a12fdadca999ca13e7bbfba72100ec625eec11d9ffdbf898d57ce95fd606aa57e3d259c6889e2af4e4ead2d9c38327b42d68f65453be8f2798df47ae392817ae9ae6200c3659ee9b8622c948943e5aaee24be9d35a333a20a803c18d3a4f18c22018f4a1f4dca3fef010f00150badbf90c04bfcba748329e835eeeb0783cc2f5246b01e853a84e391a9bf0332fd6fac22c64b83987b51040d09110d0b66a24fe213c72281eef8e79021c9b445056bca406ba1a4f805672f724247b7b2d0bc712cac7bf6e7a8d9a3206762633fd663760c4183309e3209a017514f7f23b350d80c009ae501f46e053b2eefde5f2b8a7ee1d3d4128cc1fd9cd8fc42b5504e2176eb802b21ae7a57d6e6928b82982fcf96615bc4d5b3f8cec1e4a6193961ba5493d9e992ffc933aa3e0d2c47b1217e199223d48e69800ed9a4d2fa5d9d4a8f16e86062b0ee2ca9f11fdfb4331effbda733a1764136e192f49a439910d67056cfed89d05558adcdf54e7eb014d510c35250bf6bffefbf7c3f6ac3d4f26fa205b8857f38256378006209644587d4c56a06eebbfe9cfb0d20a214797699a8960db62dcf84595014a8bcd60d626bbfa0d0647d966635f24111f2ce5a9dedadf34f38217879d27c4e9745b068fb0acc30d4b9a78f753aa286a4cb08ee58a451bc47f64b41cd1cd602db92f691befefbd139a1f919d275dad6e4fef7266999f1ec6f0018435b578032eba39a15b0cdc34ee53acbacbf4a7eca103bec5ff72b08068bf2183643fa24ff1aa69d5125a0d1f666d648550193ccb22f6692590ddfac8866f63fc33eb14844ea6b3b4e18bc613c1d6561506f933d1e8f72b7aa43f7c47e34b921459e230ccf7e333215025482e67f1df4db4aedf4566d5783a64c4511367b69d08ee5076878a22c8db871018ea8d581fb5c0f9e6a9e61f2dc9758c06a6647e4f09c1eff6061ab095b76a60a22ec7cb8a5528d218ef3484ac7574a7b3f63915d867e26b155400b50e1cf6a9d03b8a10ec8e2c4768cf1d2c02de656e7114ffc030ced3f94c0dd0b875cb1ad5cd64e2cf318118d50b45254e0a000a2cb09627489840ce0f4f7c9cecb8e19f01ddff7573a4183e4ff4f85991a15dd5c677f940b57667728b53126a4b45b53c25b6bdf6902ff5ab974995709babdeea1a5c484463fe349efe694c02035a2c149eb3fd813e4d71398503d0a4286443891cd0caf5d9450e27c9142b77565594935c590f44eca1a7d0a74d7059e4017d92e3cb53d3a13f6de6d4ab62800ab64afedfe678f500d8ca51c4e88765247fe88160e4c1ebebee15d0dfdcb138f81d290cb77c0270d7a8666de54e0f255454df5877c7b78bc694175a7e6cf5ce997c9776c208b03b6e11df17d1570d17f7614b5c1da400871268e010727ee8c54db25736d2bac7c56eabf0a8a3aa1e1801f00d24b56f2e30559c39d6bdd655c0e2bed036b616bdac6f11feb41d33608bb9d262c069e102e3079b2ba55614ee7ca498311e72897544db3e6dcb2cb3cd6f1ada2b4f71318b2d5b443cc76907774eaff4c7bed9c77fe264058b5becabc79bf185c0b5a3ad7aed92c28326a188328aedc9cf405541cf2ea2941102cfa5b52f261c550753ecc1ce767015e782f74f2ab3b913d7aff321c138368f77239fce68e9205718f9a87cd8590d1ca56659373e18d951744774b69831f0e51f04a1c5a86462b168890f6f5e12fc0248aeb245f26885a504a0962fb95b1448c629c3c3cb36d3d15bd7d56076c867002f9e58e12fe0d2f86b7508215896c839ea071c5507f30737e34d791f4614687dd0aea9c4debdc95a7dd6d436e9baaac51bffad1ada7d683387eabc5fd384c70469c971342599c6c90c90a57b23df95c7730e25220a8f830d9f9f978945859a1267072a8475d4e5e5011ce6144a6eec6d01d2be2cc558bffee47f7feeb87aa4c38aab5938b444e314c2939322fe81aaf0d32ba9d1c43c4b9f85c84e9284a50a169c65e2100064eb587ace01e361ee6c1bad211867dac692932e23e84795bf6cc58dd06fa1c1c31544e5dce729bb25ca3691b9470d5fa26c627e55127a9fdd4028ae2320192c0df9061db198445c0fcadca9862f0c29f3e62898c00479d0e8c8fb1d619c53ce8181d2b14240da714f82c8c50815ce059fc954595036e41d36bca909b6c8555d152c13ef5f4ff9f6fe7ac6632ebdcf19238d11c2359e6ffd7dd2053378e57ba44704eef580aae7cdf553eed5b0c6892b86e522e6a0912c8d9ccfb639e1f6ea7fccd6c9d04a676ce7e17642b61125329665e21aaa704b2679d698b32ae8388f1f7438e6b50b3d1c5dda7958e0be0be4e286a7a37ea3a6863a99bd4056e80a16866c6d6a121f4d936db302d5335033412ada903ad9bc492f3eb61b3384a4a86717df9e517cf593caab9b4ac8b229a80b934783cae88357c4cc7da8f0d819ebd1eb2961acb7b014411d23ee42e853e85f4f3863005a0a8356cacc15a26f90c549cfd307bdc88bf1c5a21778301ebd20054cfed89acc59cf29237e6c382f2e4f43e6eef14dabce06df261e2bcbadab8c60b9bfc684aceece9e1cf2f0b3751564a037aed891c2686547cb01c6982f073cb0b2882860b6daf111a034f5738d3ea1f67a0e7f4097eec1f9c355c6a9cd5646feed86f4ba075969ad71406f56e16fd5f3e05fc05fe18ea724d114aba4a2d7f312fc77b7b0d1616b00a124ded31251f2218eb95fb444241eca65c051205e7c1a04a6096a0cf9b9a8831907d569ec6de4a92610cf9147bfc0838e1b232d1642d16dcfd7de72c0ecd45c45506ec5641b526c40866c465e8bb64656677e8c1c81fbb00e26b8f775065298e6274a8ab8ca63e8c43a90edce5bede53526e7c2d37808a010627635e1b0d397850edcf6108e5ef1d85233be77b3838a4efda50de1662b9ee643416f92be4896bc6636c9eeddc4a87eb2b5e44635331aadd7cf9a49a4218e941dc76151c6d2363083fcd3f9cb5afb32345ad9b307a5625122fdca8b930cb7864362d890ded2df208ffec06085ab9404199ae419475360abec16d2800", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20}, 0x0})
ioctl$FS_IOC_RESVSP(r4, 0x400866da, &(0x7f0000002740))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2c, r8, 0x1, 0x0, 0x8000000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4810}, 0x10)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r10 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r2, &(0x7f0000000340)={@val={0x8, 0x800}, @val={0x2, 0x3, 0x9, 0x68, 0x8000, 0x9}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @local}, {0x4f20, 0x4e22, 0x6a, 0x0, @gue={{0x1, 0x0, 0x3, 0x2, 0x0, @void}, "6279cb22459ff50866ff829694a603d3c443eead410baf7b35c112fa15932138ee8f6a6d2afdde33d5a4ff97f976b3ac6d8c10e10601a959b4bf18b7d52cd3b5a4c19759c5eb55c033fbf5a6b311de39874510aa6af127d5df17d78aef01"}}}}, 0x8c)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000100)=0x2)
r11 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00')
read$FUSE(r11, &(0x7f0000002240)={0x2020}, 0x2020)

12.076768308s ago: executing program 1 (id=1821):
r0 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00", 0x17}, 0x48, 0xfffffffffffffffe)
pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0)
keyctl$update(0x2, r0, &(0x7f0000000040)="b8", 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfffff000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x1, {0x11, 0x1000, 0x2e04, 0x6}})
prctl$PR_SCHED_CORE(0x3e, 0x5, 0x0, 0x1, 0x0)
syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xe472, 0x2, 0x0, 0x25a}, 0x0, &(0x7f00000002c0))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket(0x840000000002, 0x3, 0xfa)
getsockname$inet(r5, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x22)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4})
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r3], 0x50)
unshare(0x62040200)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc})
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)

9.931953751s ago: executing program 3 (id=1824):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) (rerun: 32)
fcntl$setlease(r2, 0x400, 0x1)
close(r2) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x32)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) (async)
r3 = socket(0x10, 0x2, 0x0)
write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) (async, rerun: 64)
recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) (async, rerun: 64)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) (async)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) (async)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000003c0)={0x60, 0x1, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x2, &(0x7f00000002c0)=[{0x5, 0x7b15, 0x759f}, {0x4, 0x5, 0x3}, {0xb, 0x5, 0x80000001}], 0x3, 0x4, 0x2f, 0x20, 0x22, 0x8}) (async)
ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={r6, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}})
ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x15, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffffffffffff6570128218a0d22915ff6eddb10000800400", [0xc]})

9.485275913s ago: executing program 0 (id=1826):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async, rerun: 32)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 32)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x43, 0x0, 0x0) (async, rerun: 32)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f8601, 0x101, 0x3, 0x0, 0x4, 0xfffffffffffffffc, 0x1, 0x5, 0x4, 0xfffffffffffffeff], 0x80a0000, 0x280384}) (async, rerun: 32)
fsopen(0x0, 0x0) (rerun: 32)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x66) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

9.131920237s ago: executing program 0 (id=1828):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012000, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x161281, 0x0) (async)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x161281, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"})
r3 = syz_open_pts(r0, 0x0)
dup3(r3, r0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/4\x00')
read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020)
r5 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x81b9, 0x0, r4}, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4, 0x30}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x4)

9.131600254s ago: executing program 3 (id=1829):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x841)
ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000280)={{{0x1, 0x1}}, 0x2, 0x6, &(0x7f00000001c0)="f496"})
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0)
sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000090)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x401, 0x0, 0x4, 0x9, 0x400000006, 0x12ce, 0x3}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r4 = socket$inet(0x2, 0x4000000805, 0x0)
listen(r4, 0x5)
r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000003180), 0x200, 0x0)
ioctl$PTP_PIN_GETFUNC2(r5, 0xc0603d0f, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCGSTAMPNS(r6, 0x8907, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60b8192300080000fe80000000000000000000792c42c24f2faeb8bfa200000000aafe8003000000000000000000000000aa00003b0000000000"], 0x0)
r7 = syz_open_dev$sg(&(0x7f0000000100), 0xf9ba, 0x28540)
ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r4, @ANYRESOCT=r5, @ANYRESHEX=r6])
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYRES64=r3], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)

8.691106754s ago: executing program 5 (id=1830):
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl(r0, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)

8.620459981s ago: executing program 5 (id=1831):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20004e22}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20048915, 0x0, 0x0)
r2 = syz_io_uring_setup(0x4af0, &(0x7f00000001c0)={0x0, 0xb7a2, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000), &(0x7f0000000440))
io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x2000000, 0x0)
syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2)
openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r3 = syz_io_uring_setup(0x231, &(0x7f00000003c0)={0x0, 0xfffffffe, 0xc806, 0x2, 0x49, 0x0, r2}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x40000003, 0x0, 0x0})
r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0)
r7 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0)
r8 = socket$inet(0x2, 0x2, 0x73)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f00000001c0)=@ethtool_rxfh_indir={0x39, 0x4, [0xb, 0x2a0d, 0x5, 0x8]}})
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0400"/20, @ANYBLOB], 0x48)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r7, 0x80047c05, &(0x7f0000000940))
r9 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r9, 0x1, 0x0, &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0)
syz_open_dev$vim2m(0x0, 0x4a, 0x2)
io_setup(0x8, &(0x7f00000000c0))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))

7.851999217s ago: executing program 1 (id=1832):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x9, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0xfefff024}, {0x6, 0x0, 0x0, 0x6}]}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20040000)

7.804251473s ago: executing program 1 (id=1833):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$alg(r1, &(0x7f0000002280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
syz_open_dev$mouse(&(0x7f00000000c0), 0x1, 0x2000)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00')
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f00000001c0)={0x2020}, 0x2020)
clock_settime(0xa, 0x0)
sendmsg$SMC_PNETID_GET(r1, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50)
syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x14002}, 0x0, 0x0)
r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
ioctl$UDMABUF_CREATE_LIST(r5, 0x40087543, &(0x7f0000000140))
syz_emit_ethernet(0xa2, &(0x7f0000002300)=ANY=[@ANYBLOB="0180c200000eaaaaaa9d943faaaabb080046000094fffc000000019078ac1e0001ac1414aa9404000004009078030000004d00000000000000002f0000ac1414bbe00000028327df0000000000000000ac1414aaac14ab37581f0000640101000a010101e0000002e0000001862e0000000306020002020ed109567cb50ec760777fb82455050bc92d3002d91d907b790002020684924d890502860b00c60000000005ade34b"], 0x0)

7.656370967s ago: executing program 0 (id=1834):
socket(0xa, 0x80002, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
msgctl$MSG_STAT(0x0, 0xb, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)=<r3=>0x0)
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={r2, r3, 0xee01}, 0xc)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48094)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000c6302, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r5, 0x0)
sendfile(r5, r5, 0x0, 0xffffffff)

6.492479102s ago: executing program 5 (id=1835):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$alg(r1, &(0x7f0000002280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
syz_open_dev$mouse(&(0x7f00000000c0), 0x1, 0x2000)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00')
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f00000001c0)={0x2020}, 0x2020)
clock_settime(0xa, 0x0)
sendmsg$SMC_PNETID_GET(r1, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50)
syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x14002}, 0x0, 0x0)
r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
ioctl$UDMABUF_CREATE_LIST(r5, 0x40087543, &(0x7f0000000140))
syz_emit_ethernet(0xa2, &(0x7f0000002300)=ANY=[@ANYBLOB="0180c200000eaaaaaa9d943faaaabb080046000094fffc000000019078ac1e0001ac1414aa9404000004009078030000004d00000000000000002f0000ac1414bbe00000028327df0000000000000000ac1414aaac14ab37581f0000640101000a010101e0000002e0000001862e0000000306020002020ed109567cb50ec760777fb82455050bc92d3002d91d907b790002020684924d890502860b00c60000000005ade34b"], 0x0)

6.488405078s ago: executing program 3 (id=1837):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_dev$vim2m(&(0x7f0000000340), 0x803fe, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000600)={0x2, @pix={0xffffffff, 0x0, 0x56595559}})
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="380000020008f000000000000000000000000000060002400000000085eac29a840000001400048008000440000000000800034000000000"], 0x38}}, 0x0)

6.211858542s ago: executing program 3 (id=1838):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r2 = dup(r1)
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0xffff030c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001ac0)=@getnexthop={0x20, 0x6a, 0xa01, 0x70bd26, 0x25dfdbfd, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x10)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
r6 = gettid()
kcmp(r6, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x3}, 0x0)
fsopen(&(0x7f0000000380)='pipefs\x00', 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv4_newroute={0x30, 0x18, 0x4a2499fd4c68d2f3, 0x2, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x4, 0xfd, 0x0, 0xc8, 0x7}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x5}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x30}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f0000000100)=@ethtool_cmd={0xa, 0xf, 0x80, 0x3, 0x1, 0x9, 0x80, 0x6, 0x3, 0x63, 0x9, 0x7, 0x1, 0x3, 0x7, 0x8001, [0x0, 0x7]}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r2, 0x1000)
r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r10 = dup(r9)
write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c)
writev(r0, &(0x7f00000002c0)=[{0x0, 0x2b}, {&(0x7f0000000080)='-', 0x1}], 0x2)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth1\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x3, 0x8, 0xfffffffd, "050000009582"}})

5.813247577s ago: executing program 0 (id=1839):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000fc0)={0x14, 0x0, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20004040}, 0x40004)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)

5.2322912s ago: executing program 4 (id=1840):
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x242)
fsetxattr$security_capability(r0, &(0x7f0000001cc0), &(0x7f0000000300)=@v3={0x3000000, [{0xffffffff, 0x9}, {0x80000fff, 0x100}], 0xee01}, 0x18, 0x1)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000001d80)={0x2, 0x4}, 0x2)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x4, 0xee, &(0x7f0000000140)="ee46cae644ca939d8800dd3b4ead16a79f25875b52ce6f912af14cd88b54732105b1adf4cc15382774c576487d356d5f43c96c9d389d41e79ee0bc0255aaff477f391c1a8ac5ce1680f92a33941c4da79dec1ea6a4bc8d8cfae79599761a36616d42f0b366a05d728ec14bc53600015572bd8b97f3cf15ed828e722f2b08a8f58bb3b39b5cb36990090d57988f2ae190ededbcde7c5ff1df5121f38c8fa9a18bb4cdfb3385aaaf40986cff452ea4937a7c67d92b61d0bad06f34ca470c91f053330bfd3b284d256ba138d7bbcc8c638ffee8baa791bdfdb2421e42a2e10fb701d68b8166ec07d84ae54c119459e1"}, {0x800, 0x68, &(0x7f00000002c0)="d35a76fd87364602216d247db22ae75bad277e24435f88a0f2e5788b02f0db3db7b3742a7158a077d9336590fd8a079f6c110f9502f000ed44fbb6144b98bc7896f489ba79959d8eb8da8b28a89ce76beb8a7ec22f127aaf57d72ecf492609ea1ceed1c971935406", 0x0, 0x1}]})
r3 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1ff, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef650000000000000000000000000000f200", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}})
r5 = dup(r4)
write$UHID_INPUT(r5, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20)
setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', <r10=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r8, &(0x7f00000001c0)={0x2c, 0x8, r10}, 0x10)
setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000040)=0x400, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='cachefiles_coherency\x00', r3, 0x0, 0x10001}, 0x18)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0xc0000, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x19, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000500000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000c62d008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000100095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.034087686s ago: executing program 3 (id=1841):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsopen(&(0x7f00000001c0)='devpts\x00', 0x0)
r2 = socket$inet(0xa, 0x801, 0x84)
listen(r2, 0x8)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002800010027bd7000ffdbdf250201"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x18800)
r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0)
syz_usb_control_io$printer(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000900)={0x44, &(0x7f0000000700)={0x0, 0xf, 0x1, "b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0)

4.251861342s ago: executing program 1 (id=1842):
socket$netlink(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x7, 0x0, 0x3}, 0x0)
gettid()
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000140)={0xcba, 0x76b33a21, 0x2, 0xa5, 0x3, [0xffff657b, 0x8, 0xfffffff9, 0x3]})
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000110400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x258, 0x0, 0xa, 0x148, 0xe8, 0x60, 0x1c0, 0x2a8, 0x2a8, 0x1c0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@inet=@ecn={{0x28}, {0x1, 0x10, 0x7, 0x7f}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x2, 0x1, 0xd8cb, 'netbios-ns\x00', 'syz1\x00', {0xa000000000000000}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2b8)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000000)={0x0, @reserved})
io_setup(0x8, 0x0)
io_submit(0x0, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0x40000)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50)

3.935410912s ago: executing program 5 (id=1843):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x9, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0xfefff024}, {0x6, 0x0, 0x0, 0x6}]}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040000)

3.71622339s ago: executing program 4 (id=1844):
r0 = socket(0x40000000015, 0x5, 0x0)
chroot(&(0x7f0000000040)='./file0\x00')
sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="b9648a7181375130594dedb5f7fcdb0d5c44cc8ba8f186", 0x17}, {&(0x7f0000000100)="2d26f96ed61e9f361b6874511a6eaab6647893a4f36dbf0dfb25b69a0a54fc2c65082e2b34d3a2eada4efc68aa54624bbb06602bcf2c7f11d7e2d39df1758d018f750e6a5bd306637e41b3278f", 0x4d}], 0x2, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @broadcast}}}, @ip_retopts={{0xcc, 0x0, 0x7, {[@rr={0x7, 0x1b, 0x76, [@remote, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @empty]}, @timestamp_prespec={0x44, 0x34, 0xeb, 0x3, 0x0, [{@rand_addr=0x64010100, 0x23}, {@multicast2, 0x8}, {@multicast2, 0x8}, {@rand_addr=0x64010100, 0x6}, {@loopback, 0x7b}, {@rand_addr=0x64010102, 0x4}]}, @ra={0x94, 0x4}, @noop, @rr={0x7, 0x1b, 0xb8, [@multicast1, @empty, @rand_addr=0x64010102, @local, @private=0xa010101, @local]}, @rr={0x7, 0x13, 0x56, [@multicast2, @multicast2, @broadcast, @multicast2]}, @generic={0x44, 0x9, "63679a6128ae14"}, @ssrr={0x89, 0x2b, 0x9e, [@remote, @local, @remote, @broadcast, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @local, @multicast2, @loopback]}, @ra={0x94, 0x4, 0x1}]}}}], 0xf0}, 0x20000000)
sendto$inet6(r0, 0x0, 0x0, 0x4000040, &(0x7f0000000000)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, 0x20000092}, 0x71)

3.715919508s ago: executing program 4 (id=1845):
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000100)='\x00\x10TW\xf6\xec\xf0\x12\x891\xf91\xd3\n\x10>V0\xa4\x0ek\xef\xb6r\xff\x16\x00\x02\x00\x00NO);\x913\xc5\xa9\x1d1\x96\'f2\x1e\xd6\xa6\xad,\xccW?\x85\xe9{\x86\xf9\xcc\xc0\xd0l\x9c\xa6\x82\x85\xcbA\v\xf5\xa6\xb7\xbfC$\xe7\xae\xc1W:\xa2k\x1c\x81z\x18\"\"\xd7P~\x84\xdf\xa6\x7f\xa3\x81\x15\xeb\xdd&\xb7ay\xe4\xe7\xe16\'\xecC\r\x9d\x94\t\xda\x00J?\xbe+\xda0\xbe\xd2\xe0\x11\xd2\xe6\x81\x00\x00\x00\xb0\xe9\x95\xbb\xdc\xa0\xe8~\xd7\x00\x00\x00\x00O\xda\x9d#\xddU\x9f\xe3\xb6G\x18\x1a\xb0\x16J\xdd\x82\xb3\x9d\xf0\x03\xdd^\x85=ie\xebx\x98,h9\x81\x01\x12\xb2\x1b\x03\x9eK\xc9\xd8\xaa\x126\xfb\xb45I? \x0e\vo\x9f\xb6\xd1f\xea\x8a\xc1p\xff.h\xc4\xf7\xd5\xab\xd1(\n\x1e\xe3\xf6\\\x9b~S\x04\xe5F\xf9\x1a\x04#e\xd8[\x05\x89a\xae\xd1\x0f\xa8\xf3N\xf8\x85M?')
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x140031, 0xffffffffffffffff, 0x72a4b000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000100)='\x00\x10TW\xf6\xec\xf0\x12\x891\xf91\xd3\n\x10>V0\xa4\x0ek\xef\xb6r\xff\x16\x00\x02\x00\x00NO);\x913\xc5\xa9\x1d1\x96\'f2\x1e\xd6\xa6\xad,\xccW?\x85\xe9{\x86\xf9\xcc\xc0\xd0l\x9c\xa6\x82\x85\xcbA\v\xf5\xa6\xb7\xbfC$\xe7\xae\xc1W:\xa2k\x1c\x81z\x18\"\"\xd7P~\x84\xdf\xa6\x7f\xa3\x81\x15\xeb\xdd&\xb7ay\xe4\xe7\xe16\'\xecC\r\x9d\x94\t\xda\x00J?\xbe+\xda0\xbe\xd2\xe0\x11\xd2\xe6\x81\x00\x00\x00\xb0\xe9\x95\xbb\xdc\xa0\xe8~\xd7\x00\x00\x00\x00O\xda\x9d#\xddU\x9f\xe3\xb6G\x18\x1a\xb0\x16J\xdd\x82\xb3\x9d\xf0\x03\xdd^\x85=ie\xebx\x98,h9\x81\x01\x12\xb2\x1b\x03\x9eK\xc9\xd8\xaa\x126\xfb\xb45I? \x0e\vo\x9f\xb6\xd1f\xea\x8a\xc1p\xff.h\xc4\xf7\xd5\xab\xd1(\n\x1e\xe3\xf6\\\x9b~S\x04\xe5F\xf9\x1a\x04#e\xd8[\x05\x89a\xae\xd1\x0f\xa8\xf3N\xf8\x85M?') (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x140031, 0xffffffffffffffff, 0x72a4b000) (async)

3.603351531s ago: executing program 4 (id=1846):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
fcntl$addseals(r0, 0x409, 0x5)
socket(0xa, 0x80000, 0xf24)
socket$unix(0x1, 0x1, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff, 0x94d5320913ca47c9}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x2, &(0x7f0000000540)=""/231, &(0x7f0000000100)=0xe7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0203000906ffffffffffe100400000000500170032a000000a004e210000034cfe8000000000000000000000000000320000000000000000"], 0x38}}, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0)
mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil)
syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x20048810}, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='cubic', 0x6)

3.593358911s ago: executing program 5 (id=1847):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
r4 = socket(0x2, 0x3, 0x6)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES8=r3, @ANYRESOCT=r2, @ANYRES16=r3, @ANYRES64=r2, @ANYRES64=r4, @ANYRES16=r4, @ANYRES8=r2], 0x14}}, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x1, 0xfffffffc, 0x80000, 'syz1\x00'}, 0x5, 0x30, 0x1, r2, 0x0, 0x0, 'syz0\x00', 0x0})
r5 = userfaultfd(0x80001)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xbfa35000)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
r6 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a)
ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x4000})
ptrace$ARCH_MAP_VDSO_32(0x1e, r2, 0x5, 0x2002)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0)
r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
ioctl$RTC_ALM_SET(r7, 0x40247007, &(0x7f00000002c0)={0x14, 0x10, 0x3, 0xb, 0x4, 0x2, 0x3, 0x84, 0x1})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)

2.435812744s ago: executing program 0 (id=1848):
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x3}}, './file0\x00'})
ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040))
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00')
ioctl$SNDRV_PCM_IOCTL_PAUSE(r1, 0x40044145, &(0x7f00000000c0)=0x10)
ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)=@multiplanar_fd={0x4, 0x1, 0x4, 0x0, 0x8, {}, {0x1, 0x8, 0x1, 0x6, 0x2, 0xe, "e1ebf3aa"}, 0x5, 0x4, {&(0x7f0000000100)=[{0x401, 0x7, {<r2=>0xffffffffffffffff}, 0x7f}, {0x3, 0x2, {<r3=>r0}, 0x2}]}, 0xff, 0x0, r0})
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r4=>r2, {0x80}}, './file0\x00'})
write$P9_RATTACH(r4, &(0x7f0000000240)={0x14, 0x69, 0x2, {0x40, 0x2, 0x2}}, 0x14)
r5 = socket$inet6(0xa, 0x5, 0xfffffffd)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000300)=@multiplanar_overlay={0x0, 0xc9c1d218a1060b96, 0x4, 0x70000, 0x8000, {0x77359400}, {0x2, 0xc, 0x1, 0x7, 0x2, 0x2, "5e5aa93d"}, 0xffffffc5, 0x3, {&(0x7f0000000280)=[{0xc5, 0x6f30, {0x1}, 0xa0d}, {0x6, 0x0, {0x4}, 0x40000000}]}, 0x7})
ioctl$VHOST_VDPA_SET_CONFIG(r1, 0x4008af74, &(0x7f0000000380)={0x6, 0xff, "94a31ff31fcc64de287327505503f9f7d12fa9ae58cade4100e492ac4d5f2eb1744e990c5160d904713d6d891f9baaa74ac6a4bc1472753adf32e32ac96ee1ef0e5f50feb04756027e41bfd8000c0b6bed4f7144a66a10ae2af20caf472a495e0e5e91db93d8906dc57a45da63965cfdddf0ac1fbc1da4ec425c2837e39f4a1d7b2cc08c3d3c9e54727f9c63d5b8a2640359265ad11b14b5a9f9af03cd58ccf682893e37e8d78072cb34dae3d859d5bdfa6cc4339640ac241bae569c06256b8162eb730d7abbecfe44689b4ec41182aa9f7964983e79fa5dab16d87fedb161763a75ca7bda5ec6f106df362f44e45c5f339b15ed05ce2eb66bf6bf2b7e6f89"})
flock(r0, 0xb)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2)
r6 = socket$netlink(0x10, 0x3, 0xf)
io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x1}, @ioring_restriction_sqe_flags_required={0x3, 0x13}, @ioring_restriction_sqe_flags_allowed={0x2, 0x15}, @ioring_restriction_sqe_flags_required={0x3, 0xe}, @ioring_restriction_sqe_op={0x1, 0xf}, @ioring_restriction_sqe_flags_required={0x3, 0xf}, @ioring_restriction_sqe_flags_required={0x3, 0x12}, @ioring_restriction_register_op={0x0, 0x6}], 0x8)
timer_create(0x4, &(0x7f0000000540)={0x0, 0x26, 0x4}, &(0x7f0000000580)=<r7=>0x0)
clock_gettime(0x0, &(0x7f00000005c0)={<r8=>0x0, <r9=>0x0})
timer_settime(r7, 0x1dcef464495d7ee9, &(0x7f0000000600)={{r8, r9+10000000}, {0x0, 0x3938700}}, 0x0)
unshare(0x1c010500)
ioctl$VIDIOC_G_CROP(r4, 0xc014563b, &(0x7f0000000640)={0x5, {0x0, 0x54, 0x1caa, 0x3}})
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x9010, r5, 0xa5516000)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
sendmmsg$inet(r10, &(0x7f0000002c00)=[{{&(0x7f0000000680)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000002b00)=[{&(0x7f00000006c0)="541aeaf095ec8f712ae5e7ed4f68c9866f390db6de4a1b1c128380742240496660ea30010101d5f0e36a110d858e915261c2f8b023975db3840a6e925e2bf685bc6f15ded71480399b4f50410042747d14f42fe313cf35c92a48ae799d576a83d1275a47558cafb56a9a5fa9b07f66cad35e156ff4b0a258c7716d2f9335", 0x7e}, {&(0x7f0000000740)="c0476c8154be2f988f80f70b79f77a2ed34f05a667a6", 0x16}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="48098e0cf926d75308f5243fb322424415028b4cc3f42a293f273f6cc43153ea13db395f8f4e0f8a9a85d94e", 0x2c}, {&(0x7f00000017c0)="fdb3e0a2647162beef6938321e271fedec9e025cd2bcebee8ed129971252304ff82f684e0c11df593e9d66417b1f9c8d1d2e53249000c2b7a5aee28da5b08e70116c56b1c8a8a7bbbc2a162b53828857aca9612dc7ec2cd20c02088c198bc23bd6b2c61a9b6cd0175a39ce4905d075556c2dc771caf238eeca1e6beb3d9d45fc615d5031b270df9f457cc9bfcefc723d8dd2203c7325f6f39f3445206593e537d4d7b09d748ba07279c9e704f8061849a448ea67a13ef6ec037e9e5c18d2355febb373bf405000adaffc6d2c5b4089e6cbc1c2b88013f363e400c6b5333f426543d650e2ae797b9ff88f765c904b8d390da0", 0xf2}, {&(0x7f00000018c0)="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", 0x1000}, {&(0x7f00000028c0)="f2221744dadbf3f9e9947c6c250da8238e7db3cf54ccc56751f0d37e9946a43b3d1203927821a23efd0eaef4865c804da4d5c7f834dc45cbeb577213e4db99bb79e00425869882cb66895c22e39c21ec381488408b0469490d0075db8246c21bc25590d97d4089ec4c08e9263109807a6f6d040b4a952c11e93622e4538f24cb067a6601df33a94c691c776aaeefc72217dd97109c524307acbcf995da66d8d132e8631961206650939cc3b3340fcd2dd265886771e74ec260ca5985f03802853b5b90a64b2f6b7d685e1227e0dfb177a2bc3ce0e989df768df0b8292696987a84aba3189ff57f95de5b3ac1ccfb1a33add3e4e2f2a8e2e171", 0xf9}, {&(0x7f00000029c0)="56aaa315b00fc174ef1ad2e526e4fa6d4dc460b1b1240b305e0ea5ae51aa3c524c2e89d5d1", 0x25}, {&(0x7f0000002a00)="e35df8f41d4b51252703c17f0e198cc1a69c79a6", 0x14}, {&(0x7f0000002a40)="cf6e30a223c9aa8879502eef04558006f7d8ebd0166054127444e67e5773301f957d8e112553efeef8bcd056d646e15e5027c6c1d01e10e46529b70f7c0a1a72c522ce750fc44eafcfb6617d86ece5b03f57a920483751f0f8059751d54b983b29d1c925d24571b0f6dc334d39783c87bac19b65b8b7e027bdf61f9e39005ba477034b92", 0x84}], 0xa, &(0x7f0000002bc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfff}}], 0x30}}], 0x1, 0x26048082)
io_uring_enter(r1, 0x2854, 0xb3a9, 0x28, &(0x7f0000002c40)={[0x3]}, 0x8)
fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000002c80), &(0x7f0000002cc0), 0x2, 0x2)
close_range(r5, r3, 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002d40)={'wg1\x00', <r11=>0x0})
sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f0000003200)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000031c0)={&(0x7f0000002d80)={0x40c, 0x13, 0x20, 0x70bd2d, 0x25dfdbfb, {0x15, 0x1d, 0x0, 0xf8, {0x4e23, 0x4e22, [0x0, 0xe85, 0x2, 0x43c5], [0x2, 0x1, 0x5, 0x7], r11, [0x6, 0x7f]}, 0xffffffff}, [@INET_DIAG_REQ_BYTECODE={0x92, 0x1, "54ddf9209a78f27ecac71b5995f86675a5d02181aeed503cb4cdba03b842061e0932b836ac6bad87a63bc36aa1fbd8fed7bb13f5f3606b1b1efcd840efab84fa5580a48d7de9edf140361cee9fd8b0b099f4f87206edc2bdd4f4ef7c44254c13ff234f06551da5d37dea2ac6a14699c8d308eef637f608b50dcb1d96e644a8f8fbf6e631132742e9722cfb8360b9"}, @INET_DIAG_REQ_BYTECODE={0x59, 0x1, "f3193e87fc594a10186fe249f90073c2af0f887c2ac4c6e5c36e0598139a0082e9e457d080eb07c6ee3bb0bb5d0edfd5e97d3d38acd717084dd6c66e0c501cc33c983e3fd0c254d538f2ade35c0dfc1505b4afa4a5"}, @INET_DIAG_REQ_BYTECODE={0x2b, 0x1, "0d93d43d0ac9746e19fe0265adb287b715dce1e74d145ed6e9d9d9118f5e8830d8c1a117725d22"}, @INET_DIAG_REQ_BYTECODE={0xd6, 0x1, "39bdb65d94440a21dd5364548746490e4e9f04912a04c0c514adbda63100571c79075740b4e9c249a25524e243f4f77a2ce1ac1eedc95e23ea214cdc3a66e3b13bb35d1a818806210f0e93c34a0547a91cf048300ad505612ded8ade10ac3095f853eee95e5f9e3c3a72355216abfd8c3bf7104926fb8317f5ddd1e08bdb20301b715d910535692856e4f21942cbca8c793ac723b68e49de412ce1ce9140554b0a9c263ba1e3edfd1d512dc23d65ad403e882800f33d77cbc586c2e05e5e77bb0f0b198af043f8e4dc9d91d60ad3c138f6db"}, @INET_DIAG_REQ_BYTECODE={0x8a, 0x1, "ce14aed147c0107917977dd309c03d1b69c209890a649c8ee829fe479d3f9a46f4d07c9bdb8f36f95d10c42b1e3efc5060742c3438d0588d1bf362b4dda02f4c0b5f29e6d84e483167a5d15a4749e984f3d6019ec3a761eedb894de752b666e5f6ba66d8228de0cfb5286f01fce7eaf89cdda017a356c079a9a12802eaa20ab40e604a479105"}, @INET_DIAG_REQ_BYTECODE={0x55, 0x1, "63c30cb2ccdb753019d317d291d052c6a57154919ca68d544feeebec38c0f265c9ca890100e2ce1216a7cabf08cc21f785fea76f1619a2c60e32480eb2c54ec64606949ffbe7ff5eb9bb07f791a464f944"}, @INET_DIAG_REQ_BYTECODE={0xb, 0x1, "3a8d5afb9484e6"}, @INET_DIAG_REQ_BYTECODE={0x8e, 0x1, "f20870340c59e2d7742badba486699ebfd1b248d3054e3daa7d9254a352314ca965791d8960da6d4e71d30906d0a4226ffc0938975112a8bca98e45b567c1583c332092973f29883cf237fd07c3b0139e99fb3fdf78ca59180c8d6bfc2d9b53501ba04cedd6cda98ca8fb2652f8453b3f862f000a129551375939e2ac839047a43cca440b1341d3e58e6"}, @INET_DIAG_REQ_BYTECODE={0x4b, 0x1, "1acf91ba472329fa3660febd47f5c4e70773b5d28eda14589fefb339562388205f8982a73170ef90dae91106b068baf7e7c089d048466917cde5dedf2e27ed73224dbf0979f959"}]}, 0x40c}, 0x1, 0x0, 0x0, 0x41}, 0x1)
accept4$inet6(r4, 0x0, &(0x7f0000003240), 0x800)
ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000003380)=@multiplanar_userptr={0x7, 0x3, 0x4, 0x800, 0x919, {}, {0x4, 0x8, 0x5, 0x5, 0xff, 0x2, "9c6cd0fc"}, 0x8, 0x2, {&(0x7f0000003300)=[{0x7, 0xd, {&(0x7f0000003280)}}, {0x7, 0x3, {&(0x7f00000032c0)}, 0x3ff}]}, 0x2, 0x0, r0})
syz_open_dev$ptys(0xc, 0x3, 0x1)

2.383026032s ago: executing program 4 (id=1849):
r0 = syz_open_dev$video(&(0x7f0000000080), 0x9c1, 0x28000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1)
sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x1d, 0x0, {{}, {0x0, 0x4109}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = dup(r3)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
write$P9_RSETATTR(r4, &(0x7f0000000300)={0x7, 0x1b, 0x1}, 0x7)
r5 = dup(r3)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000004c0)={<r6=>0x0, @in={{0x2, 0x4e20, @loopback}}, 0xf6, 0x3}, &(0x7f0000000280)=0x90)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000580)={r6, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000002c0)=0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8103, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1810037e000000101000000000000308d598bbb198ca455cb7e430e000a000f", 0x31}], 0x1}, 0x4000880)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x19)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c)
ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f00000000c0)={0x4, @raw_data="457cd2d84a36cd01037c1105ccdbb11b2354b9fb2941d1fe23e933e5e33da9f7a40896f239d1802c1c10a46fe14a8160352015e2c6ca92dd6b720132e1a9d4346304da9732203025a27bd5166ebc5bd9072b904325fd05024e152d38eda875d0617fb9a02618e790ca445c059bd8853b4f33b28a9b5acf701e34b431d4ad51b5023c5801810b18ade9b7556afd259cae9d6850f86cdc37402c493ba858489a38995c0d55960e94a77da9f681f1505e815b2d53be9b887e72a727a20ebc27534935f9dd3f6a1dd059"})

2.230384496s ago: executing program 0 (id=1850):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x2, 0x2, 0x0, 0x25b}, 0x0, &(0x7f0000000280))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000)
r2 = socket(0x840000000002, 0x3, 0xfa)
getsockname$inet(r2, 0x0, &(0x7f0000002280))
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000200)={0x6, 0x2, 0x4})
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x40000008, 0xffff, 0x0, 0xffffffffffffffff, 0x6}, 0x50)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000040)="27031c00160014000000002f1eafacf706e105000000894f00000000000b80558ddbba9b37786fd8", 0x28}], 0x1}, 0x24004010)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x2)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, &(0x7f0000000980)=[0x0, <r8=>0x0], 0x0, 0x0, 0x0, 0x2})
ioctl$DRM_IOCTL_MODE_GETENCODER(r7, 0xc01464a6, &(0x7f0000000a00)={r8})
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r9, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r9, 0x0, <r10=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r10, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r10, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e})
ioctl$IOMMU_IOAS_UNMAP$ALL(r6, 0x3b86, &(0x7f0000000240)={0x18, r9})
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cf6b4b6c54"], 0x68)

2.168674529s ago: executing program 1 (id=1851):
r0 = syz_open_dev$radio(&(0x7f00000001c0), 0x3, 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x2, 0x1)
ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = memfd_create(0x0, 0xe)
ftruncate(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5)
syz_fuse_handle_req(r6, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000713b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x20000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
io_setup(0x1, &(0x7f00000004c0)=<r8=>0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
io_submit(r8, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r7, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000000)={0x46380e74, 0x3, 0x3ffffff})

1.984106687s ago: executing program 4 (id=1852):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$alg(r1, &(0x7f0000002280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
syz_open_dev$mouse(&(0x7f00000000c0), 0x1, 0x2000)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00')
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f00000001c0)={0x2020}, 0x2020)
clock_settime(0xa, 0x0)
sendmsg$SMC_PNETID_GET(r1, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50)
syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x14002}, 0x0, 0x0)
r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
ioctl$UDMABUF_CREATE_LIST(r5, 0x40087543, &(0x7f0000000140))
syz_emit_ethernet(0xa2, &(0x7f0000002300)=ANY=[@ANYBLOB="0180c200000eaaaaaa9d943faaaabb080046000094fffc000000019078ac1e0001ac1414aa9404000004009078030000004d00000000000000002f0000ac1414bbe00000028327df0000000000000000ac1414aaac14ab37581f0000640101000a010101e0000002e0000001862e0000000306020002020ed109567cb50ec760777fb82455050bc92d3002d91d907b790002020684924d890502860b00c60000000005ade34b"], 0x0)

1.665485076s ago: executing program 5 (id=1853):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x4023c, &(0x7f0000000300)={0x0, 0x1c2c, 0x10100, 0x2, 0x315}, &(0x7f00000002c0), &(0x7f00000001c0))
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x10, 0x42, 0x44}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r1}, 0x38)

330.107071ms ago: executing program 1 (id=1854):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
r1 = socket(0x15, 0x5, 0x0)
bind$l2tp6(r1, &(0x7f0000000200)={0xa, 0x0, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, 0x81, 0x2}, 0x20)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000040)={{{@in=@remote, @in=@loopback, 0x4e25, 0x0, 0x3, 0x2, 0x2}, {0x2, 0x53, 0xfff, 0x7, 0xffffdffffffffffc, 0x1e6, 0xfffffffffffffffe, 0x8001}, {0x7ffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x5}, 0x727, 0x0, 0x1, 0x0, 0x3, 0x2}, {{@in=@multicast1, 0x0, 0x2b}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x4, 0x2, 0x0, 0xffffffff, 0x3439, 0x400009}}, 0xe8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x2}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1, &(0x7f0000000140)=@raw=[@exit], &(0x7f00000000c0)='GPL\x00', 0x7}, 0x94)

0s ago: executing program 3 (id=1855):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000003680)={0x84, &(0x7f00000031c0)={0x20, 0x31, 0x1, '\t'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000005800)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f00000057c0)={0x40, 0x5, 0x6, "f39791ce975b"}})
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (async)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000003680)={0x84, &(0x7f00000031c0)={0x20, 0x31, 0x1, '\t'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000005800)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f00000057c0)={0x40, 0x5, 0x6, "f39791ce975b"}}) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)

kernel console output (not intermixed with test programs):

or" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdeb38eec9 code=0x7ffc0000
[  406.299270][   T30] audit: type=1326 audit(1760257797.962:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11075 comm="syz.1.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efdeb38eec9 code=0x7ffc0000
[  406.385781][   T30] audit: type=1326 audit(1760257797.962:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11075 comm="syz.1.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdeb38eec9 code=0x7ffc0000
[  406.904966][   T30] audit: type=1326 audit(1760257797.962:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11075 comm="syz.1.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efdeb38eec9 code=0x7ffc0000
[  407.093365][   T30] audit: type=1326 audit(1760257797.962:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11075 comm="syz.1.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdeb38eec9 code=0x7ffc0000
[  407.150625][   T30] audit: type=1326 audit(1760257797.962:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11075 comm="syz.1.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7efdeb38eec9 code=0x7ffc0000
[  407.183750][   T30] audit: type=1326 audit(1760257797.962:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11075 comm="syz.1.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdeb38eec9 code=0x7ffc0000
[  407.214959][   T30] audit: type=1326 audit(1760257797.962:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11075 comm="syz.1.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efdeb38eec9 code=0x7ffc0000
[  407.377520][   T30] audit: type=1326 audit(1760257797.962:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11075 comm="syz.1.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdeb38eec9 code=0x7ffc0000
[  407.625841][T11100] usb usb8: usbfs: process 11100 (syz.0.1379) did not claim interface 0 before use
[  407.655067][ T5905] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  407.819020][T11108] program syz.0.1379 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  407.836332][ T5905] usb 5-1: config 0 has an invalid descriptor of length 28, skipping remainder of the config
[  407.875693][ T5905] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 205, using maximum allowed: 30
[  407.916239][ T5905] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 205
[  407.963796][ T5905] usb 5-1: New USB device found, idVendor=1781, idProduct=0838, bcdDevice=9b.49
[  408.024729][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  408.080489][ T5905] usb 5-1: Product: syz
[  408.100487][ T5905] usb 5-1: Manufacturer: syz
[  408.154946][ T5874] usb 2-1: new full-speed USB device number 59 using dummy_hcd
[  408.210366][ T5905] usb 5-1: SerialNumber: syz
[  408.224292][ T5905] usb 5-1: config 0 descriptor??
[  408.340229][ T5874] usb 2-1: no configurations
[  408.353611][ T5874] usb 2-1: can't read configurations, error -22
[  408.526820][ T5874] usb 2-1: new full-speed USB device number 60 using dummy_hcd
[  408.703304][ T5874] usb 2-1: no configurations
[  408.709573][ T5874] usb 2-1: can't read configurations, error -22
[  408.728636][ T5874] usb usb2-port1: attempt power cycle
[  408.996007][ T5905] usb 5-1: USB disconnect, device number 55
[  409.114736][ T5874] usb 2-1: new full-speed USB device number 61 using dummy_hcd
[  409.146377][ T5874] usb 2-1: no configurations
[  409.151021][ T5874] usb 2-1: can't read configurations, error -22
[  409.268095][T11124] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer.
[  409.324969][ T5874] usb 2-1: new full-speed USB device number 62 using dummy_hcd
[  409.366310][ T5874] usb 2-1: no configurations
[  409.371058][ T5874] usb 2-1: can't read configurations, error -22
[  409.381990][ T5874] usb usb2-port1: unable to enumerate USB device
[  410.596182][T11149] input: syz1 as /devices/virtual/input/input32
[  410.885351][  T812] usb 5-1: new full-speed USB device number 56 using dummy_hcd
[  411.050451][  T812] usb 5-1: config 0 has an invalid interface number: 181 but max is 0
[  411.061569][  T812] usb 5-1: config 0 has no interface number 0
[  411.073321][  T812] usb 5-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=d5.70
[  411.083772][  T812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  411.092336][  T812] usb 5-1: Product: syz
[  411.096976][  T812] usb 5-1: Manufacturer: syz
[  411.101668][  T812] usb 5-1: SerialNumber: syz
[  411.110234][  T812] usb 5-1: config 0 descriptor??
[  411.139733][  T812] kl5kusb105 5-1:0.181: KL5KUSB105D / PalmConnect converter detected
[  411.161795][  T812] usb 5-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0
[  411.290391][T11161] usb usb8: usbfs: process 11161 (syz.0.1398) did not claim interface 0 before use
[  411.357022][T11151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  411.390063][T11151] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  411.602900][T11166] program syz.0.1398 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  411.647797][ T5905] usb 5-1: USB disconnect, device number 56
[  411.659517][ T5905] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0
[  411.679698][ T5905] kl5kusb105 5-1:0.181: device disconnected
[  411.814944][ T5874] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  411.976476][ T5874] usb 4-1: Using ep0 maxpacket: 8
[  411.993068][ T5874] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  412.051569][ T5874] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  412.079712][ T5874] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  412.127112][ T5874] usb 4-1: string descriptor 0 read error: -71
[  412.135203][ T5874] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  412.145899][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  412.199877][   T30] kauditd_printk_skb: 6 callbacks suppressed
[  412.199893][   T30] audit: type=1326 audit(1760257804.012:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11154 comm="syz.1.1397" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efdeb38eec9 code=0x0
[  412.201460][ T5874] usb 4-1: rejected 1 configuration due to insufficient available bus power
[  412.390479][ T5874] usb 4-1: no configuration chosen from 1 choice
[  412.407859][ T5874] usb 4-1: USB disconnect, device number 56
[  412.965055][ T5874] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  413.113460][ T5830] Bluetooth: hci2: command 0x0406 tx timeout
[  413.210219][ T5874] usb 5-1: Using ep0 maxpacket: 8
[  413.357156][   T30] audit: type=1804 audit(1760257805.162:1746): pid=11189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1406" name="/newroot/265/file0" dev="fuse" ino=1 res=1 errno=0
[  413.500764][ T5874] usb 5-1: unable to get BOS descriptor or descriptor too short
[  413.612406][ T5874] usb 5-1: config 7 has an invalid interface number: 67 but max is 0
[  413.626087][ T5874] usb 5-1: config 7 has no interface number 0
[  413.687011][ T5874] usb 5-1: string descriptor 0 read error: -22
[  413.693370][ T5874] usb 5-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16
[  413.702540][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  414.245597][ T5874] usb 5-1: USB disconnect, device number 57
[  414.720183][T11219] usb usb8: usbfs: process 11219 (syz.3.1413) did not claim interface 0 before use
[  414.790374][T11215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1412'.
[  414.963644][T11224] program syz.3.1413 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  415.073188][  T856] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  415.089466][T11225] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  415.275296][  T856] usb 5-1: Using ep0 maxpacket: 16
[  415.284325][  T856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  415.296388][  T856] usb 5-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00
[  415.345014][  T856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  415.434562][  T856] usb 5-1: config 0 descriptor??
[  416.054961][   T24] usb 6-1: new low-speed USB device number 9 using dummy_hcd
[  416.207805][  T856] sunplus 0003:04FC:05D8.000E: unknown main item tag 0x0
[  416.215833][  T856] sunplus 0003:04FC:05D8.000E: unknown main item tag 0x0
[  416.222869][  T856] sunplus 0003:04FC:05D8.000E: unknown main item tag 0x0
[  416.250094][  T856] sunplus 0003:04FC:05D8.000E: unknown main item tag 0x0
[  416.270125][   T24] usb 6-1: config 13 has an invalid interface number: 100 but max is 1
[  416.279906][  T856] sunplus 0003:04FC:05D8.000E: unknown main item tag 0x0
[  416.289061][   T24] usb 6-1: config 13 has an invalid interface number: 188 but max is 1
[  416.299073][  T856] sunplus 0003:04FC:05D8.000E: unknown main item tag 0x0
[  416.306493][   T24] usb 6-1: config 13 has no interface number 0
[  416.325250][  T856] sunplus 0003:04FC:05D8.000E: unknown main item tag 0x0
[  416.332993][   T24] usb 6-1: config 13 has no interface number 1
[  416.342110][  T856] sunplus 0003:04FC:05D8.000E: unknown main item tag 0x0
[  416.354229][   T24] usb 6-1: config 13 interface 100 altsetting 250 endpoint 0x6 has invalid maxpacket 32, setting to 8
[  416.365950][  T856] sunplus 0003:04FC:05D8.000E: unknown main item tag 0x0
[  416.398011][   T24] usb 6-1: config 13 interface 100 has no altsetting 0
[  416.410021][T11214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  416.418757][T11214] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  416.507940][  T856] sunplus 0003:04FC:05D8.000E: unknown main item tag 0x0
[  416.540511][   T24] usb 6-1: string descriptor 0 read error: -22
[  416.551640][  T856] sunplus 0003:04FC:05D8.000E: reserved main item tag 0xe
[  416.569362][   T24] usb 6-1: New USB device found, idVendor=0408, idProduct=ea05, bcdDevice=2c.a8
[  416.589881][  T856] sunplus 0003:04FC:05D8.000E: invalid report_count 287892719
[  416.614893][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.623009][  T856] sunplus 0003:04FC:05D8.000E: item 0 4 1 9 parsing failed
[  416.641361][  T856] sunplus 0003:04FC:05D8.000E: probe with driver sunplus failed with error -22
[  416.671469][   T24] option 6-1:13.100: GSM modem (1-port) converter detected
[  416.725117][  T856] usb 5-1: USB disconnect, device number 58
[  416.744646][   T24] option 6-1:13.188: GSM modem (1-port) converter detected
[  416.780545][T11254] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1421'.
[  416.861085][ T5874] hid-generic 0000:0000:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  416.994520][   T24] usb 6-1: USB disconnect, device number 9
[  417.041121][   T24] option 6-1:13.100: device disconnected
[  417.109700][   T24] option 6-1:13.188: device disconnected
[  418.715887][T11295] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  418.935006][  T856] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  419.115324][  T856] usb 5-1: Using ep0 maxpacket: 16
[  419.475372][  T856] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[  419.488012][  T856] usb 5-1: config 0 descriptor has 1 excess byte, ignoring
[  419.526745][  T856] usb 5-1: config 0 has no interface number 0
[  419.649376][  T856] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  419.732540][  T856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.849450][  T856] usb 5-1: Product: syz
[  419.875716][  T856] usb 5-1: Manufacturer: syz
[  419.880590][  T856] usb 5-1: SerialNumber: syz
[  419.966627][  T856] usb 5-1: config 0 descriptor??
[  420.055033][  T812] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  420.265251][  T812] usb 6-1: Using ep0 maxpacket: 8
[  420.272271][  T812] usb 6-1: config 0 has an invalid interface number: 31 but max is 0
[  420.280734][  T812] usb 6-1: config 0 has no interface number 0
[  420.292605][  T812] usb 6-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68
[  420.397893][  T812] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.429823][  T812] usb 6-1: Product: syz
[  420.441344][  T812] usb 6-1: Manufacturer: syz
[  420.451970][  T812] usb 6-1: SerialNumber: syz
[  420.473287][  T812] usb 6-1: config 0 descriptor??
[  420.498463][  T812] redrat3 6-1:0.31: Couldn't find all endpoints
[  420.574274][T11306] syz_tun: entered allmulticast mode
[  420.585983][T11306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1435'.
[  420.659593][T11306] syz_tun (unregistering): left allmulticast mode
[  420.709675][ T5874] usb 6-1: USB disconnect, device number 10
[  420.947186][T11310] netlink: 'syz.1.1436': attribute type 1 has an invalid length.
[  421.090212][T11312] bond1: (slave gretap1): making interface the new active one
[  421.100601][T11312] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  421.113826][T11315] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1437'.
[  421.670689][  T856] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[  421.703854][  T856] uvcvideo 5-1:0.105: No valid video chain found.
[  421.735563][  T856] usb 5-1: USB disconnect, device number 59
[  421.890595][T11335] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  421.938439][T11335] batman_adv: batadv0: Removing interface: ip6gretap1
[  421.963758][T11335] bond1: (slave gretap1): Releasing active interface
[  422.117943][  T856] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  422.279911][T11338] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1440'.
[  422.288971][T11338] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1440'.
[  422.312890][T11338] netlink: 'syz.5.1440': attribute type 12 has an invalid length.
[  422.327745][  T856] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  422.337177][  T856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  422.347288][  T856] usb 5-1: Product: syz
[  422.367774][  T856] usb 5-1: Manufacturer: syz
[  422.373243][  T856] usb 5-1: SerialNumber: syz
[  422.411487][  T856] usb 5-1: config 0 descriptor??
[  422.448355][T11342] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1444'.
[  423.625231][  T856] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  423.794933][  T856] usb 2-1: Using ep0 maxpacket: 8
[  423.802161][  T856] usb 2-1: config 0 has an invalid interface number: 200 but max is 0
[  423.810730][  T856] usb 2-1: config 0 has no interface number 0
[  423.817277][  T856] usb 2-1: config 0 interface 200 has no altsetting 0
[  423.829190][  T856] usb 2-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39
[  423.842562][  T856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.850646][  T856] usb 2-1: Product: syz
[  423.854898][  T856] usb 2-1: Manufacturer: syz
[  423.859508][  T856] usb 2-1: SerialNumber: syz
[  423.866460][  T856] usb 2-1: config 0 descriptor??
[  423.995014][    T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  424.081870][  T856] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.200/input/input33
[  424.099554][  T856] usb 2-1: USB disconnect, device number 63
[  424.159139][    T9] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  424.168551][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  424.178565][    T9] usb 6-1: Product: syz
[  424.182735][    T9] usb 6-1: Manufacturer: syz
[  424.187404][    T9] usb 6-1: SerialNumber: syz
[  424.199048][    T9] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  424.217462][ T5874] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  424.623371][  T856] usb 6-1: USB disconnect, device number 11
[  424.734463][ T5905] usb 5-1: USB disconnect, device number 60
[  424.817983][   T24] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  424.855349][T11376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  424.895110][ T5915] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  424.986637][   T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  424.997044][   T24] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  425.006138][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  425.016886][   T24] usb 4-1: config 0 descriptor??
[  425.025928][   T24] pwc: Askey VC010 type 2 USB webcam detected.
[  425.045125][ T5915] usb 2-1: Using ep0 maxpacket: 16
[  425.054114][ T5915] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  425.063464][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  425.071607][ T5915] usb 2-1: Product: syz
[  425.075925][ T5915] usb 2-1: Manufacturer: syz
[  425.080544][ T5915] usb 2-1: SerialNumber: syz
[  425.087490][ T5915] usb 2-1: config 0 descriptor??
[  425.265087][ T5874] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  425.272286][ T5874] ath9k_htc: Failed to initialize the device
[  425.279221][  T856] usb 6-1: ath9k_htc: USB layer deinitialized
[  425.382640][T11378] netlink: 532 bytes leftover after parsing attributes in process `syz.5.1460'.
[  425.395112][T11378] loop9: detected capacity change from 0 to 7
[  425.404975][T11378] Dev loop9: unable to read RDB block 7
[  425.410586][T11378]  loop9: unable to read partition table
[  425.416668][T11378] loop9: partition table beyond EOD, truncated
[  425.422856][T11378] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  425.446729][   T24] pwc: recv_control_msg error -32 req 02 val 2b00
[  425.502089][   T24] pwc: recv_control_msg error -71 req 02 val 2700
[  425.511838][   T24] pwc: recv_control_msg error -71 req 02 val 2c00
[  425.519307][   T24] pwc: recv_control_msg error -71 req 04 val 1000
[  425.526937][   T24] pwc: recv_control_msg error -71 req 04 val 1300
[  425.533733][   T24] pwc: recv_control_msg error -71 req 04 val 1400
[  425.541133][   T24] pwc: recv_control_msg error -71 req 02 val 2000
[  425.548381][   T24] pwc: recv_control_msg error -71 req 02 val 2100
[  425.555248][ T5915] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  425.567832][   T24] pwc: recv_control_msg error -71 req 04 val 1500
[  425.574934][   T24] pwc: recv_control_msg error -71 req 02 val 2500
[  425.582954][ T5915] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  425.593539][   T24] pwc: recv_control_msg error -71 req 02 val 2400
[  425.601583][   T24] pwc: recv_control_msg error -71 req 02 val 2600
[  425.608749][ T5915] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  425.616890][ T5915] usb 2-1: media controller created
[  425.622263][   T24] pwc: recv_control_msg error -71 req 02 val 2900
[  425.635227][   T24] pwc: recv_control_msg error -71 req 02 val 2800
[  425.645180][   T24] pwc: recv_control_msg error -71 req 04 val 1100
[  425.656081][ T5915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  425.665681][   T24] pwc: recv_control_msg error -71 req 04 val 1200
[  425.680399][   T24] pwc: Registered as video103.
[  425.696344][   T24] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input34
[  425.719722][   T24] usb 4-1: USB disconnect, device number 57
[  425.725836][  T856] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  425.808317][ T5915] zl10353_read_register: readreg error (reg=127, ret==0)
[  425.816167][ T5915] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  425.824064][ T5915] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  425.865311][  T856] usb 5-1: device descriptor read/64, error -71
[  425.872521][ T5874] usb 2-1: USB disconnect, device number 64
[  425.897856][ T5874] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  426.105345][  T856] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  426.265031][  T856] usb 5-1: device descriptor read/64, error -71
[  426.375551][  T856] usb usb5-port1: attempt power cycle
[  426.724960][  T856] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  426.766111][  T856] usb 5-1: device descriptor read/8, error -71
[  427.015403][  T856] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  427.063882][  T856] usb 5-1: device descriptor read/8, error -71
[  427.197787][  T856] usb usb5-port1: unable to enumerate USB device
[  427.374935][ T5874] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  427.476146][T11416] netlink: 532 bytes leftover after parsing attributes in process `syz.3.1472'.
[  427.571218][T11416] loop9: detected capacity change from 0 to 7
[  427.596848][T11416] Dev loop9: unable to read RDB block 7
[  427.613904][T11416]  loop9: unable to read partition table
[  427.620594][T11416] loop9: partition table beyond EOD, truncated
[  427.641396][T11416] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  427.659660][ T5874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  427.684931][ T5874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  427.705059][ T5874] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  427.734914][ T5874] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  427.751665][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  427.772055][ T5874] usb 6-1: config 0 descriptor??
[  428.311392][ T5874] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  428.665012][  T856] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  428.965652][  T856] usb 4-1: Using ep0 maxpacket: 32
[  428.972141][  T856] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  428.980570][  T856] usb 4-1: config 0 has no interface number 0
[  428.986923][  T856] usb 4-1: config 0 interface 12 has no altsetting 0
[  429.007499][  T856] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  429.017975][  T856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  429.030622][  T856] usb 4-1: Product: syz
[  429.039415][  T856] usb 4-1: Manufacturer: syz
[  429.061178][  T856] usb 4-1: SerialNumber: syz
[  429.102542][  T856] usb 4-1: config 0 descriptor??
[  429.434975][ T5905] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  429.585309][ T5905] usb 5-1: Using ep0 maxpacket: 32
[  429.593979][ T5905] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  429.603394][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  429.611469][ T5905] usb 5-1: Product: syz
[  429.615738][ T5905] usb 5-1: Manufacturer: syz
[  429.620386][ T5905] usb 5-1: SerialNumber: syz
[  429.631590][ T5905] usb 5-1: config 0 descriptor??
[  429.964258][  T856] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71
[  429.974291][  T856] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71
[  429.983249][  T856] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  429.994672][  T856] f81534 4-1:0.12: probe with driver f81534 failed with error -71
[  430.013763][  T856] usb 4-1: USB disconnect, device number 58
[  430.045259][ T5905] airspy 5-1:0.0: Board ID: 00
[  430.053646][ T5905] airspy 5-1:0.0: Firmware version: 
[  430.287462][  T856] usb 6-1: USB disconnect, device number 12
[  430.664816][T11461] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  431.073727][T11466] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1484'.
[  431.295459][ T5905] airspy 5-1:0.0: Registered as swradio24
[  431.301371][ T5905] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  431.326289][ T5905] usb 5-1: USB disconnect, device number 65
[  431.825040][ T5830] Bluetooth: hci3: command 0x0406 tx timeout
[  431.921118][T11472] usb usb8: usbfs: process 11472 (syz.3.1485) did not claim interface 0 before use
[  432.174979][T11477] program syz.3.1485 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  432.266423][T11475] netlink: 'syz.4.1486': attribute type 10 has an invalid length.
[  432.295879][T11475] macvlan1: entered allmulticast mode
[  432.305560][T11475] veth1_vlan: entered allmulticast mode
[  432.319836][T11475] team0: Port device macvlan1 added
[  432.440803][T11480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  432.493221][T11480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  432.919456][T11484] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  432.927024][T11484] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  433.225931][T11495] netlink: 'syz.0.1489': attribute type 10 has an invalid length.
[  433.254474][T11495] team0: Device ipvlan1 failed to register rx_handler
[  434.022050][T11492] binfmt_misc: register: failed to install interpreter file ./file0
[  434.967116][T11511] syzkaller1: entered promiscuous mode
[  434.972632][T11511] syzkaller1: entered allmulticast mode
[  435.161741][T11515] netlink: 532 bytes leftover after parsing attributes in process `syz.1.1497'.
[  435.172311][T11515] loop9: detected capacity change from 0 to 7
[  435.178480][ T5874] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  435.187321][T11515] Dev loop9: unable to read RDB block 7
[  435.193076][T11515]  loop9: unable to read partition table
[  435.199556][T11515] loop9: partition table beyond EOD, truncated
[  435.206648][T11515] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  435.265584][    T9] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  435.345569][ T5874] usb 5-1: Using ep0 maxpacket: 8
[  435.354661][ T5874] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  435.364319][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  435.373847][ T5874] usb 5-1: Product: syz
[  435.378156][ T5874] usb 5-1: Manufacturer: syz
[  435.382739][ T5874] usb 5-1: SerialNumber: syz
[  435.390301][ T5874] usb 5-1: config 0 descriptor??
[  435.404749][ T5874] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  435.436792][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  435.455559][    T9] usb 4-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53
[  435.508689][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  435.538658][    T9] usb 4-1: config 0 descriptor??
[  435.566691][T11519] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1494'.
[  435.575725][T11519] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1494'.
[  435.588238][T11519] netlink: 'syz.5.1494': attribute type 12 has an invalid length.
[  435.770013][T11511] program syz.3.1495 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  435.847359][    T9] option 4-1:0.0: GSM modem (1-port) converter detected
[  435.868276][    T9] usb 4-1: USB disconnect, device number 59
[  435.946509][    T9] option 4-1:0.0: device disconnected
[  436.142713][T11524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  436.650766][T11536] usb usb8: usbfs: process 11536 (syz.5.1501) did not claim interface 0 before use
[  436.740047][T11541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  436.759953][T11541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  436.791269][T11542] program syz.5.1501 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  436.944943][ T5897] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  437.094965][ T5897] usb 2-1: Using ep0 maxpacket: 16
[  437.102138][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  437.116195][ T5897] usb 2-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00
[  437.125630][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  437.136405][ T5897] usb 2-1: config 0 descriptor??
[  437.765217][ T5874] gspca_sonixj: reg_r err -110
[  438.025044][ T5874] sonixj 5-1:0.0: probe with driver sonixj failed with error -110
[  438.269648][ T5897] aquacomputer_d5next 0003:0C70:F003.0011: hidraw0: USB HID v0.00 Device [HID 0c70:f003] on usb-dummy_hcd.1-1/input0
[  438.295668][ T5905] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  438.473865][ T5874] usb 2-1: USB disconnect, device number 65
[  438.485459][ T5905] usb 4-1: Using ep0 maxpacket: 32
[  438.504566][  T812] usb 5-1: USB disconnect, device number 66
[  438.504687][ T5905] usb 4-1: config 7 has an invalid interface number: 90 but max is 1
[  438.540455][ T5905] usb 4-1: config 7 contains an unexpected descriptor of type 0x2, skipping
[  438.552637][ T5905] usb 4-1: config 7 has an invalid interface number: 164 but max is 1
[  438.562952][ T5905] usb 4-1: config 7 has no interface number 0
[  438.569397][ T5905] usb 4-1: config 7 has no interface number 1
[  438.576740][ T5905] usb 4-1: config 7 interface 90 altsetting 9 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  438.591399][ T5905] usb 4-1: config 7 interface 90 altsetting 9 endpoint 0xA has invalid maxpacket 1023, setting to 64
[  438.602981][ T5905] usb 4-1: config 7 interface 90 altsetting 9 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  438.615725][ T5905] usb 4-1: config 7 interface 90 altsetting 9 has a duplicate endpoint with address 0x4, skipping
[  438.627273][ T5905] usb 4-1: config 7 interface 90 altsetting 9 bulk endpoint 0x5 has invalid maxpacket 16
[  438.656067][ T5905] usb 4-1: config 7 interface 90 altsetting 9 has an endpoint descriptor with address 0x17, changing to 0x7
[  438.669131][ T5905] usb 4-1: config 7 interface 90 altsetting 9 endpoint 0x7 has an invalid bInterval 162, changing to 7
[  438.684366][ T5905] usb 4-1: config 7 interface 90 altsetting 9 endpoint 0x7 has invalid maxpacket 34037, setting to 1024
[  438.697093][ T5905] usb 4-1: config 7 interface 90 altsetting 9 has a duplicate endpoint with address 0x4, skipping
[  438.710355][ T5905] usb 4-1: config 7 interface 90 altsetting 9 has 7 endpoint descriptors, different from the interface descriptor's value: 6
[  438.726237][T11559] netlink: 532 bytes leftover after parsing attributes in process `syz.5.1508'.
[  438.738002][T11559] loop9: detected capacity change from 0 to 7
[  438.745482][T11559] Dev loop9: unable to read RDB block 7
[  438.751203][T11559]  loop9: unable to read partition table
[  438.751218][ T5905] usb 4-1: config 7 interface 164 altsetting 151 has a duplicate endpoint with address 0x7, skipping
[  438.758350][T11559] loop9: partition table beyond EOD, truncated
[  438.772362][ T5905] usb 4-1: config 7 interface 164 altsetting 151 endpoint 0x8 has invalid maxpacket 1024, setting to 64
[  438.775226][T11559] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  438.795270][ T5905] usb 4-1: config 7 interface 164 altsetting 151 has a duplicate endpoint with address 0x7, skipping
[  438.806827][ T5905] usb 4-1: config 7 interface 164 altsetting 151 has a duplicate endpoint with address 0xA, skipping
[  438.824930][ T5905] usb 4-1: config 7 interface 164 altsetting 151 has a duplicate endpoint with address 0xF, skipping
[  438.836319][ T5905] usb 4-1: config 7 interface 90 has no altsetting 0
[  438.855125][ T5905] usb 4-1: config 7 interface 164 has no altsetting 0
[  438.864753][ T5905] usb 4-1: New USB device found, idVendor=07b8, idProduct=8178, bcdDevice=4a.15
[  438.881226][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.889612][ T5905] usb 4-1: Product: syz
[  438.894033][ T5905] usb 4-1: Manufacturer: ᑨ톕ﭳ윪࿫髕ⴴ鲆㶈뫄쥅nj矗괢咑ᕕὮﬕ�亟䞔㵮衔��汩ᖡ矓섣窑�毣㱒硯ؼ�붱蘢䨭斅냃�둽��걘ᔥ駕᠖䒩젽㪘觘硬ꉥ㰒੕䵽໔�Ⲝꙃ淣
[  438.915674][    C1] vkms_vblank_simulate: vblank timer overrun
[  438.922300][ T5905] usb 4-1: SerialNumber: syz
[  438.967553][  T812] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  439.106023][   T30] audit: type=1326 audit(1760257830.922:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11578 comm="syz.1.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdeb38eec9 code=0x7ffc0000
[  439.129085][  T812] usb 5-1: Using ep0 maxpacket: 16
[  439.137890][T11549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  439.146767][T11549] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  439.156800][   T30] audit: type=1326 audit(1760257830.922:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11578 comm="syz.1.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdeb38eec9 code=0x7ffc0000
[  439.179944][   T30] audit: type=1326 audit(1760257830.922:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11578 comm="syz.1.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdeb38eec9 code=0x7ffc0000
[  439.183595][T11549] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  439.203125][   T30] audit: type=1326 audit(1760257830.922:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11578 comm="syz.1.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdeb38eec9 code=0x7ffc0000
[  439.237764][   T30] audit: type=1326 audit(1760257830.922:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11578 comm="syz.1.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7efdeb38eec9 code=0x7ffc0000
[  439.260924][   T30] audit: type=1326 audit(1760257830.922:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11578 comm="syz.1.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdeb38eec9 code=0x7ffc0000
[  439.284071][   T30] audit: type=1326 audit(1760257830.922:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11578 comm="syz.1.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7efdeb38eec9 code=0x7ffc0000
[  439.318728][  T812] usb 5-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00
[  439.335076][  T812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.352179][  T812] usb 5-1: Product: syz
[  439.357186][  T812] usb 5-1: Manufacturer: syz
[  439.378263][  T812] usb 5-1: SerialNumber: syz
[  439.384107][   T30] audit: type=1326 audit(1760257830.922:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11578 comm="syz.1.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdeb38eec9 code=0x7ffc0000
[  439.421089][ T5905] usb 4-1: USB disconnect, device number 60
[  439.427079][  T812] usb 5-1: config 0 descriptor??
[  439.458589][   T30] audit: type=1326 audit(1760257830.952:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11578 comm="syz.1.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdeb38eec9 code=0x7ffc0000
[  439.503942][   T30] audit: type=1326 audit(1760257830.952:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11578 comm="syz.1.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efdeb38eec9 code=0x7ffc0000
[  439.612315][T11592] usb usb8: usbfs: process 11592 (syz.1.1517) did not claim interface 0 before use
[  439.738409][T11597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  439.786735][T11598] program syz.1.1517 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  439.835504][T11597] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  440.016033][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  440.022554][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  440.098312][  T812] usb-storage 5-1:0.0: USB Mass Storage device detected
[  440.166539][  T812] usb-storage 5-1:0.0: Quirks match for vid 054c pid 002e: 1
[  440.201382][  T812] usb-storage 5-1:0.0: This device (054c,002e,0500 S 04 P ff) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  440.201382][  T812]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  440.650692][  T812] usb 5-1: USB disconnect, device number 67
[  441.514989][  T812] usb 5-1: new full-speed USB device number 68 using dummy_hcd
[  441.745233][  T812] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  441.770034][  T812] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  441.801813][  T812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  441.833299][  T812] usb 5-1: Product: syz
[  441.837575][  T812] usb 5-1: Manufacturer: syz
[  441.842344][  T812] usb 5-1: SerialNumber: syz
[  441.861957][  T812] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  441.901040][T11609] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  441.918480][T11608] syzkaller0: entered promiscuous mode
[  442.025034][T11608] syzkaller0: entered allmulticast mode
[  442.512690][  T812] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  442.569555][  T812] usb 5-1: USB disconnect, device number 68
[  442.985782][T11636] netlink: 532 bytes leftover after parsing attributes in process `syz.0.1526'.
[  443.046483][T11636] loop9: detected capacity change from 0 to 7
[  443.086735][T11636] Dev loop9: unable to read RDB block 7
[  443.093523][T11644] trusted_key: syz.5.1528 sent an empty control message without MSG_MORE.
[  443.105078][T11636]  loop9: unable to read partition table
[  443.117805][T11636] loop9: partition table beyond EOD, truncated
[  443.124947][T11636] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  443.475687][T11660] usb usb8: usbfs: process 11660 (syz.4.1535) did not claim interface 0 before use
[  443.566493][T11665] FAULT_INJECTION: forcing a failure.
[  443.566493][T11665] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  443.600974][T11665] CPU: 0 UID: 0 PID: 11665 Comm: syz.3.1537 Not tainted syzkaller #0 PREEMPT(full) 
[  443.600991][T11665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  443.600998][T11665] Call Trace:
[  443.601003][T11665]  <TASK>
[  443.601008][T11665]  dump_stack_lvl+0x189/0x250
[  443.601024][T11665]  ? __pfx____ratelimit+0x10/0x10
[  443.601039][T11665]  ? __pfx_dump_stack_lvl+0x10/0x10
[  443.601050][T11665]  ? __pfx__printk+0x10/0x10
[  443.601066][T11665]  should_fail_ex+0x414/0x560
[  443.601087][T11665]  _copy_to_user+0x31/0xb0
[  443.601111][T11665]  simple_read_from_buffer+0xe1/0x170
[  443.601135][T11665]  proc_fail_nth_read+0x1b3/0x220
[  443.601162][T11665]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  443.601188][T11665]  ? rw_verify_area+0x2a6/0x4d0
[  443.601204][T11665]  ? __lock_acquire+0xab9/0xd20
[  443.601223][T11665]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  443.601249][T11665]  vfs_read+0x200/0xa30
[  443.601259][T11665]  ? fdget_pos+0x247/0x320
[  443.601273][T11665]  ? __pfx___mutex_lock+0x10/0x10
[  443.601291][T11665]  ? __pfx_vfs_read+0x10/0x10
[  443.601310][T11665]  ? __fget_files+0x2a/0x420
[  443.601333][T11665]  ? __fget_files+0x3a0/0x420
[  443.601352][T11665]  ? __fget_files+0x2a/0x420
[  443.601380][T11665]  ksys_read+0x145/0x250
[  443.601401][T11665]  ? __pfx_ksys_read+0x10/0x10
[  443.601413][T11665]  ? do_syscall_64+0xbe/0xfa0
[  443.601425][T11665]  do_syscall_64+0xfa/0xfa0
[  443.601433][T11665]  ? lockdep_hardirqs_on+0x9c/0x150
[  443.601442][T11665]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  443.601452][T11665]  ? clear_bhb_loop+0x60/0xb0
[  443.601464][T11665]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  443.601474][T11665] RIP: 0033:0x7fb19338d8dc
[  443.601484][T11665] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  443.601493][T11665] RSP: 002b:00007fb1942fc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  443.601505][T11665] RAX: ffffffffffffffda RBX: 00007fb1935e5fa0 RCX: 00007fb19338d8dc
[  443.601512][T11665] RDX: 000000000000000f RSI: 00007fb1942fc0a0 RDI: 0000000000000004
[  443.601518][T11665] RBP: 00007fb1942fc090 R08: 0000000000000000 R09: 0000000000000000
[  443.601524][T11665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  443.601530][T11665] R13: 00007fb1935e6038 R14: 00007fb1935e5fa0 R15: 00007fb19370fa28
[  443.601546][T11665]  </TASK>
[  443.836759][    C0] vkms_vblank_simulate: vblank timer overrun
[  443.906165][T11666] program syz.4.1535 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  444.045700][T11672] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1540'.
[  445.266920][T11702] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1549'.
[  445.630526][T11709] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1551'.
[  445.982117][T11717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  446.114969][  T812] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  446.244064][T11723] netlink: 'syz.0.1557': attribute type 21 has an invalid length.
[  446.244153][T11722] netlink: 'syz.0.1557': attribute type 21 has an invalid length.
[  446.268369][T11723] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1557'.
[  446.278778][T11723] netlink: 'syz.0.1557': attribute type 1 has an invalid length.
[  446.287769][  T812] usb 2-1: Using ep0 maxpacket: 32
[  446.289806][T11722] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1557'.
[  446.304764][  T812] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  446.321362][T11722] netlink: 'syz.0.1557': attribute type 1 has an invalid length.
[  446.325469][  T812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.341042][  T812] usb 2-1: config 0 descriptor??
[  446.350776][  T812] gspca_main: nw80x-2.14.0 probing 055f:d001
[  446.358667][   T30] kauditd_printk_skb: 11 callbacks suppressed
[  446.358682][   T30] audit: type=1326 audit(1760257838.172:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11724 comm="syz.3.1558" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb19338eec9 code=0x0
[  446.866634][  T812] gspca_nw80x: reg_w err -110
[  446.880477][  T812] nw80x 2-1:0.0: probe with driver nw80x failed with error -110
[  446.931873][   T24] usb 2-1: USB disconnect, device number 66
[  447.704975][  T812] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  447.885141][  T812] usb 4-1: Using ep0 maxpacket: 16
[  447.892164][  T812] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  447.901721][  T812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  447.923638][  T812] usb 4-1: config 0 descriptor??
[  448.035022][ T5931] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  448.184959][ T5931] usb 5-1: Using ep0 maxpacket: 16
[  448.192812][ T5931] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  448.203872][ T5931] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  448.215966][ T5931] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  448.271805][ T5931] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  448.281057][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.289505][ T5931] usb 5-1: Product: syz
[  448.293950][ T5931] usb 5-1: Manufacturer: syz
[  448.299588][ T5931] usb 5-1: SerialNumber: syz
[  448.380465][  T812] lenovo 0003:17EF:6047.0012: item fetching failed at offset 2/5
[  448.393459][  T812] lenovo 0003:17EF:6047.0012: hid_parse failed
[  448.404516][  T812] lenovo 0003:17EF:6047.0012: probe with driver lenovo failed with error -22
[  448.597244][  T856] usb 4-1: USB disconnect, device number 61
[  448.615538][ T5931] usb 5-1: 0:2 : does not exist
[  448.684127][ T5931] usb 5-1: USB disconnect, device number 69
[  448.736096][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  448.766887][T11765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  448.789585][T11765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  449.005026][T11772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1574'.
[  449.017637][T11772] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1574'.
[  449.524984][  T812] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  449.834943][  T812] usb 4-1: Using ep0 maxpacket: 16
[  449.927602][  T812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  449.937508][  T812] usb 4-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00
[  449.946748][  T812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  449.962109][  T812] usb 4-1: config 0 descriptor??
[  450.690732][  T812] semitek 0003:1EA7:0907.0013: item fetching failed at offset 0/2
[  450.725186][  T812] semitek 0003:1EA7:0907.0013: probe with driver semitek failed with error -22
[  450.891594][T11778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  451.011738][T11778] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  451.140330][  T812] usb 4-1: USB disconnect, device number 62
[  451.470629][T11792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1575'.
[  451.480054][T11792] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1575'.
[  451.556777][T11792] netlink: 'syz.1.1575': attribute type 12 has an invalid length.
[  452.468205][   T30] audit: type=1326 audit(1760257844.152:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11812 comm="syz.3.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19338eec9 code=0x7ffc0000
[  452.672449][   T30] audit: type=1326 audit(1760257844.152:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11812 comm="syz.3.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19338eec9 code=0x7ffc0000
[  452.764461][   T30] audit: type=1326 audit(1760257844.162:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11812 comm="syz.3.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb19338eec9 code=0x7ffc0000
[  452.774945][ T5905] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  452.836979][   T30] audit: type=1326 audit(1760257844.162:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11812 comm="syz.3.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19338eec9 code=0x7ffc0000
[  452.869742][   T30] audit: type=1326 audit(1760257844.162:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11812 comm="syz.3.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb19338eec9 code=0x7ffc0000
[  452.892515][   T30] audit: type=1326 audit(1760257844.162:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11812 comm="syz.3.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19338eec9 code=0x7ffc0000
[  452.925047][   T30] audit: type=1326 audit(1760257844.162:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11812 comm="syz.3.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fb19338eec9 code=0x7ffc0000
[  452.987569][   T30] audit: type=1326 audit(1760257844.162:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11812 comm="syz.3.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19338eec9 code=0x7ffc0000
[  453.035185][ T5905] usb 2-1: Using ep0 maxpacket: 8
[  453.063879][ T5905] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  453.075012][   T30] audit: type=1326 audit(1760257844.162:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11812 comm="syz.3.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fb19338eec9 code=0x7ffc0000
[  453.083324][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  453.194004][   T30] audit: type=1326 audit(1760257844.162:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11812 comm="syz.3.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19338eec9 code=0x7ffc0000
[  453.274970][ T5905] usb 2-1: Product: syz
[  453.284944][ T5905] usb 2-1: Manufacturer: syz
[  453.295123][ T5905] usb 2-1: SerialNumber: syz
[  453.337623][ T5905] usb 2-1: config 0 descriptor??
[  453.406282][ T5905] gspca_main: sq905-2.14.0 probing 2770:9120
[  453.465290][   T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  453.624970][   T24] usb 6-1: Using ep0 maxpacket: 16
[  453.632035][   T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  453.674027][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  453.717348][   T24] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  453.730471][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  453.764999][   T24] usb 6-1: Product: syz
[  453.770162][   T24] usb 6-1: Manufacturer: syz
[  453.779359][   T24] usb 6-1: SerialNumber: syz
[  453.799819][   T24] usb 6-1: config 0 descriptor??
[  453.819082][   T24] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  453.829215][   T24] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class)
[  453.858405][T11831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  453.886735][T11831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  454.216002][ T5905] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71)
[  454.230451][ T5905] sq905 2-1:0.0: probe with driver sq905 failed with error -71
[  454.259177][ T5905] usb 2-1: USB disconnect, device number 67
[  454.425689][   T24] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[  454.432566][   T24] em28xx 6-1:0.0: Config register raw data: 0xfffffffb
[  454.496916][  T812] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  454.658198][  T812] usb 5-1: unable to get BOS descriptor or descriptor too short
[  454.675604][  T812] usb 5-1: config 6 has an invalid interface number: 158 but max is 0
[  454.683833][  T812] usb 5-1: config 6 has no interface number 0
[  454.690121][  T812] usb 5-1: config 6 interface 158 has no altsetting 0
[  454.709192][  T812] usb 5-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=da.29
[  454.721449][  T812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  454.729969][  T812] usb 5-1: Product: syz
[  454.734222][  T812] usb 5-1: Manufacturer: syz
[  454.739293][  T812] usb 5-1: SerialNumber: syz
[  454.971633][ T5931] hid_parser_main: 119 callbacks suppressed
[  454.971676][ T5931] hid-generic FFFA:0005:0001.0014: unknown main item tag 0x5
[  454.990328][ T5931] hid-generic FFFA:0005:0001.0014: unknown main item tag 0x5
[  454.996090][T11845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1593'.
[  454.998313][ T5931] hid-generic FFFA:0005:0001.0014: unknown main item tag 0x3
[  455.014672][ T5931] hid-generic FFFA:0005:0001.0014: unknown main item tag 0x0
[  455.019072][T11845] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1593'.
[  455.023192][ T5931] hid-generic FFFA:0005:0001.0014: unknown main item tag 0x5
[  455.040961][ T5931] hid-generic FFFA:0005:0001.0014: item fetching failed at offset 53/107
[  455.046576][   T24] em28xx 6-1:0.0: Unknown AC97 audio processor detected!
[  455.052553][ T5931] hid-generic FFFA:0005:0001.0014: probe with driver hid-generic failed with error -22
[  455.092193][   T24] em28xx 6-1:0.0: couldn't setup AC97 register 2
[  455.103042][   T24] em28xx 6-1:0.0: couldn't setup AC97 register 4
[  455.112375][T11845] netlink: 'syz.0.1593': attribute type 12 has an invalid length.
[  455.117422][   T24] em28xx 6-1:0.0: couldn't setup AC97 register 6
[  455.128074][   T24] em28xx 6-1:0.0: couldn't setup AC97 register 54
[  455.135964][   T24] em28xx 6-1:0.0: couldn't setup AC97 register 56
[  455.418256][T11866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1598'.
[  455.427319][T11866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1598'.
[  455.436900][T11866] netlink: 'syz.1.1598': attribute type 7 has an invalid length.
[  455.539651][T11866] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  455.782566][   T24] em28xx 6-1:0.0: couldn't setup AC97 register 20
[  455.795705][   T24] em28xx 6-1:0.0: couldn't setup AC97 register 16
[  455.813013][   T24] em28xx 6-1:0.0: couldn't setup AC97 register 12
[  455.957987][   T24] em28xx 6-1:0.0: couldn't setup AC97 register 14
[  455.992410][   T24] em28xx 6-1:0.0: couldn't setup AC97 register 18
[  456.019719][   T24] em28xx 6-1:0.0: couldn't setup AC97 register 22
[  456.066577][   T24] em28xx 6-1:0.0: couldn't setup AC97 register 24
[  456.085562][   T24] em28xx 6-1:0.0: Binding audio extension
[  456.091490][   T24] em28xx 6-1:0.0: em28xx-audio.c: Copyright (C) 2006 Markus Rechberger
[  456.115017][   T24] em28xx 6-1:0.0: em28xx-audio.c: Copyright (C) 2007-2016 Mauro Carvalho Chehab
[  456.333838][   T24] em28xx 6-1:0.0: alt 0 doesn't exist on interface 7
[  456.513030][   T24] usb 6-1: USB disconnect, device number 13
[  456.523986][   T24] em28xx 6-1:0.0: Disconnecting em28xx
[  456.530626][   T24] em28xx 6-1:0.0: Closing audio extension
[  456.540554][   T24] em28xx 6-1:0.0: Freeing device
[  456.626637][T11878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  456.672987][T11878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  457.378975][T11892] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1605'.
[  457.413204][T11892] netlink: 'syz.1.1605': attribute type 12 has an invalid length.
[  457.423231][T11892] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1605'.
[  457.884966][ T5931] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  457.912026][  T812] rtsx_usb 5-1:6.158: probe with driver rtsx_usb failed with error -71
[  457.954478][  T812] usb 5-1: USB disconnect, device number 70
[  458.046922][ T5931] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  458.056773][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.087712][ T5931] usb 4-1: config 0 descriptor??
[  458.117193][ T5931] gspca_main: cpia1-2.14.0 probing 0813:0001
[  458.493035][T11904] FAULT_INJECTION: forcing a failure.
[  458.493035][T11904] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  458.518827][T11904] CPU: 0 UID: 0 PID: 11904 Comm: syz.1.1611 Not tainted syzkaller #0 PREEMPT(full) 
[  458.518853][T11904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  458.518864][T11904] Call Trace:
[  458.518872][T11904]  <TASK>
[  458.518880][T11904]  dump_stack_lvl+0x189/0x250
[  458.518907][T11904]  ? __pfx____ratelimit+0x10/0x10
[  458.518935][T11904]  ? __pfx_dump_stack_lvl+0x10/0x10
[  458.518953][T11904]  ? __pfx__printk+0x10/0x10
[  458.518971][T11904]  ? __might_fault+0xb0/0x130
[  458.518999][T11904]  should_fail_ex+0x414/0x560
[  458.519030][T11904]  _copy_from_iter+0x1de/0x1790
[  458.519056][T11904]  ? rcu_is_watching+0x15/0xb0
[  458.519082][T11904]  ? kmalloc_reserve+0xbd/0x290
[  458.519107][T11904]  ? __pfx__copy_from_iter+0x10/0x10
[  458.519129][T11904]  ? __build_skb_around+0x262/0x3f0
[  458.519156][T11904]  ? netlink_sendmsg+0x642/0xb30
[  458.519178][T11904]  ? skb_put+0x11b/0x210
[  458.519203][T11904]  netlink_sendmsg+0x6b2/0xb30
[  458.519235][T11904]  ? __pfx_netlink_sendmsg+0x10/0x10
[  458.519261][T11904]  ? aa_sock_msg_perm+0xf1/0x1d0
[  458.519282][T11904]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  458.519303][T11904]  ? __pfx_netlink_sendmsg+0x10/0x10
[  458.519327][T11904]  __sock_sendmsg+0x21c/0x270
[  458.519357][T11904]  ____sys_sendmsg+0x505/0x830
[  458.519387][T11904]  ? __pfx_____sys_sendmsg+0x10/0x10
[  458.519421][T11904]  ? import_iovec+0x74/0xa0
[  458.519446][T11904]  ___sys_sendmsg+0x21f/0x2a0
[  458.519473][T11904]  ? __pfx____sys_sendmsg+0x10/0x10
[  458.519532][T11904]  ? __fget_files+0x2a/0x420
[  458.519552][T11904]  ? __fget_files+0x3a0/0x420
[  458.519586][T11904]  __x64_sys_sendmsg+0x19b/0x260
[  458.519604][T11904]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  458.519638][T11904]  ? __pfx_ksys_write+0x10/0x10
[  458.519661][T11904]  ? do_syscall_64+0xbe/0xfa0
[  458.519681][T11904]  do_syscall_64+0xfa/0xfa0
[  458.519695][T11904]  ? lockdep_hardirqs_on+0x9c/0x150
[  458.519711][T11904]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.519727][T11904]  ? clear_bhb_loop+0x60/0xb0
[  458.519748][T11904]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.519767][T11904] RIP: 0033:0x7efdeb38eec9
[  458.519783][T11904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  458.519798][T11904] RSP: 002b:00007efdec1af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  458.519819][T11904] RAX: ffffffffffffffda RBX: 00007efdeb5e5fa0 RCX: 00007efdeb38eec9
[  458.519832][T11904] RDX: 00000000000000c4 RSI: 0000200000000080 RDI: 0000000000000003
[  458.519844][T11904] RBP: 00007efdec1af090 R08: 0000000000000000 R09: 0000000000000000
[  458.519855][T11904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  458.519866][T11904] R13: 00007efdeb5e6038 R14: 00007efdeb5e5fa0 R15: 00007efdeb70fa28
[  458.519894][T11904]  </TASK>
[  458.784989][   T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  458.810664][ T5931] cpia1 4-1:0.0: unexpected state after lo power cmd: 01
[  458.820383][T11905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1610'.
[  458.829861][T11905] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1610'.
[  458.853682][T11905] netlink: 'syz.4.1610': attribute type 12 has an invalid length.
[  458.998105][T11910] netlink: 'syz.1.1613': attribute type 10 has an invalid length.
[  459.009523][T11910] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  459.025172][   T24] usb 6-1: device descriptor read/64, error -71
[  459.057436][ T5931] gspca_cpia1: usb_control_msg 01, error -71
[  459.063456][ T5931] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0)
[  459.068904][ T8627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  459.077560][ T5931] usb 4-1: USB disconnect, device number 63
[  459.095544][ T8627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  459.265998][   T24] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  459.296586][T11921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  459.415062][   T24] usb 6-1: device descriptor read/64, error -71
[  459.525215][   T24] usb usb6-port1: attempt power cycle
[  459.637397][T11927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1617'.
[  459.685160][T11928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  459.694303][T11928] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  459.865037][   T24] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  459.886116][   T24] usb 6-1: device descriptor read/8, error -71
[  459.924922][ T5931] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  460.096411][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 121, changing to 10
[  460.109271][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18176, setting to 1024
[  460.120899][ T5931] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  460.125032][   T24] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  460.130178][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  460.152177][ T5931] usb 4-1: config 0 descriptor??
[  460.160154][T11927] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  460.178889][ T5931] usbhid 4-1:0.0: can't add hid device: -22
[  460.185255][ T5931] usbhid 4-1:0.0: probe with driver usbhid failed with error -22
[  460.185604][   T24] usb 6-1: device descriptor read/8, error -71
[  460.305468][   T24] usb usb6-port1: unable to enumerate USB device
[  460.373676][   T24] usb 4-1: USB disconnect, device number 64
[  460.554694][T11942] netlink: 'syz.0.1622': attribute type 1 has an invalid length.
[  460.582425][T11942] bond0: entered promiscuous mode
[  460.587774][T11942] bond0: entered allmulticast mode
[  460.593334][T11942] 8021q: adding VLAN 0 to HW filter on device bond0
[  460.984309][T11948] netdevsim netdevsim3: loading /lib/firmware// failed with error -22
[  460.994472][T11948] netdevsim netdevsim3: Direct firmware load for / failed with error -22
[  461.003399][T11948] netdevsim netdevsim3: Falling back to sysfs fallback for: /
[  461.606048][T11951] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1625'.
[  462.775038][   T24] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  462.945343][   T24] usb 6-1: Using ep0 maxpacket: 32
[  462.963154][   T24] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[  462.974171][   T24] usb 6-1: config 0 has no interface number 0
[  462.983316][   T24] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  462.999942][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  463.008443][   T24] usb 6-1: Product: syz
[  463.012771][   T24] usb 6-1: Manufacturer: syz
[  463.017645][   T24] usb 6-1: SerialNumber: syz
[  463.029249][   T24] usb 6-1: config 0 descriptor??
[  463.037650][   T24] smsc95xx v2.0.0
[  463.395011][  T856] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  463.503034][   T30] kauditd_printk_skb: 17 callbacks suppressed
[  463.503048][   T30] audit: type=1804 audit(1760257855.282:1796): pid=11989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1633" name="/newroot/310/file0" dev="fuse" ino=1 res=1 errno=0
[  463.574939][  T856] usb 2-1: Using ep0 maxpacket: 32
[  463.591054][  T856] usb 2-1: config 0 has an invalid descriptor of length 141, skipping remainder of the config
[  463.601448][  T856] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  463.614740][  T856] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  463.623976][  T856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  463.640739][  T856] usb 2-1: config 0 descriptor??
[  463.654287][  T856] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  464.139731][T11966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  464.153836][T11966] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  464.444672][T12016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  464.489120][T12018] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1640'.
[  464.498468][T12018] 0ªî{X¹¦: renamed from gretap0 (while UP)
[  464.547347][T12018] 0ªî{X¹¦: entered allmulticast mode
[  464.553347][T12018] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  464.672757][   T24] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  464.688279][   T24] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  464.725474][   T24] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  464.759823][   T24] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71
[  464.850784][   T24] usb 6-1: USB disconnect, device number 18
[  465.177229][T12031] bridge: RTM_NEWNEIGH with invalid ether address
[  465.184567][T12035] usb usb8: usbfs: process 12035 (syz.5.1644) did not claim interface 0 before use
[  465.333891][T12040] program syz.5.1644 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  465.655206][T12047] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1647'.
[  465.856543][T12054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  465.873199][T12054] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  466.104964][ T5874] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  466.166837][ T5931] usb 2-1: USB disconnect, device number 68
[  466.651213][   T30] audit: type=1326 audit(1760257858.462:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12072 comm="syz.3.1656" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb19338eec9 code=0x0
[  466.675384][ T5931] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  466.785466][    T9] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  466.824941][ T5931] usb 2-1: Using ep0 maxpacket: 16
[  466.831721][ T5931] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  466.843347][ T5931] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  466.853480][ T5931] usb 2-1: config 0 interface 0 has no altsetting 0
[  466.860402][ T5931] usb 2-1: New USB device found, idVendor=046d, idProduct=c117, bcdDevice= 0.00
[  466.879397][  T812] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  466.888052][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  466.899773][ T5931] usb 2-1: config 0 descriptor??
[  466.941253][T12058] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  466.948514][T12058] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  466.963792][T12058] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  466.964941][    T9] usb 5-1: Using ep0 maxpacket: 8
[  466.975711][T12058] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  466.980696][    T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  466.996206][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  467.006933][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  467.022274][    T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  467.022325][T12058] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  467.036230][    T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  467.051928][T12058] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  467.057215][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  467.070044][  T812] usb 6-1: config 0 has an invalid interface number: 255 but max is 0
[  467.078902][  T812] usb 6-1: config 0 has no interface number 0
[  467.085209][  T812] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  467.091609][T12058] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  467.103980][T12058] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  467.113817][  T812] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  467.125839][   T24] usb 2-1: USB disconnect, device number 69
[  467.143983][  T812] usb 6-1: config 0 interface 255 has no altsetting 0
[  467.155030][  T812] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  467.164392][  T812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  467.179835][T12058] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  467.188933][  T812] usb 6-1: config 0 descriptor??
[  467.201171][T12058] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  467.207702][  T812] ums-realtek 6-1:0.255: USB Mass Storage device detected
[  467.308121][    T9] usb 5-1: GET_CAPABILITIES returned 0
[  467.313772][    T9] usbtmc 5-1:16.0: can't read capabilities
[  467.393283][T12080] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  467.408275][T12070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  467.419160][T12070] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  467.437407][  T856] usb 6-1: USB disconnect, device number 19
[  467.529486][    T9] usb 5-1: USB disconnect, device number 71
[  467.624697][   T30] audit: type=1326 audit(1760257859.432:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12081 comm="syz.3.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19338eec9 code=0x7ffc0000
[  467.680239][   T30] audit: type=1326 audit(1760257859.462:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12081 comm="syz.3.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fb19338eec9 code=0x7ffc0000
[  467.883665][   T30] audit: type=1326 audit(1760257859.462:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12081 comm="syz.3.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19338eec9 code=0x7ffc0000
[  467.908723][   T30] audit: type=1326 audit(1760257859.462:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12081 comm="syz.3.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19338eec9 code=0x7ffc0000
[  467.933413][   T30] audit: type=1326 audit(1760257859.462:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12081 comm="syz.3.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fb19338eec9 code=0x7ffc0000
[  467.956932][   T30] audit: type=1326 audit(1760257859.462:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12081 comm="syz.3.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19338eec9 code=0x7ffc0000
[  468.062648][   T30] audit: type=1326 audit(1760257859.462:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12081 comm="syz.3.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19338eec9 code=0x7ffc0000
[  468.085198][    C0] vkms_vblank_simulate: vblank timer overrun
[  468.140556][   T30] audit: type=1326 audit(1760257859.462:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12081 comm="syz.3.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fb19338eec9 code=0x7ffc0000
[  468.542598][    T9] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  468.779252][   T24] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  468.789432][    T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=a8.22
[  468.801852][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  468.825572][    T9] usb 2-1: config 0 descriptor??
[  468.851598][    T9] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0
[  468.934912][   T24] usb 6-1: Using ep0 maxpacket: 32
[  468.953625][   T24] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  468.962936][   T24] usb 6-1: config 0 has no interface number 0
[  468.970532][   T24] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  468.997524][   T24] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  469.049520][T12091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1660'.
[  469.058552][T12091] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1660'.
[  469.072712][T12091] ip6gretap2: entered allmulticast mode
[  469.081615][    T9] gspca_sn9c20x: Write register 1000 failed -71
[  469.093166][    T9] gspca_sn9c20x: Device initialization failed
[  469.099912][    T9] gspca_sn9c20x 2-1:0.0: probe with driver gspca_sn9c20x failed with error -71
[  469.109178][   T24] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  469.117618][    T9] usb 2-1: USB disconnect, device number 70
[  469.138593][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  469.157094][   T24] usb 6-1: config 0 descriptor??
[  469.628306][T12116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  469.641862][T12116] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  469.644936][ T5897] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  469.795283][ T5897] usb 4-1: device descriptor read/64, error -71
[  469.938374][T12121] netlink: 532 bytes leftover after parsing attributes in process `syz.1.1671'.
[  469.950932][T12121] loop9: detected capacity change from 0 to 7
[  469.967952][ T5835] Dev loop9: unable to read RDB block 7
[  469.973558][ T5835]  loop9: unable to read partition table
[  469.979939][ T5835] loop9: partition table beyond EOD, truncated
[  469.988599][T12121] Dev loop9: unable to read RDB block 7
[  469.994957][T12121]  loop9: unable to read partition table
[  470.001287][T12121] loop9: partition table beyond EOD, truncated
[  470.007598][T12121] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  470.045139][ T5897] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  470.185252][ T5897] usb 4-1: device descriptor read/64, error -71
[  470.295577][ T5897] usb usb4-port1: attempt power cycle
[  470.635098][ T5897] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  470.666081][ T5897] usb 4-1: device descriptor read/8, error -71
[  470.933012][T12137] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1674'.
[  470.955199][ T5897] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  470.985672][ T5897] usb 4-1: device descriptor read/8, error -71
[  471.105456][ T5897] usb usb4-port1: unable to enumerate USB device
[  471.125141][  T856] usb 2-1: new full-speed USB device number 71 using dummy_hcd
[  471.277529][  T856] usb 2-1: not running at top speed; connect to a high speed hub
[  471.292816][  T856] usb 2-1: config 2 has an invalid interface number: 7 but max is 0
[  471.301184][  T856] usb 2-1: config 2 has an invalid descriptor of length 127, skipping remainder of the config
[  471.314937][  T856] usb 2-1: config 2 has no interface number 0
[  471.325353][  T856] usb 2-1: config 2 interface 7 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  471.349173][  T856] usb 2-1: config 2 interface 7 has no altsetting 0
[  471.364173][  T856] usb 2-1: New USB device found, idVendor=0001, idProduct=0000, bcdDevice=39.ee
[  471.373542][  T856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  471.381996][  T856] usb 2-1: Product: syz
[  471.387795][  T856] usb 2-1: Manufacturer: syz
[  471.394458][  T856] usb 2-1: SerialNumber: syz
[  471.475111][   T24] usbhid 6-1:0.1: can't add hid device: -71
[  471.481152][   T24] usbhid 6-1:0.1: probe with driver usbhid failed with error -71
[  471.499926][   T24] usb 6-1: USB disconnect, device number 20
[  471.624929][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  471.624945][   T30] audit: type=1326 audit(1760257863.422:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12135 comm="syz.1.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdeb38eec9 code=0x7ffc0000
[  471.673559][   T30] audit: type=1326 audit(1760257863.422:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12135 comm="syz.1.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efdeb38eec9 code=0x7ffc0000
[  471.676250][  T856] usb 2-1: USB disconnect, device number 71
[  471.774343][   T30] audit: type=1326 audit(1760257863.422:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12135 comm="syz.1.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdeb38eec9 code=0x7ffc0000
[  471.945131][   T30] audit: type=1326 audit(1760257863.422:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12135 comm="syz.1.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efdeb38eec9 code=0x7ffc0000
[  472.059009][   T30] audit: type=1326 audit(1760257863.422:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12135 comm="syz.1.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdeb38eec9 code=0x7ffc0000
[  472.151036][   T30] audit: type=1326 audit(1760257863.422:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12135 comm="syz.1.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efdeb38eec9 code=0x7ffc0000
[  472.174184][   T30] audit: type=1326 audit(1760257863.422:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12135 comm="syz.1.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdeb38eec9 code=0x7ffc0000
[  472.204546][   T30] audit: type=1326 audit(1760257863.422:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12135 comm="syz.1.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efdeb38eec9 code=0x7ffc0000
[  472.230942][   T30] audit: type=1326 audit(1760257863.432:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12135 comm="syz.1.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdeb38eec9 code=0x7ffc0000
[  472.258202][   T30] audit: type=1326 audit(1760257863.432:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12135 comm="syz.1.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efdeb38eec9 code=0x7ffc0000
[  473.204993][  T812] usb 2-1: new full-speed USB device number 72 using dummy_hcd
[  473.406589][  T812] usb 2-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  473.419631][  T812] usb 2-1: config 1 interface 0 has no altsetting 0
[  473.428347][  T812] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  473.437597][  T812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  473.445762][  T812] usb 2-1: Product: syz
[  473.450994][  T812] usb 2-1: Manufacturer: syz
[  473.457585][  T812] usb 2-1: SerialNumber: syz
[  473.541743][T12163] netlink: 532 bytes leftover after parsing attributes in process `syz.5.1683'.
[  473.552936][T12163] loop9: detected capacity change from 0 to 7
[  473.622591][ T5831] Dev loop9: unable to read RDB block 7
[  473.630074][ T5831]  loop9: unable to read partition table
[  473.669949][ T5831] loop9: partition table beyond EOD, truncated
[  473.696509][T12163] Dev loop9: unable to read RDB block 7
[  473.703335][T12163]  loop9: unable to read partition table
[  473.707734][  T812] usb 2-1: USB disconnect, device number 72
[  473.722236][T12163] loop9: partition table beyond EOD, truncated
[  473.740857][T12163] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  474.018295][T12170] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1686'.
[  474.221983][T12176] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1688'.
[  474.255260][  T856] psmouse serio2: Failed to reset mouse on : -5
[  474.294940][   T24] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  474.449729][   T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 86, changing to 10
[  474.480644][   T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  474.504906][   T24] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  474.524222][   T24] usb 4-1: config 0 interface 0 has no altsetting 0
[  474.531300][   T24] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00
[  474.550217][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.564456][   T24] usb 4-1: config 0 descriptor??
[  474.895857][ T5915] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  475.064970][ T5915] usb 6-1: Using ep0 maxpacket: 16
[  475.081651][ T5915] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  475.135165][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  475.180762][T12194] FAULT_INJECTION: forcing a failure.
[  475.180762][T12194] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  475.198360][T12194] CPU: 0 UID: 0 PID: 12194 Comm: syz.1.1693 Not tainted syzkaller #0 PREEMPT(full) 
[  475.198390][T12194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  475.198398][T12194] Call Trace:
[  475.198403][T12194]  <TASK>
[  475.198408][T12194]  dump_stack_lvl+0x189/0x250
[  475.198425][T12194]  ? __pfx____ratelimit+0x10/0x10
[  475.198443][T12194]  ? __pfx_dump_stack_lvl+0x10/0x10
[  475.198461][T12194]  ? __pfx__printk+0x10/0x10
[  475.198491][T12194]  should_fail_ex+0x414/0x560
[  475.198523][T12194]  _copy_to_user+0x31/0xb0
[  475.198542][T12194]  simple_read_from_buffer+0xe1/0x170
[  475.198557][T12194]  proc_fail_nth_read+0x1b3/0x220
[  475.198574][T12194]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  475.198589][T12194]  ? rw_verify_area+0x2a6/0x4d0
[  475.198604][T12194]  ? __lock_acquire+0xab9/0xd20
[  475.198625][T12194]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  475.198652][T12194]  vfs_read+0x200/0xa30
[  475.198675][T12194]  ? fdget_pos+0x247/0x320
[  475.198692][T12194]  ? __pfx___mutex_lock+0x10/0x10
[  475.198704][T12194]  ? __pfx_vfs_read+0x10/0x10
[  475.198714][T12194]  ? __fget_files+0x2a/0x420
[  475.198728][T12194]  ? __fget_files+0x3a0/0x420
[  475.198738][T12194]  ? __fget_files+0x2a/0x420
[  475.198765][T12194]  ksys_read+0x145/0x250
[  475.198788][T12194]  ? __pfx_ksys_read+0x10/0x10
[  475.198810][T12194]  ? do_syscall_64+0xbe/0xfa0
[  475.198830][T12194]  do_syscall_64+0xfa/0xfa0
[  475.198840][T12194]  ? lockdep_hardirqs_on+0x9c/0x150
[  475.198849][T12194]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.198859][T12194]  ? clear_bhb_loop+0x60/0xb0
[  475.198871][T12194]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.198880][T12194] RIP: 0033:0x7efdeb38d8dc
[  475.198891][T12194] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  475.198906][T12194] RSP: 002b:00007efdec1af030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  475.198925][T12194] RAX: ffffffffffffffda RBX: 00007efdeb5e5fa0 RCX: 00007efdeb38d8dc
[  475.198938][T12194] RDX: 000000000000000f RSI: 00007efdec1af0a0 RDI: 0000000000000004
[  475.198949][T12194] RBP: 00007efdec1af090 R08: 0000000000000000 R09: 0000000000000000
[  475.198960][T12194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  475.198971][T12194] R13: 00007efdeb5e6038 R14: 00007efdeb5e5fa0 R15: 00007efdeb70fa28
[  475.198991][T12194]  </TASK>
[  475.267241][ T5915] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  475.269298][    C0] vkms_vblank_simulate: vblank timer overrun
[  475.274756][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  475.406356][T12173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  475.478591][T12173] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  475.516382][   T24] usbhid 4-1:0.0: can't add hid device: -71
[  475.525325][   T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  475.571605][   T24] usb 4-1: USB disconnect, device number 70
[  475.594968][ T5915] usb 6-1: Product: syz
[  475.599307][ T5915] usb 6-1: Manufacturer: syz
[  475.605054][ T5915] usb 6-1: SerialNumber: syz
[  475.630680][ T5915] usb 6-1: config 0 descriptor??
[  475.653794][ T5915] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  475.684888][ T5915] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class)
[  475.988651][T12198] bridge0: port 1(bridge_slave_0) entered disabled state
[  475.997566][T12199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1694'.
[  476.006901][T12198] bridge0: port 2(bridge_slave_1) entered disabled state
[  476.014251][T12199] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1694'.
[  476.057187][T12199] netlink: 'syz.1.1694': attribute type 12 has an invalid length.
[  476.101865][T12198] netlink: 'syz.0.1695': attribute type 16 has an invalid length.
[  476.142683][T12198] netlink: 'syz.0.1695': attribute type 17 has an invalid length.
[  476.177663][T12198] 0ªî{X¹¦: left allmulticast mode
[  476.247371][ T5915] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[  476.253080][T12198] syz_tun: left promiscuous mode
[  476.273266][ T5915] em28xx 6-1:0.0: Config register raw data: 0xfffffffb
[  476.278913][T12198] syz_tun: left allmulticast mode
[  476.299168][T12198] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  476.506114][T12185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  476.530965][T12185] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  476.565047][ T5915] em28xx 6-1:0.0: AC97 command still being executed: not handled properly!
[  476.574038][ T5915] em28xx 6-1:0.0: AC97 chip type couldn't be determined
[  476.581096][ T5915] em28xx 6-1:0.0: No AC97 audio processor
[  476.594921][   T24] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  476.721744][T12210] trusted_key: encrypted_key: insufficient parameters specified
[  476.730181][T12208] program syz.0.1698 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  476.774899][   T24] usb 2-1: Using ep0 maxpacket: 16
[  476.780761][   T24] usb 2-1: too many configurations: 73, using maximum allowed: 8
[  476.790392][   T24] usb 2-1: config index 0 descriptor too short (expected 62897, got 36)
[  476.804875][   T24] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 208
[  476.824900][   T24] usb 2-1: can't read configurations, error -22
[  476.954924][   T24] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  477.064143][T12212] netlink: 532 bytes leftover after parsing attributes in process `syz.0.1699'.
[  477.078454][T12212] loop9: detected capacity change from 0 to 7
[  477.086940][T12212] Dev loop9: unable to read RDB block 7
[  477.092512][T12212]  loop9: unable to read partition table
[  477.098610][T12212] loop9: partition table beyond EOD, truncated
[  477.106000][T12212] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  477.125988][   T24] usb 2-1: Using ep0 maxpacket: 16
[  477.132129][   T24] usb 2-1: too many configurations: 73, using maximum allowed: 8
[  477.144453][   T24] usb 2-1: config index 0 descriptor too short (expected 62897, got 36)
[  477.154133][   T24] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 208
[  477.164509][   T24] usb 2-1: can't read configurations, error -22
[  477.171750][   T24] usb usb2-port1: attempt power cycle
[  477.515982][   T24] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  477.535603][   T24] usb 2-1: Using ep0 maxpacket: 16
[  477.541220][   T24] usb 2-1: too many configurations: 73, using maximum allowed: 8
[  477.550294][   T24] usb 2-1: config index 0 descriptor too short (expected 62897, got 36)
[  477.558971][   T24] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 208
[  477.567697][   T24] usb 2-1: can't read configurations, error -22
[  477.695148][   T24] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  477.717316][   T24] usb 2-1: Using ep0 maxpacket: 16
[  477.722983][   T24] usb 2-1: too many configurations: 73, using maximum allowed: 8
[  477.731891][   T24] usb 2-1: config index 0 descriptor too short (expected 62897, got 36)
[  477.741268][   T24] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 208
[  477.750718][   T24] usb 2-1: can't read configurations, error -22
[  477.757658][   T24] usb usb2-port1: unable to enumerate USB device
[  477.789507][   T24] usb 6-1: USB disconnect, device number 21
[  477.820279][   T24] em28xx 6-1:0.0: Disconnecting em28xx
[  477.831865][   T24] em28xx 6-1:0.0: Freeing device
[  478.035055][  T856] misc userio: Buffer overflowed, userio client isn't keeping up
[  478.272361][   T30] kauditd_printk_skb: 113 callbacks suppressed
[  478.272376][   T30] audit: type=1326 audit(1760257870.082:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12230 comm="syz.3.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19338eec9 code=0x7ffc0000
[  478.324989][   T30] audit: type=1326 audit(1760257870.092:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12230 comm="syz.3.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19338eec9 code=0x7ffc0000
[  478.352759][   T30] audit: type=1326 audit(1760257870.112:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12230 comm="syz.3.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fb19338eec9 code=0x7ffc0000
[  478.387176][   T30] audit: type=1326 audit(1760257870.112:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12230 comm="syz.3.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19338eec9 code=0x7ffc0000
[  478.417131][   T30] audit: type=1326 audit(1760257870.112:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12230 comm="syz.3.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19338eec9 code=0x7ffc0000
[  478.450857][   T30] audit: type=1326 audit(1760257870.112:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12230 comm="syz.3.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fb19338eec9 code=0x7ffc0000
[  478.484414][   T30] audit: type=1326 audit(1760257870.112:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12230 comm="syz.3.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19338eec9 code=0x7ffc0000
[  478.513866][   T30] audit: type=1326 audit(1760257870.112:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12230 comm="syz.3.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19338eec9 code=0x7ffc0000
[  478.547957][   T30] audit: type=1326 audit(1760257870.112:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12230 comm="syz.3.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fb19338eec9 code=0x7ffc0000
[  478.574952][   T30] audit: type=1326 audit(1760257870.112:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12230 comm="syz.3.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19338eec9 code=0x7ffc0000
[  479.111881][  T856] input: PS/2 Generic Mouse as /devices/serio2/input/input35
[  479.406879][  T856] psmouse serio2: Failed to enable mouse on 
[  479.581236][T12248] --map-set only usable from mangle table
[  479.717305][T12250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  479.744966][ T5915] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  479.750039][T12250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  480.021992][T12254] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT
[  480.034374][ T5915] usb 2-1: Using ep0 maxpacket: 8
[  480.057647][ T5915] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  480.077970][ T5915] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  480.104153][ T5915] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  480.117297][ T5915] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  480.128519][ T5915] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  480.140061][ T5915] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  480.147627][ T5915] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  480.186693][ T5915] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  480.204454][T12258] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1713'.
[  480.213387][ T5915] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  480.213417][ T5915] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  480.235644][ T5915] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  480.257168][ T5915] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  480.292559][ T5915] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  480.330179][ T5915] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  480.348794][T12260] loop6: detected capacity change from 0 to 8
[  480.364216][ T5835] Dev loop6: unable to read RDB block 8
[  480.370278][ T5835]  loop6: unable to read partition table
[  480.378402][ T5915] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  480.378590][ T5835] loop6: partition table beyond EOD, truncated
[  480.428266][ T5915] usb 2-1: string descriptor 0 read error: -22
[  480.436725][ T5915] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  480.460917][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  480.491071][ T5915] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  480.703123][T12246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  480.713362][T12246] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  480.753739][T12246] bond2: option tlb_dynamic_lb: invalid value (252)
[  480.766054][T12246] bond2 (unregistering): Released all slaves
[  480.847759][T12280] netlink: 'syz.1.1708': attribute type 8 has an invalid length.
[  480.860048][T12280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  480.977186][T12280] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  481.046947][ T5915] usb 2-1: USB disconnect, device number 77
[  481.645822][T12289] fuse: Bad value for 'fd'
[  481.730522][T12291] batman_adv: batadv0: Adding interface: dummy0
[  481.737130][T12291] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  481.786400][T12291] batman_adv: batadv0: Interface activated: dummy0
[  481.812913][T12292] batadv0: mtu less than device minimum
[  481.820203][T12292] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  481.832533][T12292] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  481.844449][T12292] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  481.856393][T12292] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  481.868351][T12292] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  481.880228][T12292] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  481.892134][T12292] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  481.904031][T12292] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  481.915963][T12292] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  482.364901][  T856] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[  482.534977][  T856] usb 5-1: Using ep0 maxpacket: 8
[  482.563133][  T856] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  482.607570][  T856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  482.617463][  T856] usb 5-1: Product: syz
[  482.621656][  T856] usb 5-1: Manufacturer: syz
[  482.641589][  T856] usb 5-1: SerialNumber: syz
[  482.661904][  T856] usb 5-1: config 0 descriptor??
[  482.674137][  T856] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  482.726625][T12314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  482.763501][T12314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  482.790924][T12316] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1727'.
[  482.923989][T12318] usb usb8: usbfs: process 12318 (syz.3.1729) did not claim interface 0 before use
[  483.105832][  T812] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  483.144535][T12320] program syz.3.1729 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  483.365986][  T812] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  483.430741][  T812] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  483.565350][  T812] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  483.574527][  T812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  483.681813][T12316] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  483.697845][  T812] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  483.953516][T12316] fuse: Unknown parameter 'rootmod'
[  485.299275][  T856] gspca_sonixj: reg_w1 err -71
[  485.336258][  T856] sonixj 5-1:0.0: probe with driver sonixj failed with error -71
[  485.352463][  T856] usb 5-1: USB disconnect, device number 72
[  485.903397][  T856] usb 6-1: USB disconnect, device number 22
[  486.067310][  T812] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  486.234985][  T812] usb 4-1: Using ep0 maxpacket: 16
[  486.250882][  T812] usb 4-1: too many configurations: 183, using maximum allowed: 8
[  486.287604][  T812] usb 4-1: unable to read config index 0 descriptor/start: -61
[  486.466691][  T812] usb 4-1: can't read configurations, error -61
[  486.515300][  T856] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  486.594898][  T812] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  486.677272][  T856] usb 5-1: config 0 has an invalid descriptor of length 78, skipping remainder of the config
[  486.689815][  T856] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41
[  486.699505][  T856] usb 5-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2
[  486.709574][  T856] usb 5-1: Product: syz
[  486.713732][  T856] usb 5-1: SerialNumber: syz
[  486.790315][  T812] usb 4-1: Using ep0 maxpacket: 16
[  486.799724][  T812] usb 4-1: too many configurations: 183, using maximum allowed: 8
[  486.815553][  T856] usb 5-1: config 0 descriptor??
[  486.816624][  T812] usb 4-1: unable to read config index 0 descriptor/start: -61
[  486.831166][  T856] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  486.845619][  T856] usb 5-1: Detected SIO
[  486.855185][  T812] usb 4-1: can't read configurations, error -61
[  486.862700][  T812] usb usb4-port1: attempt power cycle
[  486.868327][  T856] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  487.047877][  T856] usb 5-1: USB disconnect, device number 73
[  487.056142][  T856] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  487.079795][  T856] ftdi_sio 5-1:0.0: device disconnected
[  487.259705][  T812] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  487.290821][  T812] usb 4-1: Using ep0 maxpacket: 16
[  487.299777][  T812] usb 4-1: too many configurations: 183, using maximum allowed: 8
[  487.309274][  T812] usb 4-1: unable to read config index 0 descriptor/start: -61
[  487.316971][  T812] usb 4-1: can't read configurations, error -61
[  487.514930][  T812] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  487.549392][  T812] usb 4-1: Using ep0 maxpacket: 16
[  487.555595][  T812] usb 4-1: too many configurations: 183, using maximum allowed: 8
[  487.569544][  T812] usb 4-1: unable to read config index 0 descriptor/start: -61
[  487.580623][  T812] usb 4-1: can't read configurations, error -61
[  487.587743][  T812] usb usb4-port1: unable to enumerate USB device
[  487.903472][ T5897] usb 5-1: new full-speed USB device number 74 using dummy_hcd
[  488.007693][T12385] netlink: 204700 bytes leftover after parsing attributes in process `syz.0.1746'.
[  488.067440][ T5897] usb 5-1: config 8 has an invalid interface number: 223 but max is 0
[  488.076092][ T5897] usb 5-1: config 8 contains an unexpected descriptor of type 0x1, skipping
[  488.137364][ T5897] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  488.148227][ T5897] usb 5-1: config 8 has no interface number 0
[  488.154439][ T5897] usb 5-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64
[  488.166256][ T5897] usb 5-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  488.172095][T12387] input: syz0 as /devices/virtual/input/input36
[  488.209878][ T5897] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[  488.231668][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  488.244497][ T5897] usb 5-1: Product: syz
[  488.249718][ T5897] usb 5-1: Manufacturer: syz
[  488.255034][ T5897] usb 5-1: SerialNumber: syz
[  488.597550][T12396] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1749'.
[  488.908178][T12405] atomic_op ffff88803112f998 conn xmit_atomic 0000000000000000
[  488.914992][ T5874] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  489.088372][ T5874] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  489.099490][ T5874] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  489.129617][ T5874] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  489.161652][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  489.167199][ T5915] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  489.204774][T12395] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  489.246563][ T5874] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  489.451579][T12395] fuse: Unknown parameter 'rootmod'
[  489.465004][ T5915] usb 4-1: Using ep0 maxpacket: 32
[  489.531511][   T24] usb 6-1: USB disconnect, device number 23
[  490.699478][ T5897] usb 5-1: USB disconnect, device number 74
[  491.245381][ T5897] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[  491.415113][ T5897] usb 5-1: Using ep0 maxpacket: 32
[  491.423822][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  491.435201][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  491.455212][ T5897] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  491.466908][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  491.500628][ T5897] usb 5-1: config 0 descriptor??
[  491.521120][T12427] syz.1.1757 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  491.532120][T12427] random: crng reseeded on system resumption
[  491.552470][ T5897] hub 5-1:0.0: USB hub found
[  491.750443][ T5897] hub 5-1:0.0: 1 port detected
[  491.851991][ T5915] usb 4-1: unable to get BOS descriptor or descriptor too short
[  491.864604][ T5915] usb 4-1: unable to read config index 0 descriptor/start: -71
[  491.882853][ T5915] usb 4-1: can't read configurations, error -71
[  491.958679][T12415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  491.974703][T12415] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  492.057983][T12439] pim6reg: entered allmulticast mode
[  492.219577][T12443] usb usb8: usbfs: process 12443 (syz.0.1760) did not claim interface 4 before use
[  492.305898][T12445] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  493.296510][ T5897] hub 5-1:0.0: hub_ext_port_status failed (err = -32)
[  494.227383][ T5897] usb 5-1: USB disconnect, device number 75
[  494.541437][ T5897] IPVS: starting estimator thread 0...
[  494.652520][T12472] IPVS: using max 31 ests per chain, 74400 per kthread
[  495.180060][T12481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1769'.
[  495.265065][ T5897] usb 5-1: new full-speed USB device number 76 using dummy_hcd
[  495.417072][ T5897] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  495.429824][ T5897] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  495.439930][ T5897] usb 5-1: config 0 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  495.453115][ T5897] usb 5-1: config 0 interface 0 has no altsetting 0
[  495.460051][ T5897] usb 5-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00
[  495.469492][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  495.481961][T12495] netlink: 'syz.5.1774': attribute type 39 has an invalid length.
[  495.494223][ T5897] usb 5-1: config 0 descriptor??
[  495.510761][T12495] bond0: (slave syz_tun): Releasing backup interface
[  495.546667][T12071] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[  495.704977][T12071] usb 4-1: Using ep0 maxpacket: 16
[  495.727180][T12071] usb 4-1: unable to get BOS descriptor or descriptor too short
[  495.736148][T12071] usb 4-1: config 13 has an invalid interface number: 50 but max is 0
[  495.744346][T12071] usb 4-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config
[  495.755153][T12071] usb 4-1: config 13 has no interface number 0
[  495.761368][T12071] usb 4-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16
[  495.771697][T12071] usb 4-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  495.785095][T12071] usb 4-1: config 13 interface 50 has no altsetting 0
[  495.794041][T12071] usb 4-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[  495.803378][T12071] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  495.813704][T12071] usb 4-1: Product: syz
[  495.817964][T12071] usb 4-1: Manufacturer: syz
[  495.822604][T12071] usb 4-1: SerialNumber: syz
[  495.831175][T12489] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  495.910370][ T5897] hid (null): invalid report_size -251051750
[  495.943799][ T5897] hid-rmi 0003:06CB:81A7.0015: invalid report_size -251051750
[  495.963415][ T5897] hid-rmi 0003:06CB:81A7.0015: item 0 4 1 7 parsing failed
[  495.972736][ T5897] hid-rmi 0003:06CB:81A7.0015: parse failed
[  495.978861][ T5897] hid-rmi 0003:06CB:81A7.0015: probe with driver hid-rmi failed with error -22
[  496.142224][T12507] netlink: 'syz.3.1771': attribute type 4 has an invalid length.
[  496.151738][  T812] usb 5-1: USB disconnect, device number 76
[  496.181338][T12509] tipc: Cannot configure node identity twice
[  496.188256][T12509] tipc: Cannot configure node identity twice
[  496.332232][T12071] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  496.340174][T12071] usb 4-1: MIDIStreaming interface descriptor not found
[  496.403854][T12071] usb 4-1: USB disconnect, device number 77
[  496.975383][  T812] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[  497.495666][  T812] usb 5-1: Using ep0 maxpacket: 16
[  497.505885][  T812] usb 5-1: config 0 has an invalid interface number: 102 but max is 0
[  497.514127][  T812] usb 5-1: config 0 has no interface number 0
[  497.525898][  T812] usb 5-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10
[  497.535475][  T812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  497.543493][  T812] usb 5-1: Product: syz
[  497.575818][  T812] usb 5-1: Manufacturer: syz
[  497.582951][  T812] usb 5-1: SerialNumber: syz
[  497.595542][  T812] usb 5-1: config 0 descriptor??
[  497.603900][  T812] usb-storage 5-1:0.102: USB Mass Storage device detected
[  497.630305][  T812] usb-storage 5-1:0.102: Quirks match for vid 04b3 pid 4001: 2000
[  497.697452][  T812] usb-storage 5-1:0.102: This device (04b3,4001,0110 S a4 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller)
[  497.697452][  T812]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  497.758603][T12542] net_ratelimit: 10 callbacks suppressed
[  497.758616][T12542] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  498.016607][ T5915] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[  498.215088][ T5915] usb 4-1: device descriptor read/64, error -71
[  498.266819][T12551] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1789'.
[  498.373883][T12544] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  498.480472][ T5915] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[  498.625405][ T5915] usb 4-1: device descriptor read/64, error -71
[  498.685441][T12556] syzkaller0: entered promiscuous mode
[  498.691043][T12556] syzkaller0: entered allmulticast mode
[  498.757320][ T5915] usb usb4-port1: attempt power cycle
[  499.124962][ T5915] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[  499.201923][ T5915] usb 4-1: device descriptor read/8, error -71
[  499.355734][T12573] fuse: Bad value for 'fd'
[  499.474890][ T5915] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[  499.495403][ T5915] usb 4-1: device descriptor read/8, error -71
[  499.605740][ T5915] usb usb4-port1: unable to enumerate USB device
[  499.614883][T12071] usb 6-1: new full-speed USB device number 24 using dummy_hcd
[  499.745015][T12071] usb 6-1: device descriptor read/64, error -71
[  499.859909][ T5897] usb 5-1: USB disconnect, device number 77
[  499.895765][T12577] netlink: 'syz.4.1799': attribute type 3 has an invalid length.
[  499.903654][T12577] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1799'.
[  499.927822][T12580] netlink: 'syz.4.1799': attribute type 3 has an invalid length.
[  499.936151][T12580] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1799'.
[  499.974990][ T5915] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  499.984985][T12071] usb 6-1: new full-speed USB device number 25 using dummy_hcd
[  500.114972][T12071] usb 6-1: device descriptor read/64, error -71
[  500.127526][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  500.138577][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  500.148813][ T5915] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  500.158558][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  500.172991][ T5915] usb 2-1: config 0 descriptor??
[  500.225987][T12071] usb usb6-port1: attempt power cycle
[  500.284921][ T5897] usb 5-1: new high-speed USB device number 78 using dummy_hcd
[  500.465024][ T5897] usb 5-1: Using ep0 maxpacket: 16
[  500.491412][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  500.512827][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  500.569616][ T5897] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  500.569687][T12071] usb 6-1: new full-speed USB device number 26 using dummy_hcd
[  500.583988][ T5897] usb 5-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[  500.607111][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  500.628955][ T5897] usb 5-1: config 0 descriptor??
[  500.645544][T12071] usb 6-1: device descriptor read/8, error -71
[  500.890314][ T5915] lg-g15 0003:046D:C222.0016: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0
[  500.915714][T12071] usb 6-1: new full-speed USB device number 27 using dummy_hcd
[  500.956106][T12071] usb 6-1: device descriptor read/8, error -71
[  501.065361][T12071] usb usb6-port1: unable to enumerate USB device
[  501.114901][    T9] usb 4-1: new full-speed USB device number 82 using dummy_hcd
[  501.267958][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  501.277256][T12582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  501.291956][    T9] usb 4-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb
[  501.292764][T12582] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  501.302878][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  501.318384][    T9] usb 4-1: Product: syz
[  501.322634][    T9] usb 4-1: Manufacturer: syz
[  501.328054][    T9] usb 4-1: SerialNumber: syz
[  501.339950][    T9] usb 4-1: config 0 descriptor??
[  501.355229][    T9] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -12
[  501.389134][ T5897] usbhid 5-1:0.0: can't add hid device: -71
[  501.398145][ T5897] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  501.412435][ T5897] usb 5-1: USB disconnect, device number 78
[  501.429567][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  501.435945][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  501.559968][ T5915] usb 4-1: USB disconnect, device number 82
[  501.615863][T12597] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  501.808907][T12599] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1946294017 (31140704272 ns) > initial count (4518400576 ns). Using initial count to start timer.
[  502.770583][ T5915] usb 2-1: USB disconnect, device number 78
[  503.076066][T12623] ptrace attach of "./syz-executor exec"[5832] was attempted by "./syz-executor exec"[12623]
[  503.531834][T12629] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1810'.
[  503.564904][T12071] usb 2-1: new low-speed USB device number 79 using dummy_hcd
[  503.724481][T12071] usb 2-1: config 7 has an invalid interface number: 252 but max is 0
[  503.744947][T12071] usb 2-1: config 7 has no interface number 0
[  503.753743][T12071] usb 2-1: config 7 interface 252 altsetting 8 endpoint 0xF has an invalid bInterval 232, changing to 4
[  503.795435][T12071] usb 2-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid maxpacket 64, setting to 0
[  503.850693][T12071] usb 2-1: config 7 interface 252 has no altsetting 0
[  503.928962][T12071] usb 2-1: string descriptor 0 read error: -22
[  503.936079][T12071] usb 2-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0
[  503.984348][T12071] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  504.095582][T12071] idmouse 2-1:7.252: Unable to find bulk-in endpoint.
[  504.125718][T12640] usb usb8: usbfs: process 12640 (syz.5.1813) did not claim interface 0 before use
[  504.274898][    T9] usb 5-1: new low-speed USB device number 79 using dummy_hcd
[  504.299809][T12625] netlink: 'syz.1.1809': attribute type 10 has an invalid length.
[  504.339794][T12625] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  504.373589][ T5874] usb 2-1: USB disconnect, device number 79
[  504.402229][T12645] program syz.5.1813 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  504.444980][T12071] usb 4-1: new full-speed USB device number 83 using dummy_hcd
[  504.489010][    T9] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  504.500928][    T9] usb 5-1: config 0 has no interface number 0
[  504.520191][    T9] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  504.564627][    T9] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  504.593817][    T9] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  504.629395][T12071] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  504.642006][T12071] usb 4-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54
[  504.654367][T12071] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7
[  504.673470][T12071] usb 4-1: Product: syz
[  504.692460][T12071] usb 4-1: Manufacturer: syz
[  504.747552][T12071] usb 4-1: SerialNumber: syz
[  504.752205][    T9] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  504.778031][T12071] usb 4-1: config 0 descriptor??
[  504.802498][T12071] gspca_main: conex-2.14.0 probing 0572:0041
[  504.810563][    T9] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[  504.837019][    T9] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  504.955141][    T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  504.997705][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  505.093508][    T9] usb 5-1: config 0 descriptor??
[  505.110146][T12636] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  505.155484][T12636] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  505.183953][T12071] usb 4-1: USB disconnect, device number 83
[  505.261159][    T9] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  505.455661][T12636] ldusb 5-1:0.55: Write buffer overflow, 1 bytes dropped
[  505.508612][T12654] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1817'.
[  505.958575][T12665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1818'.
[  506.466329][T12071] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  506.710378][T12071] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  506.754350][T12071] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  506.834951][T12071] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  506.930385][T12071] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  506.984924][T12071] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  507.044542][T12071] usb 6-1: Product: syz
[  507.065019][T12071] usb 6-1: Manufacturer: syz
[  507.069654][T12071] usb 6-1: SerialNumber: syz
[  507.119977][ T5915] usb 5-1: USB disconnect, device number 79
[  507.150952][T12071] usb 6-1: config 0 descriptor??
[  507.192129][T12667] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  507.199475][T12667] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  507.212353][ T5915] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  507.225919][T12071] usb 6-1: ucan: probing device on interface #0
[  507.631867][T12677] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1822'.
[  507.674371][T12676] veth0: entered promiscuous mode
[  507.732792][T12677] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1822'.
[  507.796936][T12677] veth3: entered promiscuous mode
[  507.802218][T12677] veth3: entered allmulticast mode
[  507.873413][T12071] ucan 6-1:0.0: probe with driver ucan failed with error -71
[  507.891938][T12071] usb 6-1: USB disconnect, device number 28
[  508.045541][T12680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1823'.
[  508.074929][ T5874] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  508.141216][T12682] veth3: entered promiscuous mode
[  508.146557][T12682] veth3: entered allmulticast mode
[  508.413168][ T5874] usb 2-1: Using ep0 maxpacket: 16
[  508.424153][ T5874] usb 2-1: config 0 has no interfaces?
[  508.431437][ T5874] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  508.440989][ T5874] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  508.460342][ T5874] usb 2-1: Manufacturer: syz
[  508.565953][ T5874] usb 2-1: config 0 descriptor??
[  509.067002][T12703] usb usb8: usbfs: process 12703 (syz.3.1829) did not claim interface 0 before use
[  509.195450][T12706] program syz.3.1829 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  509.265106][T12071] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[  509.441103][T12071] usb 5-1: unable to get BOS descriptor or descriptor too short
[  509.469419][T12071] usb 5-1: config 182 has an invalid interface number: 132 but max is 0
[  509.542760][T12071] usb 5-1: config 182 has no interface number 0
[  509.598127][T12071] usb 5-1: config 182 interface 132 has no altsetting 0
[  509.623504][T12071] usb 5-1: string descriptor 0 read error: -22
[  509.641709][T12071] usb 5-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=a9.a2
[  509.812677][T12071] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  509.994769][ T5915] usb 2-1: USB disconnect, device number 80
[  510.218645][T12696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  510.245234][T12696] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  510.285100][ T5915] usb 5-1: USB disconnect, device number 80
[  513.012050][T12749] loop6: detected capacity change from 0 to 2640
[  513.019399][T12749] Buffer I/O error on dev loop6, logical block 0, async page read
[  513.028707][T12749] Buffer I/O error on dev loop6, logical block 0, async page read
[  513.045306][T12749] Buffer I/O error on dev loop6, logical block 0, async page read
[  513.054966][T12749] Buffer I/O error on dev loop6, logical block 0, async page read
[  513.065250][T12749] Buffer I/O error on dev loop6, logical block 0, async page read
[  513.077938][T12749] Buffer I/O error on dev loop6, logical block 0, async page read
[  513.086111][T12749] Buffer I/O error on dev loop6, logical block 0, async page read
[  513.093982][T12749] Buffer I/O error on dev loop6, logical block 0, async page read
[  513.106252][T12749] ldm_validate_partition_table(): Disk read failed.
[  513.113001][T12749] Buffer I/O error on dev loop6, logical block 0, async page read
[  513.121111][T12749] Buffer I/O error on dev loop6, logical block 0, async page read
[  513.182557][T12749] Dev loop6: unable to read RDB block 0
[  513.453277][T12749]  loop6: unable to read partition table
[  513.677459][T12749] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  514.065073][ T5915] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[  514.235246][ T5915] usb 4-1: Using ep0 maxpacket: 32
[  514.242989][ T5915] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[  514.262086][ T5915] usb 4-1: config 0 has no interface number 0
[  514.285286][T12764] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  514.304372][ T5915] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  514.336324][ T5915] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  514.345782][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.353813][ T5915] usb 4-1: Product: syz
[  514.361851][ T5915] usb 4-1: Manufacturer: syz
[  514.378045][ T5915] usb 4-1: SerialNumber: syz
[  514.408587][ T5915] usb 4-1: config 0 descriptor??
[  514.539654][ T5915] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  514.651403][ T5915] em28xx 4-1:0.132: Video interface 132 found:
[  515.422362][ T5915] em28xx 4-1:0.132: unknown em28xx chip ID (0)
[  516.038436][ T5915] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5)
[  516.125939][T12791] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1849'.
[  516.272752][ T5915] em28xx 4-1:0.132: board has no eeprom
[  517.406823][ T5915] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  517.434872][ T5915] em28xx 4-1:0.132: analog set to bulk mode.
[  517.451658][ T5905] em28xx 4-1:0.132: Registering V4L2 extension
[  517.591539][ T5905] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5)
[  517.610933][ T5905] em28xx 4-1:0.132: failed to trigger read from i2c address 0x48 (error=-5)
[  517.661940][ T5905] em28xx 4-1:0.132: failed to trigger read from i2c address 0x42 (error=-5)
[  517.686158][ T5905] em28xx 4-1:0.132: failed to trigger read from i2c address 0x40 (error=-5)
[  517.789536][ T5915] usb 4-1: USB disconnect, device number 84
[  517.808459][ T5915] em28xx 4-1:0.132: Disconnecting em28xx
[  518.166620][ T5905] em28xx 4-1:0.132: Config register raw data: 0xffffffed
[  518.181351][ T5905] em28xx 4-1:0.132: AC97 chip type couldn't be determined
[  518.200157][T12817] RDS: rds_bind could not find a transport for ::ffff:172.20.20.35, load rds_tcp or rds_rdma?
[  518.211406][ T5905] em28xx 4-1:0.132: No AC97 audio processor
[  518.235112][ T5905] usb 4-1: Decoder not found
[  518.239737][ T5905] em28xx 4-1:0.132: failed to create media graph
[  518.281875][ T5905] em28xx 4-1:0.132: V4L2 device video103 deregistered
[  518.397621][ T5905] em28xx 4-1:0.132: Remote control support is not available for this card.
[  518.409381][T12819] ==================================================================
[  518.417453][T12819] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420
[  518.424815][T12819] Read of size 8 at addr ffff88802fe20740 by task v4l_id/12819
[  518.432372][T12819] 
[  518.434680][T12819] CPU: 0 UID: 0 PID: 12819 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) 
[  518.434693][T12819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  518.434699][T12819] Call Trace:
[  518.434705][T12819]  <TASK>
[  518.434710][T12819]  dump_stack_lvl+0x189/0x250
[  518.434724][T12819]  ? __virt_addr_valid+0x1c8/0x5c0
[  518.434734][T12819]  ? rcu_is_watching+0x15/0xb0
[  518.434747][T12819]  ? __pfx_dump_stack_lvl+0x10/0x10
[  518.434757][T12819]  ? rcu_is_watching+0x15/0xb0
[  518.434769][T12819]  ? lock_release+0x4b/0x3e0
[  518.434781][T12819]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  518.434804][T12819]  ? __virt_addr_valid+0x1c8/0x5c0
[  518.434818][T12819]  ? __virt_addr_valid+0x4a5/0x5c0
[  518.434834][T12819]  print_report+0xca/0x240
[  518.434852][T12819]  ? v4l2_fh_open+0xac/0x420
[  518.434865][T12819]  kasan_report+0x118/0x150
[  518.434884][T12819]  ? v4l2_fh_open+0xac/0x420
[  518.434899][T12819]  v4l2_fh_open+0xac/0x420
[  518.434920][T12819]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  518.434938][T12819]  em28xx_v4l2_open+0x157/0x9a0
[  518.434961][T12819]  v4l2_open+0x1bf/0x3a0
[  518.434978][T12819]  chrdev_open+0x4cc/0x5e0
[  518.434997][T12819]  ? __pfx_chrdev_open+0x10/0x10
[  518.435017][T12819]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  518.435036][T12819]  ? __pfx_chrdev_open+0x10/0x10
[  518.435046][T12819]  do_dentry_open+0x953/0x13f0
[  518.435062][T12819]  vfs_open+0x3b/0x340
[  518.435073][T12819]  ? path_openat+0x2ecd/0x3830
[  518.435083][T12819]  path_openat+0x2ee5/0x3830
[  518.435098][T12819]  ? __pfx_path_openat+0x10/0x10
[  518.435110][T12819]  do_filp_open+0x1fa/0x410
[  518.435118][T12819]  ? __lock_acquire+0xab9/0xd20
[  518.435130][T12819]  ? __pfx_do_filp_open+0x10/0x10
[  518.435143][T12819]  ? _raw_spin_unlock+0x28/0x50
[  518.435155][T12819]  ? alloc_fd+0x64c/0x6c0
[  518.435168][T12819]  do_sys_openat2+0x121/0x1c0
[  518.435181][T12819]  ? __pfx_do_sys_openat2+0x10/0x10
[  518.435193][T12819]  ? exc_page_fault+0x82/0x100
[  518.435203][T12819]  ? do_user_addr_fault+0xc85/0x1380
[  518.435216][T12819]  __x64_sys_openat+0x138/0x170
[  518.435229][T12819]  do_syscall_64+0xfa/0xfa0
[  518.435239][T12819]  ? lockdep_hardirqs_on+0x9c/0x150
[  518.435247][T12819]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  518.435257][T12819]  ? clear_bhb_loop+0x60/0xb0
[  518.435268][T12819]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  518.435277][T12819] RIP: 0033:0x7fe203bd9407
[  518.435288][T12819] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  518.435296][T12819] RSP: 002b:00007ffea9b9f040 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  518.435307][T12819] RAX: ffffffffffffffda RBX: 00007fe203b4d880 RCX: 00007fe203bd9407
[  518.435315][T12819] RDX: 0000000000000000 RSI: 00007ffea9b9ff1b RDI: ffffffffffffff9c
[  518.435322][T12819] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  518.435328][T12819] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  518.435333][T12819] R13: 00007ffea9b9f290 R14: 00007fe203e32000 R15: 00005601e551c4d8
[  518.435344][T12819]  </TASK>
[  518.435347][T12819] 
[  518.737988][T12819] Allocated by task 5905:
[  518.742294][T12819]  kasan_save_track+0x3e/0x80
[  518.746966][T12819]  __kasan_kmalloc+0x93/0xb0
[  518.751535][T12819]  __kmalloc_cache_noprof+0x3d5/0x6f0
[  518.756885][T12819]  em28xx_v4l2_init+0x10b/0x2e70
[  518.761814][T12819]  em28xx_init_extension+0x120/0x1c0
[  518.767088][T12819]  process_scheduled_works+0xae1/0x17b0
[  518.772612][T12819]  worker_thread+0x8a0/0xda0
[  518.777186][T12819]  kthread+0x711/0x8a0
[  518.781264][T12819]  ret_from_fork+0x4bc/0x870
[  518.785849][T12819]  ret_from_fork_asm+0x1a/0x30
[  518.790602][T12819] 
[  518.792904][T12819] Freed by task 5905:
[  518.796858][T12819]  kasan_save_track+0x3e/0x80
[  518.801516][T12819]  __kasan_save_free_info+0x46/0x50
[  518.806691][T12819]  __kasan_slab_free+0x5c/0x80
[  518.811433][T12819]  kfree+0x19a/0x6d0
[  518.815303][T12819]  em28xx_v4l2_init+0x1683/0x2e70
[  518.820305][T12819]  em28xx_init_extension+0x120/0x1c0
[  518.825565][T12819]  process_scheduled_works+0xae1/0x17b0
[  518.831089][T12819]  worker_thread+0x8a0/0xda0
[  518.835916][T12819]  kthread+0x711/0x8a0
[  518.839996][T12819]  ret_from_fork+0x4bc/0x870
[  518.844561][T12819]  ret_from_fork_asm+0x1a/0x30
[  518.849307][T12819] 
[  518.851609][T12819] The buggy address belongs to the object at ffff88802fe20000
[  518.851609][T12819]  which belongs to the cache kmalloc-8k of size 8192
[  518.865652][T12819] The buggy address is located 1856 bytes inside of
[  518.865652][T12819]  freed 8192-byte region [ffff88802fe20000, ffff88802fe22000)
[  518.879614][T12819] 
[  518.881918][T12819] The buggy address belongs to the physical page:
[  518.888330][T12819] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2fe20
[  518.897169][T12819] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  518.905641][T12819] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  518.913159][T12819] page_type: f5(slab)
[  518.917117][T12819] raw: 00fff00000000040 ffff88813ffa7280 dead000000000122 0000000000000000
[  518.925673][T12819] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
[  518.934232][T12819] head: 00fff00000000040 ffff88813ffa7280 dead000000000122 0000000000000000
[  518.942876][T12819] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
[  518.951545][T12819] head: 00fff00000000003 ffffea0000bf8801 00000000ffffffff 00000000ffffffff
[  518.960196][T12819] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  518.968843][T12819] page dumped because: kasan: bad access detected
[  518.975358][T12819] page_owner tracks the page as allocated
[  518.981234][T12819] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5905, tgid 5905 (kworker/1:5), ts 517459692928, free_ts 517154555159
[  519.002673][T12819]  post_alloc_hook+0x240/0x2a0
[  519.007422][T12819]  get_page_from_freelist+0x2365/0x2440
[  519.012947][T12819]  __alloc_frozen_pages_noprof+0x181/0x370
[  519.018732][T12819]  alloc_pages_mpol+0x232/0x4a0
[  519.023570][T12819]  allocate_slab+0x96/0x3a0
[  519.028052][T12819]  ___slab_alloc+0xe94/0x18a0
[  519.032707][T12819]  __slab_alloc+0x65/0x100
[  519.037105][T12819]  __kmalloc_cache_noprof+0x411/0x6f0
[  519.042456][T12819]  em28xx_v4l2_init+0x10b/0x2e70
[  519.047370][T12819]  em28xx_init_extension+0x120/0x1c0
[  519.052625][T12819]  process_scheduled_works+0xae1/0x17b0
[  519.058145][T12819]  worker_thread+0x8a0/0xda0
[  519.062709][T12819]  kthread+0x711/0x8a0
[  519.066751][T12819]  ret_from_fork+0x4bc/0x870
[  519.071318][T12819]  ret_from_fork_asm+0x1a/0x30
[  519.076061][T12819] page last free pid 12792 tgid 12792 stack trace:
[  519.082535][T12819]  __free_frozen_pages+0xbc4/0xd30
[  519.087622][T12819]  __put_partials+0x146/0x170
[  519.092303][T12819]  put_cpu_partial+0x1f2/0x2e0
[  519.097051][T12819]  __slab_free+0x2b9/0x390
[  519.101443][T12819]  qlist_free_all+0x97/0x140
[  519.106005][T12819]  kasan_quarantine_reduce+0x148/0x160
[  519.111438][T12819]  __kasan_slab_alloc+0x22/0x80
[  519.116270][T12819]  kmem_cache_alloc_noprof+0x367/0x6e0
[  519.121709][T12819]  ptlock_alloc+0x20/0x70
[  519.126013][T12819]  pte_alloc_one+0x7a/0x310
[  519.130498][T12819]  __handle_mm_fault+0x2767/0x5400
[  519.135620][T12819]  handle_mm_fault+0x40a/0x8e0
[  519.140359][T12819]  do_user_addr_fault+0xa7c/0x1380
[  519.145446][T12819]  exc_page_fault+0x82/0x100
[  519.150043][T12819]  asm_exc_page_fault+0x26/0x30
[  519.154871][T12819] 
[  519.157176][T12819] Memory state around the buggy address:
[  519.162780][T12819]  ffff88802fe20600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  519.170819][T12819]  ffff88802fe20680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  519.178856][T12819] >ffff88802fe20700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  519.186898][T12819]                                            ^
[  519.193045][T12819]  ffff88802fe20780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  519.201089][T12819]  ffff88802fe20800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  519.209136][T12819] ==================================================================
[  519.364981][T12819] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  519.372226][T12819] CPU: 0 UID: 0 PID: 12819 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) 
[  519.381267][T12819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  519.391313][T12819] Call Trace:
[  519.394577][T12819]  <TASK>
[  519.397489][T12819]  dump_stack_lvl+0x99/0x250
[  519.402068][T12819]  ? __asan_memcpy+0x40/0x70
[  519.406724][T12819]  ? __pfx_dump_stack_lvl+0x10/0x10
[  519.411906][T12819]  ? __pfx__printk+0x10/0x10
[  519.416477][T12819]  vpanic+0x237/0x6d0
[  519.420443][T12819]  ? __pfx_vpanic+0x10/0x10
[  519.424925][T12819]  ? preempt_schedule+0xae/0xc0
[  519.429775][T12819]  ? __pfx_preempt_schedule+0x10/0x10
[  519.435159][T12819]  panic+0xb9/0xc0
[  519.438869][T12819]  ? __pfx_panic+0x10/0x10
[  519.443261][T12819]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  519.449137][T12819]  ? is_module_address+0x17/0xf0
[  519.454060][T12819]  ? v4l2_fh_open+0xac/0x420
[  519.458635][T12819]  check_panic_on_warn+0x89/0xb0
[  519.463574][T12819]  ? v4l2_fh_open+0xac/0x420
[  519.468147][T12819]  end_report+0x78/0x160
[  519.472371][T12819]  kasan_report+0x129/0x150
[  519.476859][T12819]  ? v4l2_fh_open+0xac/0x420
[  519.481449][T12819]  v4l2_fh_open+0xac/0x420
[  519.485849][T12819]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  519.491810][T12819]  em28xx_v4l2_open+0x157/0x9a0
[  519.496649][T12819]  v4l2_open+0x1bf/0x3a0
[  519.500897][T12819]  chrdev_open+0x4cc/0x5e0
[  519.505297][T12819]  ? __pfx_chrdev_open+0x10/0x10
[  519.510230][T12819]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  519.516536][T12819]  ? __pfx_chrdev_open+0x10/0x10
[  519.521500][T12819]  do_dentry_open+0x953/0x13f0
[  519.526262][T12819]  vfs_open+0x3b/0x340
[  519.530318][T12819]  ? path_openat+0x2ecd/0x3830
[  519.535061][T12819]  path_openat+0x2ee5/0x3830
[  519.539640][T12819]  ? __pfx_path_openat+0x10/0x10
[  519.544562][T12819]  do_filp_open+0x1fa/0x410
[  519.549042][T12819]  ? __lock_acquire+0xab9/0xd20
[  519.553878][T12819]  ? __pfx_do_filp_open+0x10/0x10
[  519.558886][T12819]  ? _raw_spin_unlock+0x28/0x50
[  519.563717][T12819]  ? alloc_fd+0x64c/0x6c0
[  519.568051][T12819]  do_sys_openat2+0x121/0x1c0
[  519.572741][T12819]  ? __pfx_do_sys_openat2+0x10/0x10
[  519.577925][T12819]  ? exc_page_fault+0x82/0x100
[  519.582673][T12819]  ? do_user_addr_fault+0xc85/0x1380
[  519.587971][T12819]  __x64_sys_openat+0x138/0x170
[  519.592904][T12819]  do_syscall_64+0xfa/0xfa0
[  519.597389][T12819]  ? lockdep_hardirqs_on+0x9c/0x150
[  519.602567][T12819]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.608614][T12819]  ? clear_bhb_loop+0x60/0xb0
[  519.613274][T12819]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.619146][T12819] RIP: 0033:0x7fe203bd9407
[  519.623643][T12819] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  519.643224][T12819] RSP: 002b:00007ffea9b9f040 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  519.652061][T12819] RAX: ffffffffffffffda RBX: 00007fe203b4d880 RCX: 00007fe203bd9407
[  519.660104][T12819] RDX: 0000000000000000 RSI: 00007ffea9b9ff1b RDI: ffffffffffffff9c
[  519.668058][T12819] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  519.676013][T12819] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  519.683985][T12819] R13: 00007ffea9b9f290 R14: 00007fe203e32000 R15: 00005601e551c4d8
[  519.691951][T12819]  </TASK>
[  519.695207][T12819] Kernel Offset: disabled
[  519.699510][T12819] Rebooting in 86400 seconds..