last executing test programs:

16m36.61369241s ago: executing program 0 (id=74):
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49}, 0x42)

16m31.387358603s ago: executing program 0 (id=79):
syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f00000001c0)=[{0x9b, 0x200, 0x4e, &(0x7f00000003c0)="4e8ac507481ed7964f3dce4e44eeb894837e6c2dc3e67f8c3e37e6230c92cfc261a15d172c93d6dbbdf236283970221f075eac78679a8a9b4f030d7e96c75fb79cf3da5c5b48cc337d049fb3267d"}, {0x9b, 0x11, 0x0, 0x0}], 0x2})
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))
ioctl$TIOCVHANGUP(r1, 0x5437, 0x2)
syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) (async)
syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) (async)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f00000001c0)=[{0x9b, 0x200, 0x4e, &(0x7f00000003c0)="4e8ac507481ed7964f3dce4e44eeb894837e6c2dc3e67f8c3e37e6230c92cfc261a15d172c93d6dbbdf236283970221f075eac78679a8a9b4f030d7e96c75fb79cf3da5c5b48cc337d049fb3267d"}, {0x9b, 0x11, 0x0, 0x0}], 0x2}) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) (async)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)) (async)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) (async)

16m27.787057077s ago: executing program 0 (id=88):
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xb, 0x52}}}}, ["", "", "", "", "", ""]}, 0x20}}, 0x10) (async)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f00000001c0), 0x4) (async)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x40, 0x41, 0x107, 0x0, 0x7, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0x28, 0x1, 0x0, 0x1, [@typed={0x14, 0x27, 0x0, 0x0, @ipv6=@private0}, @nested={0x10, 0x90, 0x0, 0x1, [@typed={0x8, 0x13a, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0xa6}]}]}]}, 0x40}}, 0x4010) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) (async)
sendmsg$inet(r2, &(0x7f0000002640)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000500)="fe", 0x1}], 0x1}, 0x4) (async)
sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)
r5 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
fsetxattr$security_ima(r5, &(0x7f0000000040), &(0x7f0000000480)=ANY=[@ANYBLOB="06034fee0f"], 0xa, 0x0) (async)
fcntl$dupfd(r5, 0x406, r0) (async)
listen(r2, 0x7) (async)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x10000009, '\x00', @p_u8=0x0}})

16m26.683584396s ago: executing program 0 (id=89):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000240)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000011500002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c000700200000000200000008"], 0xc4}}, 0x4008800)
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18)
r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
r5 = inotify_init1(0x0)
r6 = dup(r5)
r7 = syz_open_procfs(0x0, &(0x7f00000004c0)='fdinfo/4\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f00000000c0)=0x20)
ioctl$SNDCTL_DSP_STEREO(r4, 0xc0045003, &(0x7f0000000600)=0x180004)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r9 = openat$cgroup_devices(r8, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='b 7:', @ANYRESOCT], 0xd)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x52, 0xe8, 0xe5, 0x10, 0x13b1, 0x42, 0xdcc4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x44, 0x0, 0x1, 0x2e, 0xaf, 0xb2, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x3ff}}]}}]}}]}}, 0x0)

16m23.703235s ago: executing program 0 (id=97):
socket$l2tp(0x2, 0x2, 0x73)
r0 = socket$l2tp(0x2, 0x2, 0x73)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, 0x0, 0x0)
bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10)

16m21.041730554s ago: executing program 0 (id=100):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
epoll_create1(0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00'}, 0x18)
r3 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2)
r4 = dup(r3)
ioctl$KVM_X86_SETUP_MCE(r4, 0xc00c5512, 0x0)

16m19.942063253s ago: executing program 32 (id=100):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
epoll_create1(0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00'}, 0x18)
r3 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2)
r4 = dup(r3)
ioctl$KVM_X86_SETUP_MCE(r4, 0xc00c5512, 0x0)

15m34.17644463s ago: executing program 3 (id=200):
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040))
r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="4ae900000080", 0x0, 0x7, 0x0, 0x0, 0x0})
ioctl$SG_BLKTRACESTART(r0, 0x1274, 0x0)

15m31.778749684s ago: executing program 3 (id=204):
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x1)
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000710000095ead8ca9c4275fe16f257d28f0f49d5073b661118b03e9c4866ac67ef2a516e06b11c925975fec0984500923f9840936efbc86029e91f8651a3f97fcc61087b64ff336d85efbab70c6126d2dc1b7877e27f4b8336162796ffd5ba410d33f0a52b037a03883cbeaa0aad1790dce8b34e7dba251e3d87521b173efa101a5c240f9931e6f5717ae2eb51a0e06eae47afcc6de83442b7fc48ba321086c71393"], &(0x7f0000000000)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002003f00000008000a000100000008001800ac1414aa080019", @ANYRESDEC=r1, @ANYRESDEC=r1, @ANYRES16=r2], 0x58}}, 0x400c094)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES8=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbff}, 0x94)
write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
r8 = dup(r7)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f58504"])
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000280)={'wpan0\x00', <r11=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}})

15m27.883331909s ago: executing program 3 (id=210):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000003af3850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x18)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0}, 0x1, 0x0, 0x0, 0x2406c089}, 0x20000000)

15m26.766874508s ago: executing program 3 (id=211):
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x1)
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000710000095ead8ca9c4275fe16f257d28f0f49d5073b661118b03e9c4866ac67ef2a516e06b11c925975fec0984500923f9840936efbc86029e91f8651a3f97fcc61087b64ff336d85efbab70c6126d2dc1b7877e27f4b8336162796ffd5ba410d33f0a52b037a03883cbeaa0aad1790dce8b34e7dba251e3d87521b173efa101a5c240f9931e6f5717ae2eb51a0e06eae47afcc6de83442b7fc48ba321086c71393"], &(0x7f0000000000)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002003f00000008000a000100000008001800ac1414aa080019", @ANYRESDEC=r1, @ANYRESDEC=r1, @ANYRES16=r2], 0x58}}, 0x400c094)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES8=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbff}, 0x94)
write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
r8 = dup(r7)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f58504"])
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r10)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r11, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}})

15m21.816316499s ago: executing program 3 (id=217):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0)
write$P9_RSTATu(r1, &(0x7f0000000080)={0x265, 0x2, 0xafd, {{0x54f, 0x124, 0x28, 0x1f00, {0x0, 0x0, 0x4f00000000000000}, 0x0, 0x0, 0xc, 0x401, 0xffffffffffffff7d, '\nnodev{evo\x03\xd3\x8b\x92\x00'/27, 0x28, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18x\x99\xa9\x16c\x88\x14\xe5p\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0xac, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4@\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x009\x86Ac\x1dD\xf4\xa3\x9b\x11\x91\x93z(\x0e\x8d\x88\x9f\xc2 \xd1\x15\xac\x8e/\x18K\x9aau\x8d&w*\xb0\xf2\x04M\x8e\xf0&=\xdd\x97\xd3\xc4\'\xb3\xa52\xef\xab\x1d\x1c\xe3,\xa7\xc1\xfc#\x1a\xf4\x84\b\xe0+%P(\xb7\xc9\xbb\x859oM\x8a\xf0\xeb\x95\xfc\x0e\xcc\x99\xf7\x80\xe2'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0xfd85)

15m20.59993305s ago: executing program 3 (id=221):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="1801000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
openat$smackfs_cipso(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = gettid()
rt_tgsigqueueinfo(r4, r4, 0x7, &(0x7f0000000240)={0x1e, 0x2, 0x9})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200"/54, @ANYRES32=0x0, @ANYBLOB], 0xfc}, 0x1, 0x0, 0x0, 0x8084}, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
getgroups(0x0, &(0x7f00000092c0))
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000a00)="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", 0x2000, &(0x7f0000009600)={&(0x7f0000000380)={0x50, 0xfffffffffffffffe, 0x10001, {0x7, 0x2b, 0x2, 0x4, 0x6, 0x3, 0x4, 0x305, 0x0, 0x0, 0x10, 0x3ff}}, 0x0, &(0x7f0000000400)={0x18, 0x0, 0x685, {0x8000000000000000}}, 0x0, &(0x7f0000000580)={0x18, 0xffffffffffffffda, 0x5, {0x8}}, &(0x7f00000005c0)={0x28, 0xfffffffffffffffe, 0x3, {{0x9, 0x8, 0x2, r1}}}, 0x0, &(0x7f0000000680)={0x18, 0xfffffffffffffffe, 0xa97, {0x752}}, &(0x7f0000002f00)=ANY=[@ANYBLOB="11000000fef7ffff070000210d8a9dc2da04942b8ed7a51689f5d400000000ba64b38b39c71cbd3ad1c2f5e388c9d232a77e8a03c2b8dc0b4afb29f7e0f4578e2d7214d501d3a8fbec71463af445300df3a1ba4860850f84833906eaffd6268ec6fc9fd8191c3464130d420f7aaf4491b944050b77d51dcea2b3f01c302b708c7e0bb6f797827422471b68c8ddad028a63fa94f70e92fd86c96502af6d638bee31ac5dbae33c252ccaa56c5f9ff038727364dc65f407feb7f93dddb04f53ccbf94"], &(0x7f0000000700)={0x20, 0x24, 0x0, {0x0, 0x5}}, &(0x7f0000000740)={0x78, 0x0, 0xe, {0x1, 0x8, 0x0, {0x5, 0xfffffffffffffffe, 0xa, 0x2, 0x5, 0x6, 0x90, 0x8, 0x0, 0x6000, 0x8, 0x0, 0x0, 0x3, 0xb}}}, 0x0, &(0x7f0000002a00)=ANY=[@ANYBLOB], &(0x7f0000002ac0)=ANY=[@ANYBLOB="f0030000f5ffffff030000000000000000000000000000000300000000000000e1000000000000000100000000000000000000007c00000000000000000000008100000000000000c275ffffffffffff03000000000000003152000000000000070000000000000005000000ffffff7f020000000060000005000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="4d0c0000040000000000000002000000000000000d0000000000000004000000faffffff5b212e2f00000000000000000000000002000000000000000600000000000000ffff000000000000090000000000000002000000000000000200000000000000040000000000000000000100000000000600000000000000010100000000000006000000050000008003000000800000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="070000000300000000000000000000000000008000000000000000000d000000970e000073636865645f737769746368000000002aec5a2cece5a1febf1360418a36c20d6ce29d6f6498"], &(0x7f0000009300)={0xa0, 0x0, 0x80000001, {{0x5, 0x0, 0x9, 0x6, 0x9, 0x42, {0x2, 0x4, 0x1ff, 0x4, 0x9, 0xdc5, 0x78db, 0x5, 0x1, 0x9000, 0xc, 0x0, 0x0, 0x4fae, 0xc5}}, {0x0, 0x5}}}, &(0x7f00000093c0)={0x20, 0x0, 0x8, {0x6, 0x0, 0x738308a1, 0x9}}, &(0x7f00000094c0)={0x130, 0x0, 0x7fff, {0x4, 0x1000, 0x0, '\x00', {0x4, 0xfffffbff, 0x401, 0x2, 0x0, 0x0, 0x0, '\x00', 0x5, 0x7fff, 0xd, 0x6, {0xfffffffffffffff7, 0x5}, {0x7, 0x4c56}, {0x2, 0x200}, {0x8, 0xffffffff}, 0x9, 0xfffffc00, 0x4, 0x7}}}})
r6 = socket$l2tp6(0xa, 0x2, 0x73)
sendto$inet6(r6, 0x0, 0x20, 0x8810, &(0x7f0000000080)={0xa, 0x4ea0, 0x4, @loopback={0xff00000000000000}, 0x2ab8f1b6}, 0x1c)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f00000002c0)={0x0, @bt={0x64, 0x4, 0x1, 0x2, 0x8, 0xa, 0x6, 0xe6, 0xfe, 0x1, 0x7, 0x8, 0x7, 0x80000001, 0x1, 0x18, {0x7, 0x3c83}, 0xa, 0x9}})
ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, '\x00', @raw_data=[0x5, 0x10000, 0x8, 0xfff, 0x1, 0xffff314f, 0x5, 0x6, 0x10, 0xc, 0x6, 0x4, 0x0, 0x0, 0xe, 0x54, 0x767a, 0x1e5, 0x0, 0x8, 0x6, 0x54, 0x81, 0x3, 0x1ff, 0x2e4c, 0x4, 0x9, 0x7, 0x0, 0x6, 0x1]})

15m4.490092926s ago: executing program 33 (id=221):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="1801000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
openat$smackfs_cipso(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = gettid()
rt_tgsigqueueinfo(r4, r4, 0x7, &(0x7f0000000240)={0x1e, 0x2, 0x9})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200"/54, @ANYRES32=0x0, @ANYBLOB], 0xfc}, 0x1, 0x0, 0x0, 0x8084}, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
getgroups(0x0, &(0x7f00000092c0))
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000a00)="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", 0x2000, &(0x7f0000009600)={&(0x7f0000000380)={0x50, 0xfffffffffffffffe, 0x10001, {0x7, 0x2b, 0x2, 0x4, 0x6, 0x3, 0x4, 0x305, 0x0, 0x0, 0x10, 0x3ff}}, 0x0, &(0x7f0000000400)={0x18, 0x0, 0x685, {0x8000000000000000}}, 0x0, &(0x7f0000000580)={0x18, 0xffffffffffffffda, 0x5, {0x8}}, &(0x7f00000005c0)={0x28, 0xfffffffffffffffe, 0x3, {{0x9, 0x8, 0x2, r1}}}, 0x0, &(0x7f0000000680)={0x18, 0xfffffffffffffffe, 0xa97, {0x752}}, &(0x7f0000002f00)=ANY=[@ANYBLOB="11000000fef7ffff070000210d8a9dc2da04942b8ed7a51689f5d400000000ba64b38b39c71cbd3ad1c2f5e388c9d232a77e8a03c2b8dc0b4afb29f7e0f4578e2d7214d501d3a8fbec71463af445300df3a1ba4860850f84833906eaffd6268ec6fc9fd8191c3464130d420f7aaf4491b944050b77d51dcea2b3f01c302b708c7e0bb6f797827422471b68c8ddad028a63fa94f70e92fd86c96502af6d638bee31ac5dbae33c252ccaa56c5f9ff038727364dc65f407feb7f93dddb04f53ccbf94"], &(0x7f0000000700)={0x20, 0x24, 0x0, {0x0, 0x5}}, &(0x7f0000000740)={0x78, 0x0, 0xe, {0x1, 0x8, 0x0, {0x5, 0xfffffffffffffffe, 0xa, 0x2, 0x5, 0x6, 0x90, 0x8, 0x0, 0x6000, 0x8, 0x0, 0x0, 0x3, 0xb}}}, 0x0, &(0x7f0000002a00)=ANY=[@ANYBLOB], &(0x7f0000002ac0)=ANY=[@ANYBLOB="f0030000f5ffffff030000000000000000000000000000000300000000000000e1000000000000000100000000000000000000007c00000000000000000000008100000000000000c275ffffffffffff03000000000000003152000000000000070000000000000005000000ffffff7f020000000060000005000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="4d0c0000040000000000000002000000000000000d0000000000000004000000faffffff5b212e2f00000000000000000000000002000000000000000600000000000000ffff000000000000090000000000000002000000000000000200000000000000040000000000000000000100000000000600000000000000010100000000000006000000050000008003000000800000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="070000000300000000000000000000000000008000000000000000000d000000970e000073636865645f737769746368000000002aec5a2cece5a1febf1360418a36c20d6ce29d6f6498"], &(0x7f0000009300)={0xa0, 0x0, 0x80000001, {{0x5, 0x0, 0x9, 0x6, 0x9, 0x42, {0x2, 0x4, 0x1ff, 0x4, 0x9, 0xdc5, 0x78db, 0x5, 0x1, 0x9000, 0xc, 0x0, 0x0, 0x4fae, 0xc5}}, {0x0, 0x5}}}, &(0x7f00000093c0)={0x20, 0x0, 0x8, {0x6, 0x0, 0x738308a1, 0x9}}, &(0x7f00000094c0)={0x130, 0x0, 0x7fff, {0x4, 0x1000, 0x0, '\x00', {0x4, 0xfffffbff, 0x401, 0x2, 0x0, 0x0, 0x0, '\x00', 0x5, 0x7fff, 0xd, 0x6, {0xfffffffffffffff7, 0x5}, {0x7, 0x4c56}, {0x2, 0x200}, {0x8, 0xffffffff}, 0x9, 0xfffffc00, 0x4, 0x7}}}})
r6 = socket$l2tp6(0xa, 0x2, 0x73)
sendto$inet6(r6, 0x0, 0x20, 0x8810, &(0x7f0000000080)={0xa, 0x4ea0, 0x4, @loopback={0xff00000000000000}, 0x2ab8f1b6}, 0x1c)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f00000002c0)={0x0, @bt={0x64, 0x4, 0x1, 0x2, 0x8, 0xa, 0x6, 0xe6, 0xfe, 0x1, 0x7, 0x8, 0x7, 0x80000001, 0x1, 0x18, {0x7, 0x3c83}, 0xa, 0x9}})
ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, '\x00', @raw_data=[0x5, 0x10000, 0x8, 0xfff, 0x1, 0xffff314f, 0x5, 0x6, 0x10, 0xc, 0x6, 0x4, 0x0, 0x0, 0xe, 0x54, 0x767a, 0x1e5, 0x0, 0x8, 0x6, 0x54, 0x81, 0x3, 0x1ff, 0x2e4c, 0x4, 0x9, 0x7, 0x0, 0x6, 0x1]})

12m8.58367145s ago: executing program 2 (id=652):
fsopen(0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
ioctl$COMEDI_POLL(0xffffffffffffffff, 0x640f)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000021301000600000600000000000000000e0003006269746d61f03a6970000000050003"], 0x2c}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x8, 0x4000040d})
openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000600000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000000401050000000000000000000000ffff00000000000000003300000002000000e00000020000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000003c0000000a000000fe8000000000000000000000000000aa0000000001000000000000000000000000000000ff010000000000000000000000000001000000002b0000000a000000fe8800000000000000000000000000010000000000000000000000000000000000000000ff020000000000000000000000000001000000003200000002000000fe8000000000000000000000000000000000000004"], 0x254}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40004)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_end\x00', r3}, 0x18)
ioctl$COMEDI_POLL(0xffffffffffffffff, 0x640f)

12m7.809981129s ago: executing program 2 (id=654):
signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0)
r0 = socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$packet(0x11, 0x3, 0x300)
r2 = socket(0x11, 0x800000003, 0x0)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000200)={0x1}, 0x4)
socket(0x22, 0x2, 0x24)
write(r0, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r3, 0x0, 0xc, 0x0, 0x0)
signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10)
sendto$inet(r4, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)

12m7.164040982s ago: executing program 2 (id=655):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff0000d000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000020800b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

12m6.957526844s ago: executing program 2 (id=660):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000080)={0x19})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0x15, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x0, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, <r5=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x0, 0x15009f, 0x1ecbb5})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x334e8b})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f00000002c0)={0x48, 0x6, r5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x81)
r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
setsockopt$llc_int(r6, 0x10c, 0x5, 0x0, 0x0)
r7 = socket(0x16, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, 0x0, &(0x7f0000000040)=0xffffffffffffff5d)
socket(0x2a, 0x1, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
r8 = getpid()
sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x112, &(0x7f0000000400)={0x0, 0x4f76, 0xa102, 0x8000003, 0x1d4}, &(0x7f0000000040), &(0x7f0000000180))
openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0), 0x4a6743, 0x0)

12m3.343780766s ago: executing program 2 (id=664):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mprotect(&(0x7f00000ad000/0x1000)=nil, 0x1000, 0x1)
ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000040)={0x29, 0xffffffff})
r1 = socket$inet6(0xa, 0x1, 0xfffffffe)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x19)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x2)
r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x10)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
readlink(&(0x7f0000000100)='./control\x00', &(0x7f0000002240)=""/249, 0xf9)
getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x30, 0x0, &(0x7f0000000200))
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
unshare(0x4c040200)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020)
ioctl$IMDELTIMER(r5, 0x80044941, &(0x7f0000000080)=0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x442c3, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r6, 0x4b67, &(0x7f0000000000))
bind$inet6(r1, 0x0, 0x0)

11m57.390396773s ago: executing program 2 (id=675):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x30, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_SECRET={0x4}]}, 0x30}}, 0x20000010)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
fsync(0xffffffffffffffff)

11m42.113177115s ago: executing program 34 (id=675):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x30, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_SECRET={0x4}]}, 0x30}}, 0x20000010)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
fsync(0xffffffffffffffff)

22.463967395s ago: executing program 7 (id=2216):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x6, 0x0, 0x0, 0x9}, 0x1c)
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x5, 0x13012, r0, 0x1001000)
mprotect(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0xb)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = socket(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
setrlimit(0xb, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_setup(0x6, &(0x7f0000001380)=<r6=>0x0)
r7 = socket(0x2, 0x80805, 0x0)
io_submit(r6, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x1000000, 0x0, 0x0, 0x5, 0x8, r7, 0x0}])
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1)
mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
socket$inet6(0xa, 0x3, 0x0)

17.2600579s ago: executing program 7 (id=2224):
openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi2\x00', 0x600, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10)
r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000040)="80", 0x2}], 0x3, 0x0, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f0000000380)=0x8)
r2 = getpid()
sched_setscheduler(0x0, 0x6, &(0x7f0000000400)=0x80007f)
r3 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x3, 0x72b242)
fcntl$getown(r3, 0x9)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$l2tp(0x2, 0x2, 0x73)
recvmmsg(r6, 0x0, 0x0, 0x10020, 0x0)
setsockopt$inet_int(r6, 0x0, 0x12, 0x0, 0x0)
sendto$l2tp(r6, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000600000000000000000c0000000c000000020000000004000000000000000000", @ANYRESOCT=r3, @ANYRESOCT=r2], 0x0, 0x26}, 0x28)
r7 = userfaultfd(0x80001)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8044}, 0x4004044)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0))
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x220, 0xd0, 0x720d, 0x148, 0x0, 0x148, 0x188, 0x240, 0x240, 0x188, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast1, @rand_addr=0x64010100, 0xff, 0xff000000, 'veth1_to_hsr\x00', 'dvmrp1\x00', {0xff}, {}, 0xff, 0x1, 0x30}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x1e01, 0x2, 0x3], 0x0, 0x2}, {0xffffffffffffffff, [0x7, 0xb2cc575b459b5b36, 0x4, 0x4], 0x6, 0x7}}}}, {{@ip={@broadcast, @multicast1, 0xff000000, 0xffffffff, 'sit0\x00', 'vlan1\x00', {0xff}, {0xff}, 0x1, 0x3, 0x40}, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000200)={0x15})
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}}, 0x30)

16.898485879s ago: executing program 6 (id=2225):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vxcan0\x00', <r1=>0x0})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', r1, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@delneigh={0x1c, 0x1d, 0x10, 0x70bd2b, 0x25dfdbfb, {0x7, 0x0, 0x0, r5, 0x10, 0xd8, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
socket$inet6_udplite(0xa, 0x2, 0x88)
syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[], 0x0)
setfsgid(0xee01)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="70010000100033060000000000000000fc000000000000000000000000000000fc0100000000000000000000000000004e220000000000000000002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe880000000000000000000000000001020000000000000000000000000000000000000000000000000000000000000000000000008c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000affffff00000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0020000000000000000000ac1e00010000000000000000000000001c000400"/287], 0x170}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
dup2(r7, 0xffffffffffffffff)
r8 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_ENCAP(r8, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4)

14.959498121s ago: executing program 6 (id=2230):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000100)={0x3}, 0x4)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040))
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00')
setns(r1, 0x0)
socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x7cc7, &(0x7f0000000240)={0x0, 0xec25, 0x8, 0x2, 0x40}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)})
io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @local}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000}, 0x44010)
setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000000)=[{{0x2, 0x1}, {0x2, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x4, 0x0, 0x1}}], 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet(0x2, 0x2, 0x0)

13.599073903s ago: executing program 7 (id=2234):
syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @val={@val={0x88a8, 0x7, 0x1, 0x2}, {0x8100, 0x6, 0x0, 0x1}}, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0xffffffe0, 0x0, 0x0, 0x0, 0x73, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x36}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1]}, @cipso={0x86, 0x6}]}}}}}}, 0x0)

11.975359743s ago: executing program 7 (id=2236):
timer_create(0x1, &(0x7f0000000180)={0x0, 0x5, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000280))
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x10, 0x6, 0x740, 0x328, 0x580, 0x580, 0xd0, 0x328, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x230, 0x258, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x8, 0x5, 0x3c, 0x97, 0x6, 0x401, 0x4, 0x120e, 0x18, 0x40}, {0x5}}}, @common=@srh={{0x30}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'vxcan1\x00', {0xff}, {}, 0x2c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7a0)

11.702994226s ago: executing program 7 (id=2239):
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c41f4040110f00107f00000000010902120001000000000904"], 0x0)
syz_usb_connect$cdc_ecm(0x6, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="10011003020000082505a1a4400001020301090244000101104002000000000202060041091b0600004a7e43c90b0e9948000d240f0100080905820240000902090905030220004402db000000000000000000010000"], &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x46, 0x5d, 0x5, 0x10, 0x3}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x407}}, {0xac, &(0x7f0000000180)=@string={0xac, 0x3, "0251120515cfab6ecaa198e44dc2f30506b34ce2de87d319e5b43bc9435fede7282a9db53f28ec024f30a389eaaed580e16c50c3dad2f6e5dba1ef613f339f772f9185ef8e2e4e8141237d4a37e185b66533ff95aec9efbf9b4dba79950524e3fbfbffb7b13cc455f21770e5ebf35d3f260259e95e4905715b766cc484aa195e6c1ba288509a4833567a90ed1a751220cc4005a2443ea5635f79e2c4651237d8ca4908973473890561fa"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x426}}]})
socket$tipc(0x1e, 0x2, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c41f4040110f00107f00000000010902120001000000000904"], 0x0) (async)
syz_usb_connect$cdc_ecm(0x6, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="10011003020000082505a1a4400001020301090244000101104002000000000202060041091b0600004a7e43c90b0e9948000d240f0100080905820240000902090905030220004402db000000000000000000010000"], &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x46, 0x5d, 0x5, 0x10, 0x3}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x407}}, {0xac, &(0x7f0000000180)=@string={0xac, 0x3, "0251120515cfab6ecaa198e44dc2f30506b34ce2de87d319e5b43bc9435fede7282a9db53f28ec024f30a389eaaed580e16c50c3dad2f6e5dba1ef613f339f772f9185ef8e2e4e8141237d4a37e185b66533ff95aec9efbf9b4dba79950524e3fbfbffb7b13cc455f21770e5ebf35d3f260259e95e4905715b766cc484aa195e6c1ba288509a4833567a90ed1a751220cc4005a2443ea5635f79e2c4651237d8ca4908973473890561fa"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x426}}]}) (async)
socket$tipc(0x1e, 0x2, 0x0) (async)

11.640166027s ago: executing program 5 (id=2240):
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
sendmmsg$inet(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000070000008606266b93ff000054dff4a0ed1098d370da69b06de424c04392767b66407f52fede69b95d25f9d0ab6bec0830a1b31be16e17f11db9d5b1a5b51eb5971416258d0790f977617b969d9fd096e668af3a0ed296c579d064f26f46c1c1ae8f24986cec336d7cab84bb7047844239da954190eef74ba0c96e352aefc63829e35b178b9ff7efcf8d"], 0x18}}], 0x2, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2008000000000015000500511b48033d03010000000000950000d300000000bc26080000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b"], &(0x7f0000000100)='GPL\x00'}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', <r5=>0x0})
syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb763e", 0x28, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x41}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, [{0x18, 0x3, "007c4de20278ab96e88afd5c976b4c1ce4a945b1aafb"}]}}}}}}, 0x0)
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r5})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002880), r6)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000280)=ANY=[@ANYBLOB="bd1de80dbf3fb70f3e9b50ed078f1ac3e0017c0fcb6348dc6ca3a314aa347a339ee0a6bfb21406", @ANYRES16=r7], 0x30}, 0x1, 0x0, 0x0, 0xc4}, 0x200040c0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', <r8=>0x0})
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000540)={@private2, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x8001, 0x0, 0x0, 0x0, 0x200, r8})
r10 = socket$packet(0x11, 0x2, 0x300)
bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'})

11.335923473s ago: executing program 1 (id=2242):
r0 = socket$caif_stream(0x25, 0x1, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan1\x00'})
r1 = syz_usb_connect(0x0, 0x3d7, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000000904"], 0x0)
syz_usb_connect$cdc_ncm(0x2, 0x96, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x2, 0x1, 0x9, 0x20, 0x89, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "f3a21ddaf6"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xe, 0x3, 0xfd}, {0x6, 0x24, 0x1a, 0x8}, [@dmm={0x7, 0x24, 0x14, 0xfffc, 0x5}, @mdlm={0x15, 0x24, 0x12, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0xf, 0x7, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0xff, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xf, 0x8, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x4c, 0x3}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0xd1, 0x7, 0x7, 0xff, 0xf2}, 0x2a, &(0x7f0000000100)={0x5, 0xf, 0x2a, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0xe3, 0x0, 0x7, 0xd6, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x14, "4808a5e526e15edd8dee92db812d4090"}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x9, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xc0a}}, {0xb9, &(0x7f0000000180)=@string={0xb9, 0x3, "d87fd85da232ec37b6f678945ab68e68d42a40439b6a4f2ee2a040b5b673f6da3715ca861a1e19d068b474fc045354209646a523538125b2982f7544287e15bdf0090b42c1074078c1ee631e28fbff65bcf0c6d4264224859c889e0df8b9a1a7cc82f6b40a8b4db74b74727717a13f6c3aab21ead99b67482f5bccb5d68e7de987ca04770937253d14383dcf8ae79d9b80ee2f88f80a43ef8853812f67ff737f4702e8e45d18406b92e9e083afcf24931e4187447f4ac1"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x827}}, {0xc8, &(0x7f00000002c0)=@string={0xc8, 0x3, "c7668b3d4c4342e6d0dbf2b0ae7499fafc0489f3757ce48a7e28db27c833a1e5399a90ba4b3bc31692dd2c22a048f8aff827d9a56b6b9718555b1bd9f5e8ed7179ceb3187289d1f6cf8a8a19cc7cc9644360e0b54a58a83c202edbcdd97243fe7b4232c4986995a7491e22076856fe293badb775722fbaf42b831b98c5705c1c3b2f0dd0044bc165bee88c3a5da0eeed0d05c890545af6d99c0b94428a6f71f0b57ec8d77a7a428d2adf4d90c22e682cfac83bc8a1ba5e9a5b7d944b90e4ed067a2a1788e9ab"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x382a}}, {0x9f, &(0x7f00000004c0)=@string={0x9f, 0x3, "995ad65ee9da9e73efd33e61be423a9795f232359f9673d03fbbd0d1af56c9cf84dc26a1e8c38d9e1a58989d5272fe8a00a3f896d287edb200c4b8e4e93cd2def4dbde1c859337ceb2bf21b3d33b7187ae73315203491916dfc021745c050b27bca8bbe18fc6daefdfd7ce1b68b434cc2eb134516a4622bb8a2ae2e3e7dae279fd16c79f251ba2a8fb567091740815e11091efc9abea74e7d3db28eec2"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x442e}}, {0x32, &(0x7f0000000580)=@string={0x32, 0x3, "f35cfb852eb841b20ec3b1dd3936c6fb65d89ae497452f6d49d8a4e385992246e2c2ca04dc4f2facda9d5390f5347e4a"}}]})
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

10.427129622s ago: executing program 5 (id=2243):
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {<r1=>0xee00, <r2=>0x0}}, './file0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f00000000c0)={r0, r3, 0x2, 0x78, &(0x7f0000000040)="7fc28194702b5e7d835f8062c5c223b18e9b704655ba75483f75873aa86c09e88c8446b2863168ba00e3c7212faa7f32207dd331c72a607e03841e606c5fe83664e0b0dde4d81e951f2e4e6d10dfd4eb49fdf33fac34cc3c3c7eeaf2630728e6a020b164830ea70f300ed707cbe9dedef4f7aee8e1960c33", 0x3, 0x4, 0xfff, 0x2, 0x2, 0x2, 0x4, 'syz1\x00'})
ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f0000000180)={0x1, 0x200, 0x7})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6gre0\x00', <r4=>0x0, 0x2f, 0x6e, 0x5, 0x4, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, @dev={0xfe, 0x80, '\x00', 0x31}, 0x80, 0x8000, 0x5, 0x4}})
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/mdstat\x00', 0x0, 0x0)
bind$isdn_base(r5, &(0x7f00000002c0)={0x22, 0x7, 0x40, 0x4}, 0x6)
ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE(r5, 0x5000940e, &(0x7f0000000300)={{r3}, "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"})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001300)={'veth1_to_hsr\x00', 0x1})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001380)={&(0x7f0000001340)='swiotlb_bounced\x00', r0, 0x0, 0x5}, 0x18)
r6 = socket$nl_crypto(0x10, 0x3, 0x15)
ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f00000013c0)={0x9, 0x2, 0x4, 0x80, 0x8, 0x0, [{0x7, 0x4, 0x8, '\x00', 0x200}, {0xe, 0x200, 0x100, '\x00', 0x9}, {0x1fa04d92, 0x1, 0xe430}, {0x1, 0x3, 0x8be, '\x00', 0x1700}, {0x5, 0x5, 0x367, '\x00', 0x181}, {0xffffffffffffff7f, 0x2, 0x4, '\x00', 0x104}, {0x2, 0x3, 0x9, '\x00', 0x80}, {0x8000000000000000, 0x8, 0xff, '\x00', 0x102}]})
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001600), r5)
sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x38, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000844}, 0x1)
sendmsg$AUDIT_GET(r5, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x10, 0x3e8, 0x2, 0x70bd2c, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r2)
syz_open_dev$sndpcmc(&(0x7f0000001800), 0x2, 0x44000)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000001840)={0x0, <r8=>0x0}, &(0x7f0000001880)=0xc)
setreuid(r8, r1)
getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000018c0), &(0x7f0000001900)=0x4)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000001940)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x79f7, 0xfc01, 0x3461, 0x9e, 0x7, "403974c3c4b1a652fdb7e5fbc3d3e0509b24b60820b13e6faae8711c5e77bbb1d0d50d6b61323713935df4ca44aba82bd184456b7ce8b85b36ad9fe16fa3daccd535c2517fc848cf2c31f817d73df3d8b7b41059ab334bb57931ae4fbdb047c34d31353146d152997548f596c586c32a3dc481c8515bec9242bfa9ca7b54e09f"})
ioctl$MEDIA_REQUEST_IOC_QUEUE(r5, 0x7c80, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000001a00)={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x3e}, r4}, 0xc)
r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001a40), 0x2a0000, 0x0)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r9, 0x80083314, &(0x7f0000001a80))
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), r0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000001c00)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x70, r10, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x7f}, @ETHTOOL_A_LINKMODES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x3}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x4040011)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c80), r5)
sendmsg$NL80211_CMD_GET_INTERFACE(r5, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x20, r11, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x27}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x10040010}, 0x4000000)

10.250502314s ago: executing program 4 (id=2244):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0xec}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

10.203280806s ago: executing program 5 (id=2245):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2008000000000015000500511b48033d03010000000000950000d300000000bc26080000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b"], &(0x7f0000000100)='GPL\x00'}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', <r5=>0x0})
syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb763e", 0x28, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x41}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, [{0x18, 0x3, "007c4de20278ab96e88afd5c976b4c1ce4a945b1aafb"}]}}}}}}, 0x0)
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r5})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002880), r6)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000280)=ANY=[@ANYBLOB="bd1de80dbf3fb70f3e9b50ed078f1ac3e0017c0fcb6348dc6ca3a314aa347a339ee0a6bfb21406", @ANYRES16=r7], 0x30}, 0x1, 0x0, 0x0, 0xc4}, 0x200040c0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', <r8=>0x0})
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000540)={@private2, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x8001, 0x0, 0x0, 0x0, 0x200, r8})
r10 = socket$packet(0x11, 0x2, 0x300)
bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r11=>0x0})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x20, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r11}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

9.843838216s ago: executing program 6 (id=2246):
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x1)
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002003f00000008000a000100000008001800ac1414aa", @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES16=r1], 0x58}}, 0x400c094)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES8=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbff}, 0x94)
write$qrtrtun(0xffffffffffffffff, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
r6 = dup(r5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f58504"])
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r8)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000280)={'wpan0\x00', <r10=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r9, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}})

9.841528223s ago: executing program 4 (id=2247):
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x1)
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002003f00000008000a000100000008001800ac1414aa", @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES16=r1], 0x58}}, 0x400c094)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES8=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbff}, 0x94)
write$qrtrtun(0xffffffffffffffff, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
r6 = dup(r5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f58504"])
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r8)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000280)={'wpan0\x00', <r10=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r9, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}})

5.681832773s ago: executing program 5 (id=2248):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r0)
sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r1, 0x1, 0xfffffffe, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x50010}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000980)=@framed={{0x18, 0x2, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x7fb}, [@exit, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_usb_connect(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000014e2fc203c419b81c0a701020301090244000100000000090400000302060000052406000005240000000d240f", @ANYRES8=r2], 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c)
syz_emit_ethernet(0xd2, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x9c, 0x11, 0x0, @local, @mcast1, {[], {0x4e1d, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "64e06ac433806cca0557771928d93335917918d781471a558cb374a4322575c7", "fc04e44ad8139c23dd3e351eb500088248f4071c276578b8463541b71c0f81f95d37fcc8e78b6a2fc9ada4cc2121ceaf", "4224599aab05cbd0b2f48ae440accdbe95d6cb5aa98c632306790d88", {"39ccade3cd9f1297c134f4a0fd9c9d75", "fabac3d151d35b65c11f71f51150bfad"}}}}}}}}, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000000)={0xc})
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r4, 0x3b87, &(0x7f0000000200)={0x18})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200002000000000000000000000008500000041000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0xd50, 0x0, &(0x7f00000019c0)="6fd92f5c3fbecb0c72abdb6e3b92", 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50)
setrlimit(0x2, &(0x7f0000000000)={0x4000051, 0xfffffffa})
prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffb000/0x3000)=nil)
prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffb000/0x4000)=nil)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)

5.417596956s ago: executing program 6 (id=2249):
syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
epoll_create1(0x80000)
syz_open_dev$sg(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x0, &(0x7f0000000040)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x810, 0xffffffffffffffff, 0x94002000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x400000000010, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000005000500010000000800040000000000050006000000000008000300010000002be7f6"], 0x34}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
capget(&(0x7f00000003c0)={0x20071026}, &(0x7f0000000400)={0x7, 0x9, 0xa, 0xff, 0x7, 0xc})
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = syz_usb_connect(0x6, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io(r6, 0x0, 0x0)

5.299811161s ago: executing program 1 (id=2250):
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_io_uring_setup(0x497, &(0x7f0000000380)={0x0, 0x607b, 0x8, 0x0, 0x284}, &(0x7f0000000280)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x14, 0x0, {0x3}})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0xffffffffffffff07}}, 0x80}}, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x47d5d000)
io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x0)
copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000002b000b00000000080000000008000000040003000c0001800600000088480000080002"], 0x2c}}, 0x0)

5.299145166s ago: executing program 7 (id=2251):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000040)=0xfffffffffffffff9, 0x12)
r1 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4)
ftruncate(r1, 0x7000000)
r2 = dup(r1)
preadv2(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x0, 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
openat$yama_ptrace_scope(0xffffff9c, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
open$dir(0x0, 0x2040, 0x140)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
r7 = socket$inet6(0xa, 0x80001, 0x0)
getsockopt$bt_hci(r7, 0x0, 0x29, 0x0, &(0x7f0000d23000)=0x44)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000080)=0xb6c, 0x4)
signalfd(r3, &(0x7f00000002c0)={[0x2]}, 0x8)
bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r8, &(0x7f0000000840)=[{{&(0x7f0000000240)=@ethernet={0x0, @local}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000001780)=""/139, 0x8b}, 0x4}, {{&(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/172, 0xac}, {&(0x7f0000000580)=""/218, 0xda}, {&(0x7f0000000500)=""/41, 0x29}, {&(0x7f0000000680)=""/124, 0x7c}, {&(0x7f0000000700)=""/175, 0xaf}], 0x5, &(0x7f0000001840)=""/4096, 0x1000}, 0x34}], 0x2, 0x45833af92e4939df, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r0, 0x0)

5.205982248s ago: executing program 4 (id=2252):
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x8000)
keyctl$clear(0x5, 0xffffffffffffffff)
r0 = getpid()
syz_pidfd_open(r0, 0x0)
syz_usb_connect(0x6, 0x75, &(0x7f0000000780)=ANY=[@ANYBLOB="1201010240d85bc7b1131100345c010203010902630002040800070904880400c1"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000001080), 0x4)
sendmsg$kcm(r2, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x11}, 0x80, &(0x7f00000018c0)=[{0x0}, {&(0x7f0000000380)="cb4e88a8af3288a8eef1", 0xa}], 0x2}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prlimit64(r1, 0x7, 0x0, 0x0)
sched_setscheduler(r0, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r5 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x40044160, 0x3)

3.545236865s ago: executing program 1 (id=2253):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) (async)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00'}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid() (async)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
socket(0x10, 0x3, 0x0) (async)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00'})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@gettfilter={0x44, 0x2e, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xffff, 0x8}, {0x6, 0xc}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x80000000}, {0x8, 0xb, 0x8000000}, {0x8, 0xb, 0x2}]}, 0x44}}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@gettfilter={0x44, 0x2e, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xffff, 0x8}, {0x6, 0xc}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x80000000}, {0x8, 0xb, 0x8000000}, {0x8, 0xb, 0x2}]}, 0x44}}, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) (async)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000000c0)={0x80, <r5=>r0})
ioctl$VHOST_VDPA_GET_VRING_NUM(r5, 0x8002af76, &(0x7f0000000100))
add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd)
add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe)
add_key$user(&(0x7f0000000480), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r7, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) (async)
sendmsg$inet_sctp(r7, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @local}}, 0x6, 0x3, 0x8001, 0x0, 0x15, 0x1, 0x5}, 0x9c)
bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x74)
socket$inet(0x2, 0xa, 0x6)

2.471781326s ago: executing program 1 (id=2254):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x3a, &(0x7f0000000180)={@dev, @multicast1, @remote}, &(0x7f00000002c0)=0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2008000000000015000500511b48033d03010000000000950000d300000000bc26080000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b"], &(0x7f0000000100)='GPL\x00'}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', <r5=>0x0})
syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb763e", 0x28, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x41}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, [{0x18, 0x3, "007c4de20278ab96e88afd5c976b4c1ce4a945b1aafb"}]}}}}}}, 0x0)
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r5})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002880), r6)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000280)=ANY=[@ANYBLOB="bd1de80dbf3fb70f3e9b50ed078f1ac3e0017c0fcb6348dc6ca3a314aa347a339ee0a6bfb21406", @ANYRES16=r7], 0x30}, 0x1, 0x0, 0x0, 0xc4}, 0x200040c0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', <r8=>0x0})
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000540)={@private2, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x8001, 0x0, 0x0, 0x0, 0x200, r8})
r10 = socket$packet(0x11, 0x2, 0x300)
bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r11=>0x0})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r11}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

2.471312468s ago: executing program 4 (id=2255):
r0 = socket$unix(0x1, 0x1, 0x0)
close(r0)
socket$kcm(0xa, 0x1, 0x106)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x6e22, 0x0, @empty}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000380)={0xa, 0xe22, 0x0, @empty}, 0x1c)
listen(r3, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)
listen(r1, 0x4)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4)

1.331364423s ago: executing program 5 (id=2256):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdf1}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdf1}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[], 0x50)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) (async)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000040)={0x0, 0xe, 0x1, 0x7, 0x0, 0x7, 0x0})
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="48000000bf0d3625c6d7cf2b15efbdfac2e3556129134c2861778117ea57b8daf1eb05aff2213e16af90f7f52b2c2dd4a16ebca944a8ba629d246518b6518108331c1deb5f8a8dc4c30587cfede995a66a7a32737424aac556ad116d976faaadc1ac93b95c775d6f50564974b8fc8c97c41c2bbc46cefd184b7b3d228211c39748f506233407c0ecea6a447b9ac5873f8bfe5d4ad1c8a9058c2565a8050a", @ANYRES16=r5, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r6, @ANYBLOB="0a00340001010101010100001e009400000302fdffffffffffffff510005000800000001000e0000001f0000"], 0x48}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="48000000bf0d3625c6d7cf2b15efbdfac2e3556129134c2861778117ea57b8daf1eb05aff2213e16af90f7f52b2c2dd4a16ebca944a8ba629d246518b6518108331c1deb5f8a8dc4c30587cfede995a66a7a32737424aac556ad116d976faaadc1ac93b95c775d6f50564974b8fc8c97c41c2bbc46cefd184b7b3d228211c39748f506233407c0ecea6a447b9ac5873f8bfe5d4ad1c8a9058c2565a8050a", @ANYRES16=r5, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r6, @ANYBLOB="0a00340001010101010100001e009400000302fdffffffffffffff510005000800000001000e0000001f0000"], 0x48}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002", @ANYRESOCT=r0], 0x140}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) (async)
sendmsg$NFT_BATCH(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002", @ANYRESOCT=r0], 0x140}, 0x1, 0x0, 0x0, 0x4000804}, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) (async)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x0) (async)
r8 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x0)
ioctl$CEC_S_MODE(r8, 0x40046109, &(0x7f00000003c0)=0x87)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x0, 0x0, 0x317, 0x1, 0x34, 0x209}, 0x9c)

1.211987466s ago: executing program 4 (id=2257):
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x2, 0x6, @dev={0xfe, 0x80, '\x00', 0xf}, 0x2}, 0x1c) (async)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KDSIGACCEPT(r0, 0x400455c8, 0xf) (async, rerun: 32)
r1 = syz_io_uring_setup(0x2d1, &(0x7f0000000480)={0x0, 0xd020, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0) (rerun: 32)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345})
io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 32)
r7 = getpid() (rerun: 32)
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 32)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async)
ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f00000000c0)={0x0, @multicast}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180010000000000000000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x94)

1.123537632s ago: executing program 6 (id=2258):
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
r4 = add_key(&(0x7f0000000440)='asymmetric\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
syz_open_dev$radio(0x0, 0x2, 0x2)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x22000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)={'#! ', '', [{}, {}, {}, {0x20, '#! '}, {0x20, '127.0.0.1\x00'}, {0x20, '[%!'}, {0x20, '127.0.0.1\x00'}, {0x20, '\'\x00\x00'}, {0x20, '[\''}], 0xa, "9799ffca66d73151faf8de69698981faca34b1c9afbfc2d3ab8c23e0fd5ed5952fe57f6e250d6d1163046bbe224154fb9951dde67a56bf5f5a310710d3b7728ad5826bff0007160b4130b7a6d88f4756d9fa025224076a36d7739818cb2f625c16eead3b03475242895a2adf731d60868f83f8ebca8779c8af6d0768e10afe1f69c070bc72b6e9613f48f65ed7d305799b8b02eac13c757ef0693c2f2b686dfcf87844f8300b2d6802a9313ead27bc33dc9980cdd722a6f575"}, 0xe5)
r6 = add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
keyctl$reject(0x13, r6, 0x4, 0x8000000000000000, r4)
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071120f000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_dev$dri(0x0, 0x4, 0x10000)
mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000080), 0x8, &(0x7f0000000000)=ANY=[])
r7 = socket$kcm(0x2b, 0x1, 0x0)
listen(r7, 0x6)
setsockopt$sock_attach_bpf(r7, 0x1, 0xd, &(0x7f0000000080), 0x24)
socket$inet_mptcp(0x2, 0x1, 0x106)
close(r7)

1.098378701s ago: executing program 1 (id=2259):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, <r3=>0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000080)=[0x0], 0x1, r3, r4, 0x3, 0x0, 0x10, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x7f, 0x412f, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f0000000000000000fe0200"}})

183.818245ms ago: executing program 1 (id=2260):
fsopen(0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
ioctl$COMEDI_POLL(0xffffffffffffffff, 0x640f)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000021301000600000600000000000000000e0003006269746d61f03a6970000000050003"], 0x2c}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x8, 0x4000040d})
openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40004)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_end\x00', r3}, 0x18)
ioctl$COMEDI_POLL(0xffffffffffffffff, 0x640f)

78.263258ms ago: executing program 6 (id=2261):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x2, @pix={0x9, 0x7, 0x34325241, 0x3, 0x7, 0x9, 0x9, 0x10, 0x1, 0xa, 0x1, 0x2}})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x0, 0x9, 0x101}, 0x14}}, 0x0) (async)
sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x0, 0x9, 0x101}, 0x14}}, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
io_setup(0x2, &(0x7f00000000c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000840)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0xa10}]) (async)
io_submit(r3, 0x1, &(0x7f0000000840)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0xa10}])

11.908064ms ago: executing program 4 (id=2262):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6)
clock_settime(0x0, &(0x7f0000000240)={0x77359400})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000000100000000000000000400000000000000883d36cb3070"])
ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000480)={0x4, 0x5, 0x5})
clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8})
clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0xe, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x6, 0x2, 0x4, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x7, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x8, 0x7, 0x5, 0x6})
r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)=0x80000003)
r5 = dup2(r4, r4)
read$FUSE(r5, &(0x7f00000063c0)={0x2020}, 0x2020)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001400)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x44, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x20000000, 0x7fffffff, 0x101, 0x7, {0x1, 0x1, 0x2, 0xc0, 0x9}, {0xfb, 0x2, 0x7ff, 0x3, 0xfff2, 0x8}, 0x4, 0x1e, 0x8}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x800)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'sit0\x00', r8, 0x7, 0x10, 0x2c0934bc, 0x5, {{0xe, 0x4, 0x1, 0x9, 0x38, 0x67, 0x0, 0x4, 0x2f, 0x0, @multicast2, @rand_addr=0x64010101, {[@generic={0x0, 0x11, "cc1f66501850e6ed034d126d5fefb9"}, @generic={0x82, 0x11, "67a49bc5f19f67f403953da00a9ca1"}]}}}}})
dup3(0xffffffffffffffff, r0, 0x80000)

0s ago: executing program 5 (id=2263):
mount(0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
gettid()
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x70bd23, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0xc}}, 0x1c}}, 0x0)
socket(0x1d, 0x2, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
listen(0xffffffffffffffff, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000400000000"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10)

kernel console output (not intermixed with test programs):

 0 descriptor??
[  666.965872][    T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  667.140371][    T9] usb 5-1: device descriptor read/8, error -71
[  667.610783][    T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  667.660298][ T5842] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  667.904811][    T9] usb 5-1: device descriptor read/8, error -71
[  668.035626][    T9] usb usb5-port1: unable to enumerate USB device
[  669.524208][ T5842] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  669.747066][ T5842] usb 7-1: USB disconnect, device number 40
[  669.774825][T11158] input: syz1 as /devices/virtual/input/input23
[  669.849503][T11162] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1258'.
[  671.743966][T11176] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1260'.
[  671.806155][T11176] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1260'.
[  672.814269][T11185] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1262'.
[  673.302626][T11186] tipc: Failed to remove unknown binding: 66,1,1/600704626:4011356038/4011356040
[  673.521808][T11186] tipc: Failed to remove unknown binding: 66,1,1/600704626:4011356038/4011356040
[  674.381881][T11186] tipc: Failed to remove unknown binding: 66,1,1/600704626:4011356038/4011356040
[  674.455488][ T6422] Bluetooth: hci1: Frame reassembly failed (-84)
[  675.225114][T11205] input: syz1 as /devices/virtual/input/input24
[  676.776359][ T5156] Bluetooth: hci1: command 0x1003 tx timeout
[  676.783477][ T9813] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  676.842755][T11212] netlink: 'syz.6.1268': attribute type 32 has an invalid length.
[  678.647635][T11232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1270'.
[  686.394144][T11269] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1280'.
[  686.455220][T11271] netlink: 'syz.5.1281': attribute type 32 has an invalid length.
[  687.616549][T11289] input: syz1 as /devices/virtual/input/input25
[  691.088849][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  693.817410][T11353] loop9: detected capacity change from 0 to 7
[  693.825080][T11353] buffer_io_error: 4 callbacks suppressed
[  693.825135][T11353] Buffer I/O error on dev loop9, logical block 0, async page read
[  693.839648][T11353] Buffer I/O error on dev loop9, logical block 0, async page read
[  693.847947][T11353] Buffer I/O error on dev loop9, logical block 0, async page read
[  693.856249][T11353] Buffer I/O error on dev loop9, logical block 0, async page read
[  693.864657][T11353] Buffer I/O error on dev loop9, logical block 0, async page read
[  693.873345][T11353] Buffer I/O error on dev loop9, logical block 0, async page read
[  693.882060][T11353] Buffer I/O error on dev loop9, logical block 0, async page read
[  693.890564][T11353] ldm_validate_partition_table(): Disk read failed.
[  693.897742][T11353] Buffer I/O error on dev loop9, logical block 0, async page read
[  693.906270][T11353] Buffer I/O error on dev loop9, logical block 0, async page read
[  693.915153][T11353] Buffer I/O error on dev loop9, logical block 0, async page read
[  693.923512][T11353] Dev loop9: unable to read RDB block 0
[  693.929797][T11353]  loop9: unable to read partition table
[  693.936256][T11353] loop9: partition table beyond EOD, truncated
[  693.943268][T11353] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  693.943268][T11353] 
) failed (rc=-5)
[  695.136663][T11357] FAULT_INJECTION: forcing a failure.
[  695.136663][T11357] name failslab, interval 1, probability 0, space 0, times 0
[  695.349323][T11361] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  695.361449][T11357] CPU: 1 UID: 0 PID: 11357 Comm: syz.6.1299 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  695.361477][T11357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  695.361489][T11357] Call Trace:
[  695.361500][T11357]  <TASK>
[  695.361510][T11357]  dump_stack_lvl+0x189/0x250
[  695.361536][T11357]  ? __pfx____ratelimit+0x10/0x10
[  695.361553][T11357]  ? __pfx_dump_stack_lvl+0x10/0x10
[  695.361583][T11357]  ? __pfx__printk+0x10/0x10
[  695.361618][T11357]  ? __pfx___might_resched+0x10/0x10
[  695.361643][T11357]  ? fs_reclaim_acquire+0x7d/0x100
[  695.361673][T11357]  should_fail_ex+0x414/0x560
[  695.361694][T11357]  should_failslab+0xa8/0x100
[  695.361723][T11357]  __kmalloc_noprof+0xcb/0x4f0
[  695.361739][T11357]  ? tomoyo_encode+0x28b/0x550
[  695.361762][T11357]  tomoyo_encode+0x28b/0x550
[  695.361787][T11357]  tomoyo_realpath_from_path+0x58d/0x5d0
[  695.361816][T11357]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  695.361832][T11357]  tomoyo_path_number_perm+0x1e8/0x5a0
[  695.361851][T11357]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  695.361881][T11357]  ? __lock_acquire+0xab9/0xd20
[  695.361911][T11357]  ? __fget_files+0x2a/0x420
[  695.361931][T11357]  ? __fget_files+0x2a/0x420
[  695.361953][T11357]  ? __fget_files+0x3a0/0x420
[  695.361969][T11357]  ? __fget_files+0x2a/0x420
[  695.361990][T11357]  security_file_ioctl+0xcb/0x2d0
[  695.362010][T11357]  __se_sys_ioctl+0x47/0x170
[  695.362035][T11357]  do_syscall_64+0xfa/0x3b0
[  695.362052][T11357]  ? lockdep_hardirqs_on+0x9c/0x150
[  695.362069][T11357]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  695.362084][T11357]  ? clear_bhb_loop+0x60/0xb0
[  695.362102][T11357]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  695.362118][T11357] RIP: 0033:0x7f86f2d8ebe9
[  695.362132][T11357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  695.362146][T11357] RSP: 002b:00007f86f3b8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  695.362162][T11357] RAX: ffffffffffffffda RBX: 00007f86f2fb5fa0 RCX: 00007f86f2d8ebe9
[  695.362174][T11357] RDX: 0000200000000040 RSI: 0000000000004610 RDI: 0000000000000003
[  695.362184][T11357] RBP: 00007f86f3b8e090 R08: 0000000000000000 R09: 0000000000000000
[  695.362194][T11357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  695.362203][T11357] R13: 00007f86f2fb6038 R14: 00007f86f2fb5fa0 R15: 00007ffcdac9e148
[  695.362295][T11357]  </TASK>
[  695.362397][T11357] ERROR: Out of memory at tomoyo_realpath_from_path.
[  695.631116][T11361] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  695.920936][T11365] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1302'.
[  697.446750][T11370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  704.286375][ T3418] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  705.082790][T11432] FAULT_INJECTION: forcing a failure.
[  705.082790][T11432] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  705.155181][T11432] CPU: 0 UID: 0 PID: 11432 Comm: syz.5.1316 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  705.155215][T11432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  705.155229][T11432] Call Trace:
[  705.155238][T11432]  <TASK>
[  705.155248][T11432]  dump_stack_lvl+0x189/0x250
[  705.155279][T11432]  ? __pfx____ratelimit+0x10/0x10
[  705.155302][T11432]  ? __pfx_dump_stack_lvl+0x10/0x10
[  705.155325][T11432]  ? __pfx__printk+0x10/0x10
[  705.155352][T11432]  ? __might_fault+0xb0/0x130
[  705.155396][T11432]  should_fail_ex+0x414/0x560
[  705.155425][T11432]  _copy_from_user+0x2d/0xb0
[  705.155456][T11432]  fbcon_set_con2fb_map_ioctl+0x83/0x1f0
[  705.155486][T11432]  ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10
[  705.155516][T11432]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  705.155548][T11432]  do_fb_ioctl+0x3df/0x750
[  705.155574][T11432]  ? __pfx_do_fb_ioctl+0x10/0x10
[  705.155618][T11432]  ? __asan_memset+0x22/0x50
[  705.155655][T11432]  ? __pfx_smack_file_ioctl+0x10/0x10
[  705.155691][T11432]  ? __fget_files+0x3a0/0x420
[  705.155714][T11432]  ? __fget_files+0x2a/0x420
[  705.155743][T11432]  ? bpf_lsm_file_ioctl+0x9/0x20
[  705.155769][T11432]  ? __pfx_fb_ioctl+0x10/0x10
[  705.155790][T11432]  __se_sys_ioctl+0xfc/0x170
[  705.155826][T11432]  do_syscall_64+0xfa/0x3b0
[  705.155848][T11432]  ? lockdep_hardirqs_on+0x9c/0x150
[  705.155872][T11432]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  705.155894][T11432]  ? clear_bhb_loop+0x60/0xb0
[  705.155921][T11432]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  705.155942][T11432] RIP: 0033:0x7f39dc58ebe9
[  705.155961][T11432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  705.155980][T11432] RSP: 002b:00007f39dd4e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  705.156004][T11432] RAX: ffffffffffffffda RBX: 00007f39dc7b5fa0 RCX: 00007f39dc58ebe9
[  705.156020][T11432] RDX: 0000200000000040 RSI: 0000000000004610 RDI: 0000000000000003
[  705.156035][T11432] RBP: 00007f39dd4e3090 R08: 0000000000000000 R09: 0000000000000000
[  705.156049][T11432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  705.156062][T11432] R13: 00007f39dc7b6038 R14: 00007f39dc7b5fa0 R15: 00007ffdfd385ba8
[  705.156097][T11432]  </TASK>
[  705.419027][T11437] netlink: 'syz.4.1318': attribute type 29 has an invalid length.
[  705.434420][T11437] netlink: 'syz.4.1318': attribute type 3 has an invalid length.
[  705.444686][T11437] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1318'.
[  706.255377][   T43] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  706.625377][   T43] usb 5-1: too many configurations: 142, using maximum allowed: 8
[  706.647200][   T43] usb 5-1: unable to read config index 0 descriptor/start: -61
[  706.661556][   T43] usb 5-1: can't read configurations, error -61
[  706.807747][   T43] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  706.964176][T11463] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1326'.
[  707.637640][   T43] usb 5-1: too many configurations: 142, using maximum allowed: 8
[  708.030051][   T43] usb 5-1: unable to read config index 0 descriptor/start: -61
[  708.038442][   T43] usb 5-1: can't read configurations, error -61
[  708.039789][T11473] FAULT_INJECTION: forcing a failure.
[  708.039789][T11473] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  708.105282][   T43] usb usb5-port1: attempt power cycle
[  708.135912][T11473] CPU: 1 UID: 0 PID: 11473 Comm: syz.1.1329 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  708.135945][T11473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  708.135960][T11473] Call Trace:
[  708.135968][T11473]  <TASK>
[  708.135978][T11473]  dump_stack_lvl+0x189/0x250
[  708.136009][T11473]  ? __pfx____ratelimit+0x10/0x10
[  708.136032][T11473]  ? __pfx_dump_stack_lvl+0x10/0x10
[  708.136063][T11473]  ? __pfx__printk+0x10/0x10
[  708.136091][T11473]  ? __might_fault+0xb0/0x130
[  708.136126][T11473]  should_fail_ex+0x414/0x560
[  708.136160][T11473]  _copy_from_user+0x2d/0xb0
[  708.136197][T11473]  fbcon_set_con2fb_map_ioctl+0x83/0x1f0
[  708.136226][T11473]  ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10
[  708.136256][T11473]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  708.136288][T11473]  do_fb_ioctl+0x3df/0x750
[  708.136313][T11473]  ? __pfx_do_fb_ioctl+0x10/0x10
[  708.136396][T11473]  ? __asan_memset+0x22/0x50
[  708.136434][T11473]  ? __pfx_smack_file_ioctl+0x10/0x10
[  708.136470][T11473]  ? __fget_files+0x3a0/0x420
[  708.136494][T11473]  ? __fget_files+0x2a/0x420
[  708.136523][T11473]  ? bpf_lsm_file_ioctl+0x9/0x20
[  708.136549][T11473]  ? __pfx_fb_ioctl+0x10/0x10
[  708.136570][T11473]  __se_sys_ioctl+0xfc/0x170
[  708.136606][T11473]  do_syscall_64+0xfa/0x3b0
[  708.136630][T11473]  ? lockdep_hardirqs_on+0x9c/0x150
[  708.136653][T11473]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  708.136675][T11473]  ? clear_bhb_loop+0x60/0xb0
[  708.136703][T11473]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  708.136724][T11473] RIP: 0033:0x7ff4d1d8ebe9
[  708.136744][T11473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  708.136763][T11473] RSP: 002b:00007ff4d2c79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  708.136787][T11473] RAX: ffffffffffffffda RBX: 00007ff4d1fb5fa0 RCX: 00007ff4d1d8ebe9
[  708.136804][T11473] RDX: 0000200000000040 RSI: 0000000000004610 RDI: 0000000000000003
[  708.136818][T11473] RBP: 00007ff4d2c79090 R08: 0000000000000000 R09: 0000000000000000
[  708.136832][T11473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  708.136845][T11473] R13: 00007ff4d1fb6038 R14: 00007ff4d1fb5fa0 R15: 00007ffe5dd3fc98
[  708.136880][T11473]  </TASK>
[  710.005349][   T30] audit: type=1326 audit(1755627860.642:3307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11492 comm="syz.7.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d8b8ebe9 code=0x7ffc0000
[  710.135036][   T30] audit: type=1326 audit(1755627860.642:3308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11492 comm="syz.7.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d8b8ebe9 code=0x7ffc0000
[  710.188326][   T30] audit: type=1326 audit(1755627860.682:3309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11492 comm="syz.7.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff4d8b8ebe9 code=0x7ffc0000
[  710.266588][   T30] audit: type=1326 audit(1755627860.682:3310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11492 comm="syz.7.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff4d8b8ec23 code=0x7ffc0000
[  710.299411][   T30] audit: type=1326 audit(1755627860.682:3311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11492 comm="syz.7.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff4d8b8ec23 code=0x7ffc0000
[  710.333950][   T30] audit: type=1326 audit(1755627860.682:3312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11492 comm="syz.7.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d8b8ebe9 code=0x7ffc0000
[  710.368362][    T9] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[  710.382798][   T30] audit: type=1326 audit(1755627860.682:3313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11492 comm="syz.7.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d8b8ebe9 code=0x7ffc0000
[  711.179583][   T30] audit: type=1326 audit(1755627860.722:3314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11492 comm="syz.7.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff4d8b8ebe9 code=0x7ffc0000
[  711.205035][   T30] audit: type=1326 audit(1755627860.722:3315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11492 comm="syz.7.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d8b8ebe9 code=0x7ffc0000
[  711.237140][    T9] usb 7-1: device descriptor read/64, error -71
[  711.264760][T11521] max out of range
[  711.348015][T11525] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1342'.
[  711.505505][    T9] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[  712.581582][T11533] loop2: detected capacity change from 0 to 7
[  712.590795][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  712.600305][    C0] buffer_io_error: 4 callbacks suppressed
[  712.600323][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  712.614694][    T9] usb 7-1: device descriptor read/64, error -71
[  712.614702][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  712.630431][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  712.641772][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  712.651175][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  712.663181][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  712.672700][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  712.681957][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  712.691284][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  712.700145][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  712.709428][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  712.721492][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  712.731131][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  712.751742][    T9] usb usb7-port1: attempt power cycle
[  712.775060][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  712.784433][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  712.792412][T11533] ldm_validate_partition_table(): Disk read failed.
[  712.800569][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  712.809875][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  712.824929][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  712.834289][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  712.845214][T11533] Dev loop2: unable to read RDB block 0
[  712.941895][T11533]  loop2: unable to read partition table
[  712.948176][T11533] loop2: partition table beyond EOD, truncated
[  712.954464][T11533] loop_reread_partitions: partition scan of loop2 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  713.175283][    T9] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[  713.603604][T11549] overlay: Unknown parameter '/'
[  714.055732][    T9] usb 7-1: device not accepting address 43, error -71
[  714.413273][   T30] audit: type=1800 audit(1755627864.792:3316): pid=11555 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.4.1348" name="/" dev="tmpfs" ino=1264 res=0 errno=0
[  717.350063][T11582] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1353'.
[  719.839935][T11617] ceph: No mds server is up or the cluster is laggy
[  721.529558][T11640] mac80211_hwsim hwsim19 
: renamed from wlan1
[  722.085165][ T5927] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  722.315158][ T5927] usb 5-1: Using ep0 maxpacket: 8
[  722.336970][ T5927] usb 5-1: config 126 has an invalid interface number: 10 but max is 0
[  722.368742][ T5927] usb 5-1: config 126 has no interface number 0
[  723.159182][ T5927] usb 5-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=10.22
[  723.197595][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  723.231091][ T5927] usb 5-1: Product: syz
[  723.252671][ T5927] usb 5-1: Manufacturer: syz
[  723.295387][ T5927] usb 5-1: SerialNumber: syz
[  723.329001][ T5927] usb 5-1: Expected 3 endpoints, found: 0
[  723.569631][ T5927] usb 5-1: USB disconnect, device number 40
[  724.651700][T11662] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1373'.
[  725.062866][T11669] tmpfs: Unknown parameter 'usrquota_inode_hardl�_�e�P�'
[  725.137327][T11675] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1379'.
[  725.147613][T11675] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1379'.
[  728.087383][T11699] input: syz1 as /devices/virtual/input/input26
[  729.162996][T11705] block device autoloading is deprecated and will be removed.
[  731.088377][T11735] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1396'.
[  734.014690][T11750] affs: No valid root block on device nullb0
[  739.650303][T11770] loop9: detected capacity change from 0 to 7
[  739.662361][T11770] buffer_io_error: 6 callbacks suppressed
[  739.662409][T11770] Buffer I/O error on dev loop9, logical block 0, async page read
[  739.680041][T11770] Buffer I/O error on dev loop9, logical block 0, async page read
[  739.689562][T11770] Buffer I/O error on dev loop9, logical block 0, async page read
[  739.698820][T11770] Buffer I/O error on dev loop9, logical block 0, async page read
[  739.708546][T11770] Buffer I/O error on dev loop9, logical block 0, async page read
[  739.718313][T11770] Buffer I/O error on dev loop9, logical block 0, async page read
[  739.728224][T11770] Buffer I/O error on dev loop9, logical block 0, async page read
[  739.737218][T11770] ldm_validate_partition_table(): Disk read failed.
[  739.746172][T11770] Buffer I/O error on dev loop9, logical block 0, async page read
[  739.756252][T11770] Buffer I/O error on dev loop9, logical block 0, async page read
[  739.766659][T11770] Buffer I/O error on dev loop9, logical block 0, async page read
[  739.776861][T11770] Dev loop9: unable to read RDB block 0
[  739.784950][T11770]  loop9: unable to read partition table
[  739.792793][T11770] loop9: partition table beyond EOD, truncated
[  739.799637][T11770] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  739.799637][T11770] 
) failed (rc=-5)
[  741.329006][ T9813] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  742.290491][T11785] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1410'.
[  743.123916][T11797] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1414'.
[  743.475993][T11810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1417'.
[  744.149322][T11805] netlink: 'syz.4.1416': attribute type 11 has an invalid length.
[  745.172708][T11824] No such timeout policy "syz1"
[  747.935225][T11842] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1426'.
[  749.515185][T11850] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1428'.
[  750.023949][T11860] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1432'.
[  750.264997][T11863] netlink: 'syz.7.1430': attribute type 10 has an invalid length.
[  750.274694][T11863] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1430'.
[  750.287710][T11863] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  752.267990][    T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  752.554741][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  754.508199][    T9] usb 8-1: Using ep0 maxpacket: 8
[  754.516011][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  754.534002][    T9] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=37.a3
[  754.547989][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  754.556659][    T9] usb 8-1: Product: syz
[  754.561110][    T9] usb 8-1: Manufacturer: syz
[  754.680505][    T9] usb 8-1: SerialNumber: syz
[  754.728945][    T9] usb 8-1: config 0 descriptor??
[  755.290616][T11907] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1444'.
[  755.331185][    T9] usb 8-1: USB disconnect, device number 10
[  755.770066][ T5927] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[  755.907498][T11920] [U] �
[  756.635033][ T5927] usb 7-1: device descriptor read/64, error -71
[  756.895079][ T5927] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[  756.915906][T11929] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1450'.
[  757.722615][ T5927] usb 7-1: device descriptor read/64, error -71
[  757.898518][ T5927] usb usb7-port1: attempt power cycle
[  757.931466][    T9] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  760.729960][    T9] usb 8-1: Using ep0 maxpacket: 8
[  761.607748][ T5927] usb 7-1: new high-speed USB device number 47 using dummy_hcd
[  762.898237][ T5927] usb 7-1: device descriptor read/8, error -71
[  763.007271][    T9] usb 8-1: device descriptor read/all, error -71
[  763.140589][T11947] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1457'.
[  763.162464][T11947] x_tables: ip_tables: udp match: only valid for protocol 17
[  763.307465][ T6782] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  763.696926][ T6782] usb 6-1: Using ep0 maxpacket: 16
[  763.926968][ T6782] usb 6-1: config 0 has an invalid interface number: 148 but max is 0
[  763.948169][ T6782] usb 6-1: config 0 has no interface number 0
[  763.974555][ T6782] usb 6-1: config 0 interface 148 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  764.031249][ T6782] usb 6-1: New USB device found, idVendor=0499, idProduct=8206, bcdDevice=f4.55
[  764.077097][ T6782] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  764.139917][   T24] hid (null): invalid report_size -1358781365
[  764.167587][ T6782] usb 6-1: config 0 descriptor??
[  764.301788][   T24] hid-generic 0000:0100:0100.000E: unknown main item tag 0x2
[  764.324178][   T24] hid-generic 0000:0100:0100.000E: unknown main item tag 0x6
[  764.342593][   T24] hid-generic 0000:0100:0100.000E: invalid report_size -1358781365
[  764.357633][   T24] hid-generic 0000:0100:0100.000E: item 0 4 1 7 parsing failed
[  764.376721][   T24] hid-generic 0000:0100:0100.000E: probe with driver hid-generic failed with error -22
[  764.423267][   T43] usb 6-1: USB disconnect, device number 31
[  764.510739][   T30] audit: type=1326 audit(1755627915.162:3317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11967 comm="syz.1.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d1d8ebe9 code=0x7ffc0000
[  764.543957][   T30] audit: type=1326 audit(1755627915.192:3318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11967 comm="syz.1.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d1d8ebe9 code=0x7ffc0000
[  764.692010][    T9] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  764.740926][   T30] audit: type=1326 audit(1755627915.192:3319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11967 comm="syz.1.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d1d8ebe9 code=0x7ffc0000
[  765.066783][T11973] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1465'.
[  765.777465][   T30] audit: type=1326 audit(1755627915.192:3320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11967 comm="syz.1.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d1d8ebe9 code=0x7ffc0000
[  765.803241][   T30] audit: type=1326 audit(1755627915.192:3321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11967 comm="syz.1.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4d1d8ebe9 code=0x7ffc0000
[  766.095139][    T9] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  766.185154][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  766.197241][   T30] audit: type=1326 audit(1755627915.192:3322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11967 comm="syz.1.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d1d8ebe9 code=0x7ffc0000
[  766.255117][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  766.269209][    T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  766.293299][   T30] audit: type=1326 audit(1755627915.192:3323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11967 comm="syz.1.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4d1d8ebe9 code=0x7ffc0000
[  766.325736][    T9] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  766.342139][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  766.354212][   T30] audit: type=1326 audit(1755627915.192:3324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11967 comm="syz.1.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d1d8ebe9 code=0x7ffc0000
[  766.384343][    T9] usb 8-1: config 0 descriptor??
[  766.390959][   T30] audit: type=1326 audit(1755627915.192:3325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11967 comm="syz.1.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4d1d8ebe9 code=0x7ffc0000
[  766.418555][   T30] audit: type=1326 audit(1755627915.192:3326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11967 comm="syz.1.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d1d8ebe9 code=0x7ffc0000
[  767.593761][    T9] plantronics 0003:047F:FFFF.000F: ignoring exceeding usage max
[  767.637397][    T9] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  767.640883][T11989] mkiss: ax0: crc mode is auto.
[  767.723717][T11962] program syz.7.1461 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  769.135039][    T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  769.296284][ T9813] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  770.076531][ T6782] usb 8-1: USB disconnect, device number 12
[  770.383510][T12034] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1481'.
[  771.520626][T12044] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1482'.
[  771.625812][T12025] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1478'.
[  772.263402][T12052] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1486'.
[  772.311607][T12052] x_tables: ip_tables: udp match: only valid for protocol 17
[  773.174460][T12067] [U] �
[  774.650754][ T9813] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  777.051359][T12087] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1496'.
[  778.045858][T12092] FAULT_INJECTION: forcing a failure.
[  778.045858][T12092] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  778.095156][T12092] CPU: 1 UID: 0 PID: 12092 Comm: syz.6.1498 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  778.095194][T12092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  778.095210][T12092] Call Trace:
[  778.095222][T12092]  <TASK>
[  778.095233][T12092]  dump_stack_lvl+0x189/0x250
[  778.095271][T12092]  ? __pfx____ratelimit+0x10/0x10
[  778.095301][T12092]  ? __pfx_dump_stack_lvl+0x10/0x10
[  778.095330][T12092]  ? __pfx__printk+0x10/0x10
[  778.095364][T12092]  ? __might_fault+0xb0/0x130
[  778.095406][T12092]  should_fail_ex+0x414/0x560
[  778.095441][T12092]  _copy_from_user+0x2d/0xb0
[  778.095479][T12092]  kstrtouint_from_user+0xc4/0x170
[  778.095514][T12092]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  778.095568][T12092]  proc_fail_nth_write+0x88/0x240
[  778.095601][T12092]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  778.095637][T12092]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  778.095665][T12092]  vfs_write+0x27e/0xa90
[  778.095693][T12092]  ? __pfx_vfs_write+0x10/0x10
[  778.095714][T12092]  ? __fget_files+0x2a/0x420
[  778.095746][T12092]  ? __fget_files+0x3a0/0x420
[  778.095772][T12092]  ? __fget_files+0x2a/0x420
[  778.095809][T12092]  ksys_write+0x145/0x250
[  778.095835][T12092]  ? __pfx_ksys_write+0x10/0x10
[  778.095855][T12092]  ? rcu_is_watching+0x15/0xb0
[  778.095909][T12092]  ? do_syscall_64+0xbe/0x3b0
[  778.095944][T12092]  do_syscall_64+0xfa/0x3b0
[  778.095971][T12092]  ? lockdep_hardirqs_on+0x9c/0x150
[  778.095997][T12092]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  778.096024][T12092]  ? clear_bhb_loop+0x60/0xb0
[  778.096056][T12092]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  778.096082][T12092] RIP: 0033:0x7f86f2d8d69f
[  778.096103][T12092] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  778.096125][T12092] RSP: 002b:00007f86f3b8e030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  778.096150][T12092] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f86f2d8d69f
[  778.096167][T12092] RDX: 0000000000000001 RSI: 00007f86f3b8e0a0 RDI: 0000000000000006
[  778.096182][T12092] RBP: 00007f86f3b8e090 R08: 0000000000000000 R09: 0000000011000a00
[  778.096196][T12092] R10: 0000000004004084 R11: 0000000000000293 R12: 0000000000000001
[  778.096211][T12092] R13: 00007f86f2fb6038 R14: 00007f86f2fb5fa0 R15: 00007ffcdac9e148
[  778.096252][T12092]  </TASK>
[  779.168190][T12110] trusted_key: syz.5.1499 sent an empty control message without MSG_MORE.
[  779.959515][T12118] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1503'.
[  780.065415][T12118] x_tables: ip_tables: udp match: only valid for protocol 17
[  780.365214][ T9813] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  780.998461][T12124] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1506'.
[  782.323308][T12143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1510'.
[  782.951891][T12138] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1511'.
[  784.108470][T12155] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1514'.
[  784.717579][T12167] genirq: Flags mismatch irq 5. 00200000 (pcl812) vs. 00200000 (pcl812)
[  785.658287][ T9813] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  787.084780][T12182] ucma_write: process 1033 (syz.6.1522) changed security contexts after opening file descriptor, this is not allowed.
[  787.437035][    T9] usb 7-1: new high-speed USB device number 49 using dummy_hcd
[  787.855164][    T9] usb 7-1: Using ep0 maxpacket: 8
[  787.883361][    T9] usb 7-1: config index 0 descriptor too short (expected 13083, got 27)
[  787.912767][    T9] usb 7-1: config 42 has too many interfaces: 207, using maximum allowed: 32
[  787.955167][    T9] usb 7-1: config 42 has an invalid descriptor of length 157, skipping remainder of the config
[  787.976001][    T9] usb 7-1: config 42 has 0 interfaces, different from the descriptor's value: 207
[  788.021057][    T9] usb 7-1: New USB device found, idVendor=8087, idProduct=0a5a, bcdDevice=5f.2c
[  788.035125][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  788.056870][    T9] usb 7-1: Product: syz
[  788.061218][    T9] usb 7-1: Manufacturer: syz
[  788.078254][    T9] usb 7-1: SerialNumber: syz
[  788.235052][  T977] usb 8-1: new full-speed USB device number 13 using dummy_hcd
[  788.807087][  T977] usb 8-1: config 0 has an invalid interface number: 8 but max is 0
[  788.863754][T12182] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1522'.
[  788.875126][  T977] usb 8-1: config 0 has no interface number 0
[  788.896403][  T977] usb 8-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  788.925595][  T977] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  788.942382][    T9] usb 7-1: USB disconnect, device number 49
[  788.957884][  T977] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  788.984058][  T977] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04
[  788.997595][  T977] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  789.017117][  T977] usb 8-1: Product: syz
[  789.024926][  T977] usb 8-1: SerialNumber: syz
[  789.039797][  T977] usb 8-1: config 0 descriptor??
[  789.060039][  T977] cm109 8-1:0.8: invalid payload size 0, expected 4
[  789.087448][  T977] input: CM109 USB driver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.8/input/input27
[  789.259251][    C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71
[  789.260350][ T6782] usb 8-1: USB disconnect, device number 13
[  789.266779][    C0] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  790.248138][ T6782] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  790.625787][ T9813] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  792.222070][T12227] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1535'.
[  793.144094][T12228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1537'.
[  794.623637][T12244] vxfs: WRONG superblock magic 00000000 at 1
[  794.654617][T12244] vxfs: WRONG superblock magic 00000000 at 8
[  795.340242][T12244] vxfs: can't find superblock.
[  796.410208][ T9813] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  797.171259][    T9] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  797.245618][T12262] lo speed is unknown, defaulting to 1000
[  797.376845][    T9] usb 8-1: config 0 has an invalid interface number: 50 but max is 0
[  797.386838][    T9] usb 8-1: config 0 has no interface number 0
[  797.405343][    T9] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  797.430151][    T9] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  797.440499][   T43] usb 2-1: new full-speed USB device number 38 using dummy_hcd
[  797.444985][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  797.467164][    T9] usb 8-1: Product: syz
[  797.477485][    T9] usb 8-1: Manufacturer: syz
[  797.487439][    T9] usb 8-1: SerialNumber: syz
[  797.506466][    T9] usb 8-1: config 0 descriptor??
[  797.528420][    T9] yurex 8-1:0.50: USB YUREX device now attached to Yurex #0
[  797.605642][ T5889] usb 5-1: new full-speed USB device number 41 using dummy_hcd
[  797.757042][T12261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  797.778866][T12261] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  797.781204][ T5889] usb 5-1: config 0 has an invalid interface number: 128 but max is 0
[  797.815579][ T3418] usb 8-1: USB disconnect, device number 14
[  797.834611][ T5889] usb 5-1: config 0 has no interface number 0
[  797.843876][ T3418] yurex 8-1:0.50: USB YUREX #0 now disconnected
[  797.865184][ T5889] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  797.885099][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  797.913222][ T5889] usb 5-1: Product: syz
[  797.926963][ T5889] usb 5-1: Manufacturer: syz
[  797.940761][ T5889] usb 5-1: SerialNumber: syz
[  797.977757][ T5889] usb 5-1: config 0 descriptor??
[  798.462781][ T3418] usb 7-1: new high-speed USB device number 50 using dummy_hcd
[  798.920547][ T3418] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  798.982259][ T3418] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  799.041219][ T3418] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  799.134642][ T3418] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  799.178102][ T3418] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  799.695320][ T5889] usb 5-1: Firmware version (0.0) predates our first public release.
[  799.841779][ T3418] usb 7-1: config 0 descriptor??
[  799.850808][ T5889] usb 5-1: Please update to version 0.2 or newer
[  800.068422][ T5889] usb 5-1: USB disconnect, device number 41
[  801.060243][ T3418] plantronics 0003:047F:FFFF.0010: invalid report_size 633761781
[  801.247367][ T3418] plantronics 0003:047F:FFFF.0010: item 0 4 1 7 parsing failed
[  801.293965][ T3418] plantronics 0003:047F:FFFF.0010: parse failed
[  801.695191][ T3418] plantronics 0003:047F:FFFF.0010: probe with driver plantronics failed with error -22
[  803.395264][T12300] netlink: 'syz.7.1553': attribute type 32 has an invalid length.
[  804.861724][ T9813] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  804.880127][ T9818] usb 7-1: USB disconnect, device number 50
[  806.429823][T12333] loop9: detected capacity change from 0 to 7
[  806.437692][T12333] buffer_io_error: 4 callbacks suppressed
[  806.437711][T12333] Buffer I/O error on dev loop9, logical block 0, async page read
[  806.452369][T12333] Buffer I/O error on dev loop9, logical block 0, async page read
[  806.461366][T12333] Buffer I/O error on dev loop9, logical block 0, async page read
[  806.470094][T12333] Buffer I/O error on dev loop9, logical block 0, async page read
[  806.478456][T12333] Buffer I/O error on dev loop9, logical block 0, async page read
[  806.487081][T12333] Buffer I/O error on dev loop9, logical block 0, async page read
[  806.495953][T12333] Buffer I/O error on dev loop9, logical block 0, async page read
[  806.504390][T12333] ldm_validate_partition_table(): Disk read failed.
[  806.511794][T12333] Buffer I/O error on dev loop9, logical block 0, async page read
[  806.520590][T12333] Buffer I/O error on dev loop9, logical block 0, async page read
[  806.529604][T12333] Buffer I/O error on dev loop9, logical block 0, async page read
[  806.538794][T12333] Dev loop9: unable to read RDB block 0
[  806.545187][T12333]  loop9: unable to read partition table
[  806.551605][T12333] loop9: partition table beyond EOD, truncated
[  806.558914][T12333] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  806.558914][T12333] 
) failed (rc=-5)
[  807.630875][T12340] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1563'.
[  807.681300][T12343] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1564'.
[  809.186076][ T5889] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  809.475004][ T5889] usb 6-1: Using ep0 maxpacket: 16
[  809.482125][ T5889] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  809.505015][ T5889] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  809.522778][ T5889] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  809.811842][ T5889] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  809.835085][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  809.844489][ T5889] usb 6-1: Product: syz
[  810.132111][ T5889] usb 6-1: Manufacturer: syz
[  810.140275][ T5889] usb 6-1: SerialNumber: syz
[  811.558122][ T5889] usb 6-1: 0:2 : does not exist
[  811.604522][ T5889] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1)
[  812.320034][ T5889] usb 6-1: USB disconnect, device number 32
[  812.338178][T12375] netlink: 'syz.4.1573': attribute type 3 has an invalid length.
[  813.040030][T12375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1573'.
[  813.215105][T12379] loop9: detected capacity change from 0 to 7
[  813.221742][T12379] buffer_io_error: 4 callbacks suppressed
[  813.221756][T12379] Buffer I/O error on dev loop9, logical block 0, async page read
[  813.236048][T12379] Buffer I/O error on dev loop9, logical block 0, async page read
[  813.244218][T12379] Buffer I/O error on dev loop9, logical block 0, async page read
[  813.252459][T12379] Buffer I/O error on dev loop9, logical block 0, async page read
[  813.261129][T12379] Buffer I/O error on dev loop9, logical block 0, async page read
[  813.269347][T12379] Buffer I/O error on dev loop9, logical block 0, async page read
[  813.277367][T12379] Buffer I/O error on dev loop9, logical block 0, async page read
[  813.285498][T12379] ldm_validate_partition_table(): Disk read failed.
[  813.292187][T12379] Buffer I/O error on dev loop9, logical block 0, async page read
[  813.313205][T12379] Buffer I/O error on dev loop9, logical block 0, async page read
[  813.334576][T12379] Buffer I/O error on dev loop9, logical block 0, async page read
[  813.343027][T12379] Dev loop9: unable to read RDB block 0
[  813.349117][T12379]  loop9: unable to read partition table
[  813.355393][T12379] loop9: partition table beyond EOD, truncated
[  813.361707][T12379] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  813.361707][T12379] 
) failed (rc=-5)
[  813.920581][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  814.452353][T12394] ip6t_srh: unknown srh invflags 7863
[  815.293878][T12406] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1582'.
[  817.368308][T12424] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1587'.
[  817.839570][T12429] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1588'.
[  817.854099][T12430] loop9: detected capacity change from 0 to 7
[  817.863569][T12430] ldm_validate_partition_table(): Disk read failed.
[  817.871617][T12430] Dev loop9: unable to read RDB block 0
[  817.878110][T12430]  loop9: unable to read partition table
[  817.884433][T12430] loop9: partition table beyond EOD, truncated
[  817.891151][T12430] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  817.891151][T12430] 
) failed (rc=-5)
[  818.825601][T12435] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  820.335827][ T9813] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  822.391560][T12476] [U] �
[  823.525037][T12477] openvswitch: netlink: Missing key (keys=1040, expected=2000)
[  824.324101][T12489] loop9: detected capacity change from 0 to 7
[  824.333668][T12489] buffer_io_error: 18 callbacks suppressed
[  824.333709][T12489] Buffer I/O error on dev loop9, logical block 0, async page read
[  824.348420][T12489] Buffer I/O error on dev loop9, logical block 0, async page read
[  824.357367][T12489] Buffer I/O error on dev loop9, logical block 0, async page read
[  824.366354][T12489] Buffer I/O error on dev loop9, logical block 0, async page read
[  824.375281][T12489] Buffer I/O error on dev loop9, logical block 0, async page read
[  824.384021][T12489] Buffer I/O error on dev loop9, logical block 0, async page read
[  824.392909][T12489] Buffer I/O error on dev loop9, logical block 0, async page read
[  824.401659][T12489] ldm_validate_partition_table(): Disk read failed.
[  824.408970][T12489] Buffer I/O error on dev loop9, logical block 0, async page read
[  824.417899][T12489] Buffer I/O error on dev loop9, logical block 0, async page read
[  824.426599][T12489] Buffer I/O error on dev loop9, logical block 0, async page read
[  824.435684][T12489] Dev loop9: unable to read RDB block 0
[  824.443445][T12489]  loop9: unable to read partition table
[  824.450568][T12489] loop9: partition table beyond EOD, truncated
[  824.456986][T12489] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  824.456986][T12489] 
) failed (rc=-5)
[  825.276588][T12496] bridge0: port 4(gretap0) entered blocking state
[  825.284514][T12496] bridge0: port 4(gretap0) entered disabled state
[  825.292581][T12496] gretap0: entered allmulticast mode
[  825.311734][T12496] gretap0: entered promiscuous mode
[  825.319170][T12496] bridge0: port 4(gretap0) entered blocking state
[  825.327293][T12496] bridge0: port 4(gretap0) entered listening state
[  825.879705][T12499] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1609'.
[  827.551749][T12508] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1612'.
[  828.085789][    T9] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  828.295049][    T9] usb 6-1: Using ep0 maxpacket: 32
[  828.311847][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  828.826110][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  828.838576][    T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  828.848428][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  828.860275][    T9] usb 6-1: config 0 descriptor??
[  828.869279][    T9] hub 6-1:0.0: USB hub found
[  828.949612][ T9818] usb 7-1: new full-speed USB device number 51 using dummy_hcd
[  829.043081][T12523] [U] �
[  829.522337][    T9] hub 6-1:0.0: config failed, can't read hub descriptor (err -22)
[  829.560173][ T9818] usb 7-1: not running at top speed; connect to a high speed hub
[  829.587993][    T9] usbhid 6-1:0.0: can't add hid device: -71
[  829.618787][ T9818] usb 7-1: config 0 has no interfaces?
[  829.637372][    T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  829.661836][ T9818] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  829.869248][ T9818] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  830.016768][ T9818] usb 7-1: Product: syz
[  830.021616][ T9818] usb 7-1: Manufacturer: syz
[  830.030297][ T9818] usb 7-1: SerialNumber: syz
[  830.066416][    T9] usb 6-1: USB disconnect, device number 33
[  830.322467][ T9818] usb 7-1: config 0 descriptor??
[  831.373699][T12540] netlink: 'syz.7.1621': attribute type 32 has an invalid length.
[  832.321783][T12538] loop9: detected capacity change from 0 to 7
[  832.328620][T12538] buffer_io_error: 4 callbacks suppressed
[  832.328639][T12538] Buffer I/O error on dev loop9, logical block 0, async page read
[  832.342659][T12538] Buffer I/O error on dev loop9, logical block 0, async page read
[  832.350695][T12538] Buffer I/O error on dev loop9, logical block 0, async page read
[  832.358691][T12538] Buffer I/O error on dev loop9, logical block 0, async page read
[  832.366819][T12538] Buffer I/O error on dev loop9, logical block 0, async page read
[  832.374913][T12538] Buffer I/O error on dev loop9, logical block 0, async page read
[  832.382900][T12538] Buffer I/O error on dev loop9, logical block 0, async page read
[  832.391033][T12538] ldm_validate_partition_table(): Disk read failed.
[  832.397767][T12538] Buffer I/O error on dev loop9, logical block 0, async page read
[  832.405841][T12538] Buffer I/O error on dev loop9, logical block 0, async page read
[  832.413781][T12538] Buffer I/O error on dev loop9, logical block 0, async page read
[  832.421964][T12538] Dev loop9: unable to read RDB block 0
[  832.427942][T12538]  loop9: unable to read partition table
[  832.433864][T12538] loop9: partition table beyond EOD, truncated
[  832.440131][T12538] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  832.440131][T12538] 
) failed (rc=-5)
[  832.755366][T12547] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1623'.
[  832.869973][T12547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1623'.
[  832.948115][T12552] ipt_REJECT: TCP_RESET invalid for non-tcp
[  832.976583][T12549] Bluetooth: MGMT ver 1.23
[  832.981217][T12549] Bluetooth: hci0: unsupported parameter 128
[  832.987449][T12549] Bluetooth: hci0: unsupported parameter 128
[  833.014700][T12555] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1625'.
[  833.340654][ T6782] usb 7-1: USB disconnect, device number 51
[  834.291789][T12566] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1626'.
[  835.018506][T12564] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  835.095609][T12564] overlayfs: missing 'lowerdir'
[  836.952322][T12584] kvm: user requested TSC rate below hardware speed
[  836.966013][T12584] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3304665512 (6609331024 ns) > initial count (5832947598 ns). Using initial count to start timer.
[  838.045332][ T9818] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  838.108405][T12610] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1637'.
[  838.256821][ T9818] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  838.309298][ T9818] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 79
[  838.339094][ T9818] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  838.353863][ T9818] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de
[  838.366342][ T9818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  838.380678][ T9818] usb 2-1: config 0 descriptor??
[  838.400899][T12584] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  838.631175][ T9818] ath6kl: Failed to submit usb control message: -71
[  838.653482][ T9818] ath6kl: unable to send the bmi data to the device: -71
[  838.679264][ T9818] ath6kl: Unable to send get target info: -71
[  838.707716][ T9818] ath6kl: Failed to init ath6kl core: -71
[  838.739947][ T9818] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71
[  838.803897][ T9818] usb 2-1: USB disconnect, device number 39
[  839.197412][T12606] loop9: detected capacity change from 0 to 7
[  839.233833][T12606] buffer_io_error: 4 callbacks suppressed
[  839.233849][T12606] Buffer I/O error on dev loop9, logical block 0, async page read
[  839.252097][T12606] Buffer I/O error on dev loop9, logical block 0, async page read
[  839.269991][T12606] Buffer I/O error on dev loop9, logical block 0, async page read
[  839.296826][T12606] Buffer I/O error on dev loop9, logical block 0, async page read
[  839.307431][T12606] Buffer I/O error on dev loop9, logical block 0, async page read
[  839.323326][T12606] Buffer I/O error on dev loop9, logical block 0, async page read
[  839.333113][T12606] Buffer I/O error on dev loop9, logical block 0, async page read
[  839.344480][T12606] ldm_validate_partition_table(): Disk read failed.
[  839.353237][T12606] Buffer I/O error on dev loop9, logical block 0, async page read
[  839.362587][T12606] Buffer I/O error on dev loop9, logical block 0, async page read
[  839.371471][T12606] Buffer I/O error on dev loop9, logical block 0, async page read
[  839.380823][T12606] Dev loop9: unable to read RDB block 0
[  839.387382][T12606]  loop9: unable to read partition table
[  839.413159][T12606] loop9: partition table beyond EOD, truncated
[  839.434157][T12606] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  839.434157][T12606] 
) failed (rc=-5)
[  839.579032][T12625] erspan0: entered promiscuous mode
[  839.610151][T12627] binder: Bad value for 'max'
[  839.626803][T12625] erspan0: left promiscuous mode
[  840.795893][    C0] bridge0: port 4(gretap0) entered learning state
[  842.055002][T12639] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  845.392937][T12685] loop9: detected capacity change from 0 to 7
[  845.408761][T12685] buffer_io_error: 4 callbacks suppressed
[  845.408774][T12685] Buffer I/O error on dev loop9, logical block 0, async page read
[  845.445829][T12685] Buffer I/O error on dev loop9, logical block 0, async page read
[  845.453796][T12685] Buffer I/O error on dev loop9, logical block 0, async page read
[  845.461759][T12685] Buffer I/O error on dev loop9, logical block 0, async page read
[  845.469795][T12685] Buffer I/O error on dev loop9, logical block 0, async page read
[  845.477760][T12685] Buffer I/O error on dev loop9, logical block 0, async page read
[  845.485719][T12685] Buffer I/O error on dev loop9, logical block 0, async page read
[  845.493605][T12685] ldm_validate_partition_table(): Disk read failed.
[  845.500554][T12685] Buffer I/O error on dev loop9, logical block 0, async page read
[  845.508535][T12685] Buffer I/O error on dev loop9, logical block 0, async page read
[  845.517015][T12685] Buffer I/O error on dev loop9, logical block 0, async page read
[  845.525189][T12685] Dev loop9: unable to read RDB block 0
[  845.531108][T12685]  loop9: unable to read partition table
[  845.538357][T12685] loop9: partition table beyond EOD, truncated
[  845.549217][T12685] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  845.549217][T12685] 
) failed (rc=-5)
[  847.251707][T12708] [U] �
[  847.952326][T12712] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1659'.
[  847.997776][T12710] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1660'.
[  848.220825][T12710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1660'.
[  849.938530][T12735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1663'.
[  849.951646][T12736] loop9: detected capacity change from 0 to 7
[  849.960896][T12736] ldm_validate_partition_table(): Disk read failed.
[  849.968768][T12736] Dev loop9: unable to read RDB block 0
[  849.975363][T12736]  loop9: unable to read partition table
[  849.981620][T12736] loop9: partition table beyond EOD, truncated
[  849.988053][T12736] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  849.988053][T12736] 
) failed (rc=-5)
[  850.856333][T12742] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1667'.
[  850.902112][T12741] ubi: mtd0 is already attached to ubi31
[  851.331240][T12754] openvswitch: netlink: Missing key (keys=1040, expected=2000)
[  851.934480][T12767] [U] �
[  852.744655][T12769] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1672'.
[  853.705061][T12776] vivid-000: disconnect
[  853.904229][T12781] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1675'.
[  854.140069][T12776] tipc: Enabling of bearer <eth:vlan1> rejected, failed to enable media
[  854.378198][T12776] overlayfs: workdir and upperdir must reside under the same mount
[  854.491772][T12773] vivid-000: reconnect
[  854.648207][T12788] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  856.156351][    C0] bridge0: port 4(gretap0) entered forwarding state
[  856.163035][    C0] bridge0: topology change detected, propagating
[  856.323776][T12800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1679'.
[  857.960570][T12814] program syz.6.1684 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  858.207725][T12806] syz.1.1681 (12806) used greatest stack depth: 17992 bytes left
[  860.247940][T12851] gfs2: gfs2 mount does not exist
[  861.435001][   T24] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  861.715032][   T24] usb 5-1: Using ep0 maxpacket: 16
[  862.866724][   T24] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  862.891236][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  862.916772][   T24] usb 5-1: config 0 descriptor??
[  862.932595][   T24] gspca_main: sonixj-2.14.0 probing 0471:0327
[  863.048584][T12871] Cannot find set identified by id 65535 to match
[  864.789826][    T9] usb 5-1: USB disconnect, device number 42
[  864.890360][T12884] comedi comedi2: pcmmio: I/O port conflict (0x4f27,32)
[  865.185200][   T24] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  865.538779][   T24] usb 6-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28
[  865.551627][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  865.564686][ T6782] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  865.572698][   T24] usb 6-1: Product: syz
[  865.579187][   T30] kauditd_printk_skb: 21 callbacks suppressed
[  865.579206][   T30] audit: type=1326 audit(1755628016.232:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12874 comm="syz.6.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86f2d8ebe9 code=0x7ffc0000
[  865.589339][   T24] usb 6-1: Manufacturer: syz
[  865.642677][   T24] usb 6-1: SerialNumber: syz
[  865.650512][   T24] usb 6-1: config 0 descriptor??
[  865.658827][   T24] option 6-1:0.0: GSM modem (1-port) converter detected
[  865.673380][   T30] audit: type=1326 audit(1755628016.232:3349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12874 comm="syz.6.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86f2d8ebe9 code=0x7ffc0000
[  865.715107][   T30] audit: type=1326 audit(1755628016.232:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12874 comm="syz.6.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86f2d8ebe9 code=0x7ffc0000
[  865.775207][   T30] audit: type=1326 audit(1755628016.232:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12874 comm="syz.6.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f86f2d8ebe9 code=0x7ffc0000
[  865.791862][ T6782] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  865.797491][   T30] audit: type=1326 audit(1755628016.232:3352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12874 comm="syz.6.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86f2d8ebe9 code=0x7ffc0000
[  865.827277][   T30] audit: type=1326 audit(1755628016.262:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12874 comm="syz.6.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86f2d8ebe9 code=0x7ffc0000
[  865.849811][   T30] audit: type=1326 audit(1755628016.262:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12874 comm="syz.6.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86f2d8ebe9 code=0x7ffc0000
[  865.865069][ T6782] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  865.900604][   T30] audit: type=1326 audit(1755628016.282:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12874 comm="syz.6.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86f2d8ebe9 code=0x7ffc0000
[  865.937476][ T6782] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  865.939458][T12898] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1706'.
[  865.970060][ T5889] usb 6-1: USB disconnect, device number 34
[  865.974974][ T6782] usb 5-1: config 220 has no interface number 2
[  865.978122][ T5889] option 6-1:0.0: device disconnected
[  865.992615][ T6782] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  865.994007][   T30] audit: type=1326 audit(1755628016.292:3356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12874 comm="syz.6.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86f2d8ebe9 code=0x7ffc0000
[  866.040906][ T6782] usb 5-1: config 220 interface 0 has no altsetting 0
[  866.059830][T12898] x_tables: ip_tables: udp match: only valid for protocol 17
[  866.065218][ T6782] usb 5-1: config 220 interface 76 has no altsetting 0
[  866.078620][   T30] audit: type=1326 audit(1755628016.292:3357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12874 comm="syz.6.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f86f2d8ebe9 code=0x7ffc0000
[  866.088710][ T6782] usb 5-1: config 220 interface 1 has no altsetting 0
[  866.141587][ T6782] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  866.161053][ T6782] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  866.175237][ T6782] usb 5-1: Product: syz
[  866.179486][ T6782] usb 5-1: Manufacturer: syz
[  866.194410][ T6782] usb 5-1: SerialNumber: syz
[  866.762463][T12904] [U] Ϧ�:�K�ț.��G����8X�4Q���TZ�.��||
[  866.796564][T12904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  866.808960][T12904] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  869.073232][ T6782] usb 5-1: selecting invalid altsetting 0
[  869.087498][ T6782] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[  869.099230][ T6782] usb 5-1: No valid video chain found.
[  870.977834][ T6782] usb 5-1: selecting invalid altsetting 0
[  870.983814][ T6782] usbtest 5-1:220.1: probe with driver usbtest failed with error -22
[  871.002203][ T6782] usb 5-1: USB disconnect, device number 43
[  871.346470][T12941] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1715'.
[  872.508423][T12952] ALSA: mixer_oss: invalid OSS volume ''
[  874.075170][    T9] usb 6-1: new full-speed USB device number 35 using dummy_hcd
[  874.242865][    T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  874.458438][    T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  874.491387][    T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  874.505883][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  874.520891][    T9] usb 6-1: Product: syz
[  874.530318][    T9] usb 6-1: Manufacturer: syz
[  874.538240][    T9] usb 6-1: SerialNumber: syz
[  875.360530][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  876.138241][T12966] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1722'.
[  876.149502][T12966] x_tables: ip_tables: udp match: only valid for protocol 17
[  876.383314][T12987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1726'.
[  876.775760][    T9] usb 6-1: 0:2 : does not exist
[  876.988464][    T9] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  877.088383][T12990] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1727'.
[  877.103927][   T30] kauditd_printk_skb: 23 callbacks suppressed
[  877.103946][   T30] audit: type=1400 audit(1755628027.752:3381): lsm=SMACK fn=smack_ipc_permission action=denied subject="w" object="_" requested=w pid=12981 comm="syz.6.1727" ipc_key=1 
[  877.127696][    T9] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  877.734959][    T9] usb 6-1: USB disconnect, device number 35
[  879.204965][    T9] usb 6-1: new full-speed USB device number 36 using dummy_hcd
[  879.493556][    T9] usb 6-1: config 0 has an invalid interface number: 11 but max is 0
[  879.520931][T13020] loop9: detected capacity change from 0 to 7
[  879.530498][T13020] buffer_io_error: 18 callbacks suppressed
[  879.530549][T13020] Buffer I/O error on dev loop9, logical block 0, async page read
[  879.544943][T13020] Buffer I/O error on dev loop9, logical block 0, async page read
[  879.553579][T13020] Buffer I/O error on dev loop9, logical block 0, async page read
[  879.562272][T13020] Buffer I/O error on dev loop9, logical block 0, async page read
[  879.571037][T13020] Buffer I/O error on dev loop9, logical block 0, async page read
[  879.579835][T13020] Buffer I/O error on dev loop9, logical block 0, async page read
[  879.588490][T13020] Buffer I/O error on dev loop9, logical block 0, async page read
[  879.596974][T13020] ldm_validate_partition_table(): Disk read failed.
[  879.604043][T13020] Buffer I/O error on dev loop9, logical block 0, async page read
[  879.612729][T13020] Buffer I/O error on dev loop9, logical block 0, async page read
[  879.621660][T13020] Buffer I/O error on dev loop9, logical block 0, async page read
[  879.630629][T13020] Dev loop9: unable to read RDB block 0
[  879.638090][T13020]  loop9: unable to read partition table
[  879.645202][T13020] loop9: partition table beyond EOD, truncated
[  879.651518][T13020] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  879.651518][T13020] 
) failed (rc=-5)
[  880.203276][    T9] usb 6-1: config 0 has no interface number 0
[  880.229106][    T9] usb 6-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[  880.860536][    T9] usb 6-1: config 0 interface 11 altsetting 253 has an endpoint descriptor with address 0xA6, changing to 0x86
[  880.873057][    T9] usb 6-1: config 0 interface 11 altsetting 253 endpoint 0x86 has an invalid bInterval 0, changing to 10
[  880.901145][    T9] usb 6-1: config 0 interface 11 altsetting 253 endpoint 0x86 has invalid wMaxPacketSize 0
[  881.090713][    T9] usb 6-1: config 0 interface 11 has no altsetting 0
[  881.097545][    T9] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  881.106989][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  881.118230][    T9] usb 6-1: config 0 descriptor??
[  882.165832][    T9] usb 6-1: can't set config #0, error -71
[  882.478902][    T9] usb 6-1: USB disconnect, device number 36
[  889.321988][T13069] comedi comedi2: pcmmio: I/O port conflict (0x4f27,32)
[  889.625940][T13077] [U] �
[  890.775461][T13090] netlink: 'syz.7.1748': attribute type 32 has an invalid length.
[  895.495397][T12914] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  895.595291][ T6782] usb 7-1: new high-speed USB device number 52 using dummy_hcd
[  895.685139][T13127] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1760'.
[  895.795006][T12914] usb 6-1: Using ep0 maxpacket: 32
[  896.318413][T12914] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  896.367225][ T6782] usb 7-1: device descriptor read/64, error -71
[  896.420407][T12914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  896.520308][T12914] usb 6-1: Product: syz
[  897.235551][T12914] usb 6-1: Manufacturer: syz
[  897.255038][T12914] usb 6-1: SerialNumber: syz
[  897.480469][ T6782] usb 7-1: new high-speed USB device number 53 using dummy_hcd
[  897.497271][T12914] usb 6-1: config 0 descriptor??
[  897.655584][ T6782] usb 7-1: device descriptor read/64, error -71
[  897.835334][ T6782] usb usb7-port1: attempt power cycle
[  897.860381][T12914] peak_usb 6-1:0.0 can0: unable to request usb[type=0 value=1] err=-71
[  897.867965][T13135] comedi comedi2: pcmmio: I/O port conflict (0x4f27,32)
[  897.887531][T12914] peak_usb 6-1:0.0: unable to read PCAN-USB Pro firmware info (err -71)
[  898.205882][T12914] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -71
[  898.552364][T13145] netlink: 'syz.4.1764': attribute type 32 has an invalid length.
[  899.453800][T12914] usb 6-1: USB disconnect, device number 38
[  900.466274][T13160] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  900.526601][T13159] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  904.414644][   T30] audit: type=1800 audit(1755628055.062:3382): pid=13180 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.1772" name="bus" dev="overlay" ino=969 res=0 errno=0
[  904.709792][T13186] comedi comedi2: pcmmio: I/O port conflict (0x4f27,32)
[  904.971310][T13191] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1773'.
[  905.936398][T12914] usb 7-1: new high-speed USB device number 55 using dummy_hcd
[  906.139359][T12914] usb 7-1: Using ep0 maxpacket: 32
[  906.168274][T12914] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 16
[  906.192291][T12914] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  906.218178][T12914] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  906.233015][T12914] usb 7-1: Product: syz
[  906.285522][T12914] usb 7-1: Manufacturer: syz
[  906.305904][T12914] usb 7-1: SerialNumber: syz
[  906.327259][T12914] usb 7-1: config 0 descriptor??
[  906.335566][ T5842] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  906.485352][ T5842] usb 6-1: device descriptor read/64, error -71
[  906.842715][T13219] loop9: detected capacity change from 0 to 7
[  906.851630][T13219] buffer_io_error: 4 callbacks suppressed
[  906.851672][T13219] Buffer I/O error on dev loop9, logical block 0, async page read
[  906.866018][T13219] Buffer I/O error on dev loop9, logical block 0, async page read
[  906.874502][T13219] Buffer I/O error on dev loop9, logical block 0, async page read
[  906.883948][T13219] Buffer I/O error on dev loop9, logical block 0, async page read
[  906.892636][T13219] Buffer I/O error on dev loop9, logical block 0, async page read
[  906.901180][T13219] Buffer I/O error on dev loop9, logical block 0, async page read
[  906.909580][T13219] Buffer I/O error on dev loop9, logical block 0, async page read
[  906.917772][T13219] ldm_validate_partition_table(): Disk read failed.
[  906.924741][T13219] Buffer I/O error on dev loop9, logical block 0, async page read
[  906.933190][T13219] Buffer I/O error on dev loop9, logical block 0, async page read
[  906.942248][T13219] Buffer I/O error on dev loop9, logical block 0, async page read
[  906.950919][T13219] Dev loop9: unable to read RDB block 0
[  906.957999][T13219]  loop9: unable to read partition table
[  906.964765][T13219] loop9: partition table beyond EOD, truncated
[  906.971137][T13219] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  906.971137][T13219] 
) failed (rc=-5)
[  907.065150][ T5842] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  909.378944][T13233] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1785'.
[  910.309919][   T43] usb 7-1: USB disconnect, device number 55
[  911.474518][T13253] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1790'.
[  911.785411][   T43] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  913.206330][ T9813] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  913.449076][   T43] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  913.458370][   T43] usb 8-1: New USB device found, idVendor=0c45, idProduct=628f, bcdDevice=1f.44
[  913.469917][   T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  913.505387][   T43] usb 8-1: config 0 descriptor??
[  914.240358][ T6782] usb 8-1: USB disconnect, device number 15
[  914.871745][T13283] openvswitch: netlink: Missing key (keys=1040, expected=2000)
[  916.006968][T13297] [U] �
[  917.871337][T13305] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1806'.
[  919.673851][T13318] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1810'.
[  919.684581][T13318] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1810'.
[  922.536448][T13335] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1816'.
[  922.557566][T13336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1815'.
[  924.638522][T13362] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1823'.
[  924.940669][T13367] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1823'.
[  925.843220][T13373] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1827'.
[  926.105680][T13389] syz.4.1829: attempt to access beyond end of device
[  926.105680][T13389] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0
[  926.226201][T13389] syz.4.1829: attempt to access beyond end of device
[  926.226201][T13389] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0
[  926.745083][T13389] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  926.831912][T13389] syz.4.1829: attempt to access beyond end of device
[  926.831912][T13389] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0
[  926.845556][T13389] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  926.869628][T13389] syz.4.1829: attempt to access beyond end of device
[  926.869628][T13389] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0
[  926.974132][T13389] syz.4.1829: attempt to access beyond end of device
[  926.974132][T13389] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0
[  927.023428][T13389] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  927.049389][T13389] syz.4.1829: attempt to access beyond end of device
[  927.049389][T13389] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0
[  927.081284][T13389] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  927.100491][T13389] syz.4.1829: attempt to access beyond end of device
[  927.100491][T13389] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0
[  927.149880][T13389] syz.4.1829: attempt to access beyond end of device
[  927.149880][T13389] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0
[  927.265342][T13389] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  927.284633][T13389] syz.4.1829: attempt to access beyond end of device
[  927.284633][T13389] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0
[  927.300828][T13389] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  927.312243][T13389] syz.4.1829: attempt to access beyond end of device
[  927.312243][T13389] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0
[  927.330139][T13389] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  927.349545][T13389] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  927.601314][T13389] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1)
[  929.563404][    T9] IPVS: starting estimator thread 0...
[  929.684928][ T9818] usb 5-1: new full-speed USB device number 44 using dummy_hcd
[  929.724974][T13434] IPVS: using max 24 ests per chain, 57600 per kthread
[  929.900593][ T9818] usb 5-1: config 0 has an invalid interface number: 106 but max is 0
[  930.006512][ T9818] usb 5-1: config 0 has no interface number 0
[  930.024989][ T9818] usb 5-1: config 0 interface 106 has no altsetting 0
[  930.097913][T13440] input input29: cannot allocate more than FF_MAX_EFFECTS effects
[  930.224944][ T9818] usb 5-1: New USB device found, idVendor=413c, idProduct=8217, bcdDevice=b2.59
[  930.287037][ T9818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  930.409942][ T9818] usb 5-1: Product: syz
[  930.475859][ T9818] usb 5-1: Manufacturer: syz
[  930.536429][ T9818] usb 5-1: SerialNumber: syz
[  930.551306][ T9818] usb 5-1: config 0 descriptor??
[  930.892689][ T9818] usb 5-1: USB disconnect, device number 44
[  932.323068][T13467] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1853'.
[  932.334222][T13467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1853'.
[  933.668350][T13487] netlink: 'syz.6.1858': attribute type 1 has an invalid length.
[  936.906232][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  937.227932][T13521] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1865'.
[  937.885824][T13524] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  938.275101][ T5935] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  938.581137][T13531] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1870'.
[  938.892296][T13531] loop4: detected capacity change from 0 to 524255232
[  938.937218][ T5935] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  939.191764][ T5935] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  939.203639][ T5935] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  939.216721][ T5935] usb 8-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00
[  939.226737][ T5935] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  939.255405][ T5935] usb 8-1: config 0 descriptor??
[  939.825941][T13534] loop4: detected capacity change from 524255232 to 524287935
[  939.974428][T13542] syzkaller1: entered promiscuous mode
[  939.984174][T13542] syzkaller1: entered allmulticast mode
[  940.016976][ T5935] usbhid 8-1:0.0: can't add hid device: -71
[  940.020439][T13545] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  940.023054][ T5935] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  940.108533][T13547] netlink: 'syz.5.1874': attribute type 10 has an invalid length.
[  940.139394][ T5935] usb 8-1: USB disconnect, device number 16
[  940.208508][T13547] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  940.536092][T13555] loop9: detected capacity change from 0 to 7
[  940.542866][T13555] buffer_io_error: 4 callbacks suppressed
[  940.542891][T13555] Buffer I/O error on dev loop9, logical block 0, async page read
[  940.558116][T13555] Buffer I/O error on dev loop9, logical block 0, async page read
[  940.566157][T13555] Buffer I/O error on dev loop9, logical block 0, async page read
[  940.574105][T13555] Buffer I/O error on dev loop9, logical block 0, async page read
[  940.582295][T13555] Buffer I/O error on dev loop9, logical block 0, async page read
[  940.590364][T13555] Buffer I/O error on dev loop9, logical block 0, async page read
[  940.598389][T13555] Buffer I/O error on dev loop9, logical block 0, async page read
[  940.606338][T13555] ldm_validate_partition_table(): Disk read failed.
[  940.613038][T13555] Buffer I/O error on dev loop9, logical block 0, async page read
[  940.621056][T13555] Buffer I/O error on dev loop9, logical block 0, async page read
[  940.629165][T13555] Buffer I/O error on dev loop9, logical block 0, async page read
[  940.637470][T13555] Dev loop9: unable to read RDB block 0
[  940.643339][T13555]  loop9: unable to read partition table
[  940.649349][T13555] loop9: partition table beyond EOD, truncated
[  940.655600][T13555] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  940.655600][T13555] 
) failed (rc=-5)
[  941.122006][T13561] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1878'.
[  944.509161][T13587] [U] �
[  945.025143][ T5935] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  945.105372][T12914] usb 8-1: new full-speed USB device number 17 using dummy_hcd
[  945.196104][ T5935] usb 5-1: Using ep0 maxpacket: 16
[  945.224218][ T5935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  945.277430][ T5935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  945.299818][ T5935] usb 5-1: New USB device found, idVendor=05ac, idProduct=029a, bcdDevice= 0.00
[  945.407097][T12914] usb 8-1: config index 0 descriptor too short (expected 1307, got 27)
[  945.517411][T12914] usb 8-1: config 0 has an invalid interface number: 0 but max is -1
[  945.576356][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  945.775668][T12914] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0
[  945.784662][T12914] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  945.807558][ T5935] usb 5-1: config 0 descriptor??
[  945.828133][T12914] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  945.849771][T12914] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  945.882192][T12914] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  945.908671][T12914] usb 8-1: string descriptor 0 read error: -22
[  945.918332][T12914] usb 8-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  945.930604][T12914] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  945.941635][T12914] usb 8-1: config 0 descriptor??
[  945.955714][T12914] hub 8-1:0.0: bad descriptor, ignoring hub
[  945.962466][T12914] hub 8-1:0.0: probe with driver hub failed with error -5
[  945.979355][T12914] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input30
[  946.498846][ T5935] usbhid 5-1:0.0: can't add hid device: -71
[  947.695982][ T5935] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  949.426614][ T5935] usb 5-1: USB disconnect, device number 45
[  950.261684][   T24] usb 8-1: USB disconnect, device number 17
[  950.515286][T13620] binder_alloc: 13615: binder_alloc_buf, no vma
[  951.235507][T13620] xt_socket: unknown flags 0xc
[  951.564912][ T5889] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  951.733387][ T5889] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  951.953969][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  952.012036][T13637] [U] �
[  952.736761][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  952.777251][ T5889] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  952.804899][ T5889] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  952.814267][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  952.872472][T13642] netlink: 'syz.7.1904': attribute type 10 has an invalid length.
[  952.882252][T13642] bridge0: port 2(bridge_slave_1) entered disabled state
[  952.889620][T13642] bridge0: port 1(bridge_slave_0) entered disabled state
[  952.912916][T13642] bridge0: port 2(bridge_slave_1) entered blocking state
[  952.920154][T13642] bridge0: port 2(bridge_slave_1) entered forwarding state
[  952.927661][T13642] bridge0: port 1(bridge_slave_0) entered blocking state
[  952.934960][T13642] bridge0: port 1(bridge_slave_0) entered forwarding state
[  952.946031][T13642] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  953.082759][ T5889] usb 5-1: config 0 descriptor??
[  953.396409][T13655] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1906'.
[  953.573506][ T5889] plantronics 0003:047F:FFFF.0011: ignoring exceeding usage max
[  953.935293][ T5889] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  954.707709][ T5889] usb 5-1: USB disconnect, device number 46
[  960.174873][T13698] [U] �
[  960.432314][T13700] loop9: detected capacity change from 0 to 7
[  960.440740][T13700] buffer_io_error: 4 callbacks suppressed
[  960.440759][T13700] Buffer I/O error on dev loop9, logical block 0, async page read
[  960.456242][T13700] Buffer I/O error on dev loop9, logical block 0, async page read
[  960.464448][T13700] Buffer I/O error on dev loop9, logical block 0, async page read
[  960.474270][T13700] Buffer I/O error on dev loop9, logical block 0, async page read
[  960.482963][T13700] Buffer I/O error on dev loop9, logical block 0, async page read
[  960.492354][T13700] Buffer I/O error on dev loop9, logical block 0, async page read
[  960.501409][T13700] Buffer I/O error on dev loop9, logical block 0, async page read
[  960.512353][T13700] ldm_validate_partition_table(): Disk read failed.
[  960.519757][T13700] Buffer I/O error on dev loop9, logical block 0, async page read
[  960.528479][T13700] Buffer I/O error on dev loop9, logical block 0, async page read
[  960.536932][T13700] Buffer I/O error on dev loop9, logical block 0, async page read
[  960.545148][T13700] Dev loop9: unable to read RDB block 0
[  960.552662][T13700]  loop9: unable to read partition table
[  960.559034][T13700] loop9: partition table beyond EOD, truncated
[  960.565441][T13700] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  960.565441][T13700] 
) failed (rc=-5)
[  960.582279][   T24] usb 2-1: new low-speed USB device number 40 using dummy_hcd
[  961.094937][   T24] usb 2-1: Invalid ep0 maxpacket: 16
[  961.686167][T13705] batadv1: entered promiscuous mode
[  962.363390][   T24] usb 2-1: new low-speed USB device number 41 using dummy_hcd
[  962.603433][   T24] usb 2-1: Invalid ep0 maxpacket: 16
[  962.615606][   T24] usb usb2-port1: attempt power cycle
[  963.348557][   T24] usb 2-1: new low-speed USB device number 42 using dummy_hcd
[  963.379299][   T24] usb 2-1: device descriptor read/8, error -71
[  963.415275][ T6782] usb 7-1: new high-speed USB device number 56 using dummy_hcd
[  963.694904][ T6782] usb 7-1: Using ep0 maxpacket: 32
[  963.702365][ T6782] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  963.729706][ T6782] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  964.168998][ T6782] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  964.184960][ T6782] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  964.197261][ T6782] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  964.208364][ T6782] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  964.222451][ T6782] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  964.411551][ T6782] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  964.437394][ T6782] usb 7-1: Product: syz
[  964.445076][ T6782] usb 7-1: Manufacturer: syz
[  964.449772][ T6782] usb 7-1: SerialNumber: syz
[  964.458084][ T6782] usb 7-1: config 0 descriptor??
[  966.015759][T13751] [U] �
[  968.279846][   T24] usb 7-1: USB disconnect, device number 56
[  968.318645][T13764] netlink: 'syz.6.1937': attribute type 1 has an invalid length.
[  968.622241][T13768] overlayfs: missing 'workdir'
[  968.624903][ T5935] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  968.665727][ T6782] usb 5-1: new low-speed USB device number 47 using dummy_hcd
[  968.737807][T13764] bond2: entered promiscuous mode
[  968.743573][T13764] 8021q: adding VLAN 0 to HW filter on device bond2
[  968.795940][T13765] bond2: (slave bridge1): making interface the new active one
[  968.803731][T13765] bridge1: entered promiscuous mode
[  968.815593][T13765] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  968.888910][ T5935] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  968.908447][ T6782] usb 5-1: string descriptor 0 read error: -22
[  968.922702][ T6782] usb 5-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f
[  968.942612][ T5935] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  969.027794][ T6782] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  969.672736][ T5935] usb 8-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  969.822924][ T5935] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  969.866600][ T6782] usb 5-1: config 0 descriptor??
[  969.985449][ T6782] usbtest 5-1:0.0: FX2 device
[  969.990820][ T6782] usbtest 5-1:0.0: low-speed {control intr-in intr-out} tests (+alt)
[  970.050015][ T5935] usb 8-1: config 0 descriptor??
[  970.205145][ T6782] usb 5-1: USB disconnect, device number 47
[  970.250056][ T5935] usb 8-1: can't set config #0, error -71
[  970.259262][ T5935] usb 8-1: USB disconnect, device number 18
[  971.108620][T13788] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1941'.
[  971.849545][T13801] [U] �
[  973.626998][ T5935] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  973.920126][ T5935] usb 2-1: Using ep0 maxpacket: 8
[  975.119022][T13841] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1953'.
[  975.357647][T13845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1955'.
[  975.667437][ T5935] usb 2-1: unable to get BOS descriptor or descriptor too short
[  975.679444][ T5935] usb 2-1: unable to read config index 0 descriptor/start: -71
[  975.697157][ T5935] usb 2-1: can't read configurations, error -71
[  975.775033][ T9813] block nbd0: Receive control failed (result -11)
[  977.308891][T13872] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1960'.
[  978.990211][T13886] openvswitch: netlink: Missing key (keys=1040, expected=2000)
[  980.854922][ T6782] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  981.604998][ T6782] usb 2-1: Using ep0 maxpacket: 8
[  981.612509][ T6782] usb 2-1: config 0 has an invalid interface number: 153 but max is 1
[  981.624847][ T6782] usb 2-1: config 0 has no interface number 1
[  981.644483][ T6782] usb 2-1: config 0 interface 153 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  981.685205][ T6782] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  981.704923][ T6782] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  981.737008][ T6782] usb 2-1: New USB device found, idVendor=05c6, idProduct=9275, bcdDevice=ef.98
[  981.746506][ T6782] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  982.437390][ T6782] usb 2-1: Product: syz
[  982.441670][ T6782] usb 2-1: Manufacturer: syz
[  982.446542][ T6782] usb 2-1: SerialNumber: syz
[  982.458245][ T6782] usb 2-1: config 0 descriptor??
[  982.690397][ T6782] usb 2-1: USB disconnect, device number 46
[  982.845538][    T9] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  983.065016][    T9] usb 8-1: Using ep0 maxpacket: 32
[  983.111588][    T9] usb 8-1: config 2 has no interfaces?
[  983.649977][    T9] usb 8-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=9b.1f
[  983.682772][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  983.716644][    T9] usb 8-1: Product: syz
[  983.907154][    T9] usb 8-1: Manufacturer: syz
[  983.922094][    T9] usb 8-1: SerialNumber: syz
[  984.503882][T13913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  984.519570][T13913] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  984.745304][    T9] usb 8-1: USB disconnect, device number 19
[  984.866779][T13939] loop6: detected capacity change from 0 to 63
[  984.886801][T13939] buffer_io_error: 4 callbacks suppressed
[  984.886817][T13939] Buffer I/O error on dev loop6, logical block 0, async page read
[  984.921373][T13939] Buffer I/O error on dev loop6, logical block 1, async page read
[  984.932833][T13939] Buffer I/O error on dev loop6, logical block 2, async page read
[  984.941258][T13939] Buffer I/O error on dev loop6, logical block 3, async page read
[  984.977673][T13942] Buffer I/O error on dev loop6, logical block 0, async page read
[  985.101402][T13942] Buffer I/O error on dev loop6, logical block 1, async page read
[  985.119957][T13942] Buffer I/O error on dev loop6, logical block 2, async page read
[  985.131008][T13942] Buffer I/O error on dev loop6, logical block 3, async page read
[  985.144589][T13939] Buffer I/O error on dev loop6, logical block 0, async page read
[  985.207564][T13939] Buffer I/O error on dev loop6, logical block 1, async page read
[  985.413440][T13950] tmpfs: Unknown parameter 'mpo�'
[  986.304214][T13956] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1982'.
[  987.587501][T13965] netlink: 'syz.5.1983': attribute type 32 has an invalid length.
[  990.342225][T13971] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1985'.
[  992.253202][ T5927] usb 7-1: new high-speed USB device number 57 using dummy_hcd
[  993.756003][ T5927] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  995.192797][ T5927] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  996.365134][ T5927] usb 7-1: Product: syz
[  996.369476][ T5927] usb 7-1: Manufacturer: syz
[  996.374132][ T5927] usb 7-1: SerialNumber: syz
[  996.406078][ T5927] usb 7-1: config 0 descriptor??
[  996.434985][ T5927] usb 7-1: can't set config #0, error -71
[  996.454886][ T5927] usb 7-1: USB disconnect, device number 57
[  996.723034][   T30] audit: type=1326 audit(1755628147.372:3383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14008 comm="syz.6.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86f2d8ebe9 code=0x7ffc0000
[  996.749980][T14012] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1995'.
[  996.760286][   T30] audit: type=1326 audit(1755628147.402:3384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14008 comm="syz.6.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f86f2d8ebe9 code=0x7ffc0000
[  996.835820][   T30] audit: type=1326 audit(1755628147.402:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14008 comm="syz.6.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86f2d8ebe9 code=0x7ffc0000
[  996.928583][   T30] audit: type=1326 audit(1755628147.402:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14008 comm="syz.6.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f86f2d8ebe9 code=0x7ffc0000
[  996.992887][   T30] audit: type=1326 audit(1755628147.402:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14008 comm="syz.6.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86f2d8ebe9 code=0x7ffc0000
[  997.007909][T14021] overlayfs: workdir and upperdir must reside under the same mount
[  997.027669][   T30] audit: type=1326 audit(1755628147.402:3388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14008 comm="syz.6.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f86f2d8ebe9 code=0x7ffc0000
[  997.118270][   T30] audit: type=1326 audit(1755628147.712:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14008 comm="syz.6.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86f2d8ebe9 code=0x7ffc0000
[  997.246083][   T30] audit: type=1326 audit(1755628147.712:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14008 comm="syz.6.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86f2d8ebe9 code=0x7ffc0000
[  997.615390][ T6782] usb 7-1: new low-speed USB device number 58 using dummy_hcd
[  997.774994][ T6782] usb 7-1: device descriptor read/64, error -71
[  998.015203][ T6782] usb 7-1: new low-speed USB device number 59 using dummy_hcd
[  998.155015][ T6782] usb 7-1: device descriptor read/64, error -71
[  998.246871][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  998.277478][ T6782] usb usb7-port1: attempt power cycle
[  998.634992][ T6782] usb 7-1: new low-speed USB device number 60 using dummy_hcd
[  998.657261][ T6782] usb 7-1: device descriptor read/8, error -71
[  998.895170][ T6782] usb 7-1: new low-speed USB device number 61 using dummy_hcd
[  998.926660][ T6782] usb 7-1: device descriptor read/8, error -71
[  999.056443][ T6782] usb usb7-port1: unable to enumerate USB device
[ 1005.276417][T14069] netlink: 'syz.4.2008': attribute type 32 has an invalid length.
[ 1007.600919][T14086] lo speed is unknown, defaulting to 1000
[ 1007.875081][ T5889] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[ 1008.855033][T14095] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1009.203238][ T5889] usb 5-1: Using ep0 maxpacket: 32
[ 1009.218287][ T5889] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[ 1009.230472][ T5889] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 1009.246164][ T5889] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1009.266550][ T5889] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 1010.345172][ T5889] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1010.489389][T14098] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available
[ 1010.520845][ T5889] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1010.530186][ T5889] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1010.567793][ T5889] usb 5-1: Product: syz
[ 1010.572017][ T5889] usb 5-1: Manufacturer: syz
[ 1010.624886][ T5889] usb 5-1: SerialNumber: syz
[ 1010.725119][ T5889] usb 5-1: config 0 descriptor??
[ 1013.353555][T14127] netlink: 'syz.6.2025': attribute type 32 has an invalid length.
[ 1015.665376][ T9818] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[ 1017.168407][ T5889] usb 5-1: can't set config #0, error -110
[ 1017.286415][T14145] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2028'.
[ 1017.328686][ T5889] usb 5-1: USB disconnect, device number 48
[ 1017.379725][ T9818] usb 6-1: device descriptor read/64, error -71
[ 1017.867447][T14142] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2026'.
[ 1018.366357][ T9818] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[ 1018.666493][ T9818] usb 6-1: device descriptor read/64, error -71
[ 1018.807406][ T9818] usb usb6-port1: attempt power cycle
[ 1019.175065][ T9818] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[ 1019.212519][ T9818] usb 6-1: device descriptor read/8, error -71
[ 1019.405824][T14152] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1019.539908][ T9818] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[ 1019.559965][T14157] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2031'.
[ 1019.650690][ T9818] usb 6-1: device descriptor read/8, error -71
[ 1019.785234][ T9818] usb usb6-port1: unable to enumerate USB device
[ 1023.044001][T14166] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2033'.
[ 1023.932671][T14190] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2039'.
[ 1024.184150][T14196] netlink: 'syz.5.2038': attribute type 32 has an invalid length.
[ 1025.054220][T14202] openvswitch: netlink: Missing key (keys=1040, expected=2000)
[ 1027.665689][ T6782] usb 7-1: new high-speed USB device number 62 using dummy_hcd
[ 1027.905231][ T6782] usb 7-1: device descriptor read/64, error -71
[ 1028.285064][ T6782] usb 7-1: new high-speed USB device number 63 using dummy_hcd
[ 1028.309567][T14215] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1028.347567][T14216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2044'.
[ 1028.760713][T14224] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2048'.
[ 1029.942652][T14237] siw: device registration error -23
[ 1030.160634][T14238] netlink: 'syz.5.2052': attribute type 32 has an invalid length.
[ 1030.714907][ T9818] usb 7-1: new high-speed USB device number 64 using dummy_hcd
[ 1031.791918][ T9818] usb 7-1: Using ep0 maxpacket: 32
[ 1031.809763][ T9818] usb 7-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1031.830092][ T9818] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1031.839003][ T9818] usb 7-1: New USB device found, idVendor=056a, idProduct=4001, bcdDevice= 0.00
[ 1031.850868][ T9818] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1031.924103][T14249] loop9: detected capacity change from 0 to 7
[ 1031.933609][T14249] buffer_io_error: 214 callbacks suppressed
[ 1031.933651][T14249] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1031.948382][T14249] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1031.957109][T14249] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1031.965613][T14249] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1031.974317][T14249] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1031.983103][T14249] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1031.991684][T14249] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1032.000570][T14249] ldm_validate_partition_table(): Disk read failed.
[ 1032.007945][T14249] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1032.016898][T14249] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1032.025538][T14249] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1032.034387][T14249] Dev loop9: unable to read RDB block 0
[ 1032.041818][T14249]  loop9: unable to read partition table
[ 1032.048814][T14249] loop9: partition table beyond EOD, truncated
[ 1032.055192][T14249] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[ 1032.055192][T14249] 
) failed (rc=-5)
[ 1032.217515][ T9818] usb 7-1: config 0 descriptor??
[ 1032.601369][ T9818] usb 7-1: can't set config #0, error -71
[ 1032.633202][ T9818] usb 7-1: USB disconnect, device number 64
[ 1037.039413][ T3418] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[ 1037.265493][ T3418] usb 5-1: device descriptor read/64, error -71
[ 1037.319486][T14270] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1037.534893][ T3418] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[ 1038.702113][T14291] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2068'.
[ 1039.388963][T14296] loop9: detected capacity change from 0 to 7
[ 1039.399374][T14296] buffer_io_error: 4 callbacks suppressed
[ 1039.399425][T14296] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1039.414376][T14296] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1039.423468][T14296] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1039.432303][T14296] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1039.441471][T14296] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1039.450566][T14296] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1039.459087][T14296] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1039.467654][T14296] ldm_validate_partition_table(): Disk read failed.
[ 1039.474813][T14296] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1039.483823][T14296] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1039.596610][T14296] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1039.606248][T14296] Dev loop9: unable to read RDB block 0
[ 1039.613988][T14296]  loop9: unable to read partition table
[ 1039.621640][T14296] loop9: partition table beyond EOD, truncated
[ 1039.628008][T14296] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[ 1039.628008][T14296] 
) failed (rc=-5)
[ 1039.677350][T14291] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2068'.
[ 1039.924142][T14293] netlink: 'syz.6.2065': attribute type 32 has an invalid length.
[ 1040.672491][T14319] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 0, id = 0
[ 1042.980370][T14337] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2078'.
[ 1044.555051][T14357] loop9: detected capacity change from 0 to 7
[ 1044.625341][T14357] buffer_io_error: 4 callbacks suppressed
[ 1044.625362][T14357] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1044.639609][T14357] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1044.647975][T14357] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1044.656392][T14357] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1044.664855][T14357] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1044.673152][T14357] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1044.681471][T14357] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1044.689721][T14357] ldm_validate_partition_table(): Disk read failed.
[ 1044.696754][T14357] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1044.704949][T14357] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1044.713243][T14357] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1044.721823][T14357] Dev loop9: unable to read RDB block 0
[ 1044.728018][T14357]  loop9: unable to read partition table
[ 1044.734298][T14357] loop9: partition table beyond EOD, truncated
[ 1044.740893][T14357] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[ 1044.740893][T14357] 
) failed (rc=-5)
[ 1044.761551][T14358] netlink: 'syz.1.2083': attribute type 32 has an invalid length.
[ 1047.769854][T14396] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11)
[ 1047.777190][T14396] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1047.787100][T14396] vhci_hcd vhci_hcd.0: Device attached
[ 1047.906569][T14402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2094'.
[ 1048.095124][ T5935] usb 43-1: new high-speed USB device number 2 using vhci_hcd
[ 1048.556967][T14401] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 1048.675216][ T3418] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[ 1048.792016][ T9818] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[ 1049.457863][T14399] vhci_hcd: connection reset by peer
[ 1049.472938][   T59] vhci_hcd: stop threads
[ 1049.632254][   T59] vhci_hcd: release socket
[ 1049.639515][   T59] vhci_hcd: disconnect device
[ 1049.644856][ T9818] usb 8-1: Using ep0 maxpacket: 32
[ 1049.653050][ T9818] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 1049.672451][ T9818] usb 8-1: config 128 has an invalid interface number: 127 but max is 3
[ 1049.683622][ T9818] usb 8-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[ 1049.694638][ T9818] usb 8-1: config 128 has 1 interface, different from the descriptor's value: 4
[ 1049.709711][ T9818] usb 8-1: config 128 has no interface number 0
[ 1049.759610][T14411] loop9: detected capacity change from 0 to 7
[ 1049.775391][T14411] buffer_io_error: 4 callbacks suppressed
[ 1049.775432][T14411] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1049.790069][T14411] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1049.798761][T14411] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1049.807406][T14411] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1049.816213][T14411] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1049.824862][T14411] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1049.833380][T14411] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1049.841734][T14411] ldm_validate_partition_table(): Disk read failed.
[ 1049.848971][T14411] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1049.857601][T14411] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1049.866395][T14411] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1049.875845][T14411] Dev loop9: unable to read RDB block 0
[ 1049.883033][T14411]  loop9: unable to read partition table
[ 1049.890051][T14411] loop9: partition table beyond EOD, truncated
[ 1049.896402][T14411] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[ 1049.896402][T14411] 
) failed (rc=-5)
[ 1049.928981][ T9818] usb 8-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[ 1050.278230][ T3418] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1050.300048][ T3418] usb 2-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c
[ 1050.304918][ T9818] usb 8-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1050.319678][ T3418] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1050.447846][ T3418] usb 2-1: config 0 descriptor??
[ 1050.466599][ T3418] usb 2-1: bad CDC descriptors
[ 1050.471421][ T9818] usb 8-1: config 128 interface 127 has no altsetting 0
[ 1050.481910][ T9818] usb 8-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[ 1050.505031][ T9818] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1050.520109][ T9818] usb 8-1: Product: syz
[ 1050.524494][ T9818] usb 8-1: Manufacturer: syz
[ 1050.553074][ T9818] usb 8-1: SerialNumber: syz
[ 1050.671602][T14405] netlink: 'syz.1.2095': attribute type 1 has an invalid length.
[ 1050.685298][ T3418] usb 2-1: USB disconnect, device number 47
[ 1050.728475][ T9818] usb 8-1: can't set config #128, error -71
[ 1050.801848][T14415] netlink: 'syz.4.2098': attribute type 32 has an invalid length.
[ 1051.416630][ T9818] usb 8-1: USB disconnect, device number 20
[ 1053.344974][ T5935] vhci_hcd: vhci_device speed not set
[ 1054.540410][T14459] loop9: detected capacity change from 0 to 7
[ 1054.553186][T14459] ldm_validate_partition_table(): Disk read failed.
[ 1054.562774][T14459] Dev loop9: unable to read RDB block 0
[ 1054.570124][T14459]  loop9: unable to read partition table
[ 1054.577102][T14459] loop9: partition table beyond EOD, truncated
[ 1054.583444][T14459] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[ 1054.583444][T14459] 
) failed (rc=-5)
[ 1055.960726][T14468] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1056.291624][T14474] netlink: 'syz.4.2112': attribute type 32 has an invalid length.
[ 1056.344982][ T5842] usb 7-1: new full-speed USB device number 65 using dummy_hcd
[ 1056.467209][T14475] ceph: No mds server is up or the cluster is laggy
[ 1056.521909][ T5842] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1056.559680][ T5842] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1056.639184][ T5842] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1056.662702][ T5842] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1056.680118][ T5842] usb 7-1: Product: syz
[ 1056.693321][ T5842] usb 7-1: Manufacturer: syz
[ 1056.736141][ T5842] usb 7-1: SerialNumber: syz
[ 1057.008920][ T5842] usb 7-1: 0:2 : does not exist
[ 1057.038161][ T5842] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[ 1057.092438][ T5842] usb 7-1: USB disconnect, device number 65
[ 1058.104925][ T6782] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[ 1058.286583][ T6782] usb 6-1: Using ep0 maxpacket: 8
[ 1058.300751][ T6782] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1058.656662][ T6782] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1058.674851][ T6782] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1058.725153][ T6782] usb 6-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00
[ 1058.785174][ T6782] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1059.396551][ T6782] usb 6-1: config 0 descriptor??
[ 1059.676308][T14508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1059.695414][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1059.748059][T14508] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1064.206762][T14529] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[ 1064.213353][T14529] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1064.277733][ T6782] logitech 0003:046D:C293.0012: unknown main item tag 0x0
[ 1064.316853][ T6782] logitech 0003:046D:C293.0012: unknown main item tag 0x0
[ 1064.336997][ T6782] logitech 0003:046D:C293.0012: unknown main item tag 0x0
[ 1064.344853][ T6782] logitech 0003:046D:C293.0012: unknown main item tag 0x0
[ 1064.388431][T14529] vhci_hcd vhci_hcd.0: Device attached
[ 1064.409088][ T6782] logitech 0003:046D:C293.0012: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.5-1/input0
[ 1064.436540][T14530] vhci_hcd: connection closed
[ 1064.437993][   T13] vhci_hcd: stop threads
[ 1064.467050][ T6782] logitech 0003:046D:C293.0012: no inputs found
[ 1064.504719][   T13] vhci_hcd: release socket
[ 1064.509401][   T13] vhci_hcd: disconnect device
[ 1064.550238][ T6782] usb 6-1: USB disconnect, device number 45
[ 1065.035459][T14543] netlink: 'syz.5.2126': attribute type 32 has an invalid length.
[ 1069.811162][T14591] 9pnet_fd: Insufficient options for proto=fd
[ 1070.680728][T14601] netlink: 'syz.1.2139': attribute type 32 has an invalid length.
[ 1074.449010][T14645] siw: device registration error -23
[ 1075.994934][ T9813] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1076.066295][ T5156] Bluetooth: hci1: command 0x1003 tx timeout
[ 1076.364045][T13778] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[ 1076.528149][T14639] mkiss: ax0: crc mode is auto.
[ 1076.550439][T13778] usb 2-1: Using ep0 maxpacket: 8
[ 1076.581958][T13778] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1076.611594][T13778] usb 2-1: config 7 has an invalid interface number: 67 but max is 0
[ 1076.615693][T14659] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2153'.
[ 1076.647444][T13778] usb 2-1: config 7 has no interface number 0
[ 1076.696524][T13778] usb 2-1: string descriptor 0 read error: -22
[ 1076.703135][T13778] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16
[ 1076.723714][T13778] usb 2-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3
[ 1077.995560][ T5889] usb 2-1: USB disconnect, device number 48
[ 1078.891405][T14686] netlink: 'syz.1.2160': attribute type 1 has an invalid length.
[ 1080.091800][T14694] siw: device registration error -23
[ 1080.885358][T14696] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1080.983437][T14696] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2163'.
[ 1081.214882][ T3418] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[ 1081.402627][ T3418] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1081.429955][ T3418] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1081.483127][ T3418] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[ 1081.510390][ T3418] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1081.560792][ T3418] usb 5-1: config 0 descriptor??
[ 1082.268904][T14700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1082.448874][T14700] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1082.546289][ T3418] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0
[ 1082.556112][ T3418] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0
[ 1082.564959][ T3418] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0
[ 1082.572288][ T3418] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0
[ 1082.582688][ T3418] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0
[ 1082.593081][ T3418] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0
[ 1082.603339][ T3418] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0
[ 1082.656912][ T3418] cp2112 0003:10C4:EA90.0013: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0
[ 1082.739917][ T3418] cp2112 0003:10C4:EA90.0013: Part Number: 0x00 Device Version: 0x00
[ 1083.395097][ T9818] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[ 1083.406890][T14721] netlink: 'syz.1.2170': attribute type 32 has an invalid length.
[ 1083.526567][ T9818] usb 6-1: device descriptor read/64, error -71
[ 1083.562136][T14700] cp2112 0003:10C4:EA90.0013: Error starting transaction: -38
[ 1083.590785][ T3418] cp2112 0003:10C4:EA90.0013: error reading lock byte: -71
[ 1083.614653][ T3418] usb 5-1: USB disconnect, device number 51
[ 1083.775010][ T9818] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[ 1083.915862][ T9818] usb 6-1: device descriptor read/64, error -71
[ 1084.025300][ T9818] usb usb6-port1: attempt power cycle
[ 1084.523318][T14746] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2172'.
[ 1085.184980][ T9818] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[ 1085.213969][T14748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2173'.
[ 1085.633844][ T9818] usb 6-1: device descriptor read/8, error -71
[ 1085.904907][ T9818] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[ 1085.959812][ T9818] usb 6-1: device descriptor read/8, error -71
[ 1086.090271][ T9818] usb usb6-port1: unable to enumerate USB device
[ 1086.401716][T14762] afs: Unknown parameter 'dont_measure'
[ 1093.584978][T14807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2186'.
[ 1094.103018][T14813] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2190'.
[ 1094.654648][T14819] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2193'.
[ 1094.874942][ T5842] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[ 1094.885755][T14822] 9pnet_fd: Insufficient options for proto=fd
[ 1095.057867][ T5842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1095.143967][ T5842] usb 2-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00
[ 1095.188052][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1095.245981][ T5842] usb 2-1: config 0 descriptor??
[ 1095.295072][ T5842] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input32
[ 1097.735109][ T5191] bcm5974 2-1:0.0: could not read from device
[ 1097.745984][ T5191] bcm5974 2-1:0.0: could not read from device
[ 1097.769549][ T5842] usb 2-1: USB disconnect, device number 49
[ 1097.791336][ T5191] bcm5974 2-1:0.0: could not read from device
[ 1097.834608][ T5191] bcm5974 2-1:0.0: could not read from device
[ 1099.815065][ T5889] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[ 1099.852239][T14866] netlink: 288 bytes leftover after parsing attributes in process `syz.6.2202'.
[ 1100.085146][ T5842] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[ 1100.220601][ T5889] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1100.556656][ T5842] usb 5-1: Using ep0 maxpacket: 32
[ 1100.571850][ T5889] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1100.585897][ T5842] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[ 1100.599767][ T5889] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1100.609325][ T5842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 1100.620509][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1100.628690][ T5842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[ 1100.638757][ T5889] usb 2-1: SerialNumber: syz
[ 1100.649071][ T5842] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1100.660882][ T5842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1100.676821][ T5842] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[ 1100.694794][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1100.702893][ T5842] usb 5-1: Product: syz
[ 1100.712276][T14873] loop2: detected capacity change from 0 to 7
[ 1100.718739][ T5842] usb 5-1: Manufacturer: syz
[ 1100.718763][ T5842] usb 5-1: SerialNumber: syz
[ 1100.726187][ T5842] usb 5-1: config 0 descriptor??
[ 1100.750259][T14873] Dev loop2: unable to read RDB block 7
[ 1100.764957][T14873]  loop2: unable to read partition table
[ 1100.785217][T14873] loop2: partition table beyond EOD, truncated
[ 1100.791490][T14873] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[ 1100.885735][ T5889] usb 2-1: 0:2 : does not exist
[ 1100.913709][ T5889] usb 2-1: USB disconnect, device number 50
[ 1102.377262][ T5889] usb 5-1: USB disconnect, device number 52
[ 1102.714944][T14886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2213'.
[ 1103.944114][ T6782] usb 7-1: new high-speed USB device number 66 using dummy_hcd
[ 1104.081788][ T3418] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[ 1104.250451][ T6782] usb 7-1: device descriptor read/64, error -71
[ 1104.512945][ T3418] usb 2-1: Using ep0 maxpacket: 8
[ 1104.607490][ T6782] usb 7-1: new high-speed USB device number 67 using dummy_hcd
[ 1104.705201][ T3418] usb 2-1: config index 0 descriptor too short (expected 30, got 18)
[ 1104.935101][ T6782] usb 7-1: device descriptor read/64, error -71
[ 1105.105622][ T3418] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 1105.314076][ T6782] usb usb7-port1: attempt power cycle
[ 1105.544963][ T3418] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1106.118302][ T3418] usb 2-1: Product: syz
[ 1106.225009][ T6782] usb 7-1: new high-speed USB device number 68 using dummy_hcd
[ 1106.333661][ T3418] usb 2-1: Manufacturer: syz
[ 1106.868473][ T3418] usb 2-1: SerialNumber: syz
[ 1107.299762][ T3418] usb 2-1: config 0 descriptor??
[ 1107.351038][ T6782] usb 7-1: device descriptor read/8, error -71
[ 1107.368747][ T3418] usb 2-1: can't set config #0, error -71
[ 1107.438438][ T3418] usb 2-1: USB disconnect, device number 51
[ 1108.062503][T14911] fanotify: failed to encode fid (type=0, len=0, err=-2)
[ 1108.190221][T14911] fanotify: failed to encode fid (type=0, len=0, err=-2)
[ 1108.197532][T14911] fanotify: failed to encode fid (type=0, len=0, err=-2)
[ 1108.204763][T14911] fanotify: failed to encode fid (type=0, len=0, err=-2)
[ 1108.211926][T14911] fanotify: failed to encode fid (type=0, len=0, err=-2)
[ 1108.219277][T14911] fanotify: failed to encode fid (type=0, len=0, err=-2)
[ 1108.226471][T14911] fanotify: failed to encode fid (type=0, len=0, err=-2)
[ 1108.233689][T14911] fanotify: failed to encode fid (type=0, len=0, err=-2)
[ 1108.244527][T14911] fanotify: failed to encode fid (type=0, len=0, err=-2)
[ 1108.265071][T14911] fanotify: failed to encode fid (type=0, len=0, err=-2)
[ 1108.288823][T14917] netlink: 'syz.1.2221': attribute type 32 has an invalid length.
[ 1109.189638][T14939] netlink: 'syz.6.2225': attribute type 32 has an invalid length.
[ 1110.914889][T14962] DRBG: could not allocate digest TFM handle: hmac(sha512)
[ 1113.768469][T14991] netlink: 'syz.5.2237': attribute type 21 has an invalid length.
[ 1113.851910][T14991] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2237'.
[ 1114.545063][ T5842] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[ 1115.195476][ T5842] usb 2-1: Using ep0 maxpacket: 8
[ 1115.238539][ T5842] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1115.265158][ T5842] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b
[ 1115.296354][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1115.304430][ T5842] usb 2-1: Product: syz
[ 1115.344894][ T5842] usb 2-1: Manufacturer: syz
[ 1115.354951][ T5842] usb 2-1: SerialNumber: syz
[ 1115.376167][ T5842] usb 2-1: config 0 descriptor??
[ 1115.395685][ T5842] gspca_main: stk014-2.14.0 probing 05e1:0893
[ 1115.424988][ T5842] usb 2-1: selecting invalid altsetting 1
[ 1115.625868][T15005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1115.634865][T15005] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1115.643936][ T5842] gspca_stk014: init reg: 0x00
[ 1115.648964][ T5842] stk014 2-1:0.0: probe with driver stk014 failed with error -5
[ 1116.044051][ T5842] usb 2-1: USB disconnect, device number 52
[ 1120.575532][T15040] netlink: 'syz.1.2250': attribute type 1 has an invalid length.
[ 1120.583399][T15040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2250'.
[ 1120.853380][ T5842] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[ 1121.123395][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1121.664959][ T5842] usb 6-1: Using ep0 maxpacket: 32
[ 1121.985030][ T5842] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1124.097487][ T5842] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1124.137348][T15065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2254'.
[ 1124.149023][ T5842] usb 6-1: string descriptor 0 read error: -71
[ 1124.156047][ T5842] usb 6-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0
[ 1124.185338][ T5842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1124.207099][ T5842] usb 6-1: config 0 descriptor??
[ 1124.232958][ T5842] usb 6-1: can't set config #0, error -71
[ 1124.247394][ T5842] usb 6-1: USB disconnect, device number 50
[ 1124.961959][T15081] 9pnet_virtio: no channels available for device 127.0.0.1
[ 1125.690874][ T2994] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1230.674740][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1230.681861][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P13/1:b..l
[ 1230.690195][    C0] rcu: 	(detected by 0, t=10502 jiffies, g=62069, q=723 ncpus=2)
[ 1230.697983][    C0] task:kworker/u8:1    state:R  running task     stack:22392 pid:13    tgid:13    ppid:2      task_flags:0x4208160 flags:0x00004000
[ 1230.712773][    C0] Workqueue: iou_exit io_ring_exit_work
[ 1230.718382][    C0] Call Trace:
[ 1230.721695][    C0]  <TASK>
[ 1230.724669][    C0]  __schedule+0x16aa/0x4c90
[ 1230.729310][    C0]  ? __lock_acquire+0xab9/0xd20
[ 1230.734201][    C0]  ? preempt_schedule_irq+0xb5/0x150
[ 1230.739537][    C0]  ? __pfx___schedule+0x10/0x10
[ 1230.744428][    C0]  ? __lock_acquire+0xab9/0xd20
[ 1230.749323][    C0]  ? __lock_acquire+0xab9/0xd20
[ 1230.754210][    C0]  ? preempt_schedule_irq+0xaa/0x150
[ 1230.759534][    C0]  preempt_schedule_irq+0xb5/0x150
[ 1230.764676][    C0]  ? __pfx_preempt_schedule_irq+0x10/0x10
[ 1230.770446][    C0]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[ 1230.776295][    C0]  irqentry_exit+0x6f/0x90
[ 1230.780749][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1230.786767][    C0] RIP: 0010:unwind_next_frame+0xb37/0x2390
[ 1230.792606][    C0] Code: df e8 ad 57 ad 00 48 89 9c 24 88 00 00 00 49 8d 5c 24 f8 4d 8b 66 10 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 20 0f b6 04 01 <84> c0 0f 85 85 13 00 00 41 83 3e 00 0f 95 c0 49 39 df 0f 96 c1 20
[ 1230.812245][    C0] RSP: 0018:ffffc90000127378 EFLAGS: 00000246
[ 1230.818349][    C0] RAX: 0000000000000000 RBX: ffffc90000127578 RCX: 1ffff92000024e89
[ 1230.826348][    C0] RDX: ffffffff90344772 RSI: 0000000000000002 RDI: ffffffff8be1b9e0
[ 1230.834356][    C0] RBP: 1ffff92000024e8a R08: 000000000000000d R09: ffffffff8172aae5
[ 1230.842393][    C0] R10: ffffc90000127498 R11: ffffffff81acfd40 R12: ffffc90000128000
[ 1230.850423][    C0] R13: 1ffff92000024e8b R14: ffffc90000127448 R15: ffffc90000120000
[ 1230.858446][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1230.864659][    C0]  ? unwind_next_frame+0xa5/0x2390
[ 1230.869818][    C0]  ? unwind_next_frame+0xd4/0x2390
[ 1230.874969][    C0]  ? unwind_next_frame+0xa5/0x2390
[ 1230.880114][    C0]  ? stack_trace_save+0x9c/0xe0
[ 1230.885022][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1230.891252][    C0]  arch_stack_walk+0x11c/0x150
[ 1230.896062][    C0]  ? stack_trace_save+0x9c/0xe0
[ 1230.900956][    C0]  stack_trace_save+0x9c/0xe0
[ 1230.905720][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[ 1230.911128][    C0]  ? kthread+0x70e/0x8a0
[ 1230.915432][    C0]  kasan_save_track+0x3e/0x80
[ 1230.920241][    C0]  __kasan_kmalloc+0x93/0xb0
[ 1230.924872][    C0]  __kmalloc_cache_noprof+0x230/0x3d0
[ 1230.930282][    C0]  ? kmem_cache_free+0x166/0x400
[ 1230.935256][    C0]  ? __io_req_caches_free+0x8f/0x140
[ 1230.940579][    C0]  kmem_cache_free+0x166/0x400
[ 1230.945383][    C0]  __io_req_caches_free+0x8f/0x140
[ 1230.950540][    C0]  io_req_caches_free+0x21/0x30
[ 1230.955445][    C0]  io_ring_exit_work+0x415/0x930
[ 1230.960447][    C0]  ? __pfx_io_ring_exit_work+0x10/0x10
[ 1230.965958][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1230.971192][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[ 1230.976946][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[ 1230.982702][    C0]  process_scheduled_works+0xade/0x17b0
[ 1230.988320][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1230.994353][    C0]  worker_thread+0x8a0/0xda0
[ 1230.999034][    C0]  kthread+0x70e/0x8a0
[ 1231.003147][    C0]  ? __pfx_worker_thread+0x10/0x10
[ 1231.008290][    C0]  ? __pfx_kthread+0x10/0x10
[ 1231.012922][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1231.018146][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1231.023371][    C0]  ? __pfx_kthread+0x10/0x10
[ 1231.028004][    C0]  ret_from_fork+0x3fc/0x770
[ 1231.032720][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1231.038313][    C0]  ? __switch_to_asm+0x39/0x70
[ 1231.043117][    C0]  ? __switch_to_asm+0x33/0x70
[ 1231.047915][    C0]  ? __pfx_kthread+0x10/0x10
[ 1231.053009][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1231.057854][    C0]  </TASK>
[ 1231.060912][    C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10499 jiffies! g62069 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
[ 1231.073357][    C0] rcu: 	Possible timer handling issue on cpu=1 timer-softirq=71913
[ 1231.081270][    C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g62069 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1
[ 1231.092668][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 1231.102671][    C0] rcu: RCU grace-period kthread stack dump:
[ 1231.108591][    C0] task:rcu_preempt     state:I stack:26984 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[ 1231.120564][    C0] Call Trace:
[ 1231.123872][    C0]  <TASK>
[ 1231.126837][    C0]  __schedule+0x16aa/0x4c90
[ 1231.131405][    C0]  ? schedule+0x165/0x360
[ 1231.135780][    C0]  ? __pfx___schedule+0x10/0x10
[ 1231.140682][    C0]  ? schedule+0x91/0x360
[ 1231.144967][    C0]  schedule+0x165/0x360
[ 1231.149168][    C0]  schedule_timeout+0x12b/0x270
[ 1231.154148][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[ 1231.159570][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 1231.165536][    C0]  ? __pfx_process_timeout+0x10/0x10
[ 1231.170872][    C0]  ? prepare_to_swait_event+0x341/0x380
[ 1231.176479][    C0]  rcu_gp_fqs_loop+0x301/0x1540
[ 1231.181425][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1231.186683][    C0]  ? __pfx_rcu_watching_snap_save+0x10/0x10
[ 1231.192631][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[ 1231.197949][    C0]  ? _raw_spin_unlock_irq+0x2e/0x50
[ 1231.203198][    C0]  rcu_gp_kthread+0x99/0x390
[ 1231.207840][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1231.213252][    C0]  ? __kthread_parkme+0x7b/0x200
[ 1231.218351][    C0]  ? __kthread_parkme+0x1a1/0x200
[ 1231.223433][    C0]  kthread+0x70e/0x8a0
[ 1231.227547][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1231.232775][    C0]  ? __pfx_kthread+0x10/0x10
[ 1231.237411][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1231.242653][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1231.247978][    C0]  ? __pfx_kthread+0x10/0x10
[ 1231.252608][    C0]  ret_from_fork+0x3fc/0x770
[ 1231.257234][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1231.262384][    C0]  ? __switch_to_asm+0x39/0x70
[ 1231.267274][    C0]  ? __switch_to_asm+0x33/0x70
[ 1231.272073][    C0]  ? __pfx_kthread+0x10/0x10
[ 1231.276704][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1231.281526][    C0]  </TASK>
[ 1231.284615][    C0] rcu: Stack dump where RCU GP kthread last ran:
[ 1231.290975][    C0] Sending NMI from CPU 0 to CPUs 1:
[ 1231.296219][    C1] NMI backtrace for cpu 1
[ 1231.296237][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1231.296273][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1231.296290][    C1] RIP: 0010:__rcu_read_unlock+0x5d/0xe0
[ 1231.296321][    C1] Code: 84 c0 75 4f ff 0b 75 1d 4c 8d b7 48 04 00 00 4c 89 f0 48 c1 e8 03 42 0f b6 04 38 84 c0 75 66 41 83 3e 00 75 27 43 0f b6 04 3c <84> c0 75 41 8b 03 3d 00 00 00 40 73 0f 5b 41 5c 41 5d 41 5e 41 5f
[ 1231.296338][    C1] RSP: 0018:ffffc90000a089c0 EFLAGS: 00000046
[ 1231.296354][    C1] RAX: 0000000000000000 RBX: ffff88801d2bde44 RCX: 429b7fe7d6ec6100
[ 1231.296367][    C1] RDX: 0000000000000000 RSI: ffffffff8db6fcc6 RDI: ffff88801d2bda00
[ 1231.296380][    C1] RBP: 0000000000000001 R08: ffff88807f82915f R09: 1ffff1100ff0522b
[ 1231.296393][    C1] R10: dffffc0000000000 R11: ffffed100ff0522c R12: 1ffff11003a57bc8
[ 1231.296408][    C1] R13: ffff88807f829000 R14: ffff88801d2bde48 R15: dffffc0000000000
[ 1231.296422][    C1] FS:  0000000000000000(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000
[ 1231.296437][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1231.296449][    C1] CR2: 0000001b30420000 CR3: 00000000310f0000 CR4: 00000000003526f0
[ 1231.296466][    C1] Call Trace:
[ 1231.296474][    C1]  <IRQ>
[ 1231.296481][    C1]  ? advance_sched+0x9f8/0xc90
[ 1231.296512][    C1]  advance_sched+0xb28/0xc90
[ 1231.296549][    C1]  ? __pfx_advance_sched+0x10/0x10
[ 1231.296576][    C1]  __hrtimer_run_queues+0x52c/0xc60
[ 1231.296596][    C1]  ? ktime_get_update_offsets_now+0x60/0x3d0
[ 1231.296634][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[ 1231.296660][    C1]  ? ktime_get_update_offsets_now+0x3ab/0x3d0
[ 1231.296692][    C1]  hrtimer_interrupt+0x45b/0xaa0
[ 1231.296727][    C1]  __sysvec_apic_timer_interrupt+0x108/0x410
[ 1231.296750][    C1]  sysvec_apic_timer_interrupt+0x52/0xc0
[ 1231.296769][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1231.296788][    C1] RIP: 0010:handle_softirqs+0x1b0/0x870
[ 1231.296808][    C1] Code: 89 64 24 30 0f b7 db 48 c7 c7 00 ad 89 8b e8 87 ef e0 09 65 66 c7 05 65 dc 16 11 00 00 e8 08 fe 41 00 fb 49 c7 c7 c0 c0 e0 8d <b8> ff ff ff ff 0f bc c3 41 89 c5 41 ff c5 0f 84 c2 03 00 00 89 5c
[ 1231.296823][    C1] RSP: 0018:ffffc90000a08e40 EFLAGS: 00000286
[ 1231.296838][    C1] RAX: 429b7fe7d6ec6100 RBX: 0000000000000208 RCX: 429b7fe7d6ec6100
[ 1231.296851][    C1] RDX: 0000000000000000 RSI: ffffffff8d982fba RDI: ffffffff8be1ba40
[ 1231.296864][    C1] RBP: ffffc90000a08f50 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e
[ 1231.296878][    C1] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: 000000000000000a
[ 1231.296891][    C1] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8de0c0c0
[ 1231.296918][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[ 1231.296939][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[ 1231.296961][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[ 1231.296988][    C1]  __irq_exit_rcu+0xca/0x1f0
[ 1231.297006][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[ 1231.297028][    C1]  ? rcu_is_watching+0x15/0xb0
[ 1231.297048][    C1]  irq_exit_rcu+0x9/0x30
[ 1231.297064][    C1]  sysvec_call_function_single+0xa3/0xc0
[ 1231.297082][    C1]  </IRQ>
[ 1231.297088][    C1]  <TASK>
[ 1231.297095][    C1]  asm_sysvec_call_function_single+0x1a/0x20
[ 1231.297114][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[ 1231.297132][    C1] Code: 53 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 ad 21 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[ 1231.297147][    C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2
[ 1231.297162][    C1] RAX: 429b7fe7d6ec6100 RBX: ffffffff81976918 RCX: 429b7fe7d6ec6100
[ 1231.297175][    C1] RDX: 0000000000000001 RSI: ffffffff8d982fba RDI: ffffffff8be1ba40
[ 1231.297188][    C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb
[ 1231.297201][    C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fa0b3f0
[ 1231.297215][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a57b40
[ 1231.297229][    C1]  ? do_idle+0x1e8/0x510
[ 1231.297255][    C1]  default_idle+0x13/0x20
[ 1231.297276][    C1]  default_idle_call+0x74/0xb0
[ 1231.297298][    C1]  do_idle+0x1e8/0x510
[ 1231.297321][    C1]  ? __pfx_do_idle+0x10/0x10
[ 1231.297339][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1231.297368][    C1]  cpu_startup_entry+0x44/0x60
[ 1231.297388][    C1]  start_secondary+0x101/0x110
[ 1231.297416][    C1]  common_startup_64+0x13e/0x147
[ 1231.297449][    C1]  </TASK>