last executing test programs:

23m36.711105874s ago: executing program 2 (id=3794):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0xffff], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)

23m35.901362178s ago: executing program 2 (id=3795):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c080}, 0x4)
recvmmsg(r0, &(0x7f0000003000)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10000, 0x0) (fail_nth: 1)

23m35.433092823s ago: executing program 2 (id=3797):
socket(0x2a, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket(0x10, 0x803, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054)

23m35.365388936s ago: executing program 2 (id=3798):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c080}, 0x4)
socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00006700000002000000030000000000000c00", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901)
fchdir(r4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0)
r7 = socket$inet(0x2, 0x80000, 0xfffffffb)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x41, &(0x7f0000000100)={'raw\x00', 0x2, [{}, {}]}, 0x48)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x8, &(0x7f0000006680))
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
socket$tipc(0x1e, 0x5, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

23m35.080497846s ago: executing program 2 (id=3799):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000340)={0x1, [<r1=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={r1, 0x40005, 0x6f20000, 0x9, 0xf, 0x7, 0x8000, 0x3, {0x0, @in={{0x2, 0x4e20, @local}}, 0x3, 0x9, 0x754cd9a0, 0x1, 0x80000001}}, &(0x7f00000001c0)=0xb0) (fail_nth: 1)

23m35.016566792s ago: executing program 2 (id=3800):
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x45, 0xa, 0x1, "32179418a6cc31ec828e314f741100fa7c53d50c01c728b2d400000500", 0x59565955})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f00000001c0)="64f3ad36660f632d0f01caddeb66b80500000066b9000000000f01c10f20c06635000000800f22c0f36567827ca70097fec90f6a4a006766c744240051dc31166766c7442402feffff7f6766c744240600000000670f011424", 0x59}], 0x1, 0x8, &(0x7f0000000140)=[@dstype3={0x7, 0x2}, @cstype3={0x5, 0x4000000000e}], 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x4000000})
r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000004c0)={0x10, &(0x7f0000000040)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

23m34.634156379s ago: executing program 32 (id=3800):
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x45, 0xa, 0x1, "32179418a6cc31ec828e314f741100fa7c53d50c01c728b2d400000500", 0x59565955})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f00000001c0)="64f3ad36660f632d0f01caddeb66b80500000066b9000000000f01c10f20c06635000000800f22c0f36567827ca70097fec90f6a4a006766c744240051dc31166766c7442402feffff7f6766c744240600000000670f011424", 0x59}], 0x1, 0x8, &(0x7f0000000140)=[@dstype3={0x7, 0x2}, @cstype3={0x5, 0x4000000000e}], 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x4000000})
r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000004c0)={0x10, &(0x7f0000000040)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

20m43.207802306s ago: executing program 3 (id=4448):
socket$nl_netfilter(0x10, 0x3, 0xc)
futex(&(0x7f00000000c0)=0x2, 0x3, 0x2, 0x0, &(0x7f0000002cc0)=0x2000002, 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0)
fremovexattr(r0, &(0x7f0000000000)=@known='user.incfs.id\x00')
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCGSERIAL(r2, 0x541e, 0x0)
r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$FUSE_LSEEK(r3, &(0x7f0000000040)={0x18, 0x9, 0x0, {0x8000}}, 0x18)
socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x5f)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48", 0x7}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcd", 0x40}], 0x3}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x40000020)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000004700))
prctl$PR_SCHED_CORE(0x4d, 0x4, 0x0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x4, 0x4, 0x1, 0x1, 0x5, @remote, @local, 0x80, 0x7800, 0x5, 0x6}})
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
ioctl$TCXONC(r2, 0x540a, 0x3)

20m42.16788118s ago: executing program 3 (id=4451):
fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_tcp(0x2, 0x1, 0x0)
socket(0x10, 0x3, 0x0)
r0 = socket(0x200000000000011, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000000101010100000000000000000a000009100002800c000280050001003a1000000c0019800800020008", @ANYRES16=r1], 0x30}, 0x1, 0x0, 0x0, 0x200488d0}, 0x6010)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680))
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0xc, 0xff}]}}}]}, 0x3c}}, 0x0)
fadvise64(r0, 0x271c, 0x6, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000240)=@FILEID_UDF_WITH_PARENT={0x14}, &(0x7f0000000280), 0x1600)
fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
socket(0x200000000000011, 0x2, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000000101010100000000000000000a000009100002800c000280050001003a1000000c0019800800020008", @ANYRES16=r1], 0x30}, 0x1, 0x0, 0x0, 0x200488d0}, 0x6010) (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$xdp(0x2c, 0x3, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0xc, 0xff}]}}}]}, 0x3c}}, 0x0) (async)
fadvise64(r0, 0x271c, 0x6, 0x0) (async)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000240)=@FILEID_UDF_WITH_PARENT={0x14}, &(0x7f0000000280), 0x1600) (async)

20m41.137205879s ago: executing program 3 (id=4455):
syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109022900010000000009046900000e010000082402de01020505072401070903000824020107"], 0x0)
r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x557, 0x2102)
r1 = openat$vicodec1(0xffffff9c, &(0x7f0000000080), 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$cgroup_pid(r3, &(0x7f0000000000), 0xfdef)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0)
connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000029000000370000003d000009"], 0x18}, 0xc044)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000040)=0x80b, 0x4)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x7, 0x9, 0x10, 0x1, 0x1, {0xffff1c72, 0x23, 0x100007, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44040}, 0x8000)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000600)={'gretap0\x00', &(0x7f0000000580)={'ip_vti0\x00', <r10=>0x0, 0x8000, 0x7800, 0x48f, 0x4, {{0x17, 0x4, 0x2, 0x39, 0x5c, 0x65, 0x0, 0xd, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x24, 0x0, [{0x7, 0xe, "55878387a456d1be6e9c3057"}, {0x0, 0x10, "1e41167d6ad5aa2701b6b43776e2"}]}, @timestamp={0x44, 0x24, 0x41, 0x0, 0x3, [0x8, 0x2, 0x3, 0x81, 0x100, 0x5, 0x4, 0xffffffff]}]}}}}})
sendmmsg$inet(r0, &(0x7f00000007c0)=[{{&(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000280)="3e32fa5a80e995269d68c273d7cae71e79c66902a059ddabfa985a1e43cbd072cb5521debeed8548a069566fb2a32da71876dd71ec762f76b10b9f35b09635e79861f22bc3aac2422c33d555afae30ae7cc1fdb6d96b164f095783ba6bd03da10b22278449bb77c0fd31f518946efd75c94715423145c320fce5c429ecd79f9e294facfc9be68f899d2ec33c3ebd42", 0x8f}, {&(0x7f00000001c0)="40a2bc716d6f083aa166f60a122684", 0xf}, {&(0x7f00000003c0)="f90d9582539ef9bf65922804ab80fa800cf82dce93f8ab1a11dff828d63d76e5d4c38ce3d1b20cc1998b49372072070aff25a4800c395626179a4745551e14840b1b5e86ba3ac5f461d4395a4ae1abc50052e92919c56da720b47719b1151cce2110a8d38255d34e5c38495f6141d4ff5eb50b8f14890a5a8b2cc22f17462deb905ca18e67927050310aa1eb85de7c1d7e0d83a12470a69e034fe4c12bdfe21b7ff71a28ed6d2fc48d1cf0d0c338d12b8ba4e0", 0xb3}, {&(0x7f0000000480)="6679ab6e177f68bee2ffd98cf0dfb68d6248aac9ed749a6dee54fae643282c5af9296b843c3a392e0c259d149382bac5ed619e522c455fcd3d764f04494862f5b1753f99d590e93c8349076ae219ff2f94dd54c423500bfb038fe48acd6e6064fa5ba4bbc8db9e32ff375ec6cb9ab38f73764e197680d11903d803f62e55ffa286588a77264494318d3a011857025d7a2ecaa05871d573f47aa8955dfeaf54786aac3fdc6c5fec704454986febad40ef1b42e9236afd48e7b7cfbf7caeb74239442964d253537c3bc71057c8b3ff55c6fe5de9c17e34573dc40ef52893c4584bac31c4b09c54cd0a56", 0xe9}, {&(0x7f0000000200)="7c8873f9ee9741c0caa431567a698bc76897bd30e07ea758ab2f02be92521521ca7ddd335c3e43928d9046d1c18259b738ea7811aba6137a3bb9cabc4cad", 0x3e}], 0x5, &(0x7f0000000640)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x6}}, @ip_retopts={{0xd0, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0x56, 0x0, 0x2, [0x21, 0x8, 0x81, 0x5, 0xb, 0x6]}, @cipso={0x86, 0x17, 0x2, [{0x1, 0x11, "9122b374307c22e7c78078b8604eee"}]}, @end, @timestamp_addr={0x44, 0x3c, 0x68, 0x1, 0x8, [{@empty, 0x8001}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x8}, {@rand_addr=0x64010100, 0x1}, {@remote, 0x80000001}, {@multicast2}, {@broadcast, 0x80}, {@empty}]}, @ra={0x94, 0x4}, @end, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x44, 0x8, 0x3, 0x5, [{@remote}, {@rand_addr=0x64010102, 0x7}, {@multicast2, 0x80000001}, {@empty, 0x6}, {@local, 0x6}, {@empty, 0xd821}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x1}]}, @ra={0x94, 0x4}]}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r8, @multicast2, @multicast2}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r10, @loopback, @dev={0xac, 0x14, 0x14, 0x2d}}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x40}}, @ip_retopts={{0x38, 0x0, 0x7, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x23, 0xad, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @empty, @multicast2, @loopback, @empty, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4}, @noop]}}}], 0x178}}], 0x1, 0x4044000)
recvmsg$unix(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xce80}], 0x300}, 0x0)
dup3(r0, r1, 0x80000)

20m39.856003642s ago: executing program 3 (id=4457):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0xa63abe0d00000000})
syz_fuse_handle_req(r0, &(0x7f00000060c0)="970b180393e57da0084004606e0f7eb55b4379b678ec58dd5832867fc4741e325499108ee901f5ade42a10a2a5ca59b706328aca067422dcda816a63687f6b445fdf7c8c4c158921aab593be18f8f3e3a72a3c634c089c468f2afa55a47fcb36c8ec931a3b8e995ca8f9da378136eee8d00878a33e262e3718e8829586fb5a3bdd2143ea5a880a6322892369f494dd40593794a88b4f0e69dfc3d573117dc27d511cb0b7e7d1c13dac381d4472cb9eba0637c9611565d496c7a6936582144f524085bf34af3a90ac0a0db2f79a423fa8b797909b65b72ee23068ebf92a9ae53fdeca4a47ec6838e363039c63988cf6f4f393f907cff08e13520751cfa3bfeb452f120d8a5f462b040f8537f7add203eb2b2f5784376b4e0d85c027c4e0d5817ce1db986581a147a5c7e820212907992afff07f13a43b2a2c23e6f61d7bdafdea1d396e0fa1e79afd07195dfdab53cbe75d4b96971caef941b69525b87d59fcb99bfb348a12236968f9dacbfbdc4d9b0b01df755ba3b6c320a29e5bc23bd6b20f3b27dc3d63d2d2ef11865347c5ca1504ded5d549e17e1194d717c79bc330ebfc3929d079152f51f3ab9701a3241c7df4130027ca1a6d0e6b5f2f2c3b659cbea4cef19728b45f1325e04151af66111cabddafa17b90f193c52d1c4fb646f99fd42d77a3f16c05a491a775962a2a4ee9f9f6c1a5eaa68305a88add9d6f35815f37cadae92293a0db1613662f145991ba5fd632c4a170588f8265e11b3e1a4ff2b17f3664b98d9c6f54a356f19a9b72175e7eb46ff4330812993886cd7b42ffdc3767a4ac16dd21d76417b70cfe97ad6ad0ddea7284d0e3ecf0c6c6b57833f65963f3764e297c994e0181bbf693c8fc0e57fc15b2ad776a00c19a805a906ffa80efa4116d5f5c9863a74bb340008d958db841c5f1e3b286afac717ceabcc7310e75e45b61215f6ba0bb496bd5e094b6139326758c1d81b176e11da5eda522f05346e1a71a6358b4c9b7653a66ae7153858fac4695d64fe2962b0d62d6d8aac14cf9cd2199fb039b54b64f5085434b2339f90bc11f2e407a6e84557de9a7a7edcc3b15a7798cbc68c1b1e1a822103bd43b656e933bfe886736a2bda6ccb228a8e4fae5956673db0105999017d8b68159f7a9480fd2ca70bb7e9fbc8f4f1c3581b1f528c8fb5b5d6beb769dd5e9650739f3cfcb61ab7b066c342a6c6886b0bd83f399e3eb74d2cafce7fc76febe624a37e185924afa8695caa7d3c1a97fd6684979ef33957a334fbf10c7a9bba18397082580df2425129a87c4868d41d1bcda8a7faaf1afd492cb4c83b7c5ce7a950f92186cc07bf27dcf58ac56506f2453399070ae8e5b009e40eb1970bbe8a1c9f3befb54255602bd191bd46c56c0fda2842462c0b68884f9a922d2a8b161aa9ca2c0c52bcfa26b7b7a152f2ccd16ec4974361f7322dc3b345e926e1a1b56200dc425e2e03c3d7194f9cbd321e10de387adf9790a5706bcf05d9b8c16e40e5633c44553c2aa8611f7656fc732b5dfce1eaf212d2521eb013fcf154d251553ba7a6a1f7ba8b7ceb3a1df621376543a451fe76671beaab4833f1be28247919c7cdf4177e2c9cca78ce52b5a7e4dde913dd8b13ce861bbf7048822041f4b29b3441b4880a8f7a4a289ad3c6258494e7736e48373408d248c3b033372ebdb3d9a406869445b5d956434a576b83d4a7e7b47ae8c69f50be20ea56f171e592e114602ed4f47e86dc34008770940adb4f0167811c474ada06693b55f567cc3201f97c08a3711dca486a86c367f59ce44259c1d71cdb135aa8630c4cae61ad07998a2f781ff87c946e8aef9bde6d4738bc009fc43fd176bc38756a0ca48c382395b48bc55da32892551ecdd0bd3f4c69a79bbe600f4103f21e443821492b92516833b231942e91a39e7401a42ba3e99a3a2fefa6167365b9050305b6f09a013f41e764a80f422cce051e5b30ba6528540ee5d4ea5872572c85f321b68e730f40f64b648be31a9e530718ec17443a1a4dcdb79cf799cfa75d0bfa0fde71828d8f51e38dc3d1d77430ceed007426f689d5843c34afdec5dde3e480a36ffa25db4b3483cde91e56eee8756dd953a3abff11bd7901d6b37c8371b023d7457361908576f92990f19e9f48dc58ca550e61a035161f1539b14b7bcce535b3a3783021094129f312c03e51df62579ae9423927021e8bcf530116f3658a1e94d39a800452f7461d2f001f86b911a8a14b9e61c2fd8f959ea40793df240aed5e5862ea59d78fb235788c1ba3c0ec44fbefc29c2e6f22d70849750625c3c15227579d42858b5fac30bbe86491697cec1c4543addc1f50202fdf77a6d2d23e70ed611a63368694e459012ebdbe71c4f702980d7ae63aaee33d5f8df5fce071c73cd918991c6ba2f95f33a9917a22c9e7342dd492c9e2c2f6457c3a48f35edc1720f2224f2af2ef4c0a38b75ce27aae5d5ef615920ab9245851590cdcdcfaa7e5a66b73f5a0a1bcf1bab66ecdfc0dcbd8cebb1b98f6256cea6761c835a761819018fd9c3d2f541eba25abde06f1551328800b1efc04d8e10594dbe95f9f10005cae8c5b27cc18268ebaa4578f9dcfa99aa61567a55b43545ec729764af99d224cfea6a36a93d4f70bae3225256e179e81a0c64dffce9c2141994253af664c33f881aa417fa3b7e9424f1841f1aa845ea0fe05c4e47b318bef60709d6f20c9eee6e8c0c18bd161d3dbe57d82903937e10c41aa9066dcee124354584232afdcb60d185bc39fcc5e7e5124d17e2f998b64836b587cf233469b92af65a70f4a8f35df9e24c7d5d21bda27ae44ce6706f86d3747db675aa329e8b43652bb1e89687dd003dd7924d300f498d444639b3fd413840cfa958e436e5959e95486161af807cbb7304d99284818eabe39493c66664e92143ff41602a3805369f461abeae5e5b6987a20fa47495cbeeeb322c848147dd9a052384a49898138557e10eb015df370d01977083ad24c7defc8c80583d5f5eca20d0853afb9f41c356f8da0e2435d423528f67f091fc614645980a57ed893ded1c3d37881b243b8a5503f45672492f3849895c9377277a91e7090241832629032872294896107628ffd1151c444153f54b484fa3e5ca057cbe073e6039c11b1eceaf7e20eef2576aa99e7a3f36aed9beb089af28d82e2dc5e97da4878b76b5224e1d293f5223c09f715fba13945695a98624eade1381e31c5651069805e6f707811586f5f81e431e8624a608ba1ab405d2593b1f9f667b89d82e60048e4ef3be98bd3078beb4e5e66e8823c8b427d6f84468f1f18f1ff8a8c11515426993334bcbe0c3ba37b91be07eb800fb2e00a24351457d8fc067b4bfec43c0ce8cd26b23bfbb27d3da7bca3efb7fe6f7715760eda4e3a27a7be7419b803667ef6057bdd5d44250b47fa156af04db91fc57f25425b3cfbaf90a840fe5cfcefcd1500cf4908ec4df10c8bc14ec284bb99b13a8f6136e5e1c669806cb5a4a5227f7952c5b605a2b443866fae399a1f8fea323784935c3e5a9ba9e831749efc9b8228421bdb91afed16341962535cebf6fb02679e5412f67db405c90e218789b634d92a41aaf528c92b8bf38b629a1797c036465b77dc3bb124bdddd309136681d3fbe0251698da27c6f89589171e4492209f7eb48d50a161a5135602fca3355f8934f879c54afb91224901b635ed372fdacc9469471225d2ef3c980466027b86cfe3d664071edaa29b47455064a074da56f4e098ddf27984dac546826aed38e464d5c5a79a3ece544cdb3801de0e29bf5164dbcc14578e3e6c44a4a9041e2315f1243358c5949377352911e0a67c6de7e11b0881af528fe478c34909a1178a8a4f7fb727317e4f3981706d9c9215224604c2d6a4faeefc21bd635c8412931ac4feb2c60666672fb6dc5deda0d6c4ce31f2b6cb45907427691488abb280c3fd001f3d7507c0db358af7151d3b8e2e98eb8a78ee69966f7a1307882c5b57530e0dab5c57f84852c42db013e3448da2fb0a754ed97c001f33cca549eb71d7aef88d1ae7fac0d96f334556d75f600a029ed698ce9e4302279999726a57337b9afda0b0292c14d1687a85326120d9fcd84cdc02718f26c12ca28cac81af0dede79685233be41c7269c57100c603a4f9536f757fa753353bd0cded7d4edab29dff6f7dd5faa81078c263c9d1d7e662a0ffae22d8d12e679de9ec6c634ba46ddf6aa86ac0be41cabd9b14fd12107ffce96915fa0154f5b6017fa866d14ff47754a58ba14c1a3eb3f23f040779a788b774604c3a8a7dd818619352cf47849eebfdd3b49b56f376044e7cb218759059fa85057f96c159ccd63ea6cd0bf47781c2d023411854dd3ea46f4913cda9672655e566d2e83fe2e0eb5476bd6fd7a84557e37a4e8d32c75ab51dbffc59f0cebc3edeb395f38f82765ed3cfdce75b2fd570e783c8c3afb31049383af0b51575e5c9dd9332bde6f684a3e11d199f43004439ed535a20c7f2a695cf9b547985421ac62c2289c71491f0617d23cb7a9466c8f0482eb2e8aa782118702761e0267ef500afc52f4a3a7a53ef22aea542f679dc5c751c766e06af453576689c87b3b89c091e5444ff6fb1472fbd271fffb268a2eada125d7acfc70c8ff4cfd3f5421941c2857e54ed0617d6430b806d605c2e508cd5a7764d6ecdc69dbd050a97f8696535585bbb95b66f751566ce612aebce9a0b021f9fbf067870fe447dd05e8c521413e7f27955db3b8239836b6ad120f5fb48e9003bd19b05f94752743d89bdc5492c2ca1bc3133fe0ceb29451900e2ac713cf2cbc3a531048a473a195ad40c685b539f806f434c9e2cb6a8a25df84d41c13d1ceb90de1a3efecd06a53ac9a32654d1ece86dcf6fa17ea6a4f367f9b360b3e26514bf94af1f52d9c0b0691241e3c6c302e7054bb738cb234019c0e45a7db270ab9d75df73568f25579d33e7b42743c924b1f888df85c6166228f5391962b689f0a4d9683b43ddc98982a820b5c60d9c4e3997cd2212fc3850b2bd41342ccbefc1e4ec2ad7ae285f156f4a4f383281018c73ca4f2e9d255487a9717dd39cd744a000c68c53f82a22a08bcb734b5bbb8364180991140c2e727dfce4b19e70c968c97393b56019ef84688772d488b9bd6fa9354ab64f731e6adab543851e5ca1470fd13d0334ba025b57db5d9ea13c970642726284fefddab8fdf7155f5b8e3b3b86d098c4207b428bffcc7ff76f6397b6a3efc3c0b0fb2a4343b4051271f87e384c2b659086ba668c66a15d68b87faf82a60b184f27256e36a9ada7c4422754be56dbbab50ed781f36e40ded65a30378003de5b5cd5f80a6042613c76e80851312c7ed2c07b762b85a1b6928a7b2428d2bc7a6bfdfa2ba55aed54fd3c878ec655caf1223245433b7c6fc2a2d3b0393d7ba4e12f26a53b9d5afdbab230b9148f061df2e1c0fe73c2abcd142125367fa5e598e500263d9b27e759c08b7debee4695a5b192d968108c134241f236cae0434ed71e5099cd466cfb04d5f7cef2e94683172f82a9841610cb6fe55d4bfe73920992bb76f362b9cf7919c906495d4b37a915d23168fd7ffc2f36de55a1b17fa2232df03663ffa2a4c5e76aad90fd5abc80b6dfc16ec6aa328cc7714dc2d7bb14aae9f86c999e93a59fd18fb2300539bca25e69b04943a16c985ff481a42c9d8af43eb61ef7432b8e3aa5bc391c181b7d546b94ac659bc4b501157d3adf9d4cda4e298a4e4271fa2cd08919b055eb3f168df76c1f0b0d5cf5760b56774f105e51c93cc03ce97b00768b9620a6fd5162b9d9191ac0928d2460e4e821a276680cedb3b8167bc156b48a34d4c24d4a87fd09968a725d4b6a1b54b169f1e14143e97a84cf3d8eb4ec5458dcd5ff93365396c00533c3493847f595725a4f15300183eac306d16ea136b97a9864d16330d8c5b8321a6947caeb9cdc7ff4e53c419518ce9bc11f7355651be27a2c2b9ff4127ad86b96c1b5967def371d5d6a3f365abaca55c5f19600d1d5051d320b065c2f78f2147c170b9153a0eefd7b3f1e637cac3fff14b0eeaf472e6a6a9f7553ed3267c911d4d77a4f7285b77df725b3a88fbfd221343f656d60b61808b52a8facc81b8516698f2ac50cd8769371e67278c59ab1cc890fab36206b939f23b31ab976651ca8a4e7754bb10d03d4cc6506f13d98f2bda76477a69a8794a34614a88a7ec94e1a229ad6f747724a3bfb674cc87ea0dfb610f66057671f664206672e78c00a3f4585f17fc40827d0c8af88d3437f811274f662e9ee73d550833d0c8fde449089f8b5e8a25d25096537ac960699a07ebb51271a8f8556037436307063282febae745d53f8db65f13f24cc2e525ae465c9bf79f76b82dceada3bf34529321f913dd18548ab2a26f2a065028f46f4dfb18294dff30a7e5b131a08c671787baea45545d15629ec2f435d9138e517055cd48af7120b3b79f2275baed8a4b6a0f33c30890105ae2c07a332df79f2fd6767ecc66f1ed628c968a2685813342677a2823d10263958eee79d03e393a557475701694b5ec3dec8773f37b980f5812f1cbaed6e5253da037b5f88ba2070f445d74907679460dd48e16442d345abbd37f7853ec7123ff16db46c8571987db63ed711d36c05c2dafac47ea366f9467624b6296a2b9fb7056702d4ba38b4df72e7db3244421f31aa0911af3e3a09f9e08e96aa1545c37465f990bab4ee2821b1a701aa707db1dc18d52fcede15245f54a5f1a47b0d82c33fa378625d247b08753ac5fa5444b2e3f9d1d3918b154665b02fba87e39d0e27bdf60b27930eee02c31d847d40166544ab9ef801bd79bcc8d93980354021b8c7a1b9592934a90917db115bcd92068a970680011cb074da705f1cd06a0142862a777c6a47afd38721979323e27151c114e8901d41f79358e78289af10134e22d903415e2ebd2edf34ae10eefeec219db7b13ac983583dd4b02dcc615c6f70e6cf35ea216807c4b9c81482c2b941c7d6cd6621d9480ba924a3372ca3e3ca78438b0e9bf7c8436fcc0047b3bdb8d70190076d9feea778005d5d69f1b1194c76dce628e17b6beb299146b25f3f6660263c23dbcd08f70ccb45569a81a140eff66f2190110cf0977d9df7a2c437042961606ca1a378c8f59a310ad6c9cb4ff30a2d55411eeb38d927bb4d0f60ae75d90ab78dad14097f6dd38f512af2f932e1ad6a5e201180373689981f23bd9f59e4ca29244a8ea4236527fe2249eaa299af174f25b13d72b181c2f421652ece630ee1358098c29f84506654ffad3647792852a7faf107e36ae330886ffcef6e3a1725495e430568a9cd85d385e5a15d2f77ed274be3c8edfc52c230d21785b927bb8e470f989e8c89b01af8d04fc7050fc978013fbc5dcedd2baf5e8bfa8e2e1d3f193c224375db2f71d4655d2f647e9b1739657a0ad8ef6751a88151a3413ab870e0d7ba3f0a55ce3f30d55e8eb9e47e3d82563d9180399e7895490b8561a374acf5c94a1c648fa06780c4141c58ed913fb92865d3b4883301ba69b3f2b20c1f82024bd75e62ce2972d3219bdb961ab3bbac8f1d873ddece6d85f540f82c9d79b0937973335fe05e5c6ad8fcc525620a57678d58c7c2f0f157e030736d0fe4f6de520b390794cefdc6c828b4512fb6b2000d08e38693fa22834e69180d31b3978f9da75389f919a0d49ff961997d14ae6bdffcfb179c2ead52c69dae97416eef2602843dcbe4e5ae613d429feef7ffba6a31a8be8bf2e62c6d374c807363a986519a8cf9dfc99fc6607486e10599ae415b51e23f639194885e5119036e0e535accb4f126b4c45c47a53658af1e049daa2967b01d9450625d92f8f8e9d151633646044fcc5f6ad835479d48702839456decf070c7e6143cd31033810bd7da01c4a2cfb08605b25c00336f17d3b5a3db48866ef864b8d9cea9530429d3fb1afc7ae9e7d06aea9034db89b2ec8fc2a96d8d701fc51994305077dbea527bc0fc398b6bb7d42f0c408be69b98eb173d285fd8010ba75c57f2dd982582153814ff959fccc78aa5f7901357f6129f840af6649534f9ebc7750a20502a7cbf2d2f28c6f97884f43779bbbf93c550f8e79949db0e066538456b4e966761656eb7bebd5afe9b9fc241711b874682b226e9c6baecc1e909858e01b32472f6f8d483c073d3b576a4b03534dc4b620e21e6feb4bb2ddb37e3f0d4ff92c0af19e6087034c72c5928707748bc10ea22788bd938a0e6512cae4733fc1a2e47f3d4961932fe564684872922b44db143bea77580b0704675290e0839cb5ee529ada8b4c0bb14f05c5c396e29376f1ea80dea2852a88ddf8929fd402571fb242ead60d2be61f1662e1a833969e18e23e0b808900e7ed4be9d6944942da7d384739da1055cddc94937e1ea4cd305bf161c407b471df0ce3fb3413c5bd511d3c65e70edeb5397b0a8701538be7d2f1765688cbb0379744281231e60f5edcbfa6abd177405c455f77e30b95011ae4fda2a3c6d3f9a29bfe7656f6afba48358d57b4e1a84ebca241b7a427c6f806d1f771b540912f05a6df0d5223f85639fd7c163799e28abd08e4013aa43ddbc11ccc9d53131ec5c75f7682481968ad13ef34ba23d4759b51c4cac5a7ca2c73b3103c5b9e4b8686b872edcaca791d669589655e239920fc088eeced3a131ddff2eee9fab3cced40163eebfb29a85b3e97bbd97d17c3b06d3123409f115cf3e3d1c74dcc359664ab942e6ab36c41b1af4015ff5baf700eb99abd658e6833039051a235a2f84b70cb8d90271a481ce40e2a18bef8dcf7f54952b090bbaaaad391cb6cfa218a1e823ca7b16311e35e0350dd8016f67ed34771d7f3a607c1c9ed63524ea0c865148b05f1d017e475641b5076df632b7c261ef54c23eaf7cf52c22864a8ae8f8c3442d147fd52a801f87665b47e229a77b8e85c21d7996c7de9ac4899b098380f74eff119369c81b21b0b916017d0b604ca2a74b1424a4c3132d265d12a01ec2e8cff9809ed2f7891c55bc5cb932c6ea3cdba14cef47a2a0521e36869e9d62914447c3e6cf3da9ecaed915dec41e81605a46a4ec71a8b5ec0bc2f62b3237de7203e4b6d01bc32a5b2dc416623936a324b73e0c63ec414ce1bb4b344db85f014979ae866c4a2c2cce0f814862c0691883dd2d7bcd63fdf2ddf0cb2c6a1a10aa878ba997b74db8e894e4a7ed5e8ea1e3c0b602bae23c6c8c5f38b919aeef5625501fe5d4759c43e90de56122f3ecf87e8023f25e0d3ce64ab629409e881d2d1c5f083da90d45907e62ce3177f7982e514779a13f70bc207d9aa55835e37a5f4782242681ff46600ac9e63f90a245957440987b54b3678ae808c481d25755dba747cd7c3cc0fafb9a142e1ec1a9a5f81b5cdd6dbbc3a4ba5d49f58be6196c305e2af35fdbfbbae02cc4efe771d65e6000ec3f6cf394650f5144308c95279b9df3b29236a32ad3e9cd377296a4252e7dda1bb95d99c32cb81d970de4ff47760ee087dd2fa98392c8ede48391b49cd40e314adb896f0f5b08ffcdffdd70775160144552b13edfac23a09d53a4a4a827a1f216b2827cb9fb47a9fe6412d509d35b754d3700cc0dc8d7a3406a53bd1b0ee5112c50fb8f805be52a6c4e1e664d174727f33720bb371fbe9adc747a234013fcaadbce5cd2d416414b1900074e3ec73a36f32f9d7baa96ed4ea37aea560df4d9c724c69b440139a6dc1758bc74b59c521bc59958da71c4e5c23e4a8999305d989369a9bcd10f0faa789f4040950c349ef0ee910a822ba8df4a6cc16bd72dfb85d7c9a97911e96541a7fb6fb4711cdfe1e1083b2e8e870e2d2a7304f99296a496fe30553971b75f78ace054a8e3c6d54d40b2dbb2ee38a6244139fcba31b88a3ce91d637e7c88db35794002ca28533a46af85929f603e4cf4f5aea715ac4495d2c07e8bf79da078521fac5059dfe6dff61405fb6962987d15a2c7b27a851e3076803c7b4374a85f05b96e9bae91656a003e9acad767c9ac88b339fd868136b63fcb0520a2ee2f25128c8b97a0d43d60be7436756614108cfee63fb0fd65cce0bb0afcf5ea7fa817134c876c949945642a29d71aab10d05522b4b1788bb051ae1ad23fc7e75607580f9bfb7ed901a66d69e79ba742ba169f7e0d36d0c8482d3a85d66a9fc08b3e4c1669ffb4f74f418d4317fbf03b785859601b9e3af056b6a2543289738fe1e601e635ff04d750f8724bdebbbc920a7ca2f99cdaff265299bef09a2e20878682f2f37e46b5d2d3ade8d857ec6d3f7a2779080a5927749086b33b22def28633d53dae49362b4c4d47d2899562a52f22618a45998233048f0e54ba01dd53953c9f508abcb0acb1c1fb1d110e5d6c14d707713cea4cf0403b7573ab5b0a1439e6b2d29c46a3077e0dd296ca751db66f829a42c5afe0304c48fbef52c526c8f2100f6826fd4a5295f7492855f841fdb1f8487fba63b6db19af983a75468ad29a2b6cc58f9ef2dfeec8d798d60e1950731e65c5e2ec1065a22915a30845a5f87a26c067ea870d4e1ef71f67617906080b7b122b8ac9e4da1b05442b5477ee97343cb20f2587744abfa5f318ce29cbd24df1a6dbd42470789e17ae8115a588788d910a171b88dd1b94228728bfef3b28b2b32f523d603fa28d00cf23b0a201658f28ef7920f36a0da8917068a4435e0d710d320258114e2fcde2e1dec0c9faac26d671ea3735ee2b26cb644ba56ced9031cdd2b391c4b96aee7a4c38063e61dbd8ada24cea7ced0728a365bc2320eda9746823b7d83afdc8b3b293b56739011554000aec6272004a002328f20368c0902b8a8d251afebfb4d7b427cfa8927385626a474e3918ff557c8f19a8691011523a63c7e578b98c8951157f0763db3ebc4ea24388527e83b149ef89d4173ebb1c0c9aa3cf4e1a47faa3ebe7ca625e7ef077b38235781236797360696e552b9289a80491d4c3e70ff00b01540deb0de1b3385549b667cfa3598a34751868a14ccb22a420781452699563b16d0d0f1a7f0ba3f0ff45cc2d2536f1de9e024bbc923cede7725f84bf3e6a645f43c4ab3db6ddff671f283857262570b6652dbd8c869ca6a3896b870235047db08a54e5c39d7516c4b0d621d87a9c3e8c53249ff2ab9145f026ba4743a46197af56a0df022363ed59a5c2011e664a05fb952d5ad9ee2037c59a4075e4b504d91e87d303e0bc55cccaeb17e1cbab6176d2d148ce05fe986c79eb843886194f80e202c4f373244b38fd46643c1bc0fa8723ac498c71919e4ed8e5092832aec00a35ceeca94df7bd2c0c02dabc886cedf1fd044db2b45c30f8c0334c992eed40290baaeeb4d00e2cb504ca1173b6b6eec8d2aa3a1bf46e64c1ae1b3ca2882545729fe78d5e1e99c6f1f31c0b0f2190889c7318ce7605128a86c62c8a1fa107304c4609e28a2a43c6799ff6a7d70909ee10676801ee670004cf9632e34cb8cfb43d2f477ad335f5142da0baa4f4542dc93704e93a3420ec50284626fe36618b079d0db013d691583aba257947bdb1514d0318180ae43d0f94712f5c0de35f3e342ce7da65f755761506b9bfd186641fdbd03d5a2d4fe170fe23af8", 0x2000, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = openat$tun(0xffffff9c, &(0x7f0000000000), 0x80a00, 0x0)
openat$kvm(0xffffff9c, 0x0, 0x800, 0x0)
fsetxattr$system_posix_acl(r5, &(0x7f0000000040)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="bc0000000002010400000000000000000a000000300001802c00018014000300fe80000000000000000000000000002014000400ff0100000000000000000000000000013c0003800c00028005000100890000002c00018014000300fe80000000000000000000000000002a14000400ff0100000000000000000000000000013c0002802c00018014000300"], 0xbc}, 0x1, 0x0, 0x0, 0x20008004}, 0x4)
sendmsg$sock(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x1)
io_pgetevents(0x0, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={[0x379]}, 0x8})
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18)
sendmmsg$inet6(r7, &(0x7f0000000380)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000001fc0)="ad", 0x1}], 0x1}}], 0x1, 0x4c040)
r8 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r8, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6gre0\x00', <r9=>0x0, 0x29, 0x7, 0x0, 0x3, 0xc, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x700, 0x1, 0x3}})
sendmsg$nl_route_sched(r3, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000780)=@delqdisc={0x1ec, 0x25, 0x100, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x1, 0xfff1}, {0xf, 0x6}, {0x8, 0xd}}, [@TCA_STAB={0x124, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x7, 0x0, 0xfffffffc, 0x1, 0x9, 0x5, 0x7}}, {0x12, 0x2, [0xa9, 0x96b4, 0x1, 0x6, 0xfff9, 0x3, 0xd]}}, {{0x1c, 0x1, {0x80, 0x6, 0x0, 0xffff, 0x2, 0xcb5, 0x7, 0x2}}, {0x8, 0x2, [0x2, 0x74cd]}}, {{0x1c, 0x1, {0x0, 0x10, 0xfffe, 0x1ffe0000, 0x2, 0x7e, 0x8, 0x7}}, {0x12, 0x2, [0x7, 0x8, 0x0, 0x8, 0x1c00, 0x1e9f, 0x7]}}, {{0x1c, 0x1, {0x6, 0x6, 0x3, 0x5, 0x0, 0x80000001, 0x6, 0x3}}, {0xa, 0x2, [0x1, 0xf, 0x9]}}, {{0x1c, 0x1, {0xe1, 0x5, 0x4, 0x5, 0x0, 0xfffffff7, 0xe, 0x1}}, {0x6, 0x2, [0xb]}}, {{0x1c, 0x1, {0x5, 0x0, 0x7fff, 0x6, 0x1, 0x81, 0x10, 0x5}}, {0xe, 0x2, [0xcb69, 0x0, 0x2, 0x4, 0x5516]}}, {{0x1c, 0x1, {0x4, 0x2, 0xff7f, 0xbbaa, 0x3, 0x6, 0x7, 0x2}}, {0x8, 0x2, [0x5, 0x9]}}]}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x5}}, @TCA_STAB={0x90, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x8a, 0x3, 0x8, 0x2, 0xfffffffb, 0xa, 0xa}}, {0x18, 0x2, [0x5, 0xf, 0x8000, 0x3, 0x8, 0x8, 0x6, 0x4, 0x4, 0x2]}}, {{0x1c, 0x1, {0x6, 0x7, 0x7ff, 0x4, 0x1, 0xfffffff8, 0x9, 0x7}}, {0x12, 0x2, [0x5, 0x949c, 0x4, 0x5, 0x4, 0x5, 0xfff]}}, {{0x1c, 0x1, {0xb8, 0xe, 0x20, 0x8, 0x1, 0x4, 0x8001, 0x3}}, {0xa, 0x2, [0x0, 0x1, 0xe]}}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x80}, 0x40000)
r10 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r10, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
readv(r8, &(0x7f0000000280)=[{&(0x7f0000000b00)=""/4096, 0x1000}], 0x1)
writev(r10, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1)

20m37.684735164s ago: executing program 3 (id=4463):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00\''], 0x4c}}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x10a, 0x0, &(0x7f0000000440)="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", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50)
unshare(0x2040400)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[], 0x0)
openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
r6 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xc2}, &(0x7f00000003c0)=<r7=>0x0, &(0x7f0000000200)=<r8=>0x0)
epoll_create1(0x80000)
syz_open_procfs(0x0, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r5, 0x0, 0x0, 0x0, 0x80000})
io_uring_enter(r6, 0x47f5, 0x0, 0x0, 0x0, 0x0)

20m36.843715077s ago: executing program 3 (id=4467):
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10001, &(0x7f0000000140)={0xa, 0x4e23, 0x100, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, 0x1c)
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, 0x0, 0x0)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0), 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c})
openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000280)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
read$FUSE(0xffffffffffffffff, &(0x7f0000002900)={0x2020}, 0x2020)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
clock_gettime(0x0, &(0x7f0000000180)={<r4=>0x0, <r5=>0x0})
utimensat(r3, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={{r4, r5/1000+10000}, {0x77359400}}, 0x100)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)

20m36.381884011s ago: executing program 33 (id=4467):
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10001, &(0x7f0000000140)={0xa, 0x4e23, 0x100, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, 0x1c)
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, 0x0, 0x0)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0), 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c})
openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000280)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
read$FUSE(0xffffffffffffffff, &(0x7f0000002900)={0x2020}, 0x2020)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
clock_gettime(0x0, &(0x7f0000000180)={<r4=>0x0, <r5=>0x0})
utimensat(r3, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={{r4, r5/1000+10000}, {0x77359400}}, 0x100)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)

18.952422624s ago: executing program 4 (id=9260):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x3, @remote}, 0x1, 0x1}}, 0x2e)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x15}, 0x94)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x803b01, 0x0)
ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246)
writev(r3, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1)

18.491625449s ago: executing program 4 (id=9262):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000122d0d4071040403dfe4000000090902331ee144f8edc931cea2f874e24be59a3c1e01720b26ff05e53759be963abe27f5cfe37ea9d1cb07d156dfc452690311f64b6e39b8600dee08b4e63a5f4643cf8d1228452172f983140671136fda696dcb62dc8e14c703d0ba8ac6f853dd3de6ea1c661b83242602e6497f8e8b9c821e8b3dccd4667b4293"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$uac3(0x4, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000102030109026e0003017f0006080b0002018100000004000000010130000a2401100a00090000000904010000010230000904010101010230000905010960002503050a2525010400000500000904020000010230000904020101010230000905820900027409c00a2525ffffff7f01e10b000000000000000000"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = landlock_create_ruleset(&(0x7f00000002c0)={0xd64b, 0x1}, 0x18, 0x7)
landlock_restrict_self(r2, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = syz_io_uring_setup(0x1238, &(0x7f0000000540)={0x0, 0xe1a2, 0x4, 0x2, 0xabc}, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000200)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0})
io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
r8 = dup2(r7, r3)
syz_emit_vhci(0x0, 0x8)
syz_usb_disconnect(r1)
syz_usb_control_io(r0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680))
semget$private(0x0, 0x1, 0x8)
r9 = syz_open_dev$video4linux(&(0x7f0000000100), 0x7ff, 0x303c82)
r10 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r10, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000040)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5}, 0x80, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRES8=r6, @ANYRES8=r3], 0x10}}], 0x1, 0x4000000)
syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00')
writev(0xffffffffffffffff, &(0x7f0000000300), 0x0)
ioctl$VIDIOC_G_CTRL(r9, 0xc008561b, &(0x7f00000000c0)={0xfffffff8, 0x8e6})
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x98, &(0x7f0000000180)=ANY=[@ANYBLOB="9100004e673430838d18e33d14e3a2d32e6036ccd747f5a78721e11f189d249952b7fa49f1f2ed5f1202cc464f4cad0d467a15332796ac7e4d8761de4c7486753cc3481bf2e97293c96c1ac45cea6e6929d616755d2ccd624733bf11fc482bffb075bc08a71f37664e5c82c7e7b9e3eac42f6dd6637e654db0a14a28ac7c262445699c5bfcee5a28f793994082878f7ec5501d3ff40000000b1d377a4995b90e75abe88b74b503f192be16fc8f13cdff4a3e7465b168b9b102657d24044baa26a0e353a29b61b337655ab3dbad9ac45bbdf28f08e93b9d5643fb7b43be19e6ec2a870f3ddb132e2d494531c965bd31db801079681be21f54"])
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x18, &(0x7f0000000340)=ANY=[@ANYRES64=r8], 0x0, 0x0, 0x0, 0x0})

15.496137532s ago: executing program 4 (id=9276):
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket(0x1d, 0x2, 0x6)
setsockopt$ARPT_SO_SET_REPLACE(r4, 0x6a, 0x60, 0x0, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f00000003c0)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usbip_server_init(0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYRES16=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x4a, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}}, 0x20004000)
futex(&(0x7f0000000300)=0x1, 0x6, 0x1, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540)=0x1, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r5, 0x8000000000000003}, 0x18)
prlimit64(r1, 0x4, &(0x7f00000001c0)={0x6, 0x6400}, &(0x7f0000000280))
socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000640)=""/222, 0x0, 0x1e}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff)
io_setup(0xea, &(0x7f00000000c0))
syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00')

12.414417953s ago: executing program 4 (id=9285):
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfc}}, 0x2}, 0xfffffffffffffec8)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c41f4040110f00107f00000000010902120001000000000904"], 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
process_vm_writev(0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a3c000000060a0104000000000000000002000000100004800800018008000100667764000900010073797a30000000003e00020079f573797a3200000000140000001100010000000000000000000100"], 0x64}}, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4", 0x1f)
r7 = accept4$alg(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000002a80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x801}], 0x1, 0x40002)
io_setup(0xff, &(0x7f0000000380)=<r8=>0x0)
io_submit(r8, 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000002c0))
syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b00"], 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
file_setattr(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x1ba8, 0xd9, 0x3, 0x1000c, 0x3f91}, 0x18, 0x1000)
ioctl$PPPIOCSPASS(r4, 0x40087447, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0xce, 0x0, 0x3ff}]})
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000})

11.310256249s ago: executing program 6 (id=9286):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_clone3(&(0x7f0000001540)={0x300002c00, &(0x7f0000001340)=<r4=>0xffffffffffffffff, &(0x7f0000001380), &(0x7f00000013c0), {0x6}, &(0x7f0000001400)=""/207, 0xcf, &(0x7f0000001600)=""/216, &(0x7f0000001500)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58)
process_madvise(r4, &(0x7f0000001800)=[{&(0x7f0000001700)="ba8a8fe7b035e493e74376606c89e86624d4c9c46e8637914cc5104cc2", 0x1d}, {&(0x7f0000001740)="23a7acd3fd3f6ee6a55d2adbda9faab236334844f870de643bbc9178bc6275faadd87881dcbd74f11768de3a204de28d237413b82c50590235ebdf66358ef073b3f94a2a3eb03f782d900e2e15962816208026b1c58b43a2", 0x58}, {&(0x7f0000001880)="c77a231b9e8ac087ece091f4fa8929b6c903cf109fc23fb2787f4750f329035dcea6f26f702368d829ddec8a40f3591263f4596d705b5b4ed63e32e4a2d2921ee984c05992de6afd55a3468fbf9b7ac864ed70fe3495d7fa63c23ec42b5678a08e4c5e1a39a15e229e5206dafda3a38e2aaae42f7f7f3168e717078f6b27abb8eaded85a2669b4def165022c73913fdcc87323d2ae2b8a084e6d7faa40df536b331bd0e9d2af3209834efa4677a46f872f", 0xb1}], 0x3, 0x14, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xf2, 0x207fff)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r7 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0)
write$apparmor_current(r7, &(0x7f0000001940)=@hat={'changehat ', 0x3, 0x5e, ['!*{\x00', 'nl80211\x00']}, 0x29)
r8 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r8, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4})
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r8, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4})
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40046607, &(0x7f0000001980)=0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), r1)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r6, &(0x7f0000001300)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000012c0)={&(0x7f00000011c0)={0xc4, r9, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x34}}}}, [@NL80211_ATTR_IE={0x21, 0x2a, [@supported_rates={0x1, 0x4, [{0xb, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x16}]}, @rann={0x7e, 0x15, {{0x1, 0x34}, 0x19, 0x6, @device_a, 0x10001, 0x8, 0x5}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x445}, @NL80211_ATTR_IE={0x77, 0x2a, [@tim={0x5, 0x3c, {0x5, 0x1b, 0x7, "1f5ea91e8eabaed07c20b381b77f78070ca37a74cdd276d6abaa15c5ff2e15bd97a4b3b34b7bf9c98d71a4c9b2a387bcd35046f9a09ad1e2aa"}}, @mesh_id={0x72, 0x6}, @mic={0x8c, 0x10, {0x92e, "d63a15ea6d8f", @short="a5c40240320ea2f6"}}, @ibss={0x6, 0x2, 0x1}, @rann={0x7e, 0x15, {{0x0, 0x5}, 0xe, 0x8, @broadcast, 0x0, 0x1, 0x10}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000800}, 0x24004000)

11.143901718s ago: executing program 0 (id=9287):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='timerslack_ns\x00')
writev(r1, &(0x7f0000000240)=[{&(0x7f0000000140)="fe", 0x1}], 0x1)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7})
r2 = fsopen(&(0x7f00000006c0)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d3}]}, 0x50}}, 0x0)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x2c, r5, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4814}, 0x4080)
fchdir(r3)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_proto_private(r6, 0x891f, &(0x7f0000000000)="d84450a4bf57990ef9b33a")
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r7, &(0x7f0000000f80)=""/4096, 0x1000)

10.758426971s ago: executing program 0 (id=9289):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30)
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000"], 0x0)
syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000009500)=@newtaction={0xe68, 0x30, 0x0, 0x70bd27, 0x25dfdbfd, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1f, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x401, 0x20000000, 0x1, 0x4}, 0x3c, 0x9}, [{0x10000, 0x80000001, 0x90b71e2, 0x6, 0x6, 0x9}, {0xb943, 0x0, 0x8, 0x7, 0x1, 0x6}, {0x4, 0x80000001, 0x9cb, 0x9, 0x4b, 0x3}, {0x80000000, 0x272f8ca0, 0x0, 0x400, 0x8, 0xde}, {0x9, 0x9, 0x1, 0xfffffff7, 0x9, 0x800000}, {0xa, 0xa, 0x1000, 0x7, 0x2, 0x2000}, {0x63, 0x1, 0x2, 0x1, 0x6, 0x301}, {0x4757, 0x5, 0x8, 0xbc64, 0x5b, 0x45ef}, {0x1f, 0xfffffffc, 0x1, 0x3, 0x2, 0x2}, {0x7ff, 0x400, 0x10000, 0x9, 0x1, 0x4}, {0x8, 0xa7, 0x40, 0x6, 0x2, 0x9}, {0x2, 0x6, 0x81, 0x7f, 0x2, 0xa}, {0x40, 0x1ff, 0xa, 0x3, 0x6, 0xbebd}, {0x8, 0x3ff, 0x0, 0x8, 0x7, 0x5}, {0x0, 0x4206, 0x7, 0x1, 0x9, 0xdf99caf9}, {0x1, 0x2, 0x9, 0xfffffffd, 0x8, 0x4}, {0xffff, 0x7, 0x9, 0xd, 0x7, 0xc}, {0x6, 0x6d4c, 0x2, 0x2, 0x7, 0x3}, {0x5, 0x8000, 0x3, 0xfffffff4, 0x0, 0x7}, {0x0, 0x424, 0x4, 0xffff0001, 0x2, 0xfffffffb}, {0x6d, 0x4, 0x3b79, 0x2, 0x4, 0x7ff}, {0x90e9, 0xc1e8, 0x80, 0x15, 0x8, 0xc79}, {0x398, 0x4, 0x8, 0x9, 0x8b1, 0xd8}, {0xc9, 0x9, 0x6, 0xf, 0x0, 0x28}, {0xa9, 0x0, 0x81, 0x800, 0x100, 0x7}, {0xfffffff8, 0x7, 0x0, 0x0, 0xab}, {0xc10b, 0x2191, 0x6, 0x9, 0x0, 0xbe}, {0x80000000, 0x2c2d, 0x400, 0x2, 0x3, 0x7}, {0xfe, 0x9, 0x9, 0x9, 0x7, 0x80}, {0x10000, 0x3, 0x7, 0x800, 0xffffffff, 0x1}, {0x7, 0x6, 0x7ffa328c, 0x2, 0x7b51, 0x8ce6}, {0x8, 0x212626f5, 0x2, 0x2, 0x8001, 0x2}, {0x7, 0x2, 0x7fff, 0x4, 0x7, 0x9}, {0x9, 0x5, 0x2, 0x4, 0x9, 0xe}, {0xfffffffe, 0x2, 0x354a657a, 0x7, 0x8, 0x8}, {0x1, 0x5, 0x9e2a, 0x0, 0x7, 0x3}, {0x7f, 0x5, 0x57b, 0x2, 0x0, 0x5}, {0x3, 0x3, 0x1, 0x3, 0x5, 0x9}, {0xff, 0x0, 0xfff, 0x8, 0x4, 0x9}, {0x2c, 0x2, 0x6, 0x10001, 0x2, 0x101}, {0x2, 0x0, 0x4, 0x6, 0x3, 0x10001}, {0xd, 0xfff, 0x5, 0x94, 0x2, 0x6}, {0x5d, 0x80, 0x4, 0x7, 0x11, 0x6}, {0x3, 0x5, 0xc8, 0x5, 0x18000000, 0x6}, {0xfffffffb, 0x7, 0x3, 0x9, 0x8001, 0x6}, {0x1, 0xb94, 0x800, 0xffffff49, 0x5, 0x9}, {0x95d5, 0x8, 0x8, 0x9, 0x1, 0x89bc}, {0x24, 0x1000, 0x7, 0x400040, 0x1, 0x1}, {0x6, 0x800, 0x0, 0x400, 0x10, 0x1}, {0x29a, 0x3, 0x4, 0x6, 0x7, 0x3}, {0x38000000, 0x5, 0x3e690dd2, 0x0, 0x49f, 0x8}, {0x9, 0x8, 0x7f, 0x9, 0x8, 0x8}, {0xfffffff6, 0x0, 0x2, 0x8, 0x1ff, 0x4}, {0xfffffff8, 0x6, 0xfffffffc, 0x7, 0x7, 0x1}, {0xc, 0x70c, 0xad8, 0x7, 0x355e7bd2, 0x7}, {0x5, 0x5, 0x1, 0xe3, 0x6ec, 0x3}, {0xff, 0x7, 0x66, 0xe, 0x9, 0x9}, {0x0, 0x0, 0x2, 0x1, 0x200, 0x8}, {0x32db, 0x1, 0x1, 0xffffffff, 0xe790, 0x9}, {0x2, 0x400, 0xfa, 0x9, 0x6, 0x1}, {0x7f, 0x1, 0x5, 0x8000, 0xffffffff, 0x8}, {0x1, 0xfff, 0x7f, 0x8000, 0xe, 0xc44}, {0x80000000, 0x9, 0x0, 0xf98, 0x9, 0x8}, {0x5, 0x1, 0x18, 0x0, 0x80000001, 0x9}, {0x0, 0x8, 0x3, 0x200, 0x5, 0x7}, {0x80000001, 0x2, 0x9, 0xc8, 0xfffffffc}, {0x5, 0x3b, 0x400, 0x4, 0x4, 0x3}, {0x7, 0x8, 0x1, 0x400, 0x9, 0x529}, {0x9, 0x16, 0x10001, 0x3, 0x1, 0xfffffffa}, {0x6, 0x74, 0xffffffff, 0x3, 0x1, 0x7ff}, {0x80000000, 0x9, 0x9, 0x0, 0x9}, {0xffffff97, 0xc, 0x9, 0x3, 0x1, 0x5}, {0xd, 0x4, 0xd, 0x3f, 0x2, 0x7}, {0xa, 0x4, 0x2, 0x3, 0x5}, {0x0, 0x283, 0x4, 0x6, 0x8, 0xee7}, {0x6, 0x7, 0x3, 0x0, 0x7f, 0x9}, {0x8, 0xe, 0x100, 0x8, 0x4, 0x5}, {0x1, 0xfffffffc, 0x2, 0x4, 0x100, 0x80000001}, {0x4, 0xffff, 0x2a, 0xf24d, 0xffff8001, 0x5}, {0xd6b, 0x7b8c3976, 0x1, 0x0, 0xf7d9, 0x1}, {0xae9, 0x6, 0xfffffffe, 0x6e53de2f, 0x4, 0xe2758a}, {0x7, 0x8, 0x4, 0x9, 0x8, 0x7fff}, {0xff, 0x1, 0x4, 0x8, 0x1, 0x9}, {0x0, 0x3, 0x8a, 0x6, 0x10, 0x5}, {0x2, 0xe24, 0x5, 0x96, 0x7, 0xd859}, {0x6, 0x6, 0x7, 0x400, 0xfff, 0x2}, {0x3, 0xb, 0x6f70, 0x3, 0xe, 0x6}, {0x0, 0x8, 0xdd1d8af, 0xd1e, 0x4dd, 0x7}, {0x9, 0x1, 0x9, 0x1000000, 0x4, 0x81}, {0xfffffffc, 0xad, 0x9, 0x7, 0x8000, 0x6}, {0x5, 0x6, 0x5, 0x2, 0x7f, 0x7}, {0x8, 0x6, 0xe79, 0x10f, 0x80, 0x3}, {0x9404, 0x4d, 0x8, 0xc63, 0x475, 0x9}, {0xc4c3, 0x4, 0x1, 0xfadc, 0x8, 0x5}, {0x4, 0x1, 0x3, 0x8, 0x10, 0xfffeffff}, {0x9, 0x5, 0x14, 0x1, 0x7, 0x1}, {0x5, 0xed40, 0x8000, 0x7cf, 0x10, 0xe}, {0x3, 0x0, 0x1c7b, 0x9fc3, 0x57c4, 0x800}, {0x5, 0xfffeffff, 0x4, 0x1, 0x0, 0x3}, {0x6, 0x9, 0x8, 0x3, 0x5, 0x7}, {0x6, 0x2, 0x4, 0x9, 0x7fff, 0x5}, {0x7fff, 0x8, 0x0, 0x9, 0xced, 0x80000000}, {0x7ff, 0x3, 0x6, 0x7fff, 0x9, 0xd}, {0x3, 0x5, 0xb, 0x8001, 0x9, 0x1}, {0x0, 0x2, 0x6, 0x2, 0x9, 0x8}, {0x0, 0x7, 0xae6ad9f, 0x9, 0x7, 0x6}, {0x6, 0x200, 0x81, 0xfffffff7, 0x6, 0x4}, {0x0, 0x4, 0x546, 0x6, 0x7, 0x1}, {0xad03, 0x81, 0x7, 0x6, 0x5, 0x9}, {0x4, 0xfff, 0x2, 0x3, 0x9, 0xd}, {0xe, 0x2d4, 0x5, 0x40, 0x1c7a3607, 0xcb2d}, {0x7, 0x9, 0x3, 0x2, 0x4, 0x7fffffff}, {0x0, 0x3, 0x3, 0x8, 0x6}, {0x91, 0x8, 0xfffffffc, 0x8, 0x10000, 0x1}, {0x9, 0x5, 0x8, 0x2, 0x7, 0x8d}, {0x4, 0xb, 0xfffff364, 0x4, 0x400, 0x4}, {0x81, 0x3, 0x1, 0x80000000, 0xbf1}, {0x8, 0x6, 0xd4, 0x1, 0x6, 0x1}, {0x3ff, 0x1, 0x1, 0x800, 0x800, 0xa4}, {0x8, 0x0, 0xfffffff7, 0xfffffffc, 0x4, 0xad5f}, {0x62, 0xe, 0x0, 0x7f7, 0x3, 0x3ff}, {0x100, 0xfffffff9, 0x5, 0xd, 0x84, 0xc20e}, {0xc, 0x6c, 0x2, 0x4, 0x7, 0xea}, {0x8, 0x0, 0x8, 0x0, 0xb2, 0x3}, {0x7, 0x3, 0xec, 0x5, 0x8, 0x1}, {0x8, 0x3000000, 0xffff, 0x81, 0xfffffff6, 0x9}, {0x1, 0xda, 0x5, 0x3, 0x6553, 0x4}, {0xfffffff9, 0x6, 0x7, 0x4, 0xa6, 0x50d8a0cf}], [{0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x3}, {}, {0x5, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x6}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x3}, {0x3}, {0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x3}, {0x3}, {0x2}, {0x4, 0x1}, {}, {0x5}, {0xbc772ccd0a61e388, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x4}, {}, {}, {}, {0x1}, {0x3}, {0x1}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x2}, {0x4}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x3}, {0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {}, {0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000)

9.432914527s ago: executing program 4 (id=9291):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043)
r2 = dup(r1)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
pipe2$9p(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180), 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x2, 0x26e9, 0x0, 0x0, 0x10, 0x2, 0xf45}, 0x20)
splice(r3, 0x0, r0, 0x0, 0xffff, 0x2)
write$binfmt_script(r2, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c)

9.294551817s ago: executing program 6 (id=9292):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0) (async)
set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r2 = syz_io_uring_complete(0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x90, 0x3, 0x8, 0x207, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_DCCP_CLOSING={0x8}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x2f}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0xfffffffc}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x10f0}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010000000000fedbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000005}, 0x4c) (async)
r4 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x350}, &(0x7f0000000100)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x5}]}, 0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SYMLINKAT={0x26, 0xc, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x7c, 0x0, 0x0)
socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async)
futex(0x0, 0x80, 0x0, 0x0, 0x0, 0x0)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) (async)
prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0)

8.562204929s ago: executing program 1 (id=9294):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x5e, 0x42, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x400400, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r4=>0x0})
r5 = socket(0x10, 0x80002, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket$netlink(0x10, 0x3, 0x15)
sendmsg$netlink(r8, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="2c0100001300010000000000000000001c01008085013ee98bf0a850b89d66cc57fa58ef4a05a90632128e77f035870bacbd517779f932ac75f1cda52be47ee9aa28ee08000000d25f00dd058c29e21040"], 0x12c}], 0x1, 0x0, 0x0, 0x10}, 0x0)
r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f00000017c0)={0x702, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9})
r10 = socket(0x400000000010, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x8)
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002e40)=@newtfilter={0x1df0, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r12, {}, {}, {0xa, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x10}}, @filter_kind_options=@f_route={{0xa}, {0x1db8, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x3f}, @TCA_ROUTE4_TO={0x8, 0x2, 0x6a}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x97}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x10}, @TCA_ROUTE4_ACT={0x1d94, 0x6, [@m_vlan={0xbc, 0x1d, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xfcb}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0xffffffff, 0x0, 0x3, 0x1}, 0x3}}]}, {0x61, 0x6, "aa246f4a10fcbbd4a1f7a0f0f34fc7bd6c82031fb02bcd6e3a74ec04bab772cf15a99bbf172c81e19e370866f56230e497b564cdaa744e0eb46d707237636a211b569be59372a505326d3919532acdc1d68d81097b8c5bf5d1ba903c5f"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x9d0, 0x19, 0x0, 0x0, {{0xb}, {0x8d0, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1ff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2000000000000000}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x4}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x3, 0x1, 0x4, 0xa6d, {0x7f, 0x0, 0x10, 0x100, 0xfff9, 0x6}, {0x2, 0x1, 0x0, 0x0, 0x3, 0x9}, 0x2, 0x3, 0x81}}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x7, 0x5, 0x2, 0x1, 0x0, 0x7, 0x2, 0x0, 0x2, 0x6, 0x2, 0xfffffff9, 0x479, 0x2, 0x6, 0x2, 0x10, 0x7, 0x8, 0x99, 0x0, 0x29d, 0x3, 0x8000, 0xc62, 0x0, 0x0, 0x8, 0x200, 0x2, 0x6199, 0x7fff, 0x8, 0x8, 0xfff, 0x51d2, 0x200, 0x6, 0xe11, 0x0, 0x1, 0x2, 0xfd, 0xc, 0x544a, 0x0, 0x4, 0x7ff, 0xa, 0x3ff, 0x7fffffff, 0x4, 0x7f9, 0x3, 0x101, 0x5, 0x5, 0x3, 0x1, 0x8, 0xfffffffe, 0x6, 0x3, 0xff, 0x8, 0x3, 0xfffffff8, 0x1000, 0x6, 0x0, 0x4, 0x80000000, 0x472e, 0x1, 0x6, 0xfae8, 0xf, 0x0, 0x6, 0x75, 0x2, 0x6, 0x0, 0x8, 0x0, 0x1, 0xc, 0x800, 0x7, 0x0, 0x8, 0x507e, 0x400, 0x7ff, 0x2, 0x0, 0x3c83, 0x6, 0xfb, 0x81, 0x5, 0x1, 0x5c8b, 0x9, 0xded, 0x8001, 0x17a, 0x40, 0xfdcd, 0x7fff, 0x1, 0x8000, 0xfffffffc, 0x7, 0x1, 0xa719, 0x4, 0x3, 0x3, 0x0, 0x7, 0x18, 0x8, 0x3ff000, 0x9, 0xaa2, 0x5, 0x9, 0x7ff, 0x91, 0x3dfa, 0x6, 0x98a2, 0x491, 0x2, 0x9, 0xee, 0xffffffff, 0x2, 0x4000000, 0x4, 0x7, 0x2, 0xa4, 0xb, 0x40000000, 0xe40, 0x1000, 0x4, 0x6, 0xff, 0xfffffffb, 0x3, 0x5, 0xffffffff, 0xb985, 0x24, 0x7, 0x3, 0x8000, 0x4, 0x1000, 0x9, 0x16, 0x5, 0x5, 0x10, 0x5, 0xffffffff, 0x40, 0xfffffffd, 0xfffffffe, 0x7, 0x4, 0xbef, 0x0, 0x1d9, 0x4, 0x8, 0x3, 0x2, 0xb5e, 0xf, 0x5, 0x6, 0xa4b, 0xffff, 0x0, 0x7, 0x9, 0xa, 0xfffffff8, 0x1, 0x3, 0x0, 0x0, 0x9, 0x6, 0xf, 0x2, 0xa, 0x6, 0x2, 0x5, 0x8, 0x8, 0x1a, 0x7, 0x3, 0x6, 0x7, 0x3b9595b8, 0x1ff, 0x5d, 0xec, 0x3000000, 0xfff, 0xb5, 0x3, 0x6, 0x2, 0xae, 0x10000, 0x400, 0x97, 0x5, 0x8, 0xe0c7, 0x1a6c, 0x5, 0xfff, 0xffffff58, 0x800, 0x13965136, 0x401, 0x7f, 0x38000, 0xffff, 0x9, 0x80, 0x8, 0x8, 0x6, 0x1, 0x3, 0x6b4, 0x4, 0x5, 0xd, 0x8, 0x4, 0x5, 0x5, 0x1, 0xfff]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xec1}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x972}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa52, 0x0, 0xffffffea, 0x14000, 0x5, 0x3, 0x8ac58fa, 0x40, 0x4, 0x2, 0x2, 0x8, 0x3, 0x0, 0x400, 0x0, 0x8, 0x0, 0xf0, 0x343, 0x81, 0x6, 0x9d77, 0x0, 0x80000000, 0xb069, 0x5, 0x2bd6a5f7, 0x4, 0x40, 0xfffffff7, 0x8, 0x8, 0x1, 0x4a2, 0xffff7fff, 0x4, 0x1, 0x9, 0x200, 0x101, 0xc, 0x7, 0x0, 0x7, 0xf2b2c22, 0x3, 0x7, 0x2, 0x7, 0x3, 0x6, 0x3, 0x1, 0x2, 0x3, 0x80000000, 0x101, 0x8, 0x7, 0x7, 0x3, 0x200, 0x9, 0x1, 0x8, 0x64297d61, 0xfffffffd, 0x3, 0x7, 0x49, 0x2b, 0x8d, 0xd, 0x10000, 0x1, 0x2cf, 0x0, 0x0, 0x80000001, 0x0, 0x6, 0x3, 0x8, 0x6, 0x720, 0x8, 0x41e, 0x5, 0x4, 0x3, 0xf6, 0x100, 0x7, 0x2, 0x4, 0x4, 0x4, 0x81, 0x5, 0xa29, 0x8, 0x81, 0x9, 0x9, 0x3, 0x9, 0x2, 0x3, 0xffffffff, 0x9, 0xa, 0x400, 0x4, 0x0, 0xf1, 0x9, 0x8001, 0x8dd, 0x5a, 0x10000, 0x7f, 0xd, 0x800, 0x782c, 0x6, 0x4, 0x6, 0x9, 0x80000000, 0x9f, 0x5f, 0x6, 0x2, 0x7, 0x3, 0x81, 0xf, 0x2, 0x9, 0x6, 0x1ff, 0x400, 0x8, 0x8965, 0x764, 0xc, 0xc, 0x1ff, 0x44c00000, 0x1ff, 0xfffffffe, 0x5, 0x5, 0x9, 0x7, 0x3ff, 0x1, 0x8, 0x4, 0x5, 0x0, 0x4, 0x9, 0x0, 0x1800, 0x4, 0xffffffff, 0x0, 0xfffffffa, 0x2400000, 0x10, 0x7fffffff, 0x4, 0x7, 0x8, 0xfffffffe, 0x4, 0x8, 0x2, 0x7, 0x3, 0x0, 0x3, 0x4085, 0x1ff, 0x8, 0x10001, 0x1, 0x3, 0x1, 0x5, 0x0, 0x6, 0x3, 0x9, 0x0, 0xf, 0x7, 0x9, 0x85, 0x80000001, 0xcf24, 0x80, 0x4, 0x6, 0xff, 0x4, 0x8000000, 0x510, 0x0, 0x4, 0x7fff, 0x2, 0x9, 0xfffffe00, 0xfffffff9, 0xc352, 0x7535, 0x1, 0x0, 0xfff, 0x5, 0x9, 0x3, 0xf, 0x0, 0x81, 0x401, 0x2, 0xc, 0x81, 0x8001, 0x8, 0xff, 0x1ff, 0x3, 0x8, 0x7, 0x9, 0x8, 0x6, 0x4, 0x1, 0x9, 0x6ca99880, 0x6, 0x100, 0x2, 0xfffffff7, 0x3ff, 0x2, 0xfffffeff, 0xd0c7, 0x2, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffff}]]}, {0xd6, 0x6, "26b48849ea32ea706b004c5448fbac57064fa7ad492d79d7b5d41ad68e0c567893912f0123fb5599cf2d51928d467a25957c435c4ae24eeea12b866306be628dd3ba593db9b19c933da0f7d103f514694cd633ff3f57a99238c291970754dbf31f16751d94b5ed6570a1b0207af6e96c9f8f6052341847830a14c0c361ec8b9a2db71b1d03b66b60ede7a3d1fe3b4b3c0eadac0c91c36a78c5c52916ef46162f9b0b92c1fd8b81610896f1f2392fabc1a014c73b5a03e71b3fc04a3fb354e75353756c79bc687156a78b41b79daaf927fc17"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_bpf={0x108c, 0x8, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_OPS={0x44, 0x4, [{0x0, 0x8, 0x7, 0x9}, {0x4, 0x5, 0x7, 0x8}, {0x40, 0x2, 0x3, 0x54f}, {0x3a7b, 0xa8, 0x80, 0x5}, {0x8001, 0x4, 0x10, 0xa}, {0x3, 0x1a, 0x6e, 0x3}, {0xfff, 0xb8, 0x6, 0xfffffff3}, {0x9, 0x92, 0x1, 0x3000000}]}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x5, 0x9, 0x9, 0x9}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_nat={0x198, 0x18, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x80000001, 0x0, 0xffffffa1, 0x8001}, @multicast2, @remote, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff9c9d, 0x0, 0x10000000, 0x1, 0x6}, @multicast2, @local, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x5, 0x1, 0x7, 0x8000}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x2, 0x6, 0x1000}, @multicast2, @local, 0x8a8337a6d9e2fcab, 0x1}}]}, {0xcd, 0x6, "95cf14a228f8fd8730c251fbfe09a05c0f655bec8254b7a2e5460c959cb8929783533184fb21acd49290628297906c487914567053e2a8e9071097a82e8ab94a9f01007d12ed57c8df79e196cfe7cacc8cd60455852b26e504c6eaebf815447c5ef14f4be723f70515291d5053fb07431fb9759b800f2f8de46c1bcdb89bea8bc3b8f3b02fc74b13dd20de11d58ba414e072108177d949ab47fc28fcf63dc6dd44e308e05f3b4455c2945bd1de98b489d819d7d6514e5db30436e9222ba3454ce2644b0ccd54231cae"}, {0xc, 0x7, {0xf8e56a62f2b4c11e, 0x1}}, {0xc, 0x8, {0x1, 0x6612bd6c2951e4a3}}}}, @m_nat={0xe0, 0x0, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x40, 0x7, 0x5, 0x0, 0x2}, @loopback, @dev={0xac, 0x14, 0x14, 0x36}, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x2000, 0x7, 0x3, 0xc}, @remote, @broadcast, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x4, 0x0, 0x6, 0x9}, @broadcast, @private=0xa010102}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10, 0x3, 0x20000000, 0x2, 0xda34}, @loopback, @multicast2, 0xffffff00}}]}, {0x15, 0x6, "474ee1008b9243f0be23e753349afa9634"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1df0}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
close_range(r6, 0xffffffffffffffff, 0x0)
process_vm_readv(0x0, &(0x7f0000000280)=[{&(0x7f0000000200)=""/12, 0xc}, {&(0x7f0000000480)=""/143, 0x8f}, {&(0x7f0000000300)=""/72, 0x48}, {&(0x7f0000000600)=""/236, 0xec}, {&(0x7f0000000540)=""/74, 0x4a}], 0x5, &(0x7f00000003c0)=[{&(0x7f0000000700)=""/139, 0x8b}], 0x1, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)

8.415913645s ago: executing program 4 (id=9295):
r0 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
sendmsg$netlink(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001e00)=ANY=[@ANYBLOB="240000002d0001002dffffff00"/36], 0x24}], 0x1, 0x0, 0x0, 0x20000000}, 0xc000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0)
write$vga_arbiter(r2, &(0x7f0000000000)=@other={'lock', ' ', 'mem'}, 0x6)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_int(r1, &(0x7f00000000c0)=0xa7, 0x12)

8.157037066s ago: executing program 1 (id=9297):
syz_usb_connect$cdc_ecm(0x0, 0x6d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5b, 0x1, 0x1, 0x73, 0x40, 0x8, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x40, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xff, 0x4, 0x7}, [@mbim_extended={0x8, 0x24, 0x1c, 0xd, 0xf, 0x2}, @obex={0x5, 0x24, 0x15, 0xfffa}, @mbim={0xc, 0x24, 0x1b, 0x6, 0xed, 0x40, 0x3, 0x100, 0xf7}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0xd, 0x6, 0x3}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x1, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xd, 0x6, 0x2}}}}}]}}]}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x40000)
syz_emit_vhci(0x0, 0xf8)

7.900610531s ago: executing program 6 (id=9298):
r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async)
r1 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) (async)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async)
pipe2(&(0x7f0000000000), 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
close(r4) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010102, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e20, 0x0, 0x4e22, 0xc, 0x2, 0x0, 0x0, 0x89, 0x0, 0xee01}, {0x2e6, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x0, 0x4, 0x2, 0x101, 0x800000000}, {0x1, 0x0, 0x0, 0x1ffffffffe}, 0x20}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x3, 0x0, 0x0, 0xfffffc01, 0xfd3, 0x86}}, 0xe8) (async)
listen(r5, 0x0) (async)
syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x8, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x10, 0x0, 0x0, 0x0, {[@eol, @window={0x3, 0x3, 0x3}]}}}}}}}, 0x0) (async)
connect$unix(0xffffffffffffffff, 0x0, 0x0) (async)
pipe(&(0x7f0000000080)={<r6=>0xffffffffffffffff}) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x10, 0x1, 0x25dffbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xa, 0xffff}, {0xd, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x8c}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040040}, 0x4048084) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3}}, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
splice(r6, 0x0, r7, 0x0, 0x4ffe6, 0x0) (async)
ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) (async)
connect$tipc(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES64], 0x10c}}, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)

6.772652208s ago: executing program 0 (id=9300):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]})
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0)
ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff034}, {0x28, 0x80, 0x0, 0x4}, {0x6, 0x0, 0x0, 0x2}]}, 0x8)
getresgid(&(0x7f0000008100), &(0x7f0000008140), &(0x7f0000008180))
ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000081c0)={0x3, 0x80000, r2})
sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x80000001}, 0x50)
socket$kcm(0x29, 0x2, 0x0)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(r6, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4)
openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8)
open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0)

6.464678238s ago: executing program 5 (id=9301):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_clone3(&(0x7f0000001540)={0x300002c00, &(0x7f0000001340)=<r4=>0xffffffffffffffff, &(0x7f0000001380), &(0x7f00000013c0), {0x6}, &(0x7f0000001400)=""/207, 0xcf, &(0x7f0000001600)=""/216, &(0x7f0000001500)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58)
process_madvise(r4, &(0x7f0000001800)=[{&(0x7f0000001700)="ba8a8fe7b035e493e74376606c89e86624d4c9c46e8637914cc5104cc2", 0x1d}, {&(0x7f0000001740)="23a7acd3fd3f6ee6a55d2adbda9faab236334844f870de643bbc9178bc6275faadd87881dcbd74f11768de3a204de28d237413b82c50590235ebdf66358ef073b3f94a2a3eb03f782d900e2e15962816208026b1c58b43a2", 0x58}, {&(0x7f0000001880)="c77a231b9e8ac087ece091f4fa8929b6c903cf109fc23fb2787f4750f329035dcea6f26f702368d829ddec8a40f3591263f4596d705b5b4ed63e32e4a2d2921ee984c05992de6afd55a3468fbf9b7ac864ed70fe3495d7fa63c23ec42b5678a08e4c5e1a39a15e229e5206dafda3a38e2aaae42f7f7f3168e717078f6b27abb8eaded85a2669b4def165022c73913fdcc87323d2ae2b8a084e6d7faa40df536b331bd0e9d2af3209834efa4677a46f872f", 0xb1}], 0x3, 0x14, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xf2, 0x207fff)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r7 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0)
write$apparmor_current(r7, &(0x7f0000001940)=@hat={'changehat ', 0x3, 0x5e, ['!*{\x00', 'nl80211\x00']}, 0x29)
r8 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r8, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4})
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r8, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4})
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40046607, &(0x7f0000001980)=0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), r1)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r6, &(0x7f0000001300)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000012c0)={&(0x7f00000011c0)={0xc4, r9, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x34}}}}, [@NL80211_ATTR_IE={0x21, 0x2a, [@supported_rates={0x1, 0x4, [{0xb, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x16}]}, @rann={0x7e, 0x15, {{0x1, 0x34}, 0x19, 0x6, @device_a, 0x10001, 0x8, 0x5}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x445}, @NL80211_ATTR_IE={0x77, 0x2a, [@tim={0x5, 0x3c, {0x5, 0x1b, 0x7, "1f5ea91e8eabaed07c20b381b77f78070ca37a74cdd276d6abaa15c5ff2e15bd97a4b3b34b7bf9c98d71a4c9b2a387bcd35046f9a09ad1e2aa"}}, @mesh_id={0x72, 0x6}, @mic={0x8c, 0x10, {0x92e, "d63a15ea6d8f", @short="a5c40240320ea2f6"}}, @ibss={0x6, 0x2, 0x1}, @rann={0x7e, 0x15, {{0x0, 0x5}, 0xe, 0x8, @broadcast, 0x0, 0x1, 0x10}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000800}, 0x24004000)

6.463990487s ago: executing program 6 (id=9302):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]})
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0)
ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff034}, {0x28, 0x80, 0x0, 0x4}, {0x6, 0x0, 0x0, 0x2}]}, 0x8)
getresgid(&(0x7f0000008100), &(0x7f0000008140), &(0x7f0000008180))
ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000081c0)={0x3, 0x80000, r2})
sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840)
sendmsg$rds(r3, &(0x7f0000001380)={&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@cswp={0x58, 0x114, 0x7, {{0x7ff80000, 0x101}, 0x0, 0x0, 0x89, 0x4, 0xeb, 0x10000000008a, 0x22, 0x77}}], 0x58}, 0x0)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(0xffffffffffffffff, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8)

6.448614134s ago: executing program 1 (id=9303):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0xd1, 0x0, 0x81, 0x1ff, 0x80000007, 0x5}, 0x3d)
r5 = syz_io_uring_setup(0x110, 0x0, &(0x7f0000000040), &(0x7f0000000280))
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
bpf$PROG_LOAD(0x5, &(0x7f0000002680)={0x14, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000004000000009010000f1ffffff9500000000000000e2ee121deedfacd43ee6491f6f8ef97b0f1ef88f7a9e3a042c6623e7a672e72cf81a335d46e48bf44b356d60711ea7240e7e700bf574063aca3ee39782c903b5d395bb7579114551be15e80ea7322858ad49ebc178b7d14b3d4a0bbd4834d4"], 0x0, 0xfffffff5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f00000025c0)=[0xffffffffffffffff], &(0x7f0000002600)=[{0x1, 0x5, 0x4, 0x7}], 0x10, 0x1c000000}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="050000007f000000030000000900000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000000)={0x0, &(0x7f00000004c0)=""/233, &(0x7f00000001c0), &(0x7f0000000240), 0x6, r7}, 0x38)
sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0xc091}, 0x4040004)
ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)={0xfffffeff})
close(r6)
io_uring_enter(r5, 0x1f85, 0x40110a, 0x4d, 0x0, 0xa6)
recvmmsg$unix(r4, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/156, 0x9c}], 0x1}}], 0x2, 0x40000000, 0x0)
r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ppoll(&(0x7f0000000180)=[{r8}], 0x1, &(0x7f00000001c0), 0x0, 0x0)
sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

4.726166586s ago: executing program 0 (id=9304):
socket(0x10, 0x3, 0x0)
pipe(&(0x7f0000000400)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$packet(0x11, 0x3, 0x300)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24050000050000000000", @ANYRES8=r0, @ANYRES64=r1], 0x0)

4.579035553s ago: executing program 6 (id=9305):
ioprio_set$pid(0x2, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/partitions\x00', 0x0, 0x0)
preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, 0x8, 0x2000007, 0x1b)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f00000005c0)=0x400000001, 0x4)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x101005, @remote, 0x7}, 0xffffffffffffffdb)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)
ioprio_set$pid(0x2, 0x0, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/partitions\x00', 0x0, 0x0) (async)
preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, 0x8, 0x2000007, 0x1b) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f00000005c0)=0x400000001, 0x4) (async)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) (async)
connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x101005, @remote, 0x7}, 0xffffffffffffffdb) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) (async)

4.336175048s ago: executing program 6 (id=9306):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtfilter={0x2c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xffff}, {}, {0x7, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20051890}, 0x8040)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0xd1fed362f123154c, r9, 0x3b}, 0x80, &(0x7f0000000200)}, 0xc804)

4.222971968s ago: executing program 5 (id=9307):
r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc25c4110, &(0x7f0000000100)={0x4, [[0x1, 0x1797, 0x1, 0x9fc, 0x0, 0x401], [0x0, 0x94, 0x2, 0x0, 0x0, 0xffffffff], [0x3, 0x1000005, 0x0, 0x10, 0x0, 0x3bc9, 0x0, 0x1]], '\x00', [{0xffffffff, 0xa685, 0x0, 0x1, 0x1}, {0x1ff, 0x0, 0x0, 0x1}, {0x0, 0x4000e}, {0x1, 0x7}, {0x0, 0x4}, {}, {}, {0x8}, {0xfffffffc, 0x400001}, {0x0, 0x9}, {0x80000000, 0x4}, {0xec4, 0x2}], '\x00', 0x1}) (async, rerun: 32)
ioctl$XFS_IOC_GETBMAP(r0, 0xc0205826, &(0x7f00000000c0)={0x4, 0x7, 0x2, 0x6, 0x1}) (async, rerun: 32)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = openat$sysfs(0xffffff9c, &(0x7f00000003c0)='/sys/kernel/notes', 0x468040, 0x30)
ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000400)=0x1)
r3 = syz_io_uring_setup(0xb77, &(0x7f0000000340)={0x0, 0xe824, 0x800, 0xffffffff, 0x3ce, 0x0, r2}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async)
syz_usb_connect(0x2, 0x0, 0x0, 0x0) (async)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0xc, 0x40c280) (async, rerun: 32)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32)
r6 = syz_io_uring_setup(0x10d3, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0xfffffffe, 0xd3}, &(0x7f00000000c0)=<r7=>0x0, &(0x7f0000000680)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async, rerun: 32)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32)
syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) (async)
io_uring_enter(r6, 0x47bc, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) (async)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/zoneinfo\x00', 0x0, 0x0)
lseek(r9, 0x4000000007, 0x1) (async)
ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f0000000040)) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) (async)
r10 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)
ioctl$FE_SET_PROPERTY(r10, 0x40106f52, &(0x7f00000001c0)={0x1e, 0x0})

3.994205817s ago: executing program 5 (id=9308):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f00000000c0)={0x8f, 0x0, 0x2})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x802000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00')
read$eventfd(r2, &(0x7f0000000040), 0x8)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3.379639956s ago: executing program 5 (id=9309):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_int(r2, 0x1, 0x2d, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x808ed3a56aee9e48)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r3 = socket$netlink(0x10, 0x3, 0x4)
bind(r3, &(0x7f0000000380)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'ccm(xeta)\x00'}, 0x80)
setxattr$security_capability(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340)=@v1={0x1000000, [{0x6, 0x80000000}]}, 0xc, 0x1)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x6, 0x0)
fcntl$lock(r4, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd})
fcntl$lock(r4, 0x0, &(0x7f0000000280)={0x2, 0x0, 0x30, 0x9})
fcntl$lock(r4, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x90})
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]})
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0)
getdents(r6, &(0x7f0000000240)=""/72, 0x29)
getdents64(r6, &(0x7f00000001c0)=""/110, 0x6e)
close_range(r5, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x2a00)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c)
setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0)

2.923072425s ago: executing program 1 (id=9310):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]})
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0)
ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff034}, {0x28, 0x80, 0x0, 0x4}, {0x6, 0x0, 0x0, 0x2}]}, 0x8)
getresgid(&(0x7f0000008100), &(0x7f0000008140), &(0x7f0000008180))
ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000081c0)={0x3, 0x80000, r2})
sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840)
sendmsg$rds(r3, &(0x7f0000001380)={&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@cswp={0x58, 0x114, 0x7, {{0x7ff80000, 0x101}, 0x0, 0x0, 0x89, 0x4, 0xeb, 0x10000000008a, 0x22, 0x77}}], 0x58}, 0x0)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x80000001}, 0x50)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(0xffffffffffffffff, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8)

2.748998072s ago: executing program 0 (id=9311):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30)
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000009500)=@newtaction={0xe68, 0x30, 0x0, 0x70bd27, 0x25dfdbfd, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1f, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x401, 0x20000000, 0x1, 0x4}, 0x3c, 0x9}, [{0x10000, 0x80000001, 0x90b71e2, 0x6, 0x6, 0x9}, {0xb943, 0x0, 0x8, 0x7, 0x1, 0x6}, {0x4, 0x80000001, 0x9cb, 0x9, 0x4b, 0x3}, {0x80000000, 0x272f8ca0, 0x0, 0x400, 0x8, 0xde}, {0x9, 0x9, 0x1, 0xfffffff7, 0x9, 0x800000}, {0xa, 0xa, 0x1000, 0x7, 0x2, 0x2000}, {0x63, 0x1, 0x2, 0x1, 0x6, 0x301}, {0x4757, 0x5, 0x8, 0xbc64, 0x5b, 0x45ef}, {0x1f, 0xfffffffc, 0x1, 0x3, 0x2, 0x2}, {0x7ff, 0x400, 0x10000, 0x9, 0x1, 0x4}, {0x8, 0xa7, 0x40, 0x6, 0x2, 0x9}, {0x2, 0x6, 0x81, 0x7f, 0x2, 0xa}, {0x40, 0x1ff, 0xa, 0x3, 0x6, 0xbebd}, {0x8, 0x3ff, 0x0, 0x8, 0x7, 0x5}, {0x0, 0x4206, 0x7, 0x1, 0x9, 0xdf99caf9}, {0x1, 0x2, 0x9, 0xfffffffd, 0x8, 0x4}, {0xffff, 0x7, 0x9, 0xd, 0x7, 0xc}, {0x6, 0x6d4c, 0x2, 0x2, 0x7, 0x3}, {0x5, 0x8000, 0x3, 0xfffffff4, 0x0, 0x7}, {0x0, 0x424, 0x4, 0xffff0001, 0x2, 0xfffffffb}, {0x6d, 0x4, 0x3b79, 0x2, 0x4, 0x7ff}, {0x90e9, 0xc1e8, 0x80, 0x15, 0x8, 0xc79}, {0x398, 0x4, 0x8, 0x9, 0x8b1, 0xd8}, {0xc9, 0x9, 0x6, 0xf, 0x0, 0x28}, {0xa9, 0x0, 0x81, 0x800, 0x100, 0x7}, {0xfffffff8, 0x7, 0x0, 0x0, 0xab}, {0xc10b, 0x2191, 0x6, 0x9, 0x0, 0xbe}, {0x80000000, 0x2c2d, 0x400, 0x2, 0x3, 0x7}, {0xfe, 0x9, 0x9, 0x9, 0x7, 0x80}, {0x10000, 0x3, 0x7, 0x800, 0xffffffff, 0x1}, {0x7, 0x6, 0x7ffa328c, 0x2, 0x7b51, 0x8ce6}, {0x8, 0x212626f5, 0x2, 0x2, 0x8001, 0x2}, {0x7, 0x2, 0x7fff, 0x4, 0x7, 0x9}, {0x9, 0x5, 0x2, 0x4, 0x9, 0xe}, {0xfffffffe, 0x2, 0x354a657a, 0x7, 0x8, 0x8}, {0x1, 0x5, 0x9e2a, 0x0, 0x7, 0x3}, {0x7f, 0x5, 0x57b, 0x2, 0x0, 0x5}, {0x3, 0x3, 0x1, 0x3, 0x5, 0x9}, {0xff, 0x0, 0xfff, 0x8, 0x4, 0x9}, {0x2c, 0x2, 0x6, 0x10001, 0x2, 0x101}, {0x2, 0x0, 0x4, 0x6, 0x3, 0x10001}, {0xd, 0xfff, 0x5, 0x94, 0x2, 0x6}, {0x5d, 0x80, 0x4, 0x7, 0x11, 0x6}, {0x3, 0x5, 0xc8, 0x5, 0x18000000, 0x6}, {0xfffffffb, 0x7, 0x3, 0x9, 0x8001, 0x6}, {0x1, 0xb94, 0x800, 0xffffff49, 0x5, 0x9}, {0x95d5, 0x8, 0x8, 0x9, 0x1, 0x89bc}, {0x24, 0x1000, 0x7, 0x400040, 0x1, 0x1}, {0x6, 0x800, 0x0, 0x400, 0x10, 0x1}, {0x29a, 0x3, 0x4, 0x6, 0x7, 0x3}, {0x38000000, 0x5, 0x3e690dd2, 0x0, 0x49f, 0x8}, {0x9, 0x8, 0x7f, 0x9, 0x8, 0x8}, {0xfffffff6, 0x0, 0x2, 0x8, 0x1ff, 0x4}, {0xfffffff8, 0x6, 0xfffffffc, 0x7, 0x7, 0x1}, {0xc, 0x70c, 0xad8, 0x7, 0x355e7bd2, 0x7}, {0x5, 0x5, 0x1, 0xe3, 0x6ec, 0x3}, {0xff, 0x7, 0x66, 0xe, 0x9, 0x9}, {0x0, 0x0, 0x2, 0x1, 0x200, 0x8}, {0x32db, 0x1, 0x1, 0xffffffff, 0xe790, 0x9}, {0x2, 0x400, 0xfa, 0x9, 0x6, 0x1}, {0x7f, 0x1, 0x5, 0x8000, 0xffffffff, 0x8}, {0x1, 0xfff, 0x7f, 0x8000, 0xe, 0xc44}, {0x80000000, 0x9, 0x0, 0xf98, 0x9, 0x8}, {0x5, 0x1, 0x18, 0x0, 0x80000001, 0x9}, {0x0, 0x8, 0x3, 0x200, 0x5, 0x7}, {0x80000001, 0x2, 0x9, 0xc8, 0xfffffffc}, {0x5, 0x3b, 0x400, 0x4, 0x4, 0x3}, {0x7, 0x8, 0x1, 0x400, 0x9, 0x529}, {0x9, 0x16, 0x10001, 0x3, 0x1, 0xfffffffa}, {0x6, 0x74, 0xffffffff, 0x3, 0x1, 0x7ff}, {0x80000000, 0x9, 0x9, 0x0, 0x9}, {0xffffff97, 0xc, 0x9, 0x3, 0x1, 0x5}, {0xd, 0x4, 0xd, 0x3f, 0x2, 0x7}, {0xa, 0x4, 0x2, 0x3, 0x5}, {0x0, 0x283, 0x4, 0x6, 0x8, 0xee7}, {0x6, 0x7, 0x3, 0x0, 0x7f, 0x9}, {0x8, 0xe, 0x100, 0x8, 0x4, 0x5}, {0x1, 0xfffffffc, 0x2, 0x4, 0x100, 0x80000001}, {0x4, 0xffff, 0x2a, 0xf24d, 0xffff8001, 0x5}, {0xd6b, 0x7b8c3976, 0x1, 0x0, 0xf7d9, 0x1}, {0xae9, 0x6, 0xfffffffe, 0x6e53de2f, 0x4, 0xe2758a}, {0x7, 0x8, 0x4, 0x9, 0x8, 0x7fff}, {0xff, 0x1, 0x4, 0x8, 0x1, 0x9}, {0x0, 0x3, 0x8a, 0x6, 0x10, 0x5}, {0x2, 0xe24, 0x5, 0x96, 0x7, 0xd859}, {0x6, 0x6, 0x7, 0x400, 0xfff, 0x2}, {0x3, 0xb, 0x6f70, 0x3, 0xe, 0x6}, {0x0, 0x8, 0xdd1d8af, 0xd1e, 0x4dd, 0x7}, {0x9, 0x1, 0x9, 0x1000000, 0x4, 0x81}, {0xfffffffc, 0xad, 0x9, 0x7, 0x8000, 0x6}, {0x5, 0x6, 0x5, 0x2, 0x7f, 0x7}, {0x8, 0x6, 0xe79, 0x10f, 0x80, 0x3}, {0x9404, 0x4d, 0x8, 0xc63, 0x475, 0x9}, {0xc4c3, 0x4, 0x1, 0xfadc, 0x8, 0x5}, {0x4, 0x1, 0x3, 0x8, 0x10, 0xfffeffff}, {0x9, 0x5, 0x14, 0x1, 0x7, 0x1}, {0x5, 0xed40, 0x8000, 0x7cf, 0x10, 0xe}, {0x3, 0x0, 0x1c7b, 0x9fc3, 0x57c4, 0x800}, {0x5, 0xfffeffff, 0x4, 0x1, 0x0, 0x3}, {0x6, 0x9, 0x8, 0x3, 0x5, 0x7}, {0x6, 0x2, 0x4, 0x9, 0x7fff, 0x5}, {0x7fff, 0x8, 0x0, 0x9, 0xced, 0x80000000}, {0x7ff, 0x3, 0x6, 0x7fff, 0x9, 0xd}, {0x3, 0x5, 0xb, 0x8001, 0x9, 0x1}, {0x0, 0x2, 0x6, 0x2, 0x9, 0x8}, {0x0, 0x7, 0xae6ad9f, 0x9, 0x7, 0x6}, {0x6, 0x200, 0x81, 0xfffffff7, 0x6, 0x4}, {0x0, 0x4, 0x546, 0x6, 0x7, 0x1}, {0xad03, 0x81, 0x7, 0x6, 0x5, 0x9}, {0x4, 0xfff, 0x2, 0x3, 0x9, 0xd}, {0xe, 0x2d4, 0x5, 0x40, 0x1c7a3607, 0xcb2d}, {0x7, 0x9, 0x3, 0x2, 0x4, 0x7fffffff}, {0x0, 0x3, 0x3, 0x8, 0x6}, {0x91, 0x8, 0xfffffffc, 0x8, 0x10000, 0x1}, {0x9, 0x5, 0x8, 0x2, 0x7, 0x8d}, {0x4, 0xb, 0xfffff364, 0x4, 0x400, 0x4}, {0x81, 0x3, 0x1, 0x80000000, 0xbf1}, {0x8, 0x6, 0xd4, 0x1, 0x6, 0x1}, {0x3ff, 0x1, 0x1, 0x800, 0x800, 0xa4}, {0x8, 0x0, 0xfffffff7, 0xfffffffc, 0x4, 0xad5f}, {0x62, 0xe, 0x0, 0x7f7, 0x3, 0x3ff}, {0x100, 0xfffffff9, 0x5, 0xd, 0x84, 0xc20e}, {0xc, 0x6c, 0x2, 0x4, 0x7, 0xea}, {0x8, 0x0, 0x8, 0x0, 0xb2, 0x3}, {0x7, 0x3, 0xec, 0x5, 0x8, 0x1}, {0x8, 0x3000000, 0xffff, 0x81, 0xfffffff6, 0x9}, {0x1, 0xda, 0x5, 0x3, 0x6553, 0x4}, {0xfffffff9, 0x6, 0x7, 0x4, 0xa6, 0x50d8a0cf}], [{0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x3}, {}, {0x5, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x6}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x3}, {0x3}, {0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x3}, {0x3}, {0x2}, {0x4, 0x1}, {}, {0x5}, {0xbc772ccd0a61e388, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x4}, {}, {}, {}, {0x1}, {0x3}, {0x1}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x2}, {0x4}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x3}, {0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {}, {0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000)

1.518824978s ago: executing program 5 (id=9312):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]})
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0)
ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff034}, {0x28, 0x80, 0x0, 0x4}, {0x6, 0x0, 0x0, 0x2}]}, 0x8)
getresgid(&(0x7f0000008100), &(0x7f0000008140), &(0x7f0000008180))
ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000081c0)={0x3, 0x80000, r2})
sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840)
sendmsg$rds(r3, &(0x7f0000001380)={&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@cswp={0x58, 0x114, 0x7, {{0x7ff80000, 0x101}, 0x0, 0x0, 0x89, 0x4, 0xeb, 0x10000000008a, 0x22, 0x77}}], 0x58}, 0x0)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x80000001}, 0x50)
socket$kcm(0x29, 0x2, 0x0)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r6, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8)

1.37521555s ago: executing program 1 (id=9313):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$vicodec0(0xffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r3, 0xc0cc5605, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x0, 0xfa11, 0xffffffff}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
r4 = syz_open_procfs(0x0, 0x0)
lseek(r4, 0x2000, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
io_uring_enter(0xffffffffffffffff, 0x8847ba, 0x0, 0xe, 0x0, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3d, 0x0, 0x1})
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
r7 = epoll_create1(0x80000)
r8 = fcntl$dupfd(r6, 0x406, r7)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000001c0)={0x10000014})
getpid()
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
bind$vsock_stream(r9, &(0x7f0000000000)={0x10}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
sigaltstack(0x0, 0x0)
lseek(0xffffffffffffffff, 0x8001, 0x1)

539.665426ms ago: executing program 0 (id=9314):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]})
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0)
ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff034}, {0x28, 0x80, 0x0, 0x4}, {0x6, 0x0, 0x0, 0x2}]}, 0x8)
getresgid(&(0x7f0000008100), &(0x7f0000008140), &(0x7f0000008180))
ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000081c0)={0x3, 0x80000, r2})
sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x80000001}, 0x50)
socket$kcm(0x29, 0x2, 0x0)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(r6, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4)
openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8)
open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0)

254.021309ms ago: executing program 1 (id=9315):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=@delchain={0x18c, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0xd6, 0x750}}]}}, @filter_kind_options=@f_basic={{0xa}, {0x140, 0x2, [@TCA_BASIC_EMATCHES={0xb8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x94, 0x2, 0x0, 0x1, [@TCF_EM_META={0x90, 0x3ffc, 0x0, 0x0, {{0xf, 0x4, 0x2}, [@TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="66c51b842c"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x21, 0x3, [@TCF_META_TYPE_VAR="712fb66e", @TCF_META_TYPE_VAR="0b19a8b7731ef531", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="18", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="30f0af", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="0e"]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_VAR="83f3c8fe746a86", @TCF_META_TYPE_VAR="79ba4a", @TCF_META_TYPE_VAR="116e5525fe", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="e5f5"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x5, 0x1}, {0x8, 0x8f}}}]}}]}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x401, 0x7, 0xf}, {{0x4, 0x0, 0x1}, {0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}, @TCA_BASIC_ACT={0x84, 0x3, [@m_mirred={0x30, 0xb, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0x50, 0x5, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xc0000000, 0xffffffffffffffff, 0x2, 0xe}, 0x7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

0s ago: executing program 5 (id=9316):
socket$inet6(0xa, 0x800000000000002, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8009, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000001c0)={0xfe92, 0x32314247, 0x1, @stepwise={0x660, 0xa, 0xd5b, 0x4, 0x200008, 0x7fff}})
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000890)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="240000001e005f80004000000000000002000000010000000000080008000100000303ff", 0x24)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0)
r3 = epoll_create(0x9b5c)
syz_io_uring_setup(0x61d0, &(0x7f0000000140)={0x0, 0xcc19, 0x10806}, &(0x7f0000000000), &(0x7f0000000380))
rseq(&(0x7f0000000300), 0x20, 0x0, 0x0)
migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000080)=0x272)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040))
read(r0, &(0x7f00000006c0)=""/101, 0x65)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x48091}, 0x4000805)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r5 = openat$autofs(0xffffff9c, &(0x7f0000000500), 0x2, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f0000000240)=0xc)
setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x2}, 0x8)
ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, <r8=>r4, {0x12}}, './file0\x00'})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r9 = gettid()
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0x40a45323, &(0x7f0000000740)={{0x0, 0x7f}, 'port1\x00', 0xa8, 0x8, 0x2710, 0x9, 0x4, 0x6, 0xa, 0x0, 0x2})
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f00000002c0), 0x93020007)

kernel console output (not intermixed with test programs):

] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2176.272998][T13135] Bluetooth: hci5: command tx timeout
[ 2176.313317][   T29] kauditd_printk_skb: 25 callbacks suppressed
[ 2176.313331][   T29] audit: type=1326 audit(1773802933.464:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3617 comm="syz.0.9050" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000
[ 2176.364279][   T29] audit: type=1326 audit(1773802933.464:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3617 comm="syz.0.9050" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000
[ 2176.497023][ T6026] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[ 2176.527773][   T29] audit: type=1326 audit(1773802933.664:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3617 comm="syz.0.9050" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705ef6c code=0x7ffc0000
[ 2176.570039][   T29] audit: type=1326 audit(1773802933.664:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3617 comm="syz.0.9050" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000
[ 2176.616404][   T29] audit: type=1326 audit(1773802933.664:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3617 comm="syz.0.9050" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000
[ 2176.792638][   T29] audit: type=1326 audit(1773802933.664:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3617 comm="syz.0.9050" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf705ef6c code=0x7ffc0000
[ 2177.427713][ T6026] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2177.469380][ T6026] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[ 2177.489772][   T29] audit: type=1326 audit(1773802933.664:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3617 comm="syz.0.9050" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000
[ 2177.632945][T24049] usb 6-1: USB disconnect, device number 26
[ 2177.644918][ T3594] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2177.672461][ T3594] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2177.679727][ T3594] bridge_slave_0: entered allmulticast mode
[ 2177.686100][   T29] audit: type=1326 audit(1773802933.664:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3617 comm="syz.0.9050" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf705ef6c code=0x7ffc0000
[ 2177.794562][ T3594] bridge_slave_0: entered promiscuous mode
[ 2177.853561][   T29] audit: type=1326 audit(1773802933.664:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3617 comm="syz.0.9050" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000
[ 2177.864399][ T3594] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2177.916861][   T29] audit: type=1326 audit(1773802933.664:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3617 comm="syz.0.9050" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000
[ 2177.939053][ T3594] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2177.939271][ T3594] bridge_slave_1: entered allmulticast mode
[ 2177.963013][ T3594] bridge_slave_1: entered promiscuous mode
[ 2178.078945][ T3631] m920x_read = error: -19
[ 2178.183977][T29549] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[ 2178.277573][ T6026] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2178.301969][ T6026] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[ 2178.362391][T13135] Bluetooth: hci5: command tx timeout
[ 2178.512478][T29549] usb 6-1: Using ep0 maxpacket: 16
[ 2178.520474][ T6026] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2178.531655][T29549] usb 6-1: config 0 has an invalid interface number: 105 but max is 0
[ 2178.541715][T29549] usb 6-1: config 0 has no interface number 0
[ 2178.560230][ T6026] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[ 2178.571405][T29549] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[ 2178.587830][T29549] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2178.625212][T29549] usb 6-1: Product: syz
[ 2178.636997][T29549] usb 6-1: Manufacturer: syz
[ 2178.655978][T29549] usb 6-1: SerialNumber: syz
[ 2178.700082][T29549] usb 6-1: config 0 descriptor??
[ 2178.740493][ T3594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2178.770457][ T3594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2178.886661][ T3594] team0: Port device team_slave_0 added
[ 2178.905921][ T3594] team0: Port device team_slave_1 added
[ 2179.080165][ T3594] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2179.112296][ T3594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2179.142916][ T3594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2179.218251][T29549] uvcvideo 6-1:0.105: probe with driver uvcvideo failed with error -22
[ 2179.229232][T29549] usb 6-1: USB disconnect, device number 27
[ 2179.252401][ T3594] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2179.276284][ T3594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2179.334195][ T3594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2179.515354][T24049] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[ 2179.604722][ T6026] bridge_slave_1: left allmulticast mode
[ 2179.634776][ T6026] bridge_slave_1: left promiscuous mode
[ 2179.655797][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2179.688929][ T6026] bridge_slave_0: left allmulticast mode
[ 2179.694792][T24049] usb 5-1: Using ep0 maxpacket: 8
[ 2179.702297][ T6026] bridge_slave_0: left promiscuous mode
[ 2179.709094][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2179.720201][T24049] usb 5-1: config 2 has an invalid interface number: 31 but max is 0
[ 2179.728460][T24049] usb 5-1: config 2 has no interface number 0
[ 2179.734927][T24049] usb 5-1: config 2 interface 31 has no altsetting 0
[ 2179.748832][T24049] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[ 2179.758447][T24049] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2179.767001][T24049] usb 5-1: Product: syz
[ 2179.788107][T24049] usb 5-1: Manufacturer: syz
[ 2179.812393][T24049] usb 5-1: SerialNumber: syz
[ 2180.458269][T24059] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[ 2180.489291][T13135] Bluetooth: hci5: command tx timeout
[ 2180.816497][T24059] usb 1-1: Using ep0 maxpacket: 16
[ 2180.828240][T24059] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[ 2180.847372][T24059] usb 1-1: config 0 has no interface number 0
[ 2180.865732][T24059] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[ 2180.878188][T24059] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2180.896461][T24059] usb 1-1: Product: syz
[ 2180.908554][T24059] usb 1-1: Manufacturer: syz
[ 2180.914842][T24049] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22
[ 2181.015092][T24049] usb 5-1: USB disconnect, device number 94
[ 2181.042355][T24059] usb 1-1: SerialNumber: syz
[ 2181.333547][T24059] usb 1-1: config 0 descriptor??
[ 2181.962115][ T6026] bond2 (unregistering): (slave geneve3): Releasing active interface
[ 2181.980199][ T6026] geneve3 (unregistering): left promiscuous mode
[ 2181.988529][ T6026] geneve3 (unregistering): left allmulticast mode
[ 2182.078038][   T29] kauditd_printk_skb: 11 callbacks suppressed
[ 2182.078059][   T29] audit: type=1400 audit(1773802939.214:947): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=3661 comm="syz.4.9058"
[ 2182.164199][   T29] audit: type=1326 audit(1773802939.294:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3666 comm="syz.5.9059" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2182.189068][   T29] audit: type=1326 audit(1773802939.304:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3666 comm="syz.5.9059" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2182.255000][   T29] audit: type=1326 audit(1773802939.304:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3666 comm="syz.5.9059" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2182.440852][   T29] audit: type=1326 audit(1773802939.304:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3666 comm="syz.5.9059" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2182.525880][T13135] Bluetooth: hci5: command tx timeout
[ 2182.622854][   T29] audit: type=1326 audit(1773802939.304:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3666 comm="syz.5.9059" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2182.742457][   T29] audit: type=1326 audit(1773802939.304:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3666 comm="syz.5.9059" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2182.959447][   T29] audit: type=1326 audit(1773802939.304:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3666 comm="syz.5.9059" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2183.113665][   T29] audit: type=1326 audit(1773802939.304:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3666 comm="syz.5.9059" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2183.204005][   T29] audit: type=1326 audit(1773802939.304:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3666 comm="syz.5.9059" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2183.318610][ T6026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2183.346653][ T6026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2183.450857][ T6026] bond0 (unregistering): (slave team0): Releasing backup interface
[ 2183.468017][ T6026] bond0 (unregistering): Released all slaves
[ 2183.493443][ T6026] bond1 (unregistering): Released all slaves
[ 2183.556380][ T6026] bond2 (unregistering): Released all slaves
[ 2183.588930][ T6026] bond3 (unregistering): Released all slaves
[ 2183.647015][ T6026] bond4 (unregistering): Released all slaves
[ 2183.843021][ T3594] hsr_slave_0: entered promiscuous mode
[ 2183.849830][ T3594] hsr_slave_1: entered promiscuous mode
[ 2183.897988][T24059] uvcvideo 1-1:0.105: probe with driver uvcvideo failed with error -22
[ 2183.927799][ T3594] debugfs: 'hsr0' already exists in 'hsr'
[ 2183.958570][T24059] usb 1-1: USB disconnect, device number 79
[ 2183.982191][ T3594] Cannot create hsr debugfs directory
[ 2183.990619][ T6026] tipc: Disabling bearer <udp:syz2>
[ 2184.005657][ T6026] tipc: Disabling bearer <eth:batadv0>
[ 2184.039319][ T6026] tipc: Left network mode
[ 2184.130054][ T6026] IPVS: stopping master sync thread 25154 ...
[ 2184.322522][T24058] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[ 2184.453210][T24059] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[ 2184.503688][T24058] usb 6-1: Using ep0 maxpacket: 8
[ 2184.526735][T24058] usb 6-1: config 2 has an invalid interface number: 31 but max is 0
[ 2184.542576][T24058] usb 6-1: config 2 has no interface number 0
[ 2184.560541][ T6026] hsr_slave_0: left promiscuous mode
[ 2184.569490][T24058] usb 6-1: config 2 interface 31 has no altsetting 0
[ 2184.572503][T24048] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[ 2184.600100][ T6026] hsr_slave_1: left promiscuous mode
[ 2184.606422][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2184.612628][T24059] usb 1-1: Using ep0 maxpacket: 16
[ 2184.619339][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2184.636239][T24058] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[ 2184.649733][T24059] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[ 2184.665900][ T6026] pimreg (unregistering): left allmulticast mode
[ 2184.688077][T24059] usb 1-1: config 0 has no interface number 0
[ 2184.696485][T24058] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2184.715455][T24058] usb 6-1: Product: syz
[ 2184.722942][T24059] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[ 2184.736983][T24058] usb 6-1: Manufacturer: syz
[ 2184.741631][T24058] usb 6-1: SerialNumber: syz
[ 2184.758335][T24059] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2184.782787][T24048] usb 5-1: Using ep0 maxpacket: 8
[ 2184.795702][T24059] usb 1-1: Product: syz
[ 2184.796971][T24048] usb 5-1: config index 0 descriptor too short (expected 30, got 18)
[ 2184.810930][T24048] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2184.826499][T24059] usb 1-1: Manufacturer: syz
[ 2184.831181][T24059] usb 1-1: SerialNumber: syz
[ 2184.851847][T24048] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2184.886878][T24048] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 2184.894880][T24059] usb 1-1: config 0 descriptor??
[ 2184.897775][T24048] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2184.923197][T24048] usb 5-1: Product: syz
[ 2185.050573][T24048] usb 5-1: Manufacturer: syz
[ 2185.072361][T24048] usb 5-1: SerialNumber: syz
[ 2185.376014][T24048] usb 5-1: config 0 descriptor??
[ 2185.685559][ T3681] netlink: zone id is out of range
[ 2185.725850][ T3681] netlink: set zone limit has 4 unknown bytes
[ 2185.746915][T24058] ch9200 6-1:2.31: probe with driver ch9200 failed with error -22
[ 2185.762046][T24058] usb 6-1: USB disconnect, device number 28
[ 2185.933538][ T6026] team0 (unregistering): Port device team_slave_1 removed
[ 2186.223988][ T6026] team0 (unregistering): Port device team_slave_0 removed
[ 2186.701258][ T3701] m920x_read = error: -19
[ 2186.891751][ T3706] tipc: Enabling of bearer <eth:batadv0> rejected, already enabled
[ 2186.996936][T24059] uvcvideo 1-1:0.105: probe with driver uvcvideo failed with error -22
[ 2187.045773][T24059] usb 1-1: USB disconnect, device number 80
[ 2187.232001][   T29] kauditd_printk_skb: 15 callbacks suppressed
[ 2187.232021][   T29] audit: type=1326 audit(1773802944.374:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3709 comm="syz.5.9067" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2187.300193][   T29] audit: type=1326 audit(1773802944.424:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3709 comm="syz.5.9067" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2187.594233][   T29] audit: type=1326 audit(1773802944.424:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3709 comm="syz.5.9067" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2187.620844][   T29] audit: type=1326 audit(1773802944.424:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3709 comm="syz.5.9067" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2187.683435][   T29] audit: type=1326 audit(1773802944.424:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3709 comm="syz.5.9067" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2188.235114][   T29] audit: type=1326 audit(1773802944.434:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3709 comm="syz.5.9067" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2188.282496][   T29] audit: type=1326 audit(1773802944.434:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3709 comm="syz.5.9067" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2188.393468][   T29] audit: type=1326 audit(1773802944.434:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3709 comm="syz.5.9067" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2188.505087][T24049] usb 5-1: USB disconnect, device number 95
[ 2188.544209][ T3594] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 2188.566685][   T29] audit: type=1326 audit(1773802944.434:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3709 comm="syz.5.9067" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2188.910956][   T29] audit: type=1326 audit(1773802944.434:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3709 comm="syz.5.9067" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2188.986955][ T3594] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 2189.221602][ T3594] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 2189.552547][T24049] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[ 2189.602132][ T3594] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 2189.696272][ T6026] IPVS: stop unused estimator thread 0...
[ 2189.965041][T24049] usb 6-1: Using ep0 maxpacket: 8
[ 2190.015690][T24049] usb 6-1: config 2 has an invalid interface number: 31 but max is 0
[ 2190.024332][T24049] usb 6-1: config 2 has no interface number 0
[ 2190.030487][T24049] usb 6-1: config 2 interface 31 has no altsetting 0
[ 2190.065255][T24049] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[ 2190.250846][ T3594] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2190.257983][T24049] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2190.272612][T24049] usb 6-1: Product: syz
[ 2190.276856][T24049] usb 6-1: Manufacturer: syz
[ 2190.281479][T24049] usb 6-1: SerialNumber: syz
[ 2190.303448][ T3594] 8021q: adding VLAN 0 to HW filter on device team0
[ 2190.338450][ T6028] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2190.345675][ T6028] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2190.418392][T19399] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2190.425584][T19399] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2190.875513][T24049] ch9200 6-1:2.31: probe with driver ch9200 failed with error -22
[ 2190.933669][T24049] usb 6-1: USB disconnect, device number 29
[ 2190.964659][ T3594] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2191.135592][ T3594] veth0_vlan: entered promiscuous mode
[ 2191.168623][ T3594] veth1_vlan: entered promiscuous mode
[ 2191.231400][ T3594] veth0_macvtap: entered promiscuous mode
[ 2191.251302][ T3594] veth1_macvtap: entered promiscuous mode
[ 2191.524208][ T3594] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2191.588400][ T3594] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2191.933304][T19396] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2191.951027][T19396] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2192.323001][T19396] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2192.332953][T19396] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2192.395626][ T6041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2192.423109][ T6041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2192.807137][T19396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2192.815795][T19396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2193.158539][ T2237] Bluetooth: hci4: command 0x0406 tx timeout
[ 2193.882965][   T29] kauditd_printk_skb: 57 callbacks suppressed
[ 2193.882985][   T29] audit: type=1326 audit(1773802951.034:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3783 comm="syz.0.9082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000
[ 2193.971772][ T2237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2193.989495][ T2237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2194.002479][   T29] audit: type=1326 audit(1773802951.034:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3783 comm="syz.0.9082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000
[ 2194.027711][   T29] audit: type=1326 audit(1773802951.064:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3783 comm="syz.0.9082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf705ef6c code=0x7ffc0000
[ 2194.052727][ T2237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2194.162515][ T2237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2194.172732][ T2237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2194.397815][   T29] audit: type=1400 audit(1773802951.534:1042): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=3789 comm="syz.1.9083"
[ 2195.132339][ T3802] bond_slave_0: Caught tx_queue_len zero misconfig
[ 2195.373116][   T29] audit: type=1326 audit(1773802952.514:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3804 comm="syz.5.9087" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2195.471843][   T29] audit: type=1326 audit(1773802952.554:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3804 comm="syz.5.9087" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2195.773484][   T29] audit: type=1326 audit(1773802952.574:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3804 comm="syz.5.9087" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2195.857788][   T29] audit: type=1326 audit(1773802952.574:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3804 comm="syz.5.9087" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2195.922379][T24058] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[ 2195.930101][   T29] audit: type=1326 audit(1773802952.574:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3804 comm="syz.5.9087" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2196.002567][   T29] audit: type=1326 audit(1773802952.574:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3804 comm="syz.5.9087" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2196.116176][ T3798] chnl_net:caif_netlink_parms(): no params data found
[ 2196.175977][T24058] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2196.382341][T24058] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2196.414603][T24058] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 2196.439392][ T2237] Bluetooth: hci2: command tx timeout
[ 2196.442457][T24058] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2196.488310][T24058] usb 2-1: SerialNumber: syz
[ 2196.600858][ T6041] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2196.742087][T24058] usb 2-1: 0:2 : does not exist
[ 2196.841634][T24058] usb 2-1: USB disconnect, device number 58
[ 2196.987366][ T3282] udevd[3282]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2197.097953][ T6041] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2197.416464][ T6041] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2197.598944][ T3798] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2197.932412][ T3798] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2197.939694][ T3798] bridge_slave_0: entered allmulticast mode
[ 2197.982058][ T3798] bridge_slave_0: entered promiscuous mode
[ 2198.030265][ T6041] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2198.071784][ T3798] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2198.122553][ T3798] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2198.129862][ T3798] bridge_slave_1: entered allmulticast mode
[ 2198.243793][ T3798] bridge_slave_1: entered promiscuous mode
[ 2198.362356][T24048] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[ 2198.493088][ T3798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2198.505329][ T3798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2198.514684][ T2237] Bluetooth: hci2: command tx timeout
[ 2198.572585][T24048] usb 2-1: Using ep0 maxpacket: 16
[ 2198.592581][T24048] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2198.625470][T24048] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[ 2198.688802][T24048] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 2198.726677][ T3798] team0: Port device team_slave_0 added
[ 2198.746639][T24048] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2198.767289][ T3798] team0: Port device team_slave_1 added
[ 2198.793686][T24048] usb 2-1: config 0 descriptor??
[ 2198.834393][T24048] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 2198.924222][ T6041] batman_adv: batadv0: Interface deactivated: gretap1
[ 2198.987174][ T3839] m920x_read = error: -19
[ 2199.391207][   T29] kauditd_printk_skb: 39 callbacks suppressed
[ 2199.391228][   T29] audit: type=1400 audit(1773802956.534:1088): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=3844 comm="syz.0.9095"
[ 2199.942756][ T6041] batman_adv: batadv0: Removing interface: gretap1
[ 2200.180473][ T6041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2200.202872][ T6041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2200.216834][ T6041] bond0 (unregistering): Released all slaves
[ 2200.236925][ T6041] bond1 (unregistering): Released all slaves
[ 2200.261859][ T6041] bond2 (unregistering): (slave vcan1): Releasing backup interface
[ 2200.270080][ T6041] vcan1: left promiscuous mode
[ 2200.303149][ T6041] bond2 (unregistering): Released all slaves
[ 2200.360389][ T3798] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2200.377728][ T3798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2200.488290][ T3798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2200.569620][ T3798] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2200.591295][ T3798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2200.627568][ T2237] Bluetooth: hci2: command tx timeout
[ 2200.643508][   T29] audit: type=1326 audit(1773802957.744:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3869 comm="syz.5.9099" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2200.666494][   T29] audit: type=1326 audit(1773802957.784:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3869 comm="syz.5.9099" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2200.689547][ T3798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2200.700968][   T29] audit: type=1326 audit(1773802957.784:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3869 comm="syz.5.9099" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2200.723295][   T29] audit: type=1326 audit(1773802957.784:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3869 comm="syz.5.9099" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2200.745495][   T29] audit: type=1326 audit(1773802957.814:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3869 comm="syz.5.9099" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2200.774592][   T29] audit: type=1326 audit(1773802957.844:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3869 comm="syz.5.9099" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2201.129353][   T29] audit: type=1326 audit(1773802957.854:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3869 comm="syz.5.9099" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2201.196640][ T6041] tipc: Disabling bearer <udp:syz2>
[ 2201.202064][ T6041] tipc: Disabling bearer <eth:batadv0>
[ 2201.326604][ T6041] tipc: Left network mode
[ 2201.347268][   T29] audit: type=1326 audit(1773802957.854:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3869 comm="syz.5.9099" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2201.416836][ T3798] hsr_slave_0: entered promiscuous mode
[ 2201.458611][ T3798] hsr_slave_1: entered promiscuous mode
[ 2201.476688][ T3798] debugfs: 'hsr0' already exists in 'hsr'
[ 2201.506173][ T3798] Cannot create hsr debugfs directory
[ 2201.593899][   T29] audit: type=1326 audit(1773802957.884:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3869 comm="syz.5.9099" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2201.672698][T24046] usb 2-1: USB disconnect, device number 59
[ 2201.679094][ T6041] IPVS: stopping master sync thread 25246 ...
[ 2201.762316][T24048] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[ 2202.153953][T24049] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[ 2202.163628][T24048] usb 1-1: Using ep0 maxpacket: 8
[ 2202.180505][T24048] usb 1-1: config 2 has an invalid interface number: 31 but max is 0
[ 2202.252697][T24048] usb 1-1: config 2 has no interface number 0
[ 2202.258956][T24048] usb 1-1: config 2 interface 31 has no altsetting 0
[ 2202.322740][T24048] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[ 2202.331975][T24048] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2202.358667][T24048] usb 1-1: Product: syz
[ 2202.363491][T24049] usb 6-1: Using ep0 maxpacket: 16
[ 2202.376453][T24048] usb 1-1: Manufacturer: syz
[ 2202.381592][T24048] usb 1-1: SerialNumber: syz
[ 2202.387274][T24049] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2202.408791][T24049] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[ 2202.503009][T24049] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 2202.634333][T24049] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2202.675273][ T2237] Bluetooth: hci2: command tx timeout
[ 2202.689744][T24049] usb 6-1: config 0 descriptor??
[ 2202.719714][T24049] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2203.296160][T24048] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22
[ 2203.362570][T24048] usb 1-1: USB disconnect, device number 81
[ 2203.866644][ T6041] hsr_slave_0: left promiscuous mode
[ 2203.916657][ T6041] hsr_slave_1: left promiscuous mode
[ 2203.935708][ T6041] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2203.959873][ T6041] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2203.996267][ T6041] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2204.017681][ T6041] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2204.032985][ T3917] m920x_read = error: -19
[ 2204.239461][ T6041] veth1_macvtap: left promiscuous mode
[ 2204.265781][ T6041] veth0_macvtap: left promiscuous mode
[ 2204.502363][   T29] kauditd_printk_skb: 37 callbacks suppressed
[ 2204.502385][   T29] audit: type=1400 audit(1773802961.604:1135): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=3922 comm="syz.0.9109"
[ 2205.528236][ T6041] team0 (unregistering): Port device team_slave_0 removed
[ 2205.630040][T24040] usb 6-1: USB disconnect, device number 30
[ 2205.815185][   T29] audit: type=1326 audit(1773802962.964:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3931 comm="syz.5.9112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2205.869025][   T29] audit: type=1326 audit(1773802962.984:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3931 comm="syz.5.9112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2205.974065][   T29] audit: type=1326 audit(1773802962.994:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3931 comm="syz.5.9112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2205.997306][   T29] audit: type=1326 audit(1773802962.994:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3931 comm="syz.5.9112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2206.160839][   T29] audit: type=1326 audit(1773802962.994:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3931 comm="syz.5.9112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2206.195764][   T29] audit: type=1326 audit(1773802962.994:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3931 comm="syz.5.9112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2206.249721][   T29] audit: type=1326 audit(1773802962.994:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3931 comm="syz.5.9112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2206.273350][   T29] audit: type=1326 audit(1773802962.994:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3931 comm="syz.5.9112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2206.419610][   T29] audit: type=1326 audit(1773802963.004:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3931 comm="syz.5.9112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2206.462665][T24040] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[ 2207.035351][T24040] usb 2-1: Using ep0 maxpacket: 8
[ 2207.055792][T24040] usb 2-1: config index 0 descriptor too short (expected 30, got 18)
[ 2207.064036][T24040] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2207.074623][T24040] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2207.718607][T24040] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 2207.750526][T24040] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2207.936861][ T6041] IPVS: stop unused estimator thread 0...
[ 2207.943431][T24040] usb 2-1: Product: syz
[ 2207.943456][T24040] usb 2-1: Manufacturer: syz
[ 2207.943473][T24040] usb 2-1: SerialNumber: syz
[ 2208.225630][T24040] usb 2-1: config 0 descriptor??
[ 2208.276529][ T3798] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2208.595474][ T3939] netlink: zone id is out of range
[ 2208.600666][ T3939] netlink: zone id is out of range
[ 2208.606030][ T3939] netlink: zone id is out of range
[ 2208.611295][ T3939] netlink: zone id is out of range
[ 2208.616773][ T3939] netlink: zone id is out of range
[ 2208.622488][ T3939] netlink: zone id is out of range
[ 2208.627758][ T3939] netlink: zone id is out of range
[ 2208.633198][ T3939] netlink: zone id is out of range
[ 2208.638524][ T3939] netlink: zone id is out of range
[ 2208.643858][ T3939] netlink: zone id is out of range
[ 2209.122044][ T3798] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2209.136206][ T3798] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2209.715009][ T3798] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2209.822365][T24040] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[ 2210.030309][T24040] usb 6-1: Using ep0 maxpacket: 8
[ 2210.087943][T24040] usb 6-1: config index 0 descriptor too short (expected 30, got 18)
[ 2210.146148][T24040] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2210.190829][T24040] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2210.237184][ T3798] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2210.246245][T24059] usb 2-1: USB disconnect, device number 60
[ 2210.363634][T24040] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 2210.372876][T24040] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2210.380954][T24040] usb 6-1: Product: syz
[ 2210.446637][ T3798] 8021q: adding VLAN 0 to HW filter on device team0
[ 2210.456842][ T3984] m920x_read = error: -19
[ 2210.478108][T24040] usb 6-1: Manufacturer: syz
[ 2210.495514][T24040] usb 6-1: SerialNumber: syz
[ 2210.505085][ T6026] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2210.512332][ T6026] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2210.529311][T24040] usb 6-1: config 0 descriptor??
[ 2210.590031][ T6028] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2210.597264][ T6028] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2210.923742][T24040] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[ 2211.088673][ T3798] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2211.116749][T24040] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2211.144428][T24040] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2211.176591][T24040] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 2211.207185][T24040] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2211.243114][T24040] usb 1-1: SerialNumber: syz
[ 2211.279391][ T3798] veth0_vlan: entered promiscuous mode
[ 2211.361994][ T3798] veth1_vlan: entered promiscuous mode
[ 2211.415307][ T3798] veth0_macvtap: entered promiscuous mode
[ 2211.428273][ T3798] veth1_macvtap: entered promiscuous mode
[ 2211.453369][ T3798] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2211.465365][ T3798] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2211.493275][T24040] usb 1-1: 0:2 : does not exist
[ 2211.585529][T24040] usb 1-1: USB disconnect, device number 82
[ 2211.609014][ T6026] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2211.700289][   T29] kauditd_printk_skb: 26 callbacks suppressed
[ 2211.700309][   T29] audit: type=1400 audit(1773802968.844:1171): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4000 comm="syz.1.9123"
[ 2211.773677][ T6026] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2211.801543][ T6026] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2211.931827][ T6026] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2212.428648][T24049] usb 6-1: USB disconnect, device number 31
[ 2212.482806][T19399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2212.501516][T19399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2212.616781][   T29] audit: type=1326 audit(1773802969.754:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4011 comm="syz.5.9125" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2212.647845][T19399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2212.657102][T19399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2212.675994][   T29] audit: type=1326 audit(1773802969.764:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4011 comm="syz.5.9125" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2212.708619][T24054] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[ 2212.770935][   T29] audit: type=1326 audit(1773802969.764:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4011 comm="syz.5.9125" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2212.881265][   T29] audit: type=1326 audit(1773802969.764:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4011 comm="syz.5.9125" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2212.903552][   T29] audit: type=1326 audit(1773802969.764:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4011 comm="syz.5.9125" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2212.925793][   T29] audit: type=1326 audit(1773802969.764:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4011 comm="syz.5.9125" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2212.948017][   T29] audit: type=1326 audit(1773802969.764:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4011 comm="syz.5.9125" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2213.033519][T24054] usb 1-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 16
[ 2213.101205][T24054] usb 1-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 32
[ 2213.104443][   T29] audit: type=1326 audit(1773802969.784:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4011 comm="syz.5.9125" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2213.243104][T24054] usb 1-1: config 1 interface 0 has no altsetting 0
[ 2213.262942][T24054] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2213.269156][   T29] audit: type=1326 audit(1773802969.784:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4011 comm="syz.5.9125" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2213.280836][T24054] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2213.768351][T24054] usb 1-1: Product: syz
[ 2213.809343][T24054] usb 1-1: Manufacturer: syz
[ 2213.892608][T24054] usb 1-1: SerialNumber: syz
[ 2214.124206][ T4008] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 2214.141792][ T4008] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 2214.493689][ T2237] Bluetooth: hci4: Malformed LE Event: 0x0d
[ 2214.763933][T24054] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71
[ 2215.013157][T24054] usb 1-1: USB disconnect, device number 83
[ 2215.702353][T24049] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[ 2215.985201][T24049] usb 6-1: Using ep0 maxpacket: 16
[ 2216.029565][T24049] usb 6-1: config 0 has an invalid interface number: 105 but max is 0
[ 2216.040803][T24049] usb 6-1: config 0 has no interface number 0
[ 2216.112349][T24048] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[ 2216.156925][T24049] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[ 2216.168091][ T4049] m920x_read = error: -19
[ 2216.307284][T24049] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2216.418841][T24049] usb 6-1: Product: syz
[ 2216.423195][T24048] usb 1-1: Using ep0 maxpacket: 8
[ 2216.592294][T24049] usb 6-1: Manufacturer: syz
[ 2216.597896][T24049] usb 6-1: SerialNumber: syz
[ 2216.630171][T24048] usb 1-1: config index 0 descriptor too short (expected 30, got 18)
[ 2216.653231][T24049] usb 6-1: config 0 descriptor??
[ 2216.772397][T24048] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2216.811794][T24048] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2216.838128][T24048] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 2216.925052][T24048] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2216.967901][T24048] usb 1-1: Product: syz
[ 2216.972131][T24048] usb 1-1: Manufacturer: syz
[ 2216.977436][T24049] uvcvideo 6-1:0.105: probe with driver uvcvideo failed with error -22
[ 2217.008778][T24048] usb 1-1: SerialNumber: syz
[ 2217.028471][T24049] usb 6-1: USB disconnect, device number 32
[ 2217.064989][T24048] usb 1-1: config 0 descriptor??
[ 2217.202311][   T43] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[ 2217.294544][ T4047] net_ratelimit: 47 callbacks suppressed
[ 2217.294590][ T4047] netlink: zone id is out of range
[ 2217.306210][ T4047] netlink: zone id is out of range
[ 2217.311729][ T4047] netlink: zone id is out of range
[ 2217.320593][ T4047] netlink: zone id is out of range
[ 2217.326524][ T4047] netlink: zone id is out of range
[ 2217.333710][ T4047] netlink: zone id is out of range
[ 2217.339326][ T4047] netlink: zone id is out of range
[ 2217.346724][ T4047] netlink: zone id is out of range
[ 2217.352293][   T43] usb 5-1: Using ep0 maxpacket: 16
[ 2217.355923][ T4047] netlink: zone id is out of range
[ 2217.365111][ T4047] netlink: zone id is out of range
[ 2217.371000][   T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2217.385686][   T43] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[ 2217.406038][   T43] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 2217.421802][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2217.441971][   T43] usb 5-1: config 0 descriptor??
[ 2217.514337][T24049] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[ 2217.523809][   T43] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2217.682311][T24049] usb 2-1: Using ep0 maxpacket: 8
[ 2217.689387][T24049] usb 2-1: config 2 has an invalid interface number: 31 but max is 0
[ 2217.698060][T24049] usb 2-1: config 2 has no interface number 0
[ 2217.704478][T24049] usb 2-1: config 2 interface 31 has no altsetting 0
[ 2217.717221][T24049] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[ 2217.732553][T24049] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2217.745134][T24049] usb 2-1: Product: syz
[ 2217.750862][T24049] usb 2-1: Manufacturer: syz
[ 2217.758673][T24049] usb 2-1: SerialNumber: syz
[ 2217.791258][   T29] kauditd_printk_skb: 25 callbacks suppressed
[ 2217.801391][   T29] audit: type=1400 audit(1773802974.934:1206): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4069 comm="syz.5.9137"
[ 2218.678042][T24049] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22
[ 2218.689875][T24049] usb 2-1: USB disconnect, device number 61
[ 2218.800095][T24046] usb 1-1: USB disconnect, device number 84
[ 2219.563000][T24054] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[ 2219.682398][ T4094] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv_slave_0, syncid = 4, id = 0
[ 2219.752494][T24054] usb 6-1: Using ep0 maxpacket: 8
[ 2219.768251][T24054] usb 6-1: config index 0 descriptor too short (expected 30, got 18)
[ 2219.794951][T24054] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2219.822352][T24054] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2219.846183][T24054] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 2219.855533][T24054] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2219.898367][T24054] usb 6-1: Product: syz
[ 2219.907587][T24054] usb 6-1: Manufacturer: syz
[ 2219.914252][T24054] usb 6-1: SerialNumber: syz
[ 2219.942457][T24054] usb 6-1: config 0 descriptor??
[ 2221.127415][   T29] audit: type=1326 audit(1773802978.274:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4102 comm="syz.0.9143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000
[ 2221.181168][   T29] audit: type=1326 audit(1773802978.294:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4102 comm="syz.0.9143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000
[ 2221.259373][   T29] audit: type=1326 audit(1773802978.304:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4102 comm="syz.0.9143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705ef6c code=0x7ffc0000
[ 2221.289227][   T29] audit: type=1326 audit(1773802978.304:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4102 comm="syz.0.9143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000
[ 2221.311745][T29549] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[ 2221.313221][   T29] audit: type=1326 audit(1773802978.304:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4102 comm="syz.0.9143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000
[ 2221.646191][T29549] usb 2-1: Using ep0 maxpacket: 8
[ 2221.653456][T24046] usb 5-1: USB disconnect, device number 96
[ 2221.673689][T29549] usb 2-1: config 2 has an invalid interface number: 31 but max is 0
[ 2221.682373][T29549] usb 2-1: config 2 has no interface number 0
[ 2221.706723][T29549] usb 2-1: config 2 interface 31 has no altsetting 0
[ 2221.728826][T29549] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[ 2221.752081][T29549] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2221.761096][T29549] usb 2-1: Product: syz
[ 2221.768331][T29549] usb 2-1: Manufacturer: syz
[ 2221.787778][T29549] usb 2-1: SerialNumber: syz
[ 2221.800969][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 2221.801607][   T29] audit: type=1326 audit(1773802978.304:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4102 comm="syz.0.9143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf705ef6c code=0x7ffc0000
[ 2221.807873][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 2221.897909][   T29] audit: type=1326 audit(1773802978.304:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4102 comm="syz.0.9143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000
[ 2222.078468][   T29] audit: type=1326 audit(1773802978.304:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4102 comm="syz.0.9143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000
[ 2222.106659][   T29] audit: type=1326 audit(1773802978.304:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4102 comm="syz.0.9143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf705ef6c code=0x7ffc0000
[ 2222.344148][ T4114] m920x_read = error: -19
[ 2222.351268][T24046] usb 6-1: USB disconnect, device number 33
[ 2222.370148][T29549] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22
[ 2222.388424][T29549] usb 2-1: USB disconnect, device number 62
[ 2222.929589][   T29] kauditd_printk_skb: 2 callbacks suppressed
[ 2222.929616][   T29] audit: type=1400 audit(1773802979.974:1218): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4120 comm="syz.0.9147"
[ 2223.066057][   T29] audit: type=1326 audit(1773802980.214:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4129 comm="syz.6.9150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f6c code=0x7ffc0000
[ 2223.113326][   T29] audit: type=1326 audit(1773802980.234:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4129 comm="syz.6.9150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f6c code=0x7ffc0000
[ 2223.217936][   T29] audit: type=1326 audit(1773802980.234:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4129 comm="syz.6.9150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f52f6c code=0x7ffc0000
[ 2223.242369][T24054] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[ 2223.416005][ T4137] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[ 2223.483091][   T43] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[ 2223.509018][   T29] audit: type=1326 audit(1773802980.234:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4129 comm="syz.6.9150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f6c code=0x7ffc0000
[ 2223.562496][T24054] usb 5-1: Using ep0 maxpacket: 8
[ 2223.592526][T24054] usb 5-1: config index 0 descriptor too short (expected 30, got 18)
[ 2223.601195][   T29] audit: type=1326 audit(1773802980.234:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4129 comm="syz.6.9150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f52f6c code=0x7ffc0000
[ 2223.607048][T24054] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2223.783194][   T29] audit: type=1326 audit(1773802980.244:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4129 comm="syz.6.9150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f6c code=0x7ffc0000
[ 2223.805763][   T29] audit: type=1326 audit(1773802980.244:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4129 comm="syz.6.9150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7f52f6c code=0x7ffc0000
[ 2223.822696][   T43] usb 2-1: Using ep0 maxpacket: 8
[ 2223.831109][   T29] audit: type=1326 audit(1773802980.244:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4129 comm="syz.6.9150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f6c code=0x7ffc0000
[ 2223.874764][   T29] audit: type=1326 audit(1773802980.244:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4129 comm="syz.6.9150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7f52f6c code=0x7ffc0000
[ 2223.975359][T24054] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2223.988185][T24054] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 2223.997859][   T43] usb 2-1: config 2 has an invalid interface number: 31 but max is 0
[ 2224.006112][T24054] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2224.029579][   T43] usb 2-1: config 2 has no interface number 0
[ 2224.042697][   T43] usb 2-1: config 2 interface 31 has no altsetting 0
[ 2224.049608][T24054] usb 5-1: Product: syz
[ 2224.058064][T24054] usb 5-1: Manufacturer: syz
[ 2224.111431][   T43] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[ 2224.134341][T24054] usb 5-1: SerialNumber: syz
[ 2224.163930][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2224.173380][T24054] usb 5-1: config 0 descriptor??
[ 2224.257292][   T43] usb 2-1: Product: syz
[ 2224.261527][   T43] usb 2-1: Manufacturer: syz
[ 2224.335053][   T43] usb 2-1: SerialNumber: syz
[ 2224.473289][ T4127] net_ratelimit: 47 callbacks suppressed
[ 2224.473343][ T4127] netlink: zone id is out of range
[ 2224.484663][ T4127] netlink: zone id is out of range
[ 2224.495621][ T4127] netlink: zone id is out of range
[ 2224.512878][ T4127] netlink: zone id is out of range
[ 2224.531296][ T4127] netlink: zone id is out of range
[ 2224.541006][ T4127] netlink: zone id is out of range
[ 2224.546867][ T4127] netlink: zone id is out of range
[ 2224.552573][ T4127] netlink: zone id is out of range
[ 2224.573218][ T4127] netlink: zone id is out of range
[ 2224.647803][ T4127] netlink: zone id is out of range
[ 2224.905785][   T43] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22
[ 2224.974570][   T43] usb 2-1: USB disconnect, device number 63
[ 2227.469875][   T43] usb 5-1: USB disconnect, device number 97
[ 2227.937897][ T4181] m920x_read = error: -19
[ 2228.772345][T24059] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[ 2228.924156][   T29] kauditd_printk_skb: 24 callbacks suppressed
[ 2228.924186][   T29] audit: type=1400 audit(1773802985.994:1252): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4194 comm="syz.1.9163"
[ 2229.040814][T24059] usb 5-1: Using ep0 maxpacket: 8
[ 2229.096225][T24059] usb 5-1: config 2 has an invalid interface number: 31 but max is 0
[ 2229.107079][T24059] usb 5-1: config 2 has no interface number 0
[ 2229.118701][T24059] usb 5-1: config 2 interface 31 has no altsetting 0
[ 2229.304700][T24059] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[ 2229.722342][T24059] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2229.740712][T24059] usb 5-1: Product: syz
[ 2229.755559][T24059] usb 5-1: Manufacturer: syz
[ 2229.760235][T24059] usb 5-1: SerialNumber: syz
[ 2230.038503][   T29] audit: type=1400 audit(1773802987.184:1253): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4207 comm="syz.0.9164"
[ 2230.414728][   T29] audit: type=1326 audit(1773802987.564:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4211 comm="syz.5.9165" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2230.443716][   T29] audit: type=1326 audit(1773802987.584:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4211 comm="syz.5.9165" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2230.553099][   T29] audit: type=1326 audit(1773802987.654:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4211 comm="syz.5.9165" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2230.734933][T24059] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22
[ 2230.773564][   T29] audit: type=1326 audit(1773802987.654:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4211 comm="syz.5.9165" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2230.838243][T24059] usb 5-1: USB disconnect, device number 98
[ 2230.873398][   T29] audit: type=1326 audit(1773802987.654:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4211 comm="syz.5.9165" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2231.103982][   T29] audit: type=1326 audit(1773802987.654:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4211 comm="syz.5.9165" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2231.170818][   T29] audit: type=1326 audit(1773802987.654:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4211 comm="syz.5.9165" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2231.362478][   T29] audit: type=1326 audit(1773802987.654:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4211 comm="syz.5.9165" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2231.710756][ T4222] net_ratelimit: 45 callbacks suppressed
[ 2231.710781][ T4222] netlink: set zone limit has 4 unknown bytes
[ 2232.084814][ T4228] m920x_read = error: -19
[ 2232.232323][T24059] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[ 2232.384903][ T4238] m920x_read = error: -19
[ 2232.432403][T24059] usb 5-1: Using ep0 maxpacket: 8
[ 2232.507957][T24059] usb 5-1: config index 0 descriptor too short (expected 30, got 18)
[ 2232.664536][T24059] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2232.699502][T24059] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2232.777305][T24059] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 2232.887961][T24059] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2232.927267][T24059] usb 5-1: Product: syz
[ 2232.945410][T24059] usb 5-1: Manufacturer: syz
[ 2232.953949][T24059] usb 5-1: SerialNumber: syz
[ 2232.993785][T24059] usb 5-1: config 0 descriptor??
[ 2233.535223][ T4226] netlink: zone id is out of range
[ 2233.559445][ T4226] netlink: zone id is out of range
[ 2233.612426][ T4226] netlink: zone id is out of range
[ 2233.617938][ T4226] netlink: zone id is out of range
[ 2233.623351][ T4226] netlink: zone id is out of range
[ 2233.633686][ T4226] netlink: zone id is out of range
[ 2233.639604][ T4226] netlink: zone id is out of range
[ 2233.645473][ T4226] netlink: zone id is out of range
[ 2233.657980][ T4226] netlink: zone id is out of range
[ 2234.976889][T24059] usb 5-1: USB disconnect, device number 99
[ 2235.082839][   T29] kauditd_printk_skb: 24 callbacks suppressed
[ 2235.082854][   T29] audit: type=1326 audit(1773802992.234:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4263 comm="syz.6.9188" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f6c code=0x7ffc0000
[ 2235.119141][   T29] audit: type=1326 audit(1773802992.264:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4263 comm="syz.6.9188" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f6c code=0x7ffc0000
[ 2235.141355][   T29] audit: type=1326 audit(1773802992.264:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4263 comm="syz.6.9188" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f52f6c code=0x7ffc0000
[ 2235.179660][   T29] audit: type=1326 audit(1773802992.264:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4263 comm="syz.6.9188" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f6c code=0x7ffc0000
[ 2235.292445][   T29] audit: type=1326 audit(1773802992.264:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4263 comm="syz.6.9188" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f6c code=0x7ffc0000
[ 2235.740223][   T29] audit: type=1326 audit(1773802992.264:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4263 comm="syz.6.9188" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f52f6c code=0x7ffc0000
[ 2235.782742][T24048] usb 5-1: new high-speed USB device number 100 using dummy_hcd
[ 2236.154487][   T29] audit: type=1326 audit(1773802992.264:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4263 comm="syz.6.9188" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f6c code=0x7ffc0000
[ 2236.165048][T24048] usb 5-1: Using ep0 maxpacket: 8
[ 2236.246993][   T29] audit: type=1326 audit(1773802992.264:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4263 comm="syz.6.9188" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7f52f6c code=0x7ffc0000
[ 2236.277539][T24048] usb 5-1: config index 0 descriptor too short (expected 30, got 18)
[ 2236.398381][   T29] audit: type=1326 audit(1773802992.264:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4263 comm="syz.6.9188" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f6c code=0x7ffc0000
[ 2236.412451][T24048] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2236.645754][   T29] audit: type=1326 audit(1773802992.264:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4263 comm="syz.6.9188" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f6c code=0x7ffc0000
[ 2236.718912][T24048] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2236.827902][ T4289] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[ 2237.008448][T24048] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 2237.032486][T24048] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2237.075554][T24048] usb 5-1: Product: syz
[ 2237.274413][T24048] usb 5-1: Manufacturer: syz
[ 2237.291960][T24048] usb 5-1: SerialNumber: syz
[ 2237.437856][T24048] usb 5-1: config 0 descriptor??
[ 2237.992330][ T4274] net_ratelimit: 47 callbacks suppressed
[ 2237.992379][ T4274] netlink: zone id is out of range
[ 2238.044743][ T4274] netlink: set zone limit has 4 unknown bytes
[ 2238.459770][ T4297] m920x_read = error: -19
[ 2239.592357][T24059] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[ 2240.122321][T24059] usb 6-1: Using ep0 maxpacket: 8
[ 2240.161672][T24059] usb 6-1: config index 0 descriptor too short (expected 30, got 18)
[ 2240.232330][T24059] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2240.243834][T24054] usb 5-1: USB disconnect, device number 100
[ 2240.270331][T24059] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2240.338109][T24059] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 2240.347581][T24059] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2240.393024][T24059] usb 6-1: Product: syz
[ 2240.397291][T24059] usb 6-1: Manufacturer: syz
[ 2240.404282][T24059] usb 6-1: SerialNumber: syz
[ 2240.412066][T24059] usb 6-1: config 0 descriptor??
[ 2240.631565][ T4311] netlink: zone id is out of range
[ 2240.636975][ T4311] netlink: zone id is out of range
[ 2240.642380][ T4311] netlink: zone id is out of range
[ 2240.647746][ T4311] netlink: zone id is out of range
[ 2240.653008][ T4311] netlink: zone id is out of range
[ 2240.658981][ T4311] netlink: zone id is out of range
[ 2240.664358][ T4311] netlink: zone id is out of range
[ 2240.669634][ T4311] netlink: zone id is out of range
[ 2241.094439][T24054] usb 5-1: new high-speed USB device number 101 using dummy_hcd
[ 2241.314771][T24054] usb 5-1: Using ep0 maxpacket: 16
[ 2241.339662][T24054] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[ 2241.348164][T24054] usb 5-1: config 0 has no interface number 0
[ 2241.444078][T24054] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[ 2241.457238][T24054] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2241.519445][T24054] usb 5-1: Product: syz
[ 2241.714654][T24054] usb 5-1: Manufacturer: syz
[ 2241.737623][T24054] usb 5-1: SerialNumber: syz
[ 2241.750297][T24054] usb 5-1: config 0 descriptor??
[ 2242.065975][T24054] uvcvideo 5-1:0.105: probe with driver uvcvideo failed with error -22
[ 2242.098195][T24054] usb 5-1: USB disconnect, device number 101
[ 2242.388903][ T4343] m920x_read = error: -19
[ 2242.573041][T24049] usb 6-1: USB disconnect, device number 34
[ 2242.702859][   T29] kauditd_printk_skb: 27 callbacks suppressed
[ 2242.702880][   T29] audit: type=1326 audit(1773802999.854:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4349 comm="syz.1.9201" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000
[ 2242.749723][   T29] audit: type=1326 audit(1773802999.854:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4349 comm="syz.1.9201" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000
[ 2242.780482][   T29] audit: type=1326 audit(1773802999.884:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4349 comm="syz.1.9201" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6fcef6c code=0x7ffc0000
[ 2242.803853][   T29] audit: type=1326 audit(1773802999.884:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4349 comm="syz.1.9201" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000
[ 2242.832052][   T29] audit: type=1326 audit(1773802999.884:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4349 comm="syz.1.9201" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000
[ 2242.860040][   T29] audit: type=1326 audit(1773802999.924:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4349 comm="syz.1.9201" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf6fcef6c code=0x7ffc0000
[ 2243.352299][T24059] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[ 2243.572555][   T29] audit: type=1326 audit(1773802999.924:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4349 comm="syz.1.9201" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000
[ 2243.662319][T24059] usb 6-1: Using ep0 maxpacket: 8
[ 2243.784163][   T29] audit: type=1326 audit(1773802999.924:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4349 comm="syz.1.9201" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000
[ 2243.826223][T24059] usb 6-1: config index 0 descriptor too short (expected 30, got 18)
[ 2243.853827][T24059] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2243.890155][T24059] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2243.984038][   T29] audit: type=1326 audit(1773802999.954:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4349 comm="syz.1.9201" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf6fcef6c code=0x7ffc0000
[ 2244.102360][   T29] audit: type=1326 audit(1773802999.954:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4349 comm="syz.1.9201" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000
[ 2244.223464][T24059] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 2244.264789][T24059] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2244.393991][T24059] usb 6-1: Product: syz
[ 2244.398221][T24059] usb 6-1: Manufacturer: syz
[ 2244.417674][T24059] usb 6-1: SerialNumber: syz
[ 2244.484476][T24059] usb 6-1: config 0 descriptor??
[ 2245.593595][T24059] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[ 2245.822418][T24059] usb 1-1: Using ep0 maxpacket: 8
[ 2245.967983][T24059] usb 1-1: config index 0 descriptor too short (expected 30, got 18)
[ 2246.032645][T24059] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2246.058516][T24059] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2246.165376][ T4393] tipc: Started in network mode
[ 2246.174491][T24059] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 2246.196831][T24059] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2246.196845][ T4393] tipc: Node identity b2fa7d02038f, cluster identity 4711
[ 2246.197330][ T4393] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2246.259439][T24059] usb 1-1: Product: syz
[ 2246.265362][ T4395] syzkaller0: entered promiscuous mode
[ 2246.279140][ T4395] syzkaller0: entered allmulticast mode
[ 2246.285124][T24059] usb 1-1: Manufacturer: syz
[ 2246.291205][T24049] usb 6-1: USB disconnect, device number 35
[ 2246.305386][T24059] usb 1-1: SerialNumber: syz
[ 2246.332845][T24059] usb 1-1: config 0 descriptor??
[ 2246.414641][ T4393] FAULT_INJECTION: forcing a failure.
[ 2246.414641][ T4393] name failslab, interval 1, probability 0, space 0, times 0
[ 2246.439869][ T4393] CPU: 1 UID: 0 PID: 4393 Comm: syz.1.9211 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2246.439903][ T4393] Tainted: [L]=SOFTLOCKUP
[ 2246.439911][ T4393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2246.439924][ T4393] Call Trace:
[ 2246.439934][ T4393]  <TASK>
[ 2246.439945][ T4393]  dump_stack_lvl+0xe8/0x150
[ 2246.439984][ T4393]  should_fail_ex+0x412/0x560
[ 2246.440021][ T4393]  should_failslab+0xa8/0x100
[ 2246.440051][ T4393]  __kmalloc_noprof+0xe8/0x760
[ 2246.440074][ T4393]  ? tomoyo_encode+0x28b/0x550
[ 2246.440111][ T4393]  tomoyo_encode+0x28b/0x550
[ 2246.440147][ T4393]  tomoyo_realpath_from_path+0x58d/0x5d0
[ 2246.440187][ T4393]  ? tomoyo_path_number_perm+0x219/0x630
[ 2246.440216][ T4393]  tomoyo_path_number_perm+0x246/0x630
[ 2246.440246][ T4393]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 2246.440277][ T4393]  ? __lock_acquire+0x6b5/0x2cf0
[ 2246.440339][ T4393]  ? __fget_files+0x2a/0x420
[ 2246.440374][ T4393]  ? __fget_files+0x3a0/0x420
[ 2246.440403][ T4393]  ? __fget_files+0x2a/0x420
[ 2246.440463][ T4393]  security_file_ioctl_compat+0xc3/0x2a0
[ 2246.440493][ T4393]  __ia32_compat_sys_ioctl+0x139/0x950
[ 2246.440524][ T4393]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 2246.440554][ T4393]  ? __fget_files+0x3a0/0x420
[ 2246.440591][ T4393]  ? fput+0xa0/0xd0
[ 2246.440621][ T4393]  ? ksys_write+0x242/0x270
[ 2246.440656][ T4393]  __do_fast_syscall_32+0x20d/0x640
[ 2246.440686][ T4393]  ? do_fast_syscall_32+0x33/0x70
[ 2246.440709][ T4393]  ? asm_int80_emulation+0x1a/0x20
[ 2246.440731][ T4393]  ? do_int80_emulation+0x274/0x4d0
[ 2246.440754][ T4393]  ? trace_irq_disable+0x3b/0x150
[ 2246.440793][ T4393]  do_fast_syscall_32+0x33/0x70
[ 2246.440817][ T4393]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2246.440843][ T4393] RIP: 0023:0xf6fcef6c
[ 2246.440862][ T4393] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 2246.440881][ T4393] RSP: 002b:00000000f53bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 2246.440903][ T4393] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000008922
[ 2246.440918][ T4393] RDX: 0000000080002280 RSI: 0000000000000000 RDI: 0000000000000000
[ 2246.440930][ T4393] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2246.440942][ T4393] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2246.440954][ T4393] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2246.440983][ T4393]  </TASK>
[ 2246.742388][ T4393] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2246.899085][ T4388] net_ratelimit: 47 callbacks suppressed
[ 2246.899110][ T4388] netlink: zone id is out of range
[ 2246.909995][ T4388] netlink: zone id is out of range
[ 2246.915308][ T4388] netlink: zone id is out of range
[ 2246.920537][ T4388] netlink: zone id is out of range
[ 2246.925814][ T4388] netlink: zone id is out of range
[ 2246.931307][ T4388] netlink: zone id is out of range
[ 2246.936905][ T4388] netlink: zone id is out of range
[ 2246.942227][ T4388] netlink: zone id is out of range
[ 2246.958724][ T4397] m920x_read = error: -19
[ 2246.959266][ T4393] tipc: Resetting bearer <eth:syzkaller0>
[ 2247.072624][ T4388] netlink: zone id is out of range
[ 2247.078541][ T4388] netlink: zone id is out of range
[ 2247.215675][ T4392] tipc: Resetting bearer <eth:syzkaller0>
[ 2247.245978][ T4392] tipc: Disabling bearer <eth:syzkaller0>
[ 2247.472673][T24049] usb 5-1: new high-speed USB device number 102 using dummy_hcd
[ 2247.644013][T24049] usb 5-1: Using ep0 maxpacket: 16
[ 2247.651316][T24049] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[ 2247.670910][T24049] usb 5-1: config 0 has no interface number 0
[ 2247.686316][T24049] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[ 2247.791593][T24049] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2247.800652][T24049] usb 5-1: Product: syz
[ 2247.805279][T24049] usb 5-1: Manufacturer: syz
[ 2247.843068][T24049] usb 5-1: SerialNumber: syz
[ 2247.987489][T24049] usb 5-1: config 0 descriptor??
[ 2248.113963][   T29] kauditd_printk_skb: 25 callbacks suppressed
[ 2248.113982][   T29] audit: type=1326 audit(1773803005.264:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.6.9219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f6c code=0x7ffc0000
[ 2248.256900][   T29] audit: type=1326 audit(1773803005.294:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.6.9219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f6c code=0x7ffc0000
[ 2248.280366][   T29] audit: type=1326 audit(1773803005.294:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.6.9219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f52f6c code=0x7ffc0000
[ 2248.304432][   T29] audit: type=1326 audit(1773803005.294:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.6.9219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f6c code=0x7ffc0000
[ 2248.329092][   T29] audit: type=1326 audit(1773803005.294:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.6.9219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f6c code=0x7ffc0000
[ 2248.342079][T24049] uvcvideo 5-1:0.105: probe with driver uvcvideo failed with error -22
[ 2248.449369][   T29] audit: type=1326 audit(1773803005.294:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.6.9219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f52f6c code=0x7ffc0000
[ 2248.519101][   T29] audit: type=1326 audit(1773803005.294:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.6.9219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f6c code=0x7ffc0000
[ 2248.554638][T24049] usb 5-1: USB disconnect, device number 102
[ 2248.680999][   T29] audit: type=1326 audit(1773803005.294:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.6.9219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7f52f6c code=0x7ffc0000
[ 2248.714705][T24059] usb 1-1: USB disconnect, device number 85
[ 2248.769560][   T29] audit: type=1326 audit(1773803005.294:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.6.9219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f6c code=0x7ffc0000
[ 2248.935828][   T29] audit: type=1326 audit(1773803005.294:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.6.9219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7f52f6c code=0x7ffc0000
[ 2250.412633][ T4443] m920x_read = error: -19
[ 2250.871309][ T4453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2250.939069][ T4453] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2252.564525][T24059] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[ 2253.221464][T24059] usb 6-1: Using ep0 maxpacket: 8
[ 2253.305228][T24059] usb 6-1: config index 0 descriptor too short (expected 30, got 18)
[ 2253.313606][T24059] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2253.344979][T24059] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2253.363522][T24059] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 2253.372825][T24059] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2253.392347][T24054] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[ 2253.402482][T24059] usb 6-1: Product: syz
[ 2253.408427][T24059] usb 6-1: Manufacturer: syz
[ 2253.414936][T24059] usb 6-1: SerialNumber: syz
[ 2253.435526][T24059] usb 6-1: config 0 descriptor??
[ 2253.554176][T24054] usb 2-1: Using ep0 maxpacket: 16
[ 2253.567632][T24054] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[ 2253.592309][T24054] usb 2-1: config 0 has no interface number 0
[ 2253.616670][T24054] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[ 2253.627330][T24054] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2253.636833][T24054] usb 2-1: Product: syz
[ 2253.641244][T24054] usb 2-1: Manufacturer: syz
[ 2253.647529][T24054] usb 2-1: SerialNumber: syz
[ 2253.665343][ T4476] net_ratelimit: 45 callbacks suppressed
[ 2253.665391][ T4476] netlink: zone id is out of range
[ 2253.686419][ T4476] netlink: zone id is out of range
[ 2253.698925][ T4476] netlink: zone id is out of range
[ 2253.706772][   T29] kauditd_printk_skb: 25 callbacks suppressed
[ 2253.706790][   T29] audit: type=1326 audit(1773803010.854:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4486 comm="syz.4.9235" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34f6c code=0x7ffc0000
[ 2253.738199][ T4476] netlink: zone id is out of range
[ 2253.744443][ T4476] netlink: zone id is out of range
[ 2253.751479][   T29] audit: type=1326 audit(1773803010.854:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4486 comm="syz.4.9235" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34f6c code=0x7ffc0000
[ 2253.775307][T24054] usb 2-1: config 0 descriptor??
[ 2253.783687][ T4476] netlink: zone id is out of range
[ 2253.793247][ T4476] netlink: zone id is out of range
[ 2253.798532][   T29] audit: type=1326 audit(1773803010.864:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4487 comm="syz.0.9236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000
[ 2253.831650][ T4476] netlink: zone id is out of range
[ 2253.847605][ T4493] m920x_read = error: -19
[ 2254.179333][   T29] audit: type=1326 audit(1773803010.864:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4487 comm="syz.0.9236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000
[ 2254.212726][ T4476] netlink: zone id is out of range
[ 2254.234325][ T4476] netlink: zone id is out of range
[ 2254.411521][   T29] audit: type=1326 audit(1773803010.884:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4487 comm="syz.0.9236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705ef6c code=0x7ffc0000
[ 2254.685481][T24054] uvcvideo 2-1:0.105: probe with driver uvcvideo failed with error -22
[ 2254.706354][T24054] usb 2-1: USB disconnect, device number 64
[ 2254.762345][   T29] audit: type=1326 audit(1773803010.884:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4487 comm="syz.0.9236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000
[ 2255.105994][   T29] audit: type=1326 audit(1773803010.884:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4487 comm="syz.0.9236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000
[ 2255.162426][   T29] audit: type=1326 audit(1773803010.884:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4487 comm="syz.0.9236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf705ef6c code=0x7ffc0000
[ 2255.435321][   T29] audit: type=1326 audit(1773803010.884:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4487 comm="syz.0.9236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000
[ 2255.597241][T24046] usb 6-1: USB disconnect, device number 36
[ 2255.875213][   T29] audit: type=1326 audit(1773803010.884:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4487 comm="syz.0.9236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000
[ 2256.966798][T24059] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[ 2257.207521][T24059] usb 1-1: Using ep0 maxpacket: 8
[ 2257.231235][T24059] usb 1-1: config index 0 descriptor too short (expected 30, got 18)
[ 2257.245642][T24059] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2257.269055][ T4531] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv_slave_0, syncid = 4, id = 0
[ 2257.279670][T24059] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2257.346568][T24059] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 2257.375715][T24059] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2257.396415][T24059] usb 1-1: Product: syz
[ 2257.403210][T24059] usb 1-1: Manufacturer: syz
[ 2257.408197][T24059] usb 1-1: SerialNumber: syz
[ 2257.563091][T24059] usb 1-1: config 0 descriptor??
[ 2257.709530][ T4537] FAULT_INJECTION: forcing a failure.
[ 2257.709530][ T4537] name failslab, interval 1, probability 0, space 0, times 0
[ 2257.775130][ T4537] CPU: 0 UID: 0 PID: 4537 Comm: syz.6.9247 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2257.775156][ T4537] Tainted: [L]=SOFTLOCKUP
[ 2257.775161][ T4537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2257.775171][ T4537] Call Trace:
[ 2257.775178][ T4537]  <TASK>
[ 2257.775185][ T4537]  dump_stack_lvl+0xe8/0x150
[ 2257.775213][ T4537]  should_fail_ex+0x412/0x560
[ 2257.775241][ T4537]  should_failslab+0xa8/0x100
[ 2257.775263][ T4537]  kmem_cache_alloc_node_noprof+0x8f/0x690
[ 2257.775280][ T4537]  ? __alloc_skb+0x186/0x7d0
[ 2257.775296][ T4537]  ? __alloc_skb+0x1d0/0x7d0
[ 2257.775315][ T4537]  ? __local_bh_enable_ip+0xd0/0x130
[ 2257.775339][ T4537]  __alloc_skb+0x1d0/0x7d0
[ 2257.775356][ T4537]  netlink_sendmsg+0x5d4/0xb40
[ 2257.775388][ T4537]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2257.775412][ T4537]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2257.775437][ T4537]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2257.775458][ T4537]  ____sys_sendmsg+0x972/0x9f0
[ 2257.775481][ T4537]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2257.775501][ T4537]  ? kstrtoull+0x12f/0x1d0
[ 2257.775527][ T4537]  ___sys_sendmsg+0x2a5/0x360
[ 2257.775547][ T4537]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2257.775566][ T4537]  ? get_pid_task+0x20/0x1f0
[ 2257.775579][ T4537]  ? get_pid_task+0x20/0x1f0
[ 2257.775592][ T4537]  ? get_pid_task+0x20/0x1f0
[ 2257.775623][ T4537]  ? __fget_files+0x2a/0x420
[ 2257.775668][ T4537]  ? __fget_files+0x3a0/0x420
[ 2257.775709][ T4537]  __sys_sendmsg+0x183/0x260
[ 2257.775742][ T4537]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2257.775775][ T4537]  __do_fast_syscall_32+0x20d/0x640
[ 2257.775797][ T4537]  ? do_fast_syscall_32+0x33/0x70
[ 2257.775815][ T4537]  ? asm_int80_emulation+0x1a/0x20
[ 2257.775830][ T4537]  ? do_int80_emulation+0x274/0x4d0
[ 2257.775846][ T4537]  ? trace_irq_disable+0x3b/0x150
[ 2257.775873][ T4537]  do_fast_syscall_32+0x33/0x70
[ 2257.775890][ T4537]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2257.775909][ T4537] RIP: 0023:0xf7f52f6c
[ 2257.775922][ T4537] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 2257.775935][ T4537] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2257.775951][ T4537] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000480
[ 2257.775962][ T4537] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2257.775971][ T4537] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2257.775979][ T4537] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2257.775988][ T4537] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2257.776008][ T4537]  </TASK>
[ 2258.094931][ T4539] FAULT_INJECTION: forcing a failure.
[ 2258.094931][ T4539] name failslab, interval 1, probability 0, space 0, times 0
[ 2258.107660][ T4539] CPU: 0 UID: 0 PID: 4539 Comm: syz.6.9249 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2258.107685][ T4539] Tainted: [L]=SOFTLOCKUP
[ 2258.107691][ T4539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2258.107700][ T4539] Call Trace:
[ 2258.107708][ T4539]  <TASK>
[ 2258.107716][ T4539]  dump_stack_lvl+0xe8/0x150
[ 2258.107743][ T4539]  should_fail_ex+0x412/0x560
[ 2258.107769][ T4539]  should_failslab+0xa8/0x100
[ 2258.107790][ T4539]  kmem_cache_alloc_node_noprof+0x8f/0x690
[ 2258.107807][ T4539]  ? __alloc_skb+0x186/0x7d0
[ 2258.107821][ T4539]  ? __alloc_skb+0x1d0/0x7d0
[ 2258.107834][ T4539]  ? __local_bh_enable_ip+0xd0/0x130
[ 2258.107857][ T4539]  __alloc_skb+0x1d0/0x7d0
[ 2258.107871][ T4539]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[ 2258.107892][ T4539]  netlink_sendmsg+0x5d4/0xb40
[ 2258.107923][ T4539]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2258.107948][ T4539]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2258.107971][ T4539]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2258.107989][ T4539]  ____sys_sendmsg+0x972/0x9f0
[ 2258.108013][ T4539]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2258.108033][ T4539]  ? kstrtoull+0x12f/0x1d0
[ 2258.108059][ T4539]  ___sys_sendmsg+0x2a5/0x360
[ 2258.108079][ T4539]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2258.108098][ T4539]  ? get_pid_task+0x20/0x1f0
[ 2258.108111][ T4539]  ? get_pid_task+0x20/0x1f0
[ 2258.108124][ T4539]  ? get_pid_task+0x20/0x1f0
[ 2258.108155][ T4539]  ? __fget_files+0x2a/0x420
[ 2258.108177][ T4539]  ? __fget_files+0x3a0/0x420
[ 2258.108206][ T4539]  __sys_sendmsg+0x183/0x260
[ 2258.108224][ T4539]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2258.108256][ T4539]  __do_fast_syscall_32+0x20d/0x640
[ 2258.108276][ T4539]  ? do_fast_syscall_32+0x33/0x70
[ 2258.108292][ T4539]  ? asm_int80_emulation+0x1a/0x20
[ 2258.108316][ T4539]  ? do_int80_emulation+0x274/0x4d0
[ 2258.108332][ T4539]  ? trace_irq_disable+0x3b/0x150
[ 2258.108362][ T4539]  do_fast_syscall_32+0x33/0x70
[ 2258.108380][ T4539]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2258.108398][ T4539] RIP: 0023:0xf7f52f6c
[ 2258.108412][ T4539] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 2258.108426][ T4539] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2258.108442][ T4539] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000200
[ 2258.108452][ T4539] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2258.108461][ T4539] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2258.108470][ T4539] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2258.108480][ T4539] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2258.108500][ T4539]  </TASK>
[ 2258.499778][ T4542] m920x_read = error: -19
[ 2258.885155][ T4549] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3901428352 (7802856704 ns) > initial count (110847878 ns). Using initial count to start timer.
[ 2259.238027][   T29] kauditd_printk_skb: 13 callbacks suppressed
[ 2259.238048][   T29] audit: type=1326 audit(1773803016.384:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4557 comm="syz.4.9254" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34f6c code=0x7ffc0000
[ 2259.284523][   T29] audit: type=1326 audit(1773803016.384:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4557 comm="syz.4.9254" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34f6c code=0x7ffc0000
[ 2259.318628][   T29] audit: type=1326 audit(1773803016.414:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4557 comm="syz.4.9254" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f34f6c code=0x7ffc0000
[ 2259.345740][   T29] audit: type=1326 audit(1773803016.414:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4557 comm="syz.4.9254" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34f6c code=0x7ffc0000
[ 2259.372453][   T29] audit: type=1326 audit(1773803016.414:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4557 comm="syz.4.9254" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34f6c code=0x7ffc0000
[ 2259.510542][   T29] audit: type=1326 audit(1773803016.414:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4557 comm="syz.4.9254" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f34f6c code=0x7ffc0000
[ 2259.667693][   T29] audit: type=1326 audit(1773803016.414:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4557 comm="syz.4.9254" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34f6c code=0x7ffc0000
[ 2259.763552][T24054] usb 1-1: USB disconnect, device number 87
[ 2259.818065][   T29] audit: type=1326 audit(1773803016.414:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4557 comm="syz.4.9254" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34f6c code=0x7ffc0000
[ 2259.864565][   T29] audit: type=1326 audit(1773803016.424:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4557 comm="syz.4.9254" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7f34f6c code=0x7ffc0000
[ 2259.887097][   T29] audit: type=1326 audit(1773803016.424:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4557 comm="syz.4.9254" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34f6c code=0x7ffc0000
[ 2260.502402][T24048] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[ 2260.686382][T24048] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 2260.695842][T24048] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2260.725073][T24048] usb 2-1: Product: syz
[ 2260.736019][T24048] usb 2-1: Manufacturer: syz
[ 2260.749828][T24048] usb 2-1: SerialNumber: syz
[ 2260.773832][T24048] usb 2-1: config 0 descriptor??
[ 2260.996606][ T4582] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv_slave_0, syncid = 4, id = 0
[ 2261.028629][ T4584] FAULT_INJECTION: forcing a failure.
[ 2261.028629][ T4584] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2261.053638][ T4584] CPU: 1 UID: 0 PID: 4584 Comm: syz.4.9259 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2261.053684][ T4584] Tainted: [L]=SOFTLOCKUP
[ 2261.053693][ T4584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2261.053707][ T4584] Call Trace:
[ 2261.053717][ T4584]  <TASK>
[ 2261.053726][ T4584]  dump_stack_lvl+0xe8/0x150
[ 2261.053761][ T4584]  should_fail_ex+0x412/0x560
[ 2261.053799][ T4584]  _copy_to_user+0x31/0xb0
[ 2261.053817][ T4584]  sctp_getsockopt_sctp_status+0x7a9/0xad0
[ 2261.053866][ T4584]  ? __pfx_sctp_getsockopt_sctp_status+0x10/0x10
[ 2261.053917][ T4584]  ? sctp_getsockopt+0x12f/0xb90
[ 2261.053941][ T4584]  ? __local_bh_enable_ip+0xd0/0x130
[ 2261.053972][ T4584]  sctp_getsockopt+0x65e/0xb90
[ 2261.054010][ T4584]  ? __pfx_sock_common_getsockopt+0x10/0x10
[ 2261.054045][ T4584]  do_sock_getsockopt+0x2d3/0x3f0
[ 2261.054070][ T4584]  ? __pfx_do_sock_getsockopt+0x10/0x10
[ 2261.054093][ T4584]  ? __fget_files+0x2a/0x420
[ 2261.054123][ T4584]  ? __fget_files+0x3a0/0x420
[ 2261.054143][ T4584]  ? __fget_files+0x2a/0x420
[ 2261.054192][ T4584]  __ia32_sys_getsockopt+0x1a4/0x240
[ 2261.054232][ T4584]  __do_fast_syscall_32+0x20d/0x640
[ 2261.054263][ T4584]  ? do_fast_syscall_32+0x33/0x70
[ 2261.054280][ T4584]  ? asm_int80_emulation+0x1a/0x20
[ 2261.054294][ T4584]  ? do_int80_emulation+0x274/0x4d0
[ 2261.054325][ T4584]  ? trace_irq_disable+0x3b/0x150
[ 2261.054361][ T4584]  do_fast_syscall_32+0x33/0x70
[ 2261.054384][ T4584]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2261.054414][ T4584] RIP: 0023:0xf7f34f6c
[ 2261.054429][ T4584] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 2261.054442][ T4584] RSP: 002b:00000000f53d550c EFLAGS: 00000206 ORIG_RAX: 000000000000016d
[ 2261.054458][ T4584] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000084
[ 2261.054483][ T4584] RDX: 000000000000000e RSI: 00000000800003c0 RDI: 0000000080000100
[ 2261.054497][ T4584] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2261.054510][ T4584] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2261.054522][ T4584] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2261.054551][ T4584]  </TASK>
[ 2262.033002][T24048] usb 2-1: Firmware version (0.0) predates our first public release.
[ 2262.047298][T24048] usb 2-1: Please update to version 0.2 or newer
[ 2262.135784][ T4600] FAULT_INJECTION: forcing a failure.
[ 2262.135784][ T4600] name failslab, interval 1, probability 0, space 0, times 0
[ 2262.152274][   T43] usb 5-1: new high-speed USB device number 103 using dummy_hcd
[ 2262.174139][ T4600] CPU: 1 UID: 0 PID: 4600 Comm: syz.6.9264 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2262.174172][ T4600] Tainted: [L]=SOFTLOCKUP
[ 2262.174181][ T4600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2262.174194][ T4600] Call Trace:
[ 2262.174203][ T4600]  <TASK>
[ 2262.174213][ T4600]  dump_stack_lvl+0xe8/0x150
[ 2262.174249][ T4600]  should_fail_ex+0x412/0x560
[ 2262.174281][ T4600]  ? sock_alloc_inode+0x28/0xc0
[ 2262.174312][ T4600]  should_failslab+0xa8/0x100
[ 2262.174341][ T4600]  kmem_cache_alloc_lru_noprof+0x87/0x640
[ 2262.174366][ T4600]  ? format_decode+0x5a3/0xe10
[ 2262.174400][ T4600]  ? __pfx_sock_alloc_inode+0x10/0x10
[ 2262.174425][ T4600]  sock_alloc_inode+0x28/0xc0
[ 2262.174453][ T4600]  alloc_inode+0x6a/0x1b0
[ 2262.174484][ T4600]  __sock_create+0x12d/0x9d0
[ 2262.174524][ T4600]  mptcp_subflow_create_socket+0xfb/0x800
[ 2262.174554][ T4600]  ? aa_label_sk_perm+0x532/0x6e0
[ 2262.174586][ T4600]  ? __pfx_mptcp_subflow_create_socket+0x10/0x10
[ 2262.174618][ T4600]  ? __pfx_aa_label_sk_perm+0x10/0x10
[ 2262.174650][ T4600]  __mptcp_nmpc_sk+0x155/0x790
[ 2262.174676][ T4600]  ? register_lock_class+0x31/0x2e0
[ 2262.174706][ T4600]  ? __pfx___mptcp_nmpc_sk+0x10/0x10
[ 2262.174733][ T4600]  ? __lock_acquire+0x6b5/0x2cf0
[ 2262.174767][ T4600]  mptcp_connect+0x71/0x830
[ 2262.174794][ T4600]  __inet_stream_connect+0x25a/0xdd0
[ 2262.174827][ T4600]  ? do_raw_spin_lock+0x12b/0x2f0
[ 2262.174851][ T4600]  ? __pfx___inet_stream_connect+0x10/0x10
[ 2262.174880][ T4600]  ? inet_stream_connect+0x51/0xa0
[ 2262.174907][ T4600]  ? __local_bh_enable_ip+0xd0/0x130
[ 2262.174939][ T4600]  inet_stream_connect+0x66/0xa0
[ 2262.174967][ T4600]  __sys_connect+0x312/0x450
[ 2262.174999][ T4600]  ? __pfx___sys_connect+0x10/0x10
[ 2262.175046][ T4600]  __ia32_sys_connect+0x7a/0x90
[ 2262.175067][ T4600]  __do_fast_syscall_32+0x20d/0x640
[ 2262.175094][ T4600]  ? do_fast_syscall_32+0x33/0x70
[ 2262.175121][ T4600]  ? asm_int80_emulation+0x1a/0x20
[ 2262.175142][ T4600]  ? do_int80_emulation+0x274/0x4d0
[ 2262.175164][ T4600]  ? trace_irq_disable+0x3b/0x150
[ 2262.175200][ T4600]  do_fast_syscall_32+0x33/0x70
[ 2262.175225][ T4600]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2262.175251][ T4600] RIP: 0023:0xf7f52f6c
[ 2262.175270][ T4600] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 2262.175288][ T4600] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 000000000000016a
[ 2262.175310][ T4600] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000000
[ 2262.175325][ T4600] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000
[ 2262.175338][ T4600] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2262.175351][ T4600] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2262.175363][ T4600] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2262.175394][ T4600]  </TASK>
[ 2262.177779][ T4600] net_ratelimit: 100 callbacks suppressed
[ 2262.177836][ T4600] socket: no more sockets
[ 2262.743265][   T43] usb 5-1: too many configurations: 9, using maximum allowed: 8
[ 2262.768060][   T43] usb 5-1: config index 0 descriptor too short (expected 7731, got 441)
[ 2262.796340][   T43] usb 5-1: config 68 has too many interfaces: 225, using maximum allowed: 32
[ 2262.819680][   T43] usb 5-1: config 68 has an invalid descriptor of length 0, skipping remainder of the config
[ 2262.849691][   T43] usb 5-1: config 68 has 0 interfaces, different from the descriptor's value: 225
[ 2262.881265][   T43] usb 5-1: config index 1 descriptor too short (expected 7731, got 441)
[ 2262.895401][   T43] usb 5-1: config 68 has too many interfaces: 225, using maximum allowed: 32
[ 2262.909377][   T43] usb 5-1: config 68 has an invalid descriptor of length 0, skipping remainder of the config
[ 2262.931740][   T43] usb 5-1: config 68 has 0 interfaces, different from the descriptor's value: 225
[ 2262.963439][   T43] usb 5-1: config index 2 descriptor too short (expected 7731, got 441)
[ 2262.971938][   T43] usb 5-1: config 68 has too many interfaces: 225, using maximum allowed: 32
[ 2262.981526][   T43] usb 5-1: config 68 has an invalid descriptor of length 0, skipping remainder of the config
[ 2263.012043][   T43] usb 5-1: config 68 has 0 interfaces, different from the descriptor's value: 225
[ 2263.027230][   T43] usb 5-1: config index 3 descriptor too short (expected 7731, got 441)
[ 2263.055422][   T43] usb 5-1: config 68 has too many interfaces: 225, using maximum allowed: 32
[ 2263.069116][   T43] usb 5-1: config 68 has an invalid descriptor of length 0, skipping remainder of the config
[ 2263.089889][   T43] usb 5-1: config 68 has 0 interfaces, different from the descriptor's value: 225
[ 2263.115892][   T43] usb 5-1: config index 4 descriptor too short (expected 7731, got 441)
[ 2263.128870][   T43] usb 5-1: config 68 has too many interfaces: 225, using maximum allowed: 32
[ 2263.147679][   T43] usb 5-1: config 68 has an invalid descriptor of length 0, skipping remainder of the config
[ 2263.166698][   T43] usb 5-1: config 68 has 0 interfaces, different from the descriptor's value: 225
[ 2263.196439][   T43] usb 5-1: config index 5 descriptor too short (expected 7731, got 441)
[ 2263.205213][   T43] usb 5-1: config 68 has too many interfaces: 225, using maximum allowed: 32
[ 2263.225547][   T43] usb 5-1: config 68 has an invalid descriptor of length 0, skipping remainder of the config
[ 2263.249985][   T43] usb 5-1: config 68 has 0 interfaces, different from the descriptor's value: 225
[ 2263.270396][   T43] usb 5-1: config index 6 descriptor too short (expected 7731, got 441)
[ 2263.289818][   T43] usb 5-1: config 68 has too many interfaces: 225, using maximum allowed: 32
[ 2263.310127][   T43] usb 5-1: config 68 has an invalid descriptor of length 0, skipping remainder of the config
[ 2263.320465][   T43] usb 5-1: config 68 has 0 interfaces, different from the descriptor's value: 225
[ 2263.347822][   T43] usb 5-1: config index 7 descriptor too short (expected 7731, got 441)
[ 2263.388706][T24059] usb 2-1: USB disconnect, device number 65
[ 2263.415970][   T43] usb 5-1: config 68 has too many interfaces: 225, using maximum allowed: 32
[ 2263.422536][T24046] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[ 2263.454763][   T43] usb 5-1: config 68 has an invalid descriptor of length 0, skipping remainder of the config
[ 2263.483989][   T43] usb 5-1: config 68 has 0 interfaces, different from the descriptor's value: 225
[ 2263.500080][   T43] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 2263.509351][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2263.594302][T24046] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2263.604629][T24046] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2263.625886][T24046] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 2263.640184][T24046] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2263.765884][   T43] usb 5-1: string descriptor 0 read error: -71
[ 2263.779099][   T43] usb 5-1: USB disconnect, device number 103
[ 2263.786052][T24046] usb 1-1: SerialNumber: syz
[ 2264.081893][T24046] usb 1-1: cannot find UAC_HEADER
[ 2264.160439][T24046] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 2264.186978][T24046] usb 1-1: USB disconnect, device number 88
[ 2264.220786][ T3282] udevd[3282]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2264.815538][   T43] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[ 2265.232478][T24054] usb 1-1: new high-speed USB device number 89 using dummy_hcd
[ 2265.252300][   T43] usb 2-1: Using ep0 maxpacket: 32
[ 2265.264799][   T43] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[ 2265.286332][   T43] usb 2-1: config 0 has no interface number 0
[ 2265.307560][   T43] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 2265.352926][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2265.379246][   T43] usb 2-1: Product: syz
[ 2265.383684][   T43] usb 2-1: Manufacturer: syz
[ 2265.399581][   T43] usb 2-1: SerialNumber: syz
[ 2265.409266][T24054] usb 1-1: Using ep0 maxpacket: 8
[ 2265.415118][   T43] usb 2-1: config 0 descriptor??
[ 2265.434782][T24054] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 2265.448532][T24054] usb 1-1: config 4 interface 0 has no altsetting 0
[ 2265.466317][T24054] usb 1-1: string descriptor 0 read error: -22
[ 2265.472819][T24054] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[ 2265.609689][T24054] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[ 2265.633190][ T4626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2265.651304][ T4626] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2265.666802][T24054] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[ 2265.716000][ T4639] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9)
[ 2265.722583][ T4639] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 2265.732938][ T4639] vhci_hcd vhci_hcd.0: Device attached
[ 2265.762995][T24054] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 2265.799881][T24054] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[ 2265.881959][   T43] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 2265.898719][T24054] usb 1-1: media controller created
[ 2266.111901][ T4640] vhci_hcd: connection closed
[ 2266.120643][T19399] vhci_hcd vhci_hcd.4: stop threads
[ 2266.141148][T19399] vhci_hcd vhci_hcd.4: release socket
[ 2266.147447][   T43] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 2266.161371][T19399] vhci_hcd vhci_hcd.4: disconnect device
[ 2266.172304][T29549] usb 41-1: new low-speed USB device number 18 using vhci_hcd
[ 2266.181126][T24054] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2266.455319][T24054] usb 1-1: USB disconnect, device number 89
[ 2266.645002][   T43] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[ 2266.683185][   T43] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32
[ 2266.703276][ T4650] FAULT_INJECTION: forcing a failure.
[ 2266.703276][ T4650] name failslab, interval 1, probability 0, space 0, times 0
[ 2266.716543][ T4650] CPU: 0 UID: 0 PID: 4650 Comm: syz.5.9278 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2266.716578][ T4650] Tainted: [L]=SOFTLOCKUP
[ 2266.716587][ T4650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2266.716599][ T4650] Call Trace:
[ 2266.716607][ T4650]  <TASK>
[ 2266.716618][ T4650]  dump_stack_lvl+0xe8/0x150
[ 2266.716653][ T4650]  should_fail_ex+0x412/0x560
[ 2266.716690][ T4650]  should_failslab+0xa8/0x100
[ 2266.716719][ T4650]  __kmalloc_noprof+0xe8/0x760
[ 2266.716743][ T4650]  ? tomoyo_encode+0x28b/0x550
[ 2266.716780][ T4650]  tomoyo_encode+0x28b/0x550
[ 2266.716817][ T4650]  tomoyo_realpath_from_path+0x58d/0x5d0
[ 2266.716860][ T4650]  ? tomoyo_path_number_perm+0x219/0x630
[ 2266.716887][ T4650]  tomoyo_path_number_perm+0x246/0x630
[ 2266.716917][ T4650]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 2266.716948][ T4650]  ? __lock_acquire+0x6b5/0x2cf0
[ 2266.717011][ T4650]  ? __fget_files+0x2a/0x420
[ 2266.717046][ T4650]  ? __fget_files+0x3a0/0x420
[ 2266.717082][ T4650]  ? __fget_files+0x2a/0x420
[ 2266.717117][ T4650]  security_file_ioctl_compat+0xc3/0x2a0
[ 2266.717147][ T4650]  __ia32_compat_sys_ioctl+0x139/0x950
[ 2266.717176][ T4650]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 2266.717205][ T4650]  ? __fget_files+0x3a0/0x420
[ 2266.717243][ T4650]  ? fput+0xa0/0xd0
[ 2266.717273][ T4650]  ? ksys_write+0x242/0x270
[ 2266.717309][ T4650]  __do_fast_syscall_32+0x20d/0x640
[ 2266.717335][ T4650]  ? do_fast_syscall_32+0x33/0x70
[ 2266.717371][ T4650]  ? asm_int80_emulation+0x1a/0x20
[ 2266.717390][ T4650]  ? do_int80_emulation+0x274/0x4d0
[ 2266.717412][ T4650]  ? trace_irq_disable+0x3b/0x150
[ 2266.717446][ T4650]  do_fast_syscall_32+0x33/0x70
[ 2266.717470][ T4650]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2266.717495][ T4650] RIP: 0023:0xf7ff2f6c
[ 2266.717513][ T4650] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 2266.717531][ T4650] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 2266.717551][ T4650] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004c0a
[ 2266.717566][ T4650] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000
[ 2266.717579][ T4650] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2266.717590][ T4650] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2266.717602][ T4650] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2266.717630][ T4650]  </TASK>
[ 2266.717651][ T4650] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2267.024150][ T4650] loop2: detected capacity change from 0 to 7
[ 2267.046808][ T4650]  loop2:
[ 2267.049829][ T4650] loop2: partition table partially beyond EOD, truncated
[ 2267.242313][ T4654] tipc: Enabling of bearer <eth:batadv0> rejected, already enabled
[ 2267.383727][ T5212] blk_print_req_error: 5 callbacks suppressed
[ 2267.383748][ T5212] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2
[ 2267.579942][   T43] usb 2-1: USB disconnect, device number 66
[ 2267.603215][ T4658] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9280'.
[ 2267.726200][   T29] kauditd_printk_skb: 10 callbacks suppressed
[ 2267.726221][   T29] audit: type=1326 audit(1773803024.864:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4665 comm="syz.1.9283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000
[ 2267.898983][   T29] audit: type=1326 audit(1773803024.864:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4665 comm="syz.1.9283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000
[ 2268.322975][   T29] audit: type=1326 audit(1773803024.904:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4665 comm="syz.1.9283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6fcef6c code=0x7ffc0000
[ 2268.542541][   T29] audit: type=1326 audit(1773803024.904:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4665 comm="syz.1.9283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000
[ 2268.730325][T24046] usb 5-1: new high-speed USB device number 104 using dummy_hcd
[ 2268.761202][   T29] audit: type=1326 audit(1773803024.904:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4665 comm="syz.1.9283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000
[ 2268.837809][   T29] audit: type=1326 audit(1773803024.904:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4665 comm="syz.1.9283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf6fcef6c code=0x7ffc0000
[ 2268.962320][T24046] usb 5-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f
[ 2268.971764][T24046] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2268.981159][   T29] audit: type=1400 audit(1773803024.924:1442): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4661 comm="syz.5.9282"
[ 2269.053340][T24046] usb 5-1: config 0 descriptor??
[ 2269.068982][   T29] audit: type=1326 audit(1773803024.954:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4665 comm="syz.1.9283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000
[ 2269.202988][   T29] audit: type=1326 audit(1773803024.954:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4665 comm="syz.1.9283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000
[ 2269.279764][   T29] audit: type=1326 audit(1773803025.094:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4665 comm="syz.1.9283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf6fcef6c code=0x7ffc0000
[ 2269.337872][ T4676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9285'.
[ 2269.351310][ T4676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9285'.
[ 2269.388927][ T4676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2269.405706][ T4676] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2269.687687][T24046] usb 5-1: string descriptor 0 read error: -71
[ 2269.694103][T24046] ldusb 5-1:0.0: Interrupt in endpoint not found
[ 2269.761168][T24046] usb 5-1: USB disconnect, device number 104
[ 2270.434076][   T43] usb 1-1: new high-speed USB device number 90 using dummy_hcd
[ 2270.803611][   T43] usb 1-1: Using ep0 maxpacket: 8
[ 2270.814718][   T43] usb 1-1: config index 0 descriptor too short (expected 30, got 18)
[ 2270.824554][   T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2270.842636][   T43] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2270.953268][   T43] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 2270.962839][   T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2270.981186][   T43] usb 1-1: Product: syz
[ 2271.027212][   T43] usb 1-1: Manufacturer: syz
[ 2271.040689][   T43] usb 1-1: SerialNumber: syz
[ 2271.083423][   T43] usb 1-1: config 0 descriptor??
[ 2271.404573][T29549] vhci_hcd vhci_hcd.4: vhci_device speed not set
[ 2271.465967][ T4691] netlink: zone id is out of range
[ 2271.471145][ T4691] netlink: zone id is out of range
[ 2271.476868][ T4691] netlink: zone id is out of range
[ 2271.482352][ T4691] netlink: zone id is out of range
[ 2271.489094][ T4691] netlink: zone id is out of range
[ 2271.494747][ T4691] netlink: zone id is out of range
[ 2271.500173][ T4691] netlink: zone id is out of range
[ 2271.505439][ T4691] netlink: zone id is out of range
[ 2271.510949][ T4691] netlink: zone id is out of range
[ 2271.516429][ T4691] netlink: zone id is out of range
[ 2271.726102][ T4705] syzkaller0: entered promiscuous mode
[ 2271.731797][ T4705] syzkaller0: entered allmulticast mode
[ 2271.933329][ T4708] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9294'.
[ 2272.422308][T24054] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[ 2272.576607][T24054] usb 2-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 16
[ 2272.590216][T24054] usb 2-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 32
[ 2272.615089][T24054] usb 2-1: config 1 interface 0 has no altsetting 0
[ 2272.636423][T24054] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2272.645989][T24054] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2272.672305][T24054] usb 2-1: Product: syz
[ 2272.681362][T24054] usb 2-1: Manufacturer: syz
[ 2272.692301][T24054] usb 2-1: SerialNumber: syz
[ 2272.714632][ T4717] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 2272.722322][ T4717] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 2272.962223][T24054] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71
[ 2273.063245][T24054] usb 2-1: USB disconnect, device number 67
[ 2273.238744][ T4726] FAULT_INJECTION: forcing a failure.
[ 2273.238744][ T4726] name failslab, interval 1, probability 0, space 0, times 0
[ 2273.251578][ T4726] CPU: 1 UID: 0 PID: 4726 Comm: syz.5.9299 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2273.251602][ T4726] Tainted: [L]=SOFTLOCKUP
[ 2273.251608][ T4726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2273.251618][ T4726] Call Trace:
[ 2273.251624][ T4726]  <TASK>
[ 2273.251630][ T4726]  dump_stack_lvl+0xe8/0x150
[ 2273.251657][ T4726]  should_fail_ex+0x412/0x560
[ 2273.251683][ T4726]  should_failslab+0xa8/0x100
[ 2273.251703][ T4726]  __kmalloc_noprof+0xe8/0x760
[ 2273.251720][ T4726]  ? tomoyo_encode+0x28b/0x550
[ 2273.251746][ T4726]  tomoyo_encode+0x28b/0x550
[ 2273.251772][ T4726]  tomoyo_realpath_from_path+0x58d/0x5d0
[ 2273.251802][ T4726]  ? tomoyo_path_number_perm+0x219/0x630
[ 2273.251821][ T4726]  tomoyo_path_number_perm+0x246/0x630
[ 2273.251842][ T4726]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 2273.251863][ T4726]  ? __lock_acquire+0x6b5/0x2cf0
[ 2273.251918][ T4726]  ? __fget_files+0x2a/0x420
[ 2273.251942][ T4726]  ? __fget_files+0x3a0/0x420
[ 2273.251976][ T4726]  ? __fget_files+0x2a/0x420
[ 2273.252001][ T4726]  security_file_ioctl_compat+0xc3/0x2a0
[ 2273.252041][ T4726]  __ia32_compat_sys_ioctl+0x139/0x950
[ 2273.252080][ T4726]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 2273.252102][ T4726]  ? __fget_files+0x3a0/0x420
[ 2273.252129][ T4726]  ? fput+0xa0/0xd0
[ 2273.252152][ T4726]  ? ksys_write+0x242/0x270
[ 2273.252204][ T4726]  __do_fast_syscall_32+0x20d/0x640
[ 2273.252231][ T4726]  ? do_fast_syscall_32+0x33/0x70
[ 2273.252254][ T4726]  ? asm_int80_emulation+0x1a/0x20
[ 2273.252274][ T4726]  ? do_int80_emulation+0x274/0x4d0
[ 2273.252302][ T4726]  do_fast_syscall_32+0x33/0x70
[ 2273.252333][ T4726]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2273.252353][ T4726] RIP: 0023:0xf7ff2f6c
[ 2273.252367][ T4726] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 2273.252381][ T4726] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 2273.252396][ T4726] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80
[ 2273.252407][ T4726] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2273.252416][ T4726] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2273.252424][ T4726] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2273.252433][ T4726] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2273.252454][ T4726]  </TASK>
[ 2273.542585][ T4726] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2273.543822][   T43] usb 1-1: USB disconnect, device number 90
[ 2273.689414][   T29] kauditd_printk_skb: 4 callbacks suppressed
[ 2273.689433][   T29] audit: type=1326 audit(1773803030.834:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4728 comm="syz.0.9300" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000
[ 2273.810390][   T29] audit: type=1326 audit(1773803030.874:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4728 comm="syz.0.9300" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000
[ 2274.022801][   T29] audit: type=1326 audit(1773803030.914:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4728 comm="syz.0.9300" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705ef6c code=0x7ffc0000
[ 2274.139023][   T29] audit: type=1326 audit(1773803030.914:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4728 comm="syz.0.9300" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000
[ 2274.176191][   T29] audit: type=1326 audit(1773803030.924:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4728 comm="syz.0.9300" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000
[ 2274.394147][   T29] audit: type=1326 audit(1773803030.924:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4728 comm="syz.0.9300" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf705ef6c code=0x7ffc0000
[ 2274.452080][   T29] audit: type=1326 audit(1773803030.924:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4728 comm="syz.0.9300" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000
[ 2274.474347][   T29] audit: type=1326 audit(1773803030.924:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4728 comm="syz.0.9300" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000
[ 2274.594528][   T29] audit: type=1326 audit(1773803030.924:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4728 comm="syz.0.9300" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf705ef6c code=0x7ffc0000
[ 2275.207688][   T29] audit: type=1326 audit(1773803030.924:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4728 comm="syz.0.9300" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000
[ 2276.222296][T29549] usb 1-1: new high-speed USB device number 91 using dummy_hcd
[ 2276.549925][T29549] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2276.560317][T29549] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2276.594190][T29549] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 2276.603486][T29549] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2276.611618][T29549] usb 1-1: SerialNumber: syz
[ 2276.840233][T29549] usb 1-1: 0:2 : does not exist
[ 2277.061009][T29549] usb 1-1: USB disconnect, device number 91
[ 2277.122062][ T3282] udevd[3282]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2277.961698][ T4787] net_ratelimit: 45 callbacks suppressed
[ 2277.961721][ T4787] netlink: zone id is out of range
[ 2278.000421][ T4787] netlink: zone id is out of range
[ 2278.040414][ T4787] netlink: zone id is out of range
[ 2278.119470][ T4787] netlink: zone id is out of range
[ 2278.147382][ T4787] netlink: zone id is out of range
[ 2278.181013][ T4787] netlink: zone id is out of range
[ 2278.188382][ T4787] netlink: zone id is out of range
[ 2278.194095][ T4787] netlink: zone id is out of range
[ 2278.199586][ T4787] netlink: zone id is out of range
[ 2278.204943][ T4787] netlink: zone id is out of range
[ 2278.882788][   T29] kauditd_printk_skb: 25 callbacks suppressed
[ 2278.882807][   T29] audit: type=1326 audit(1773803036.034:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4788 comm="syz.5.9312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2278.950928][   T29] audit: type=1326 audit(1773803036.034:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4788 comm="syz.5.9312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2279.008168][   T29] audit: type=1326 audit(1773803036.034:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4788 comm="syz.5.9312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2279.030965][   T29] audit: type=1326 audit(1773803036.034:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4788 comm="syz.5.9312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2279.187782][   T29] audit: type=1326 audit(1773803036.044:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4788 comm="syz.5.9312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2279.248461][   T29] audit: type=1326 audit(1773803036.044:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4788 comm="syz.5.9312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2279.348154][   T29] audit: type=1326 audit(1773803036.044:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4788 comm="syz.5.9312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2279.438487][   T29] audit: type=1326 audit(1773803036.044:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4788 comm="syz.5.9312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2279.472108][   T29] audit: type=1326 audit(1773803036.044:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4788 comm="syz.5.9312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2279.535669][   T29] audit: type=1326 audit(1773803036.044:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4788 comm="syz.5.9312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7ff2f6c code=0x7ffc0000
[ 2280.490200][ T4809] ==================================================================
[ 2280.498392][ T4809] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1b9b/0x5ec0
[ 2280.507040][ T4809] Write of size 2880 at addr ffffc9000f14a500 by task vivid-000-vid-c/4809
[ 2280.515733][ T4809] 
[ 2280.518165][ T4809] CPU: 1 UID: 0 PID: 4809 Comm: vivid-000-vid-c Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2280.518192][ T4809] Tainted: [L]=SOFTLOCKUP
[ 2280.518199][ T4809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2280.518210][ T4809] Call Trace:
[ 2280.518220][ T4809]  <TASK>
[ 2280.518229][ T4809]  dump_stack_lvl+0xe8/0x150
[ 2280.518259][ T4809]  print_report+0xba/0x230
[ 2280.518302][ T4809]  ? tpg_fill_plane_buffer+0x1b9b/0x5ec0
[ 2280.518323][ T4809]  kasan_report+0x117/0x150
[ 2280.518347][ T4809]  ? tpg_fill_plane_buffer+0x1b9b/0x5ec0
[ 2280.518371][ T4809]  kasan_check_range+0x264/0x2c0
[ 2280.518392][ T4809]  ? tpg_fill_plane_buffer+0x1b9b/0x5ec0
[ 2280.518413][ T4809]  __asan_memcpy+0x40/0x70
[ 2280.518430][ T4809]  tpg_fill_plane_buffer+0x1b9b/0x5ec0
[ 2280.518481][ T4809]  vivid_thread_vid_cap_tick+0x1021/0x5fd0
[ 2280.518552][ T4809]  ? __lock_acquire+0x6b5/0x2cf0
[ 2280.518585][ T4809]  ? __lock_acquire+0x6b5/0x2cf0
[ 2280.518607][ T4809]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2280.518637][ T4809]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2280.518657][ T4809]  ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10
[ 2280.518698][ T4809]  vivid_thread_vid_cap+0x909/0x1190
[ 2280.518739][ T4809]  ? __pfx_vivid_thread_vid_cap+0x10/0x10
[ 2280.518772][ T4809]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2280.518803][ T4809]  ? __kthread_parkme+0x7a/0x1f0
[ 2280.518833][ T4809]  kthread+0x388/0x470
[ 2280.518862][ T4809]  ? __pfx_vivid_thread_vid_cap+0x10/0x10
[ 2280.518890][ T4809]  ? __pfx_kthread+0x10/0x10
[ 2280.518909][ T4809]  ret_from_fork+0x51e/0xb90
[ 2280.518935][ T4809]  ? __pfx_ret_from_fork+0x10/0x10
[ 2280.518960][ T4809]  ? __switch_to+0xc7d/0x1450
[ 2280.518984][ T4809]  ? __pfx_kthread+0x10/0x10
[ 2280.519004][ T4809]  ret_from_fork_asm+0x1a/0x30
[ 2280.519040][ T4809]  </TASK>
[ 2280.519047][ T4809] 
[ 2280.694086][ T4809] The buggy address belongs to a 4-page vmalloc region starting at 0xffffc9000f147000 allocated at vb2_vmalloc_alloc+0xef/0x360
[ 2280.707397][ T4809] The buggy address belongs to the physical page:
[ 2280.713812][ T4809] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88805f197dc0 pfn:0x5f197
[ 2280.723886][ T4809] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 2280.731093][ T4809] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[ 2280.739680][ T4809] raw: ffff88805f197dc0 0000000000000000 00000001ffffffff 0000000000000000
[ 2280.748267][ T4809] page dumped because: kasan: bad access detected
[ 2280.754694][ T4809] page_owner tracks the page as allocated
[ 2280.760409][ T4809] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 4807, tgid 4806 (syz.5.9316), ts 2280397021655, free_ts 2280135846644
[ 2280.780207][ T4809]  post_alloc_hook+0x231/0x280
[ 2280.784985][ T4809]  get_page_from_freelist+0x24dc/0x2580
[ 2280.790538][ T4809]  __alloc_frozen_pages_noprof+0x18d/0x380
[ 2280.796348][ T4809]  alloc_pages_mpol+0x232/0x4a0
[ 2280.801217][ T4809]  alloc_pages_noprof+0xa8/0x190
[ 2280.806160][ T4809]  __vmalloc_node_range_noprof+0x79b/0x1730
[ 2280.812057][ T4809]  vmalloc_user_noprof+0xad/0xe0
[ 2280.816994][ T4809]  vb2_vmalloc_alloc+0xef/0x360
[ 2280.821847][ T4809]  __vb2_queue_alloc+0x9c5/0x15a0
[ 2280.826872][ T4809]  vb2_core_reqbufs+0xc1f/0x1410
[ 2280.831813][ T4809]  __vb2_init_fileio+0x318/0xff0
[ 2280.836765][ T4809]  __vb2_perform_fileio+0x282/0x1620
[ 2280.842062][ T4809]  vb2_fop_read+0x273/0x360
[ 2280.846578][ T4809]  v4l2_read+0x19c/0x2c0
[ 2280.850908][ T4809]  vfs_read+0x20c/0xa70
[ 2280.855072][ T4809]  ksys_read+0x150/0x270
[ 2280.859319][ T4809] page last free pid 4804 tgid 4798 stack trace:
[ 2280.865645][ T4809]  __free_frozen_pages+0xc2b/0xdb0
[ 2280.870767][ T4809]  __slab_free+0x263/0x2b0
[ 2280.875186][ T4809]  qlist_free_all+0x97/0x100
[ 2280.879778][ T4809]  kasan_quarantine_reduce+0x148/0x160
[ 2280.885240][ T4809]  __kasan_slab_alloc+0x22/0x80
[ 2280.890122][ T4809]  kmem_cache_alloc_node_noprof+0x384/0x690
[ 2280.896016][ T4809]  __alloc_skb+0x1d0/0x7d0
[ 2280.900437][ T4809]  alloc_skb_with_frags+0xca/0x890
[ 2280.905566][ T4809]  sock_alloc_send_pskb+0x878/0x990
[ 2280.910785][ T4809]  unix_dgram_sendmsg+0x460/0x18e0
[ 2280.915915][ T4809]  ____sys_sendmsg+0x972/0x9f0
[ 2280.920696][ T4809]  ___sys_sendmsg+0x2a5/0x360
[ 2280.925380][ T4809]  __sys_sendmmsg+0x2e7/0x4e0
[ 2280.930062][ T4809]  __ia32_compat_sys_sendmmsg+0xa2/0xc0
[ 2280.935608][ T4809]  __do_fast_syscall_32+0x20d/0x640
[ 2280.940812][ T4809]  do_fast_syscall_32+0x33/0x70
[ 2280.945666][ T4809] 
[ 2280.947988][ T4809] Memory state around the buggy address:
[ 2280.953621][ T4809]  ffffc9000f14af00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 2280.961687][ T4809]  ffffc9000f14af80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 2280.969843][ T4809] >ffffc9000f14b000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 2280.977924][ T4809]                    ^
[ 2280.981991][ T4809]  ffffc9000f14b080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 2280.990075][ T4809]  ffffc9000f14b100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 2280.998131][ T4809] ==================================================================
[ 2281.029896][ T4809] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 2281.037269][ T4809] CPU: 1 UID: 0 PID: 4809 Comm: vivid-000-vid-c Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2281.048601][ T4809] Tainted: [L]=SOFTLOCKUP
[ 2281.052956][ T4809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2281.063037][ T4809] Call Trace:
[ 2281.066334][ T4809]  <TASK>
[ 2281.069285][ T4809]  vpanic+0x56c/0xa60
[ 2281.073309][ T4809]  ? __pfx_vpanic+0x10/0x10
[ 2281.077869][ T4809]  ? __pfx___schedule+0x10/0x10
[ 2281.082748][ T4809]  panic+0xc5/0xd0
[ 2281.086484][ T4809]  ? __pfx_panic+0x10/0x10
[ 2281.090920][ T4809]  ? preempt_schedule_common+0x82/0xd0
[ 2281.096396][ T4809]  ? tpg_fill_plane_buffer+0x1b9b/0x5ec0
[ 2281.102050][ T4809]  check_panic_on_warn+0x89/0xb0
[ 2281.107005][ T4809]  ? tpg_fill_plane_buffer+0x1b9b/0x5ec0
[ 2281.112659][ T4809]  end_report+0x73/0x180
[ 2281.116948][ T4809]  ? tpg_fill_plane_buffer+0x1b9b/0x5ec0
[ 2281.122611][ T4809]  kasan_report+0x128/0x150
[ 2281.127130][ T4809]  ? tpg_fill_plane_buffer+0x1b9b/0x5ec0
[ 2281.132781][ T4809]  kasan_check_range+0x264/0x2c0
[ 2281.137737][ T4809]  ? tpg_fill_plane_buffer+0x1b9b/0x5ec0
[ 2281.143384][ T4809]  __asan_memcpy+0x40/0x70
[ 2281.147827][ T4809]  tpg_fill_plane_buffer+0x1b9b/0x5ec0
[ 2281.153359][ T4809]  vivid_thread_vid_cap_tick+0x1021/0x5fd0
[ 2281.159201][ T4809]  ? __lock_acquire+0x6b5/0x2cf0
[ 2281.164179][ T4809]  ? __lock_acquire+0x6b5/0x2cf0
[ 2281.169169][ T4809]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2281.175001][ T4809]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2281.180211][ T4809]  ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10
[ 2281.186392][ T4809]  vivid_thread_vid_cap+0x909/0x1190
[ 2281.191737][ T4809]  ? __pfx_vivid_thread_vid_cap+0x10/0x10
[ 2281.197511][ T4809]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2281.203361][ T4809]  ? __kthread_parkme+0x7a/0x1f0
[ 2281.208322][ T4809]  kthread+0x388/0x470
[ 2281.212400][ T4809]  ? __pfx_vivid_thread_vid_cap+0x10/0x10
[ 2281.218136][ T4809]  ? __pfx_kthread+0x10/0x10
[ 2281.222729][ T4809]  ret_from_fork+0x51e/0xb90
[ 2281.227332][ T4809]  ? __pfx_ret_from_fork+0x10/0x10
[ 2281.232460][ T4809]  ? __switch_to+0xc7d/0x1450
[ 2281.237159][ T4809]  ? __pfx_kthread+0x10/0x10
[ 2281.241765][ T4809]  ret_from_fork_asm+0x1a/0x30
[ 2281.246553][ T4809]  </TASK>
[ 2281.250189][ T4809] Kernel Offset: disabled
[ 2281.254519][ T4809] Rebooting in 86400 seconds..