last executing test programs:

29m59.765485625s ago: executing program 32 (id=1614):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0xc, 0x16, 0x0, 0x1, [@nested={0x8, 0x5, 0x0, 0x1, [@nested={0x4, 0xf3}]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x29}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004)
syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x41982)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x356e, 0x800, 0x4, 0x40000334}, &(0x7f00000006c0)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
sendmsg(r1, &(0x7f00000029c0)={&(0x7f0000000240)=@llc={0x1a, 0xfffe, 0x0, 0xc, 0x6, 0x2, @random="d3f928e4f539"}, 0x80, &(0x7f0000002900)=[{&(0x7f00000002c0)="60f17b68b76898e16fb207667b3767f3744608d2f5583cff350d12c17e8e2f134e92cc", 0x23}, {&(0x7f0000000300)="080236ee39d941f7444548633961e63e03b59b00b5d6b305405ad8dfd98f38be94083512b11910515be791f7b7a300e3ef47c37b8d9113b6532c7c656c9f8a23c8c2cfe4c43f3e4cad9508ec87dfe2cd", 0x50}, {&(0x7f0000000380)="dbc01131562557441bc53de250fe2bec69957bf6a6d8d65fce145733c4d197448002d5ba37597d36b428918a64c3a9e35c6cc451eb9a730cafaa7ee21af3c456be5ce53c322433ddd50c98802e6ee851cf61e8db6230a6e3c0faec57499157733262a207e86f247660e98fc9990437af522f9fe597ebc7d182ee646ad70c1de574d0b9e9c4ee14ffea5f9534301c80c160d482559b9cf40fa8c11f06e68cbb0f2393f5d425cda9722b4a41a93924ef63ef6e3ab6b3a48d20c70b9689a03a90a4c0cf863a0845d924ea29c7607bde358a407e5f47ea62a4a2792cc0e47fc724", 0xdf}, {&(0x7f0000000500)="829fdc41203b3dc3c8ccd1949ad2e81bf5843c50a39fa3047d33458d81a71ae68181b4d1e81bedf402405f8008c95a5a6905c89d3be01a313efc70336ddc72b6f564472c82f76286b51dcba6339d630133a5853a9e67c81fc253289c25d82df215a0c343055c7977d60bb2ebc0eaf47f5309b32c2efde0569067bfe3e9f429678d1f277e7eae8b20a75da8fcddbd4624dcd382a29739a63528c909e857824ddcd18e643872d20e20288243c0c3294c533bd475c1e5968b612dc5290cd95f69361383a28fd0367ac359bbb439904a8edf082ab8553419b0b2f7b6954ce2c9230f2414e79de5d62f5a597152fbc00f48e5d6338f", 0xf3}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000000480)="785ed4a68c033c4d3f080730c81305bcbf2d0d05cb8b8b33cc2c74cc7b648677c5411e7b4c2ed99806fc2d036b24a7e12a9db1ca9b2573b591692758", 0x3c}, {&(0x7f0000001700)}, {&(0x7f0000001740)="f306cb5c1ec3381acbf2207c975c9d7275e1184baa000aae4a2b602a140719d76dda22b10d300578c526476eb39aa566dd4084da1e263047bc8ed05f4492189e95b1a8bdc12189a06f01fde40509e7f4d6dd4cff225e7bdf8ec02ed2299157e06d97f2911ee5e76dd1ee1ad097a01b1bd93af7eb078eafb9547ffde702564c10484fa195a2c459638b6f8885291bce0dfc69d4cdb923313e3bda5efd89ffea908d5e118935a257698928004138be8ec4a921bc2cf03db5", 0xb7}, {&(0x7f0000001900)="ded2f9410d523b876fc5ea72a0b9d7afdbc579a709522ce12fa47b6e6f0cc3bc79de67574cbc00c1efa3e8912d51babd305537bfa1ce19f5ff6c0d9e99b10204846370e65c4e75a6948cf84b82019922f89214ab32a513e6b22ea901cf9b68f9cf72a8a7d8d69d24b92ecd5f51e5f60926ced9e20223fef36c01eb1a28f657f20af19e94797d2cbc477dd849610f9fd46ecc4ef6bf58e626ceeb0830c364f2f53a09a93e669f8ac5d0d83bb22187b218bbce9e6333b4f6d4cf61bf517f66436b6a3bbcc38f43d3489b661ea2282cf007eb8e7f66ba094514e4d42d1e8f71c694e8c1872df5135c907b1e46d8054b5e35f53390fb647591d53a81fc1572e060034e9709685157680d4953ba8966f5a5d0eb81af2332e394d3b00b6fbad7211591bab7b122b556dcd1811bd4901e51974e907ddf44d214421fe31ccf62a7e91ddc9caaea6313eb8cb4ff6338ebe9d201c0a8ece44d1a84704f61d1bb6a9718eee48b1bce8d09064ca0eaef7ce80ad6cb310cd42e68d5e5db68af44619a8cc5b1726dad469f24209e4a21469af21755f9c316b1d2c8322b48c7e2bb3369b28868ba33bbdf1daeb25fb183edae404a8e571371d16646b0dc81a3117bd846606cb21343cfd5b73ba08e1985dc92c4ca458c8ada1dd6612a6c845822b98c4eeae4bbc167302097044fbaeed2a5f5b6bffe73c478edca6e21cbf0a98f9e7cc2b8940c8d081ec5e7dbd10d83675966e48344ce7ad4e63824832b9260f951e16943ba75a2b7edd8fb347b33366952d0c81e62919e16e3d27f30b1c0b09e3b3f05cf592cf64c197dc9d45f7254a919bf26cc31121e1ed4697828bd0c49e0efa1eea5d8b6e092a12ef29f560cdf144b445b246ec7c9aa05c3d7df35e87b45655debf4ce92440f742c7a24d6a7cb0b98d58fec4683e2c7a46ce76d3d169db62ee434a3195a7d2687982f17a8d1dc54da06b56a4baa614c476612c3c19911df2cef7edbb38826851a793e1c4d003ad2dedb292b5775d9e21cb2d8da3993fb1b71f6bbba2238967b78b24fde5629cbd6fa02ee5e8ab92a8db526e0f0ea7689d9dad5b91ab1f3aecd212b300eac91c081cb519d496aacc85ba682f89cd2a6dce527aae64ac6b038b690aac76857732dc617f30a9533c26030375493057990170a96715f3ae4f6795f9e10c8938c423bcee51344512e8f212add15e23f6535add5a52e31062c3560b5273cbbcf90cb559c9a7807e34aa8a26241c460d6342abceb83061b7d390082815b27782ebc076a9719f67b3d8c1d22c2efb9fe8e67f58ae7dbfb7d780923208db10880d2faf21501ef19ce06a5d9026a0bd5b3b487f732ad0f459dce5930367c1ad570190f6284005b14f954a6e494fbb3824e24f8b6af7e347967efddcae38628bcd6f97984b441b5640e11b4e54f484e41e57a261d0b860a64b576c644ede56dd2d4934f9cf977881a204872c465803468dc0c8f4fa33c5a12b10afc7eef97315ebd982beb2cb878eb742bd7518a568cf2d433ecb095e75366deef51f4299051ce58e3bf6762bc004d305eaea86f66290d32938335d2da4ba7cbd95dbb9740efc5f0b44ce99d063b89b175d5a70947ed4cc0e662f0c4a67e03bcc258ec608f3a3df8dc096b930ebb4c247e0ed7176554db572aee6ca6a5d71ec5d56983693c3fb88d5e01bb9ea4a601c7ae8a2741f4f62a303ddf43d205a2ddbfa7bd856ba398fe7509c0670c7ef26b690c9622db3b3ff2b4a6018ba7e95e4709c8e7ebf409272ea724cbc4c24854c365ae73c09287f30f29140f173be226ea07276b320cd7e17e598d4b0372e68dbfcf00212891354c8096962c617b266606f6d3d098497ff97285290dca218118843d097fd5600c4a0a39f72b26069eaf33a697646ecc0308dbd02a5db78690ea41c468a87b82dfb731bf435948413d91b968e1515c7690925a1cdf2544b79e2be9f1368526173ec2e861c25a28cec4b021d377260e5e9af1b5b4175a8fb7dc9a8999ef84b91d97e4cd42726c21752a801b8709748736b6761c6ee46d2a3b8cb91c70f4658aad475121f8f393ae9044d2d808f4e4ebdc6931b2fac10934e06d7ea9c109505fe7ad68f9d4a9347d5290840de9a20c18a43663b82071ad6b23c0dfda8495e50aade3c225bc0e1a56ab9d43d23b6ed1934d449073e2240625182afcf4f0ac016e9c18ac9432e1857eb1812c2a8e283157a4ac0abd99a5f8b061d73a605a9db86493fd0247967ee0bc4956fa7f741bd4625c89c82003b27be068bc02bd445b7cb3b61b45ed56f747693e90f49fb88bad9560f0b28cc40fdf53bfc958b201daa6b7dcaaf96e66ab2fc88111b0ddf3edb575bd499c7f808cae87e146b0254daac8b164ea8cc5e9a0c7f0770b427978eae4ae4a6f663cb102d9cfdd7677b07a35b1e4ee5fc3a8b0f21a3f04863485f5ceaffcca9d0c41d644dc31b5cbcd834edd9ced32cab5f1985cb2cedb5f713a6b1af6b0ef21eb61d5de14c88c0edda88bf77a237df812bae30edd5411fadfa5afed194f46ec9c4f83becab8fa529f0b81c6951388446ec1b1c167d92aba08bb9cae326d123516219df34892fda3ed9537244b0c93e49ebf639b309f9abf1e44284188ac6dbb2ba96c6242a3059e19602ee7db66ea4f98f23512cab6c38ea60ae5b08d898a979a9e7ba2fbba4fcb50c4a0d9b33ecbad704822f1705b7a26d04e85d272ef37d51d7f987476514a9995ede772c215820754d577acb3b425907a57bcb11895b46dc65df046584e80614d07e22165668e01a025800a4b1b0c6f30df92cc92287581badf87d537d1dd306f25bc7bf4c73b8c856d04316dabf666eda1fa74ecfa8724806a09f2ec6aaa76e80a29f0d31448d3ef2dd342ff8af20c2a64b1007fb0d9f414819f503819e0cb174f991577c696980e9443176d5afccc2aa8ff65b1727cbaf66883baf64846a864c9c5ec0d191b7b2eeacbd1709b2381b0d638443def43f69dbe30110753607999a3da0e4b35902fe0e8b886b8ee41487055ceff7b29aa7bc37b173b37e3e1bf8397b7e71e2aa1362ccc7f0120ac3c7cf6dfecd13158ead56a0aee1ba2d133b4872aeb3e3606ec391db3fd7930bfa745180a09bbd41f9f4b285788f28d1b71274ebeb23964cfb0f95b1c5538af96df750105938fb7c657418e6535605e0ae4642132ba38836ed36eef218bb79eb8e38d0e621271f1b111d70c06fab2b84ef2a78b3a4cc22550e514ea690ad0e26475edf060f50d9f1e83ae10a030ad11dd016abca49a63e46e109d9cc474b98f3d9f14500d1d49114263a2dae4d920492226ca5078869c52e43d32ac8fc53688d2a7b7e2d0e3bb9cfc3a06dc04c9e09afda9002a3cceb268bbe755b181cd0e65184e3f1f4990f35e92222c7f63a6823fb340e053f11b6413036d193c743d7f14629ee97b1f45e954315fb758c9c0c8931e4f29112d0437ddc53d8994cda51ebb3c9152f9b06c74eaa4c218e28a163f1c365dc0a547f1e421bf6e383e5d6a53a950aa1732346f40c2ef674a98d6be50f2ff613039a1df46ce8274c78ab056a5bcd831b4b2a7042d28ba44f0ed88950108e951787bf5d4d48774b965ad83b2ae67dedf6cfe48eb6558dabdab71dab0621f63c5c3f4d2815b742e1f24d490ab7bc81e4d314a4e702c8c5aefca7d249aab8a6d6d0f390c8911114ccfe810de1546cc3f88146b4aed7296da09bd9cb581b2a033498fc20cc1b7d0e5cf2a34b046c86a8c09d365dc3d4e6342affbd751d1052746e3668fb85e08b9f52a30c1c37b13dd3c806b895357cdd690bd6482c02f34c75b0a02b3400b52026fac8da2239b3163b69fff004971412720bcdb47c5dfad721bb62bf5d3beb8aa7bd4a2009b11ce2d5d7fce1574476c0dcc3a31b35599a1368a0f2dafe91b8e6a6425931718d7dffc2e7b580f2673119fb957ded278cbf977ef8db8df9ee53a3315f362a3eb01c6c1af2f6a8284b0a9f326bfe2bc36763fcad8062d2bb1824f3409d318c8c6125ff9fed8c7c888613821cb6fae8909f10a86ad826f630487f39b5fc9dfeb09db39646dfb7c724b7e7ac32224dcee0b91ce95bee6144eb70d12c27ceef327a7866416162039f0b81a60d55393dfcb645d58a66bf7c678ff4022bd73df4cc04b0a6143c75a3474ac01704b1c9805159be4c4360407d0e40fefa9b213c269f348f6b8066f13edd396fca84f3d7689926b03352e0db6ca3ccffcd9fd0e766e5c15d344c6c15ad57486c61d4bcca75406a61e51826e3ed2bf31d85a707be677a6f0d4ae04d4748a4df4d270bfca1c7e5dd8e16bfd4b588d85135e51d6dd42ecac78978635084286684c13d0dff62dd6edba2a1dfc1f6fd4b27468d269625efe4026891f9074f038629af1453f9c536cef8616045f5b2e1269a8cf30ba9693f95ee0afade2b76135166731afaee04fb667800ae322b6e67671472005ef7d88d260a1b9f8ac742ae55d3a1d65ec802860ced70aa5c7dcd9150b71138e8ff577687076df2576f39d4115e92bcc7cac3e5d715af795ceb1d79441fdbe12bd1a05a8e32ae2b004be19721bd1828684bbd15f1f75fa97eb4ffed5fa944ecc8d1f67aa39d8346ec238e11ca6791e5f1bac0a4dbf2d1afb8aaa28e98ed38e7f1276fd691781b9fb8e02d9c72617feaeea2ddf6837d5259b090fd727cb5947d4e06c58bfa2f90944219d4b58d7f755857293b88ab18b250aa2ec3337592705bd4bb3982d72ff89587a7bed8548f9e1769fa3941253d9c8bfaaa0a29f217d285ba965306b85c6661333dbb33e38dcb96ee9127465722ad9269c707041d4fca265c4a243f3a26846cc93512169fa21f0142caf5f4508d6e184d0b2a25696df8a526ec098f026e13704a3a0a3a29d6daa355afea30172618065d2f96300459cddc72b458c2a664d945b03c92d49dfbf788235e2f6f4b474f8776eead3672a28e3450373aff807a5d910ad0c89ef8e14f5231f21fe320f9631dbdab9ff591be69bdbd3fbf9cb99ca8f5ec3e5de9c968f44d99caa7b1204fb46f00095d3bdd716c1b1c2ad97d3b02e8d2b0b1cfcaabec701971156f5ea2aa52f3851d8678728d4d15294e801149f85cfebccfdc1a8bd1f445089f3089fd390500bc6b84eadb6205351f1851a3a032887cd931f2af094f3eee726c6e38e446631635e8b693952972e904c2bfe20de09b10f2fdff7d98de7cd815bf17830adcc8643eb0226d3de63f45a778bad9f6b91f671f9c0ea04f08724c9eec22d87773de6975fd2b30c4a6c9d65cbeef802e1210e631d342f7a68774c8ba77afcf3aa7131b612ea409e9000c567ffbdb456956e6da5ec99d030a1478ed0c52bd37dd0114ba1ec87229561a1a3841997896fa9eebca8ce77fb144247b2178711586a26905f5e0f9a791f9a55a201f4a2525f3de7ab4aae1908ee8e599d456c940cb748abc5787b0af2f63e0d938fb678012fc35f14f17132f40e014633edff9e36c042ba805a96f4e74f7c4c9f56c7875d1f218d8cdf0ea08074c4b5cf3e7fd1ee520f28c391dc6a46f549dbc7cf547e8585874daa5301a9e44031a81ca02305b5b0ac031453fb6316500193a51935f41eea2f362500bed8876fccbfda93fd0b9d00793450a0119c600b8218e3ce2e1f2eb24ede5019721311ece903db867740546b2cbb47abd48e7503760adc112dea6d9e5cf13dc40833543bc08014f2165f02bc2d77f23d578eef660f2b99fd915e1cfa5f0715ee418f29bf020bd7fd82bc98fbd029548ea2327741b1200ede5d143bbfb7baec63283ce359df12d7d7e4eb96", 0x1000}], 0x9}, 0x4010)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r3, 0x847ba, 0x4535, 0xe, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003000128008030000007469007ffe0280"], 0x50}}, 0x0)

25m49.994357764s ago: executing program 33 (id=2601):
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x40010, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000001000008900000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
keyctl$session_to_parent(0x12)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket(0x23, 0x5, 0x5)
syz_open_dev$tty20(0xc, 0x4, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="a00000000001010400000000000000000a000c003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c0001804f18d6140003002001000000000000000000000000000214000400fe8800000000000000000000000000010c000280050001da04766aafffbead40000000000c00068008000200ac14141b"], 0xa0}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001280)=ANY=[@ANYBLOB="3c0200001900010000000000fbdbdf25e0000001000000000000000000000000fc0100000000000000000000000000004e22000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT], 0x23c}}, 0x20000091)
sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
syz_open_dev$dri(0x0, 0x7, 0x220042)
r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[<r9=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r9})

25m29.890586944s ago: executing program 34 (id=2632):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9f, 0x18, 0x76, 0x20, 0x17ef, 0x7203, 0x2e36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbc, 0x0, 0x2, 0x9e, 0x88, 0x33, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x3}}]}}]}}]}}, 0x0)
syz_usb_control_io$rtl8150(r2, 0x0, 0x0)
syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)={0x20, 0x3, 0x2, '~K'}, 0x0, 0x0, 0x0, 0x0})
socket(0x16, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r6, r6, 0x0, 0x200000)
ioprio_set$pid(0x3, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)={0x20, 0xe, 0x2, "02cf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0xb, 0x2, "fab1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000")
close(r1)

25m22.331771192s ago: executing program 35 (id=2635):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x9, 0xb49, 0x5, 0x8, 0x0, 0xb}, 0x0)
mount$fuse(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x22, &(0x7f0000000600)=ANY=[@ANYBLOB='fd', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633dd59a1380800ee0110a83deec48e7b5d74d4d41505f434845434b2c61756469742c736d61636b66736465663d2d2c61756469742c66736d616769633d30783030303030303030303030303263302c66736d616769633d30622c00"])
io_uring_setup(0x664c, 0x0)
r3 = accept(r0, &(0x7f0000000240)=@isdn, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r3], 0x80}, 0x1, 0x0, 0x0, 0x4008031}, 0x24000000)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000100)=@e={0xff, 0xc, 0x2, 0x9, @generic=0x6, 0x9, 0x9, 0x6})
socket$kcm(0x29, 0x2, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x1c, r6, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4051}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0xff)
socket$netlink(0x10, 0x3, 0x10)
unshare(0x66000080)
socket$netlink(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0)

25m21.095683698s ago: executing program 36 (id=2636):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x2, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x2}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x31}}, 0x1c)
syz_emit_vhci(0x0, 0x7)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b05, &(0x7f00000004c0)={'wlan0\x00'})
keyctl$read(0x1f, 0x0, &(0x7f0000000080)=""/61, 0x3d)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0xd15, 0x1, 0x2, 0x80000000, 0x5ca8f9ed, 0x0, 0xc}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000380))
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r5, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800})
ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x5, 0x0, r5, 0x3, 0x9, 0x3ffc})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r6)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x68, r7, 0xc33, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040)
r8 = socket$kcm(0x2, 0x3, 0x2)
r9 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', <r10=>0x0})
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r10, {}, {0xffff, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x0, 0xfd], 0x0, [0x8, 0x4, 0x102, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x3], [0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x8]}}]}}]}, 0x8c}}, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, 0x0)

22m24.19147139s ago: executing program 7 (id=2976):
r0 = socket(0x80000000000000a, 0x2, 0x0)
socket$inet6(0xa, 0x1, 0x8010000000000084)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x101402)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f00000000c0))
ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x1cabe2)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/oops_count', 0x8a883, 0x2)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}})
ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x200)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[], 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
r5 = socket$netlink(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r6, &(0x7f0000000000)="d1", 0x1, 0x24004000, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @remote, 0x7}, 0x1c)
shutdown(r6, 0x1)
r7 = syz_open_dev$media(&(0x7f0000000080), 0xcfa, 0x2202)
preadv(r7, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/44, 0x2c}], 0x1, 0x5, 0x1)
sendto$inet6(r0, &(0x7f0000000480)="91b5622cd83b06faf5466f4f24706a9ac76a7ee3fe282f387e295e0978d3982b29aed0cf9a3f3d38a77c4927b380d601f9613dc8b67e6e76c2af10c83a15a8686ef669aab8297052b250fb9f9651bcb312a6356d37ecabe85da312b5f3c17c523e20e1939715d7a2d403edd70dba8523e205818c981f6091b2faa5f825194368636d8f5e05703ba10c81b911d480230d8ded2bbff561f312b29cabb1169c22ae87ee5e26c2d60d5393f9818e5a6a9a6ed0e7a549f5ed88aa78d8dbe4619412d279e7911a96249073", 0xc8, 0x4004000, &(0x7f0000000040)={0xa, 0x4e24, 0x86, @empty, 0x7}, 0x1c)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r6, 0x84, 0x82, &(0x7f0000000380)={0x0, 0x3}, 0x8)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x1b, [0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0)

22m20.296558475s ago: executing program 37 (id=2960):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d)
syz_usb_connect(0x0, 0x12, 0x0, 0x0)
syz_clone(0x90091, 0x0, 0x0, 0x0, 0x0, 0x0)
write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0)
writev(r2, &(0x7f0000002100)=[{&(0x7f0000002080)='T01\n', 0x4}], 0x1)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8)
sendto$inet(r3, 0x0, 0x0, 0x20024094, &(0x7f0000000040)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x2f)
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff080004400000008108000840000000032000018006"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x40000000)
setsockopt$MRT_PIM(r2, 0x0, 0xcf, &(0x7f00000001c0)=0x1, 0x4)
r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
fcntl$lock(r6, 0x6, &(0x7f0000000040)={0x0, 0x2, 0x10001, 0x4})
fcntl$lock(r6, 0x6, &(0x7f0000000080)={0x0, 0x2, 0x1, 0x9})
fcntl$lock(r4, 0x24, &(0x7f0000000180)={0x1, 0x3, 0x4, 0x1})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r5, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0)

22m14.453935697s ago: executing program 8 (id=2980):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000041c0), 0x40000, 0x0)
ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000004200))
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
unshare(0x22020600)
unshare(0x2a020400)
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/54, 0x36}, {&(0x7f0000000040)=""/126, 0x7e}], 0x2)
timer_create(0x2, 0x0, 0x0)
faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x6, 0x1000)
syz_clone(0x80080, &(0x7f00000002c0)="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", 0x1000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000012c0)="5a8bdea8600e8eb8f20f3ec491a8f88fe2578407c75db92706609e895207145e36d558afa1a42c496aa4714db7ba21dced176dd7b4c3139fc9ffbe4445a4df5e9020250db71d41863e664f57e1759c4b0198b02fa332741c0e7130dda9953a52edb4312f6d0a4ea126e15abee60b5694255a40e9f44eea796eebd5944143b3394e14b94d8978e39e95175014d1a08370257005eec37490b3d21e83b630df0c9e2eb368fae6a5ccc1b6b9e8")

22m13.113871797s ago: executing program 8 (id=2981):
socket(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000200)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff)
keyctl$setperm(0x5, r2, 0x2000004)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0x2, 0x8, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

22m10.527172692s ago: executing program 8 (id=2982):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000012002103"], 0x1c}], 0x1}, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48})
r3 = dup(0xffffffffffffffff)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @local, 0x3}], 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[], 0x0}, 0x94)
socket$can_bcm(0x1d, 0x2, 0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4)
setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f0000000040)=r4, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48)
dup2(r6, r4)
setsockopt$sock_attach_bpf(r5, 0x1, 0x34, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000077c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002040)=""/4096, 0x1000}], 0xa1, 0x0, 0xfffffe2a}}, {{0x0, 0x0, 0x0}}], 0x400000000000059, 0x2040, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31110000000900010073797a3000000000080005400000001c08000640ffffff000800034000000008606600000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000080004400000000220660380"], 0x66f4}}, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x9e, 0xc4, 0x5e, 0x20, 0x9fb, 0xebbe, 0x395d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0xd, 0xa0, 0x0, [{{0x9, 0x4, 0xb1, 0x0, 0x1, 0x55, 0xf8, 0x6, 0xff, [], [{{0x9, 0x5, 0x1, 0xc, 0x8, 0x3, 0x1}}]}}]}}]}}, 0x0)

22m9.936074172s ago: executing program 7 (id=2984):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async)
r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r2) (async)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', <r5=>0x0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280)={<r8=>0x0, <r9=>0x0, <r10=>0x0}, &(0x7f00000013c0)=0xc)
sendmmsg$unix(r7, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[@cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0x38, 0x40044}}], 0x1, 0x4)
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r11=>0x0}) (async)
r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r12, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async)
read$FUSE(r12, &(0x7f00000021c0)={0x2020, 0x0, <r13=>0x0, <r14=>0x0, <r15=>0x0}, 0x2020)
write$FUSE_INIT(r12, &(0x7f0000000580)={0x50, 0x0, r13, {0x7, 0x28, 0xffff, 0x200800, 0x0, 0x0, 0x1e0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50)
syz_fuse_handle_req(r12, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x200, 0x0, {0x5, 0x0, 0x7, 0x1000007, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0xa000, 0x10000, 0x0, r15, 0x734}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000ac0)=@flushpolicy={0x558, 0x1d, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@algo_crypt={0xa8, 0x2, {{'pcbc(aes-aesni)\x00'}, 0x300, "ef8d60235c05a968d49dae97507253b4de673379f0438ea26327f2e4d33c2a5b36126bf9cd1b455e5e8de17d18a8fa86c5e4199370c4b5e888b31d3accff7b523c9c1f470563b5e3f1fc7022144d6b7631cdd8e4dc965034c6575b694d513c0a"}}, @sa={0xe4, 0x6, {{@in=@remote, @in=@local, 0x4e21, 0x9, 0x4e24, 0x2, 0x2, 0x80, 0x120, 0x6, r5, r11}, {@in=@rand_addr=0x64010101, 0x4d2, 0x32}, @in6=@remote, {0x5, 0x6, 0x0, 0xfa, 0xe, 0x5, 0x200, 0x4}, {0x6, 0x100000000, 0x8, 0xffffffffffff8001}, {0xe3, 0x2, 0x1}, 0x70bd28, 0x3505, 0x2, 0x2, 0xa6, 0x50}}, @sec_ctx={0xcd, 0x8, {0xc9, 0x8, 0x1, 0xff, 0xc1, "e438aa0ca9072972e0b768af25e30e4043ed1328a847e53f69f299371313869270e47f74924118e24dd9657bcb8ea7893b780b4ec7ac3f2577302465fd4638fb361e7d313c2814d445f49e855a08dc9800f966a229d6c9b701f61b643060975891c289364e9dd7697473e2d3e4603c52c43b42bddf8700cc36049b2d7f8104049bd1edbfb88f9884335a237f5101f8bae52fb49e7a2274f0af27b0e53e0b8dabe0626d7ca04886b364380cad42a0a05642867f2e0c3cf139253ac97d429f4d00c7"}}, @policy={0xac, 0x7, {{@in6=@loopback, @in6=@mcast1, 0x4e21, 0x1ff, 0x4e20, 0x9fe, 0xa, 0x80, 0x80, 0x0, 0x0, r14}, {0x1, 0x9, 0xff, 0xfffffffffffffffd, 0xf6, 0x7, 0x3, 0x3}, {0x0, 0xb8cf, 0x7, 0x1}, 0xb, 0x6e6bb1, 0x2, 0x1, 0x5, 0x1}}, @srcaddr={0x14, 0xd, @in=@empty}, @lifetime_val={0x24, 0x9, {0x4, 0x7fffffff, 0xfffffffffffff675, 0x10000}}, @sec_ctx={0xfb, 0x8, {0xf7, 0x8, 0x0, 0x2, 0xef, "96a04037f664aceda61d78f0d11f85e7c1f45ce9920ffe0d0c5cd423b1fe5ce3540c78f384f4a3319c70c6d5bbce10f2f9437cf3fc4bb5d53dc62f621391c8b4d410ae7cb341ac2570c31ef9707ad4f5ef3b23fcaa81a9ad4a0dda75822890d2a8772b5b27b7bd9318c09c6e60c5602b9b6e7a43b21a1c173cccffc10003141c2f99e4967fe6fa7170ee2460de01901c3b44237ffbaae07153d6656a7f4ff5683d6674967b6389050d024cb42832664b7564aecb829ae19ec6d9e34123c8f065662401304f02db6effc67f2bb797674bc38cbcbd2a41489eb86c8381c50581a48c88c840ee63e9a28a5293c479a804"}}, @tmpl={0x104, 0x5, [{{@in6=@mcast2, 0x4d6, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x3500, 0x4, 0x3, 0x8, 0x8d, 0x3, 0xfffffff9}, {{@in6=@empty, 0x4d6, 0x6c}, 0xa, @in6=@private0, 0x3503, 0x5, 0x3, 0x5, 0x1, 0x50, 0x5}, {{@in=@remote, 0x4d3, 0x32}, 0x2, @in=@empty, 0x3501, 0x3, 0x0, 0xf, 0x4, 0xef, 0xffffffff}, {{@in6=@remote, 0x4d6, 0x33}, 0xa, @in=@multicast2, 0x3503, 0x2, 0x1, 0x87, 0x7, 0x6, 0x9}]}, @replay_thresh={0x8, 0xb, 0x14e}]}, 0x558}}, 0x4004040) (async)
pipe2$watch_queue(&(0x7f0000000040)={<r16=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r2, r16, 0xcb)
r17 = add_key$fscrypt_v1(&(0x7f0000001380), &(0x7f0000000280)={'fscrypt:', @auto=[0x37, 0x0, 0x0, 0x33, 0x61, 0x0, 0x0, 0x34, 0x31, 0x35, 0x34, 0x35, 0x0, 0x39, 0x65]}, &(0x7f0000000180)={0x0, "de8d0d27ca969fa15f8b3b7bae39c1b3327d4332f8c149d2d65a347d67f6db7eb90dfdad3cdebaaf421412f812305c9da91699b5a02c1295596f0fd9ec78f2fd", 0x8018}, 0x48, r2)
keyctl$KEYCTL_MOVE(0x1e, r17, r2, r3, 0x0) (async)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x378, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r18 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r19 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r19, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ff010000060000800000000000000001fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002000000000044000500fe800000000000000000000000000044000004d42b0000000a000000e00000010000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) (async)
bind$inet(r18, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r18, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async)
connect$inet(r18, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) (async)
sendmmsg$inet(r18, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890)

22m8.361762541s ago: executing program 38 (id=2974):
syz_open_dev$video4linux(&(0x7f0000000000), 0x2000002000000403, 0x400)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x440000, 0x0)
syz_open_pts(r0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x5, &(0x7f0000002d40)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8}, 0x94)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
io_uring_setup(0x93, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x6000002, 0x4018831, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)={0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x13, 0x1, 0x0, 0x5f, 0x3, 0x0, 0xa6, 0x4, 0x5, 0x6}, {0xfffffff7, 0x4004, 0x0, 0x0, 0x0, 0xf6, 0xe0, 0x8, 0xb, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x7, 0xfe, 0x5, 0xab, 0x0, 0x4}]})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x38, 0x3e, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@generic="725eb862cec9a478"]}, @typed={0x8, 0x7, 0x0, 0x0, @pid}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000})

22m5.553014149s ago: executing program 7 (id=2986):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x6e)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x564b043a, 0xb, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000008340)="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", 0x2000, &(0x7f0000001080)={&(0x7f0000000240)={0x50, 0xffffffffffffffda, 0xf992, {0x7, 0x2b, 0x4, 0x20000000, 0x23, 0x1, 0x8000, 0x9, 0x0, 0x0, 0x40, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
fsync(r2)
fdatasync(r2)

22m4.074199888s ago: executing program 7 (id=2987):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
timer_create(0x3, 0x0, &(0x7f0000044000))
timer_settime(0x0, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0)
syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=<r0=>0x0, &(0x7f00000001c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000480)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000003140)=[{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000680)="aa00de", 0x3}, {&(0x7f0000000700)="7dcf131bc6", 0x5}], 0x2, &(0x7f0000004fc0)=ANY=[], 0x168, 0xc001}], 0x1, 0x40800)
socket$nl_generic(0x10, 0x3, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$l2tp6(0xa, 0x2, 0x73)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x44, 0xe2, 0x20, 0x8, 0x13d3, 0x3224, 0xcb0d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xe7, 0x0, 0x0, 0x20, 0x1, 0xd6}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000200)={0x0, 0x7, 0x15, "928209a62dc943648171fae475a1f391f91c376614"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$netlink(0x10, 0x3, 0xb)
socket$nl_generic(0x10, 0x3, 0x10)

22m0.468903068s ago: executing program 7 (id=2988):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x4, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)={0x20, 0x2e, 0x9, 0xfffffffe, 0x25dfdbfd, {0x2}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x4d, 0x0, 0x0, @ipv4=@multicast2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
readv(r3, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/62, 0x3e}, {&(0x7f0000000340)=""/1, 0x1}, {&(0x7f0000000440)=""/127, 0x7f}, {&(0x7f0000000640)=""/238, 0xee}, {&(0x7f00000004c0)=""/24, 0x18}], 0x5)
ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000000))
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r4 = socket(0x1000000010, 0x80002, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=<r5=>0x0)
ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000380)={0x0, @phonet={0x23, 0x5, 0x6, 0x6}, @nfc={0x27, r5, 0x1, 0x6}, @vsock={0x28, 0x0, 0xffffffff, @hyper}, 0xe3, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)='bridge_slave_0\x00', 0xfffffffffffffdfe, 0x6, 0x31f})
r6 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="060000000000000071100a00000000000f000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'team0\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x2004c014)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0x0, 0x0, 0x0)
r7 = memfd_create(&(0x7f0000000740)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\x04\x00\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd1M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81<z\xf2\xe8\xf4\x93\xe6h\x97\x7f\xaf\xc5\x06g\fI\xa5\xed\x05\x12\x0f\x0eu\xe5 \xfe\xcdMX\xb5X\x838\xf5\x18x\xc9\xb9\x03\t\x06\x96g\x8a5\xb0\xc8\x86\x14\xe2\x01\x1f\x80\xe7Ol\xba\x93\xaa\x15\x87I7W\x87\xc4;p\xc5\x1e\"K5r\xec6\xac\xf0\x1f\xf8 \xad\xc9\xf0\x16\xce\x17\xa1%f\x12\x80\x03N[qz\xf0q\xbd\xb8s\xe5>N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xdew\x94\x01\x88K\xe6\x86\xaf)hW\xc8\\/Pl\x9b\x1b\xf2\xf1_\xbb\xaa\xc9?\xf7\xae\x13\xc2\f=\x059\x1c\xb7\x1ca\xe4\xb8C[\x06\x8c\f%l\x19I\x1fq9y)\xaf~~\xa8\xaf\'S\xf0kA\xa8\x93\x8a\xd3\x98\xbf[5\x0f\x05\"\xbd4h\xd9\xd4\xb8\x17P\xb4\xa7\xd6\x03\x86\xe6\xb0\x90W\xc3\xbd\xcb\x1er\xc4e\xc2\x96\r\x15\x84\xda\x16m\xc7\x19g\x83O\a=\xcb\'\xb7E\xc2\xd3L\xd5\xe5\xc2&L\xebjb\xfaOBc\x95\xb7\x97[\xcd$n\xbcO\x81\x03\xc3e:C&\"\x06B:\xa4\xe9\xab\x95DG(^\xd7\xb4\x8e5\x1a\xdb\xcf\x12\xccV\xb7\x98i\xfb\xadv\xb3', 0x0)
write(r7, &(0x7f0000000140)='/', 0x1)
io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xe70, 0x2, 0x200})
sendfile(r7, r7, &(0x7f0000000040), 0xfec)

22m0.017504105s ago: executing program 8 (id=2989):
r0 = socket(0x10, 0x4, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10)
syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000010000000000000800040001000000", 0x24)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f00000010c0)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000380)={r3, 0x3ff, 0xec, 0x2a, 0x6, 0x2, 0x6, 0x200, {0x0, @in6={{0xa, 0x4e21, 0x400, @remote, 0x10}}, 0x6, 0x0, 0x83, 0x0, 0x8}}, &(0x7f00000002c0)=0xb0)

21m59.136824563s ago: executing program 8 (id=2990):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800008080b634280100"/20, @ANYRESHEX=r1, @ANYRESDEC=r1], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94)
r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000085}, 0x0)
write$binfmt_misc(r3, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa000, 0x0)
ioctl$TIOCGPTPEER(r4, 0x5441, 0x6f0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x103400, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000200)={0x48})
r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
chroot(&(0x7f0000000180)='./file0\x00')
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000680)}, 0x10)
ioctl$FBIO_WAITFORVSYNC(r6, 0x40044620, 0x0)
lstat(&(0x7f0000000300)='./file0\x00', 0x0)
getpid()
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000640)={'veth1_to_bond\x00', &(0x7f0000000600)=@ethtool_sset_info={0x37, 0x9, 0x5, [0x5f4b0af7]}})
getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440))
getresuid(&(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0))
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8)
socket$nl_rdma(0x10, 0x3, 0x14)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

21m53.482046038s ago: executing program 39 (id=2983):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0xe, 0x6, 0x0, 0xb49, 0x9, 0xb, 0x2, 0x3}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4)
sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
sendto$inet(r3, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0)
r5 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
bind$inet(r5, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
r6 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0x2, 0x0, 0x0)
bind$inet(r6, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
listen(r2, 0x8)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
unshare(0x62040200)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000680)={r4})
sendmsg$nl_route(r7, 0x0, 0x4000000)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1})
r8 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@ipv6_newrule={0x44, 0x1a, 0x1, 0x70bd28, 0x24dfdc01, {0x81, 0x80, 0x80}, [@FRA_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @FRA_SRC={0x14, 0x2, @remote}]}, 0x44}}, 0x884)

21m53.289662749s ago: executing program 7 (id=2992):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x1000, 0x0)
syz_io_uring_setup(0x9f7, &(0x7f0000000180)={0x0, 0x992a, 0x10, 0x4, 0x1a6}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
socket$inet_sctp(0x2, 0x1, 0x84)
syz_io_uring_submit(r3, r4, 0x0)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x51a23}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @loopback}, @IFLA_GRE_REMOTE={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x41}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000014)
unshare(0x6a040000)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6(0xa, 0x3, 0x4)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000012c0)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x4e20, 0xfffe, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x0, 0x5, 0x204}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@broadcast, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x7}}}, 0x19)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0)

21m50.493791346s ago: executing program 8 (id=2993):
r0 = userfaultfd(0x801)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00005cf000/0x400000)=nil)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00')
read$FUSE(r3, &(0x7f0000000240)={0x2020}, 0x2020)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001200970225bd70000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'], 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

21m37.637842768s ago: executing program 40 (id=2992):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x1000, 0x0)
syz_io_uring_setup(0x9f7, &(0x7f0000000180)={0x0, 0x992a, 0x10, 0x4, 0x1a6}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
socket$inet_sctp(0x2, 0x1, 0x84)
syz_io_uring_submit(r3, r4, 0x0)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x51a23}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @loopback}, @IFLA_GRE_REMOTE={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x41}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000014)
unshare(0x6a040000)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6(0xa, 0x3, 0x4)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000012c0)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x4e20, 0xfffe, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x0, 0x5, 0x204}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@broadcast, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x7}}}, 0x19)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0)

21m34.627396488s ago: executing program 41 (id=2993):
r0 = userfaultfd(0x801)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00005cf000/0x400000)=nil)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00')
read$FUSE(r3, &(0x7f0000000240)={0x2020}, 0x2020)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001200970225bd70000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'], 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

19m29.528269389s ago: executing program 2 (id=3227):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="5000000010000104000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="061001000000000024001280090001007866726d0000000067000280000002000300000008000200020000000a000100ffffffffffff0000c9d438d6bc8f679e286e3bec592af1fc9bf9d784093a22d4a9ba"], 0x50}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101a02, 0x0)
r3 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10000, 0x0, 0x2e9}, &(0x7f0000000380)=<r4=>0x0, &(0x7f0000000200)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/4, 0x4}, {0x0}], 0x2})
io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002)
set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
write$binfmt_script(r6, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
socket(0x2, 0x3, 0x6)
r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)

19m29.480002312s ago: executing program 2 (id=3228):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7000000ff000000bfa30000000000000703b0fff0ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004604000001ed00007b030000000000001d440000000000007a0a00fe00ffffffc3030000f1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00a5b4f7e9ad0500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48)

19m29.349121125s ago: executing program 2 (id=3229):
userfaultfd(0x80801) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00ab7c39810000000000000070ee91253efdf5de9cac7b69fb93151df3d0f6fb89309f64845d441d428e17dc2d5359c5955e3adb68ab8884", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000a000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000010000008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async)
r4 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x818f, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async)
io_uring_enter(r4, 0x47b6, 0x800000, 0x0, 0x0, 0x0) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2000}) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x1) (async)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x3ff)
close(r7) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000a80)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f0000000700)=""/77, 0x4d}, {&(0x7f0000000600)=""/44, 0x2c}, {&(0x7f0000000780)=""/45, 0x2d}], 0x4, &(0x7f0000000800)=""/8, 0x8}, 0x1ff}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000840)=""/255, 0xff}, {&(0x7f0000000940)=""/28, 0x1c}], 0x2, &(0x7f00000009c0)=""/187, 0xbb}, 0x6}], 0x2, 0x3, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) (async)
r10 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0x4000e7a9, 0x80, 0x7ffe, 0x40024e}, &(0x7f0000000340)=<r11=>0x0, &(0x7f0000000380)=<r12=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000000)=0x200ffb, 0x0, 0x4)
syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2100, 0x1, {0x2}})
io_uring_enter(r10, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0)

19m29.224973553s ago: executing program 2 (id=3230):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000002980)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x2000, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x1d45, 0x4, 0x0, 0x0, 0x40, 0x23}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
writev(r3, &(0x7f00000016c0)=[{&(0x7f0000000280)="cb5b22496bd190c01b5d4de90100fc2956bbba1645caaab71f4a75293df9560a1662999df842d706e5a2bf8fe85708ae7f5892a0d682d33f9e5da6f7c047ed24d40c2aa944dbfe107c5051e9f5035a3fb77b2d6690677f0970872148f7cd37bb7f61829019fd383977c0c9ea31b97ff486e656dd723fccf11812b319b1ab4c57507fff6ff2f2982026b85d27a50c8381065150097c5136bacb7d6f5c26c928a2b712d6f0940e8dcb5f29350b9582f82b824c1a4408a5a2bd89226bd663db5c827db8cc3474fd35c54c4e8ccefd4d77d54564a956d0afbdb25fd45b0127", 0xdd}, {&(0x7f0000000000)="57bad0cf5772b29467d810199a5676b29a3b6e6698c8a7df4bd61f7dcf9718ab00a14a4f303a", 0x26}, {&(0x7f00000003c0)="5eb7c434db308c6042d9346534f62f824f048b4e607f5736e56d5130cac0fe51f9ceb37d4af733d92ec0d2a524f88a84a901d5aa0206dcf7a60f81186553d7f1560c4bfcdf813fdb1d534eaeee669d56edbecf5bd105262595df7397f729aeceac12e980fd25f2bb9b62c509fdd1c419a01d332c367799d565fc5fb251bf1d99f6c317b41fbc7136f8a0aa91b1feaaf9279a04642d2db1581b078792e6791325d5433a4b870e838aa839eae9d15f273e75", 0xb1}, {&(0x7f0000000140)="d641b48b58baf50b6402be9e2d", 0xd}, {&(0x7f0000000480)="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", 0xe40}], 0x5)
close(r1)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000012c0)=ANY=[@ANYBLOB="05000000040b", @ANYRES16=r4, @ANYBLOB="010000000000fddbdf2554000000"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0)
r6 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6)
ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6})
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f0000000900)=""/103, &(0x7f0000000800)=""/90})
ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000340)=0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r6, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000})
syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0)
ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00)

19m28.801719618s ago: executing program 2 (id=3231):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x40301)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x0, 'client0\x00', 0xffffffff80000006, '\x00', "20e48560999fd132b6a5426180a8c27a00fcfffff0003336f794d20352340900", 0x0, 0xfffffffa})
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x244403)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x7fe7f, 0x4)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280))
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x22)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={<r6=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x7, "4375bc03878249"}})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000340)={0x71a5, {{0xa, 0x4e24, 0xb11, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}, {{0xa, 0xf, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x5}}}, 0x108)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r7, &(0x7f0000000200)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, 0x4}, 0x1c)

19m28.381363054s ago: executing program 2 (id=3235):
r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x2a8, 0x2)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xd, 0x1d}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = dup(r2)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r4, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000ac0))
ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f00000003c0)={0x1, r3})
sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0xf, &(0x7f0000000180)={&(0x7f00000005c0)={0x5, 0x15, 0xfffffffe, {0x0, 0x2710}, {}, {}, 0x1, @can={{0x2}, 0x2, 0x6a035825891a9861, 0x0, 0x0, "61bcf34b016813cf"}}, 0x48}, 0x1, 0x0, 0x0, 0x6686ae64641a9d97}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
munmap(&(0x7f0000800000/0x800000)=nil, 0x800000)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82)
setxattr$security_ima(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0)
lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=ANY=[])
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x9132, 0xffffffffffffffff, 0x9aa9b000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000008c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000bbb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
preadv(r7, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x9, 0x6a76)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000280)={0x8, 0x50323234, 0x3, @discrete={0x3, 0x400}})
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'syz_tun\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001100)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x100000, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4000000)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000001240)={0x10001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r10=>0x0}], 0x3, "b44d6ea0fcd773"})
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000002240)={{r10, 0x445975e4, 0x800, 0xffffffffffff7fff, 0x3, 0x3, 0x5, 0x6, 0x0, 0x3ff, 0x0, 0x94f7, 0x1f64, 0x2, 0x4}})

19m27.262158171s ago: executing program 42 (id=3235):
r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x2a8, 0x2)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xd, 0x1d}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = dup(r2)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r4, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000ac0))
ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f00000003c0)={0x1, r3})
sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0xf, &(0x7f0000000180)={&(0x7f00000005c0)={0x5, 0x15, 0xfffffffe, {0x0, 0x2710}, {}, {}, 0x1, @can={{0x2}, 0x2, 0x6a035825891a9861, 0x0, 0x0, "61bcf34b016813cf"}}, 0x48}, 0x1, 0x0, 0x0, 0x6686ae64641a9d97}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
munmap(&(0x7f0000800000/0x800000)=nil, 0x800000)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82)
setxattr$security_ima(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0)
lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=ANY=[])
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x9132, 0xffffffffffffffff, 0x9aa9b000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000008c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000bbb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
preadv(r7, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x9, 0x6a76)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000280)={0x8, 0x50323234, 0x3, @discrete={0x3, 0x400}})
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'syz_tun\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001100)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x100000, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4000000)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000001240)={0x10001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r10=>0x0}], 0x3, "b44d6ea0fcd773"})
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000002240)={{r10, 0x445975e4, 0x800, 0xffffffffffff7fff, 0x3, 0x3, 0x5, 0x6, 0x0, 0x3ff, 0x0, 0x94f7, 0x1f64, 0x2, 0x4}})

18m57.31997313s ago: executing program 9 (id=3331):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000006c0)=[{{&(0x7f0000000480)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000640)="016e48f13314b629b95ab51d57a05d7fc0af77d21bfa01389ec7779732475da9b751a068b1dd87a1382a95aec7e162ad2df821d12a417c163e9431ee69f9200cf290d05a87c45019a6a63d3de68120700875fe6c78b72a0c63bfaffa109c1c37d4b54948506630fb65ac4b98ef86046840f56c4538", 0x75}, {&(0x7f0000000100)}, {&(0x7f00000003c0)="b6b86913d7d91e0511929726c1", 0xd}], 0x3, &(0x7f00000005c0), 0x0, 0x4000}}], 0x1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0xc, 0x8001, 0xfffffffe, 0x6f62c4ca, 0x4f, 0x100000800008, 0xfa0e, 0x3}, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0xc, 0x8001, 0xfffffffe, 0x6f62c4ca, 0x4f, 0x100000800008, 0xfa0e, 0x3}, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) (async)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="00000000ca09fbf88b2b5d39233c88624b5a2df94f24570d3abbe0d3d2bcbfdcba27f32caf6e7f40c09880c7bb61a8b32192", @ANYRES16=r1, @ANYBLOB="08002bbd7000fddbdf25170000003400038008000200030000000800020004ffffff08000200070000000800020000000000080001000d0000000800030007000000"], 0x48}, 0x1, 0x0, 0x0, 0x85}, 0xc0c8) (async)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="00000000ca09fbf88b2b5d39233c88624b5a2df94f24570d3abbe0d3d2bcbfdcba27f32caf6e7f40c09880c7bb61a8b32192", @ANYRES16=r1, @ANYBLOB="08002bbd7000fddbdf25170000003400038008000200030000000800020004ffffff08000200070000000800020000000000080001000d0000000800030007000000"], 0x48}, 0x1, 0x0, 0x0, 0x85}, 0xc0c8)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
kexec_load(0x0, 0x0, 0x0, 0x0)
socket(0x40000000015, 0x5, 0x0) (async)
r4 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xff}, 0x1c)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0xff, 0x1c}, 0xc)
getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) (async)
getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b)
modify_ldt$read(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3)
socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x4f4, 0x8, 0x7fff}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x401}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
socket$inet6(0xa, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000140)=@abs, 0x6e) (async)
connect$unix(r5, &(0x7f0000000140)=@abs, 0x6e)

18m57.051381431s ago: executing program 9 (id=3332):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x3)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r1, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x1)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={<r4=>0xffffffffffffffff}, 0x2, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000002c0)={0x8, 0x120, 0xfa00, {0x4, {0x34, 0x0, "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", 0x3, 0x3, 0x40, 0x9, 0x9, 0x8c}, r4}}, 0x128)
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r2, 0x32b, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x8000)
syz_usb_connect(0x3, 0xf5, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120001a317a88b047e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402512eaedaa7f443b370d3f6406fa415e7e0f3e632183d4a081f423d406302"], 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) (async)
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x3) (async)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r1, 0x0) (async)
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x1) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x9}}, 0x20) (async)
write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000002c0)={0x8, 0x120, 0xfa00, {0x4, {0x34, 0x0, "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", 0x3, 0x3, 0x40, 0x9, 0x9, 0x8c}, r4}}, 0x128) (async)
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r2, 0x32b, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x8000) (async)
syz_usb_connect(0x3, 0xf5, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120001a317a88b047e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402512eaedaa7f443b370d3f6406fa415e7e0f3e632183d4a081f423d406302"], 0x0) (async)

18m55.425681239s ago: executing program 9 (id=3336):
r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x14d802, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x2c93a000)
fadvise64(r0, 0x5, 0x7, 0x5)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)

18m55.283182869s ago: executing program 9 (id=3337):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x2, &(0x7f0000000240)=[{0x3, 0xff, 0x4, 0x403}, {0x0, 0x8, 0x10, 0x2}]})
timerfd_gettime(0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00')

18m55.00556132s ago: executing program 9 (id=3339):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
r2 = syz_open_procfs(0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000680), 0x0, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000340)={0x0, 0x5, 0x4, {0x1, @win={{}, 0x0, 0x9, 0x0, 0x2, 0x0}}})
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1)
preadv(r2, 0x0, 0x0, 0x7, 0x0)
r4 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
r5 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x8, 0x4, 0x20000fb}, &(0x7f0000000340)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000300)={0x0, 0x3938700}, 0x1, 0x40})
io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0)

18m54.546835256s ago: executing program 9 (id=3343):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x7fff, 0x5850, 0x0, 0x0}], 0x1})
unshare(0x400)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000})
fallocate(r5, 0x1, 0x100000000, 0x10000)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x18, &(0x7f0000000480)={0x20, 0xf, 0x7}, 0x0, 0x0, 0x0, 0x0})

18m54.116419736s ago: executing program 43 (id=3343):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x7fff, 0x5850, 0x0, 0x0}], 0x1})
unshare(0x400)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000})
fallocate(r5, 0x1, 0x100000000, 0x10000)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x18, &(0x7f0000000480)={0x20, 0xf, 0x7}, 0x0, 0x0, 0x0, 0x0})

18m35.545633115s ago: executing program 5 (id=3415):
creat(0x0, 0xd931d3864d39ddd8)
openat$ppp(0xffffffffffffff9c, 0x0, 0xc8902, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f0000000840)=[{{&(0x7f00000006c0)=@isdn, 0x80, &(0x7f0000000800)=[{&(0x7f0000000740)=""/158, 0x9e}], 0x1}, 0x6}], 0x1, 0x40000023, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket(0xa, 0x5, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0)
syz_open_procfs(0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x0, 0x0})
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
r3 = fsopen(&(0x7f0000000240)='hugetlbfs\x00', 0x1)
r4 = socket$rds(0x15, 0x5, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00')
read$FUSE(r5, &(0x7f0000002140)={0x2020}, 0x2020)
bind$rds(r4, &(0x7f0000000680)={0x2, 0xfffd, @rand_addr=0x64010102}, 0x10)
sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000c40)=[@cswp={0x58, 0x114, 0x7, {{0x6, 0xfffffff7}, 0x0, 0x0, 0x8, 0x1, 0x72b, 0x4, 0x9, 0x3}}], 0x58}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
creat(&(0x7f00000002c0)='./file0\x00', 0x69)
pread64(0xffffffffffffffff, &(0x7f0000000100)=""/253, 0xfd, 0xadc)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000400)={0x0, 'ipvlan0\x00'}, 0x18)
r7 = socket$inet6_sctp(0xa, 0x7, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)

18m34.608342018s ago: executing program 5 (id=3420):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', <r1=>0x0})
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@local, 0x0, r1})
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e0022})
r4 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf)
ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000040)={0xa000, 0x2000})
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000080)={r5, 0x0, {0x0, 0x0, 0x0, 0x8, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0xfffffffffffffce8, 0xa]}})
writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="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", 0xbff}, {0x0}], 0x2)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f00000003c0)={0x1, 0x1, 0x7, 0x11, 0x72, 0x0})
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1})

18m33.859354352s ago: executing program 5 (id=3424):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000001880)=""/4093, 0xffd}], 0x1, 0x0, 0x0, 0x20000800}, 0x0)
sendmmsg(r3, &(0x7f00000094c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="eb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000006c0)="f2", 0x1}], 0x1}}], 0x2, 0x80)

18m33.366109639s ago: executing program 5 (id=3427):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) (async)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) (async)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0/file0\x00')
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000a00)='./file0/../file0/../file0/../file0\x00', 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x6, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"}) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x6, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"})
syz_open_pts(r0, 0x78b00)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r3 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x28020480)
socket$packet(0x11, 0x3, 0x300)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) (async)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0)
gettid() (async)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) (async)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) (async)
r6 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000080)='dirsync\x00', &(0x7f00000000c0)='./file0\x00', r7)
ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0xf2ffffff)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00000000140000", @ANYRES32, @ANYBLOB="0000010000000000000005aa36a9281abd520000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00000000140000", @ANYRES32, @ANYBLOB="0000010000000000000005aa36a9281abd520000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r8, 0x78, &(0x7f0000000200)}, 0x10)
arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x5)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) (async)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1)

18m32.913393592s ago: executing program 5 (id=3428):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) (async)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 32)
unshare(0x6a040000) (rerun: 32)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x8) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1000, 0x68}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000041}, 0x4) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x3) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) (async)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x2)

18m32.652613929s ago: executing program 5 (id=3430):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x1)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0e, 0xffffffff}, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000000280), 0xb, 0x0)
read$FUSE(r4, &(0x7f0000000380)={0x2020}, 0x2020)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x696d}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0xffffffff}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x800)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x80000}, @CTA_NAT_DST={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ftruncate(r0, 0x4)

18m32.120589382s ago: executing program 44 (id=3430):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x1)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0e, 0xffffffff}, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000000280), 0xb, 0x0)
read$FUSE(r4, &(0x7f0000000380)={0x2020}, 0x2020)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x696d}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0xffffffff}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x800)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x80000}, @CTA_NAT_DST={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ftruncate(r0, 0x4)

11.393634963s ago: executing program 3 (id=7069):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp\x00')
r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0)
syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = msgget$private(0x0, 0x3ac)
msgrcv(r4, 0x0, 0x0, 0x3, 0x1000)
msgrcv(r4, 0x0, 0x0, 0xe4b43f0e2aa28c96, 0x2000)
msgsnd(r4, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00)'], 0x8, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000100)={0x0, 0x1, 0x800})
read$FUSE(r2, &(0x7f0000004600)={0x2020}, 0x2020)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000c00)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r6, &(0x7f0000002380)={0x2020, 0x0, <r7=>0x0, 0x0, <r8=>0x0}, 0x2083)
write$FUSE_INIT(r6, &(0x7f0000000380)={0x50, 0x0, r7, {0x7, 0x27, 0x0, 0x30000, 0x0, 0x0, 0x8, 0x10000}}, 0x50)
syz_fuse_handle_req(r6, &(0x7f0000008280)="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", 0x2000, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0xffffffffffeffffb, {0x3, 0x1, 0x0, 0x0, 0x0, 0x2, {0x0, 0x2, 0xf, 0x0, 0x0, 0x9, 0xda9a, 0xff, 0x4000000, 0xa000, 0x3, 0x0, r8, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00')

8.125550941s ago: executing program 6 (id=7079):
r0 = syz_open_dev$media(&(0x7f0000000000), 0x10000, 0x80000)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000840)={0x0, 0x5, 0x0, &(0x7f0000000240)=[{}, {}, {}, {}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500142f00fe8000000000002f00000000000000bbfe8000000000000000000000000000aa3c0022eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='j'], 0x0)

7.738679804s ago: executing program 6 (id=7081):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c)
connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
recvmmsg(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0)
sendmmsg$inet6(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)='3', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)="b4", 0x1}], 0x1}}], 0x2, 0x20e8086)
sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x45, [0x80000000, 0x89ff]}})
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f00000001c0)=@ethtool_sfeatures={0x3b, 0x8, [{0x9, 0x7}, {0x1000000, 0xffff49fb}, {0xfffffffb, 0x5}, {0x5, 0x7b056ed3}, {0xffffffff, 0x5}, {0x8, 0x7fffffff}, {0x2, 0x40000000}, {0x2c20, 0x5}]}})
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="b54300000000000000004a32825e68000000"], 0x14}}, 0x0)

6.876555913s ago: executing program 6 (id=7085):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000180)={0x80000000, 0x0, &(0x7f0000001580)})
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000300)=[{&(0x7f0000000600)="580000001500add427323b472545b45602117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff04000000ffffe7ee000000deff0000000200000000", 0x58}], 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001000000000000702500000000002020207b1af8e000000000bfa100000000000007010000f8ffffffa702000208000020b703000001000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0xe, 0xff5, &(0x7f0000000440)=""/4085, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x401, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x11006}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x67, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x0, 0x2, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x50}}, 0x0)

6.659582275s ago: executing program 6 (id=7086):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
unshare(0x2040400)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x80)
shutdown(r2, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0x0, 0x23, 0x54, {0x54, 0x11, "cbe05feb77243eb7ff52cf75b3a693113b9971819f9ad81e134e3d2a7bed64e2184027e5bc004680b311be737c39907105419573f3c4e4f2c6c28411c57b2b31ddddda90217a1cb8a775b6359604b23764ab"}}, &(0x7f0000000100)={0x0, 0x3, 0xa6, @string={0xa6, 0x3, "303facbeecc683ac808af1583ac7a13d79e8c06c0e7347d0219824399eaeb587df09b0a071349973ae98cfe4dd4b34306108c838a26ae10bd6ffc0af93479ef4f22ca25267363baa65e0b10b6be139a94080e70ecd8840f1430b63505044b6648740b19f21859e8dc0da5cac0161658ec574f5113f4c2f28b2040f2ca45e2357557f28e63f9863dd37a7dfa8bbc7faf178eb51701f5a3e8fe5d397ae9024b8861581c7a4"}}}, &(0x7f0000000480)={0x44, &(0x7f0000000200)={0x20, 0xa, 0x57, "f2e357f29f21ce34921ab07654d71d896a2c237a075d7302f9ddb55139dae171e69e35aef4dccf1db3991492fd5e994d7a0c7e355c950ab2102c108b7b6563ddacb0855014e85539a793929ace0215e12e4a12d08a0230"}, &(0x7f0000000280)={0x0, 0xa, 0xffffffffffffffc5, 0xf}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000300)={0x20, 0x81, 0x3, "6c1dc0"}, &(0x7f0000000500)={0x20, 0x82, 0x3, "6b1324"}, &(0x7f0000000380)={0x20, 0x83, 0x1, '_'}, &(0x7f0000000400)={0x20, 0x84, 0x3, "31b6ef"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "c7b2cb"}})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
unshare(0x2040400)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, 0x0, 0xc000)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="b2820400"/16], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)

6.43813427s ago: executing program 0 (id=7087):
io_pgetevents(0x0, 0xf, 0x0, &(0x7f0000000600), &(0x7f0000000400)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000140)={[0x7fffffff]}, 0xffffffffffffff34})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905849d"], 0x0)

6.299195684s ago: executing program 3 (id=7088):
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48})
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc})
add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0, 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x3, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@rthdrdstopts={{0x20, 0x29, 0x37, {0x2b, 0x7, '\x00', [@enc_lim={0x4, 0x1, 0x74}]}}}], 0x20}}], 0x2, 0x4000001)
sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7000000ff000000bfa300000000000007030000f0ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004604000001ed000062030000000000001d44ffffff9000007a0a00fe00ffffffc3030000f1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00a5b4f7e9ad0500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48)
r7 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='name', &(0x7f00000000c0)='\x00\x1f\"\f\x00\x00\"\x00\x04\x00\x00', 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x7fffffff)

6.070440847s ago: executing program 4 (id=7089):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010800000000000000000a0000000900010073797a31000000004c000000030a010100000000000000000a0000000a000700726f7574650000001400048008000240000000000800014010d8e8bd0900010073797a3100000000090003"], 0x94}}, 0x0) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}}) (async)
ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, &(0x7f0000000000)) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x800000, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1800}, 0x48) (async)
write$FUSE_NOTIFY_DELETE(r2, 0x0, 0x0)
getsockname$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, &(0x7f0000000180)=0x1c)

5.732707537s ago: executing program 4 (id=7090):
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f00000001c0)=[@code={0x1, 0x49, {"0f01ca2e646740c159368266bad004b0bdee66baa100ed640f017c9993660f38816da4470f019d0d000000f3430fc776100f01c3460f013a"}}], 0x49}) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async, rerun: 64)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020ec1306000000000000010902240001000000000904000001030000000921000000012202000905810320"], 0x0) (rerun: 64)
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000340))
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000000)=0x200000000) (async)
write$vhost_msg_v2(r3, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/185, 0xb9, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg(r3, &(0x7f0000000100)={0x1, {&(0x7f00000007c0)=""/194, 0xc2, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg(r3, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) (async)
write$vhost_msg_v2(r3, &(0x7f00000018c0)={0x2, 0x0, {&(0x7f00000008c0)=""/4096, 0x1000, 0x0, 0x1, 0x2}}, 0x48) (async)
write$vhost_msg_v2(r3, &(0x7f0000001a80)={0x2, 0x0, {&(0x7f0000001940)=""/163, 0xa3, 0x0, 0x3, 0x2}}, 0x48) (async, rerun: 64)
write$vhost_msg_v2(r3, &(0x7f0000002b00)={0x2, 0x0, {&(0x7f0000000600)=""/13, 0xd, 0x0, 0x3, 0x2}}, 0x48) (async, rerun: 64)
write$vhost_msg_v2(r3, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f0000000400)=""/192, 0xffffffdc, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg_v2(r3, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) (async, rerun: 64)
setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64)
r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) (async)
r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000140), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) (async)
r6 = syz_io_uring_setup(0xfb, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f00000000c0)=<r7=>0x0, &(0x7f0000000100)=<r8=>0x0) (async, rerun: 32)
r9 = socket$rds(0x15, 0x5, 0x0) (rerun: 32)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x1, &(0x7f0000000000)=[{0x6, 0x40, 0x0, 0x7ffffffe}]})
mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r9, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) (async)
io_uring_enter(r6, 0x46f6, 0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io(r2, &(0x7f0000000900)={0x2c, &(0x7f0000000e80)=ANY=[@ANYBLOB="20014c0000004c0cff583c8b1a91787de39b7d1125ee19e45cd3b6683168837fb60e27281d28bfa32e01008e1fbf84ac1dc5108e4364a20d14ab2673cbe3d12c99e3bc346d2d79d8377b39a527b4933d0000"], 0x0, 0x0, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x4, 0x9d, 0x7, "006df416", "e5f28ea0"}}, 0x0}, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})

5.294820338s ago: executing program 1 (id=7091):
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000680)={'lo\x00', &(0x7f0000000040)=@ethtool_cmd={0x25, 0x2000, 0x3, 0xfffe, 0x4, 0x2, 0x0, 0xff, 0x0, 0xc, 0x20000000, 0x7882, 0x0, 0x3, 0x1, 0x6, [0x0, 0x80000000]}}) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000680)={'lo\x00', &(0x7f0000000040)=@ethtool_cmd={0x25, 0x2000, 0x3, 0xfffe, 0x4, 0x2, 0x0, 0xff, 0x0, 0xc, 0x20000000, 0x7882, 0x0, 0x3, 0x1, 0x6, [0x0, 0x80000000]}})
r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000280)="85952b177328da2f8757c9343d6559eb7a", 0x11, 0xfffffffffffffffd)
r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/80, 0x50, 0x0)
syz_open_dev$admmidi(&(0x7f0000000080), 0x4, 0x40400)

5.149419373s ago: executing program 1 (id=7092):
r0 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x3, 0xb5}, &(0x7f0000ffe000), &(0x7f0000000b40))
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020)

3.445873639s ago: executing program 1 (id=7093):
r0 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x3, 0xb5}, &(0x7f0000ffe000), &(0x7f0000000b40))
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) (fail_nth: 6)

3.445075322s ago: executing program 3 (id=7094):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
syz_emit_ethernet(0x3a, &(0x7f0000000500)={@local, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @broadcast}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0xa065, 0x0, 0x0, 0x240024e}, &(0x7f0000000080)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f00000000c0)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1})
io_uring_enter(r2, 0x628, 0xe656, 0x43, 0x0, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0xb001, 0xff03, 0x3a8, 0xe8, 0x1d0, 0x1d0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0xc0, 0x1d0, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xffff}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x3f8)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r7, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4)
setsockopt$inet6_int(r7, 0x29, 0x8, &(0x7f00000000c0)=0xf2b, 0x4)
getsockopt$inet6_buf(r7, 0x29, 0x6, &(0x7f0000001500)=""/17, &(0x7f0000000080)=0x11)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x24}, 0x4, 0x2, 0x3, 0x1, 0x3, 0x5ae}, 0x20)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x88, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x401}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfc37}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1fe}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xae60}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x40048d0}, 0x24000840)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0)
ioctl$BLKSECDISCARD(r8, 0x127d, 0x0)
close(0x3)

3.444369724s ago: executing program 1 (id=7095):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x7, 0x1, 0x1, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xe, 0x30, 0xf8, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfe, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x2, 0xfc}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x80, 0x4, 0x2c}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x92, 0x1, 0x4, 0x8, 0x1}, 0x58, &(0x7f00000005c0)={0x5, 0xf, 0x58, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0xe, 0x2, 0x0, 0xf00f, 0x50c, [0x0, 0xff0000]}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x8, 0xf, 0x1, [0xffc000, 0xc00f, 0x1e]}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x3, 0x7, 0x8}, @ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0x6, 0xf00f, 0x81, [0x3f3f, 0x30, 0x0, 0xc000, 0x3f3f]}]}, 0x5, [{0xf8, &(0x7f0000000180)=@string={0xf8, 0x3, "1bbb3e29c15b8350d2728617c0647b70a52741728ab4341a5c7699ceea0f928c59246c46b10994f8b34f5440e836020d2409387cbe863be916e6584b2a402e223918a8f5a185fc116d8e3f621fbd45b1ba4ee86dc8478d0d9701f062fa1ac32bbbb190336c29ed05859a6f0a4328e0cfad445a7e74371bae15aee818e67239b111e4004629d128abd51a3ab5f02949cef931e3edc5ea96b7378aee9a6121e7baa47da938604e910b2e1e1f69280847ba7dc984f6fc1f41780204cfcfb0df2423ca96aaa146efe156d44ac7befb4aadbe46589416714b531d2cf9ee5e40bd8b3f15591aa70752a07635bf12ee3d721ae578313a756b0f"}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x3401}}, {0x77, &(0x7f0000000280)=@string={0x77, 0x3, "1ee5bcbd8c8113cb777233f6d1503d08f2135cf0a2dc6a0c32e79cbc46628a6735873e118c2483af582d2404df84ba6ea9fd14b96324b3fb880db8dd33a2954d6470cf45d8f7472d396566194828bf27efbd7188149e35ea1b4cb70870fa2801fdc7105134675c311e56da5238885d04288883b29e"}}, {0x72, &(0x7f0000000340)=@string={0x72, 0x3, "980a2b0fc0aef0d23459cb91112966db4e005f47a857ee42e5f66f2e98c9634ec230abf71ccb31af7b27afa78593c2a0faaddf32879981eecf3f1a8a98bf31709acaf8ab1f898b84f038b52f088a741e1d308abbc58715f1aafc0513051d93be37b0a5ec2b67b9fee4217399a049a67a"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x827}}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r3=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000002c0)={r3, <r4=>0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000480)={0x0, 0x0, r4, r5, 0x3, 0x0, 0xffffffff, 0x804, {0xac5c, 0x1, 0x3, 0x67, 0xf4a, 0x1, 0x2, 0x4, 0x4132, 0xe156, 0x1, 0x7f, 0x3d, 0xb367, "fe1d00003413000000000020b42717e47f00"}})
syz_usb_control_io(r0, 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r7 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0)
fcntl$notify(r7, 0x402, 0x5)
mknod$loop(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1)
link(&(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000080)={0x0, 0x0, 0x1})
ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000380)={0x2, 0x25000, 0x1})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000000000))
fanotify_init(0x200, 0x0)
close(r8)
ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000000)={0xdddd1000, 0xb000, 0x1})
ioctl$KVM_RUN(r9, 0xae80, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

3.444002913s ago: executing program 0 (id=7096):
socket(0x10, 0x803, 0x0) (async)
r0 = socket(0x10, 0x803, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = dup2(r0, r1)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2a, 0x8000004, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008004}, 0x0)
sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"/496], 0x1f0}}, 0x200c815)
socket$inet6(0xa, 0x800000000000002, 0x0) (async)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async)
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000200)={0x0, 0x0, 0x0, r6, 0xc0c0c0c0})
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @mcast1, 0x6}, 0x1c)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e21, 0x735, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xfffffff7}, 0x1c)
setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, 0x0, 0x0)

3.443470123s ago: executing program 0 (id=7097):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @remote}, 0x10) (async)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @remote}, 0x10)
r1 = syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0xdd68, 0x10100}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0})
r4 = syz_io_uring_setup(0x24f8, &(0x7f0000000440)={0x0, 0x0, 0x10100, 0x1fffffd, 0xfffffffd}, &(0x7f0000000300)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000540)=@sack_info={0x0, 0x4, 0x8}, 0xc)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f0000000000)=0x15, 0x4)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) (async)
syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}})
io_uring_enter(r4, 0x5b43, 0x0, 0x0, 0x0, 0x0) (async)
io_uring_enter(r4, 0x5b43, 0x0, 0x0, 0x0, 0x0)
shutdown(r8, 0x0)
io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) (async)
io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0)

3.442971647s ago: executing program 3 (id=7098):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x4, 0x4) (async)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000001c0)=0x3, 0x4) (async)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x8, 0x0, &(0x7f0000000180)) (async)
r2 = syz_usb_connect(0x2, 0x2d, &(0x7f00000005c0)=ANY=[@ANYRES8=r0], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xa8, &(0x7f0000000400)=ANY=[@ANYBLOB="1b1b"])
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000000)={&(0x7f0000000080)=""/156, 0x9c})

3.418218298s ago: executing program 0 (id=7099):
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000a00)={0x0, 0x1})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, 0x0, 0x0)
sendmsg$tipc(r4, 0x0, 0x4000080)
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xffffffffffffffff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
close_range(r0, 0xffffffffffffffff, 0x0)

3.417149165s ago: executing program 4 (id=7100):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe00000100000000080001"], 0x24}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf251700000048000680210006"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4040800)
syz_usb_connect(0x4, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000d4ee0620cf10618012b70102030109022d00010000100009040600024f1ce80009050202000202000009058202eefbe69fdd1414f8e4b1d5ac7d6d1d48d9ca16625a90c8f3588d4dc46b7b5822ca736f0917fd5a819edb729c58355d4b82ec1d821c53de0b1ce5ecd3b50c58ca833e168820350b165cc201452f5ba357df0f94dd691d4c051d5574d661e453f852c97baa76aa2dbe4eac1b8960a429ad112fe0b6c111bfe5553c17e3f00b4656ddf907d6df5ec9dcfc8fede1784210a9e804dc0f04b04f85fa39cc353d470b0233a748f182a9c5c9d6dc26", @ANYRES64=r0], 0x0)

3.416521024s ago: executing program 6 (id=7101):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = eventfd(0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000000140), 0x10)
r4 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd6", 0x37, 0x2400c0c7, 0x1})
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={<r8=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000001c0)={r9, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000000)={r8, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90)
io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r2)

3.339402904s ago: executing program 4 (id=7102):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCGWINSZ(r2, 0x5413, 0xfffffffffffffffe)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaa0000aaaaffffffffffff86dd600a843500140600fe8000000000000000000000000000bbfe80000000000000000000000000003400000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000", @ANYRESOCT=r3], 0x0)
fanotify_init(0x0, 0x101000)
r5 = socket$kcm(0x10, 0x2, 0x4)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040))
sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000)
r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r7 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc))
ptrace(0x4207, r7)
close(r6)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2036)
execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab?P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb8\x10\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\x03\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7vC\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']})
r8 = syz_open_dev$video(&(0x7f0000000000), 0xd, 0x0)
ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x0, 0x0, 0x42474752, 0x0, 0x0, 0x0, 0x6, 0xfeedcafe, 0x3, 0x0, 0x1, 0x5}})
syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0xca, 0x1a, 0x60, 0x40, 0x2304, 0x20f, 0x3bde, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xac, 0x0, 0x0, 0xe1, 0x3, 0xb3}}]}}]}}, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00')
preadv(r9, &(0x7f0000000540)=[{&(0x7f0000000080)=""/23, 0x1f}], 0x1, 0x2, 0x4)

2.881182938s ago: executing program 0 (id=7103):
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000)=0x8, 0xfffffffffffffc7c)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
r1 = socket(0x2, 0x80802, 0x0)
sendmsg$inet(r1, &(0x7f0000000a80)={&(0x7f00000007c0)={0x2, 0x4e23, @loopback}, 0x10, 0x0}, 0x1c880)
sendmmsg$unix(r1, &(0x7f0000000080)=[{{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4008000}}, {{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x3a, 0x0, 0x0, 0x2000c800}}], 0x2, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66)
sendto$inet6(r0, &(0x7f0000000280)='2', 0xfffffffffffffe7d, 0x20000045, &(0x7f00000000c0)={0xa, 0x2, 0x10000, @loopback, 0x3}, 0x1c)
shutdown(r0, 0x1)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104e380102030109021b00010000100009045902019b042a00090582"], 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
r3 = socket(0x10, 0x5, 0x3)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b6952cbd7000ffdbdf250a780300", @ANYRES32=r4, @ANYBLOB="9ece8a7213e77f2500000000000000000000000108000800e0030000"], 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000)
r5 = syz_open_dev$loop(0x0, 0xffffffff7ffffffd, 0x160862)
ioctl$BLKGETZONESZ(r5, 0x80041284, &(0x7f0000000040)=0xffffffff)
r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io(r6, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0})
syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0})
syz_usb_control_io(r6, 0x0, 0x0)
syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0xa003)

1.930864943s ago: executing program 6 (id=7104):
r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000c40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000c40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)

1.401740556s ago: executing program 4 (id=7105):
r0 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x3, 0xb5}, &(0x7f0000ffe000), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0xa8041, 0x0)
write$binfmt_elf64(r1, 0x0, 0xad7)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6706, 0x44505}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8}]}, 0x3c}, 0x1, 0xba01, 0x0, 0xc000}, 0x800)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020)

1.380460888s ago: executing program 1 (id=7106):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x1e2083, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x100027, "4e04e811119c24e5005ef1f1b793ab2c7b9c0000000800", <r2=>0xffffffffffffffff}) (async, rerun: 32)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", <r3=>0xffffffffffffffff}) (async, rerun: 32)
r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000005c0), 0x8240, 0x0) (async)
r5 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000002000)) (async)
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f00000020c0)={0x10}) (async)
ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000040)={"d1cdab94c0fb106a8c462d651e0ddd5f307e68000000000000fd00", r3, <r6=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000000c0)={"6a6e866ec7adac9e09fdcb1ab0ca3f417b927573e1f59bfdc080dcb8d5b25333", r2})

1.293946868s ago: executing program 4 (id=7107):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x1c}}, 0x0)
socket$kcm(0x29, 0xa, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="00000108000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

981.536026ms ago: executing program 1 (id=7108):
r0 = getpid()
sched_setaffinity(r0, 0x0, 0x0)
r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x48, {[@main=@item_012={0x0, 0x0, 0xb, "02"}, @local=@item_012={0x0, 0x2, 0x9, "a429"}]}}, 0x0}, 0x0)
r3 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[])
sched_setscheduler(r0, 0x5, &(0x7f0000000480))
r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f0000000140)={0xe4, r3, 'id0\x00'})
r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$USBDEVFS_CLEAR_HALT(r6, 0x80045515, &(0x7f00000000c0)={0x1, 0x1})
fchdir(r5)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0x4)
r7 = fsopen(&(0x7f00000002c0)='cifs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000380)='io#harset\x05\x83d,\x80?\x80V\xee\xd6\x04\x87ek\xbd5+z%\xce\xc3\x9a\x13\x93V\xb8\x03\'5\xb3B\x01=\xf4\xff4\x8b\xff\x8d\x87\xd0[\x7f\xd7\xeb?cd\xee\xf6\xe4\x1e\x8c\xb3\xaf\xcc\xb3\x1fS\xb0.\'\x95\xd7\xf3\xf0\x9ao\xc9L\fi\x04?\x95\x12!\xd7!\xdbeKs\xf7}\xd7\x7f\xc5\x85\xd5\x94%\xb5Zr\x11\x06-c\n\xef\xf36', 0x0)
r8 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
sendfile(r8, r8, 0x0, 0x1000000201005)
write$P9_RREADDIR(r8, &(0x7f0000000080)={0x7f, 0x29, 0x1, {0x5, [{{0x8, 0x0, 0x1}, 0x9, 0x16, 0x5, './bus'}, {{0x10, 0x4, 0x5}, 0x1, 0x5, 0x5, './bus'}, {{0x4, 0x3, 0x5}, 0x86c, 0x8, 0x5, './bus'}, {{0x8, 0x2, 0x4}, 0x3, 0x10, 0x5, './bus'}]}}, 0x7f)

979.254324ms ago: executing program 3 (id=7109):
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
socket$key(0xf, 0x3, 0x2) (async)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f00000000c0)={0x300, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYBLOB="020a06970300000028bd7008fcd1df250100", @ANYRES8=r0], 0x18}}, 0x40) (async)
sendmsg$key(r1, &(0x7f00000000c0)={0x300, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYBLOB="020a06970300000028bd7008fcd1df250100", @ANYRES8=r0], 0x18}}, 0x40)
socket$kcm(0x29, 0x5, 0x0) (async)
socket$kcm(0x29, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000018c0)={'team0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000018c0)={'team0\x00'})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r4 = dup(r3)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x1}, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x202) (async)
syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x202)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r7 = syz_open_dev$loop(&(0x7f00000007c0), 0x10000, 0x100)
ioctl$BLKIOOPT(r7, 0x1279, &(0x7f00000009c0))
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req={0x4, 0xccb, 0x813, 0x5}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
close(0xffffffffffffffff)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0)
write$UHID_INPUT(r4, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5d300987f70e06d038e7ff7fc6e5539b0d650e8b089b3f313b6c090890e0878f0e1ac6e7049b3b46959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})

613.285918ms ago: executing program 0 (id=7110):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="000000390000f3ff008000850000002e000020850010002a008077", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRESDEC], &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0xa4423, 0x0)
socket$kcm(0x11, 0x7, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
ftruncate(r3, 0xc17a)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x36, 0x4, &(0x7f0000000780)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect$uac1(0x3, 0x71, &(0x7f0000000280)=ANY=[], 0x0)
landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000780)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f0000000600010000000000080005002e2a9368222f0399c16140502689ec4126c7e8650e3a12d8596aa58fd7f7919fbff6fc1a8892abe5a076f050a2e040ad0b1781bd4c440ab522f03b", @ANYRES32=r5, @ANYRES16=r2, @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYRES64], 0x7c}}, 0x8000)
close(r0)
r6 = syz_usb_connect(0x7, 0xae, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100008d028e20054b3219d51f0102030109029c00010000100009048e00021a4b960009050202000202000009058202200000000307250101040700710f0b98d1af9665d08867f45c77366ab19277daddd90687a915d789935460e0c2f514fe57be86ca067880e9bbe9fb4f3313c81f0cd6333d17ea4c242dc316798260d9d16ff5ae1834bc05ad467dfa34d866e52c504f7371e938206d86856aad9bd44204112cf7bc973e0329a3d56ab89c"], 0x0)
syz_usb_control_io$rtl8150(r6, 0x0, 0x0)
syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r2, @ANYRES16=r1, @ANYRES8, @ANYRES16=r4], 0x0, 0x0, 0x0, 0x0})
r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
unshare(0x22020600)
pwrite64(r7, 0x0, 0x0, 0x239c1317)
syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000600)=ANY=[@ANYBLOB="44945fe0f08b617eb3fbf924ef7a5447ea6b79d0514e2c2baad3f6b7705fbf989332d25172fd29a28f8c6d2b81258cd2e708046eb00dea8e98ad1ecb64749b8b19a2bd596f7278b353958b9669bd4b82c7059bc0b2305059b3cbf80f0852d66e075c5cbb37c20282df63b6517d95ac6daf8f8f685988bbd9b3c69d4908785ec4a692d39c2792f78358bee09072e594b5763f60d98a12442c1e136ed59cb8479389cdb9f6952ff81874c4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r6, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r8, 0x6, 0x5, &(0x7f0000000040)=0x24, 0x4)

0s ago: executing program 3 (id=7111):
socket(0x1e, 0x4, 0x0) (async)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b80)=""/4100, 0x1004}], 0x1}}], 0x1, 0x400122a0, 0x0)
landlock_create_ruleset(&(0x7f0000000000)={0x25, 0x2, 0x1}, 0x18, 0x0) (async)
r1 = landlock_create_ruleset(&(0x7f0000000000)={0x25, 0x2, 0x1}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0) (async)
landlock_restrict_self(r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) (async)
setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x100, 0x0) (async)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x100, 0x0)
connect$unix(r3, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x0, 0x1ff, 0x1, 0x1}, 0x1c)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c)

kernel console output (not intermixed with test programs):

New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[ 2268.028707][T29843] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[ 2268.035740][  T622] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2268.060934][ T3673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6787'.
[ 2268.072696][  T622] usb 5-1: config 0 descriptor??
[ 2268.078659][ T6852] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 2268.088522][ T6852] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2268.106846][T29843] usb 4-1: Warning! Unlikely big volume range (=790), cval->res is probably wrong.
[ 2268.130781][ T6852] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 2268.165469][ T3675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6787'.
[ 2268.174873][T29843] usb 4-1: [5] FU [Mic Capture Volume] ch = 1, val = -25425/-24635/1
[ 2268.187676][T29843] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5)
[ 2268.201116][T29843] usb 4-1: 5:0: failed to get current value for ch 1 (-22)
[ 2268.218614][ T3673] 8021q: adding VLAN 0 to HW filter on device bond1
[ 2268.233565][ T6852] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2268.241397][T29843] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5)
[ 2268.268323][T29843] usb 4-1: USB disconnect, device number 37
[ 2268.308161][  T622] qcserial 5-1:0.2: Qualcomm USB modem converter detected
[ 2268.990861][ T3683] netlink: 292 bytes leftover after parsing attributes in process `syz.0.6790'.
[ 2269.026840][ T6852] usb 2-1: string descriptor 0 read error: -71
[ 2269.032503][T29843] usb 7-1: new high-speed USB device number 93 using dummy_hcd
[ 2269.042010][ T6852] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 2269.051241][  T622] usb 4-1: new full-speed USB device number 38 using dummy_hcd
[ 2269.077391][ T6852] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 2269.106076][ T6852] usb 2-1: can't set config #1, error -71
[ 2269.139932][ T6852] usb 2-1: USB disconnect, device number 54
[ 2269.212556][T29843] usb 7-1: Using ep0 maxpacket: 32
[ 2269.220972][T29843] usb 7-1: config 0 has an invalid interface number: 196 but max is 0
[ 2269.223167][ T3688] pim6reg9: entered allmulticast mode
[ 2269.230033][T29843] usb 7-1: config 0 has no interface number 0
[ 2269.241324][T29843] usb 7-1: config 0 interface 196 has no altsetting 0
[ 2269.250947][  T622] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 2269.254592][T29843] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[ 2269.275140][T29843] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2269.283799][  T622] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2269.284487][T29843] usb 7-1: Product: syz
[ 2269.298307][T29843] usb 7-1: Manufacturer: syz
[ 2269.300498][  T622] usb 4-1: Product: syz
[ 2269.307005][T29843] usb 7-1: SerialNumber: syz
[ 2269.309600][  T622] usb 4-1: Manufacturer: syz
[ 2269.317082][  T622] usb 4-1: SerialNumber: syz
[ 2269.326967][T29843] usb 7-1: config 0 descriptor??
[ 2269.327244][  T622] usb 4-1: config 0 descriptor??
[ 2269.545815][ T3679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2269.564900][  T622] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 2269.582092][ T3679] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2269.630992][T29843] ipheth 7-1:0.196: Unable to find endpoints
[ 2269.687435][T29843] usb 7-1: USB disconnect, device number 93
[ 2269.772225][  T622] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 2269.851428][  T622] usb 4-1: USB disconnect, device number 38
[ 2270.519098][ T3719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6797'.
[ 2270.531841][ T3719] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6797'.
[ 2270.589772][ T6852] usb 5-1: USB disconnect, device number 96
[ 2270.630760][ T3720] libceph: resolve '400' (ret=-3): failed
[ 2270.642482][T29843] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[ 2270.762099][ T6852] qcserial 5-1:0.2: device disconnected
[ 2270.772493][  T622] usb 7-1: new full-speed USB device number 94 using dummy_hcd
[ 2270.971886][ T3723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6797'.
[ 2271.164336][  T622] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2271.195337][T16085] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 2271.204704][T16085] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 2271.204757][  T622] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2271.237179][  T622] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 2271.247166][  T622] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2271.352459][T29843] usb 4-1: Using ep0 maxpacket: 8
[ 2271.359602][T29843] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 2271.367367][T16085] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 2271.382561][ T6852] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[ 2271.402504][T29843] usb 4-1: config 5 has an invalid interface number: 212 but max is 0
[ 2271.410737][T16085] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 2271.439593][T29843] usb 4-1: config 5 has an invalid descriptor of length 119, skipping remainder of the config
[ 2271.462584][T29843] usb 4-1: config 5 has no interface number 0
[ 2271.472766][T29843] usb 4-1: config 5 interface 212 altsetting 41 has 0 endpoint descriptors, different from the interface descriptor's value: 6
[ 2271.508453][  T622] usb 7-1: usb_control_msg returned -32
[ 2271.529479][  T622] usbtmc 7-1:16.0: can't read capabilities
[ 2271.529479][T29843] usb 4-1: config 5 interface 212 has no altsetting 0
[ 2271.572618][ T6852] usb 5-1: Using ep0 maxpacket: 16
[ 2271.581736][ T6852] usb 5-1: config 0 interface 0 has no altsetting 0
[ 2271.614124][ T6852] usb 5-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00
[ 2271.652754][ T6852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2271.673957][ T6852] usb 5-1: config 0 descriptor??
[ 2271.834822][T29843] usb 4-1: New USB device found, idVendor=0763, idProduct=2019, bcdDevice=3a.5e
[ 2271.852482][T29843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2271.873831][T29843] usb 4-1: Product: syz
[ 2271.886003][T29843] usb 4-1: Manufacturer: syz
[ 2271.895714][T29843] usb 4-1: SerialNumber: syz
[ 2272.048884][  T622] usb 7-1: USB disconnect, device number 94
[ 2272.147192][ T6852] hid-generic 0003:0DFC:0101.006B: unknown main item tag 0x0
[ 2272.186717][ T6852] hid-generic 0003:0DFC:0101.006B: unknown main item tag 0x0
[ 2272.214056][ T6852] hid-generic 0003:0DFC:0101.006B: unknown main item tag 0x0
[ 2272.231705][ T6852] hid-generic 0003:0DFC:0101.006B: unknown main item tag 0x0
[ 2272.250134][ T6852] hid-generic 0003:0DFC:0101.006B: unknown main item tag 0x0
[ 2272.266276][ T6852] hid-generic 0003:0DFC:0101.006B: unknown main item tag 0x0
[ 2272.295960][ T6852] hid-generic 0003:0DFC:0101.006B: unknown main item tag 0x0
[ 2272.312653][ T6852] hid-generic 0003:0DFC:0101.006B: unknown main item tag 0x0
[ 2272.322032][ T6852] hid-generic 0003:0DFC:0101.006B: unknown main item tag 0x0
[ 2272.339794][ T6852] hid-generic 0003:0DFC:0101.006B: unknown main item tag 0x0
[ 2272.441403][ T6852] hid-generic 0003:0DFC:0101.006B: hidraw0: USB HID v0.00 Device [HID 0dfc:0101] on usb-dummy_hcd.4-1/input0
[ 2272.502964][ T6852] usb 5-1: USB disconnect, device number 97
[ 2272.597321][ T3735] fido_id[3735]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[ 2272.742609][  T501] usb 1-1: new high-speed USB device number 114 using dummy_hcd
[ 2272.922659][  T501] usb 1-1: Using ep0 maxpacket: 8
[ 2272.960731][  T501] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 2272.980418][  T501] usb 1-1: config 0 has an invalid interface number: 88 but max is 0
[ 2272.999938][  T501] usb 1-1: config 0 has no interface number 0
[ 2273.012465][  T501] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 2273.040487][  T501] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[ 2273.067374][  T501] usb 1-1: config 0 interface 88 has no altsetting 0
[ 2273.089145][  T501] usb 1-1: language id specifier not provided by device, defaulting to English
[ 2273.110020][  T501] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[ 2273.123510][  T501] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[ 2273.133545][  T501] usb 1-1: Product: syz
[ 2273.138734][  T501] usb 1-1: SerialNumber: syz
[ 2273.157775][  T501] usb 1-1: config 0 descriptor??
[ 2273.410092][  T501] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input128
[ 2273.422505][ T6852] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[ 2273.438817][  T501] usb 1-1: USB disconnect, device number 114
[ 2273.582533][ T6852] usb 5-1: Using ep0 maxpacket: 32
[ 2273.591244][ T6852] usb 5-1: config 0 has an invalid interface number: 196 but max is 0
[ 2273.599919][ T6852] usb 5-1: config 0 has no interface number 0
[ 2273.606136][ T6852] usb 5-1: config 0 interface 196 has no altsetting 0
[ 2273.615952][ T6852] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[ 2273.635999][ T6852] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2273.644209][ T6852] usb 5-1: Product: syz
[ 2273.649663][ T6852] usb 5-1: Manufacturer: syz
[ 2273.654371][ T6852] usb 5-1: SerialNumber: syz
[ 2273.664078][ T6852] usb 5-1: config 0 descriptor??
[ 2273.887673][ T3746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2273.897100][ T3746] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2273.915322][ T6852] ipheth 5-1:0.196: Unable to find endpoints
[ 2273.946950][ T6852] usb 5-1: USB disconnect, device number 98
[ 2274.052507][T16319] usb 7-1: new high-speed USB device number 95 using dummy_hcd
[ 2274.199117][T29843] usb 4-1: USB disconnect, device number 39
[ 2274.212518][T16319] usb 7-1: Using ep0 maxpacket: 16
[ 2274.227863][T16319] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 2274.243883][ T3764] loop5: detected capacity change from 0 to 7
[ 2274.250004][T16319] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2274.261753][ T3764] Dev loop5: unable to read RDB block 7
[ 2274.273447][ T3764]  loop5: unable to read partition table
[ 2274.279330][ T3764] loop5: partition table beyond EOD, truncated
[ 2274.287653][T16319] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2274.317622][T16319] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2274.326079][ T3764] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 2274.350550][T16319] usb 7-1: Product: syz
[ 2274.370864][T16319] usb 7-1: Manufacturer: syz
[ 2274.406248][T16319] usb 7-1: SerialNumber: syz
[ 2274.454074][T16319] usb 7-1: config 0 descriptor??
[ 2274.501886][T16319] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2274.537755][T16319] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class)
[ 2274.574721][ T3769] Cannot find set identified by id 0 to match
[ 2274.761429][ T3775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6814'.
[ 2274.808800][ T3775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6814'.
[ 2274.826433][ T3776] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[ 2275.063574][ T3782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6818'.
[ 2275.084594][ T3782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6818'.
[ 2275.110523][ T3782] netlink: 'syz.4.6818': attribute type 5 has an invalid length.
[ 2275.135736][ T3786] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2275.172059][ T3755] syzkaller0: entered promiscuous mode
[ 2275.177821][ T3782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6818'.
[ 2275.186847][ T3755] syzkaller0: entered allmulticast mode
[ 2275.194175][ T3782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6818'.
[ 2275.205185][T15187] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 2275.207147][ T3782] netlink: 'syz.4.6818': attribute type 5 has an invalid length.
[ 2275.248303][T15187] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 2275.290373][T15187] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 2275.342311][T16319] em28xx 7-1:0.0: chip ID is em2860
[ 2275.361157][  T145] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 2275.670396][T16319] em28xx 7-1:0.0: Config register raw data: 0xfffffffb
[ 2275.696376][T16319] em28xx 7-1:0.0: AC97 chip type couldn't be determined
[ 2275.706494][T16319] em28xx 7-1:0.0: No AC97 audio processor
[ 2275.746494][T16319] usb 7-1: USB disconnect, device number 95
[ 2275.818016][T16319] em28xx 7-1:0.0: Disconnecting em28xx
[ 2275.879948][T16319] em28xx 7-1:0.0: Freeing device
[ 2276.512792][  T501] usb 1-1: new high-speed USB device number 115 using dummy_hcd
[ 2276.712567][  T501] usb 1-1: device descriptor read/64, error -71
[ 2276.932726][ T6852] usb 7-1: new high-speed USB device number 96 using dummy_hcd
[ 2276.980520][  T501] usb 1-1: new high-speed USB device number 116 using dummy_hcd
[ 2277.113402][ T6852] usb 7-1: Using ep0 maxpacket: 32
[ 2277.122475][  T501] usb 1-1: device descriptor read/64, error -71
[ 2277.159204][ T6852] usb 7-1: config 0 has an invalid interface number: 196 but max is 0
[ 2277.179447][ T6852] usb 7-1: config 0 has no interface number 0
[ 2277.199708][ T6852] usb 7-1: config 0 interface 196 has no altsetting 0
[ 2277.245521][ T6852] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[ 2277.261509][ T6852] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2277.263775][  T501] usb usb1-port1: attempt power cycle
[ 2277.273302][ T6852] usb 7-1: Product: syz
[ 2277.283294][ T6852] usb 7-1: Manufacturer: syz
[ 2277.290838][ T6852] usb 7-1: SerialNumber: syz
[ 2277.308291][ T6852] usb 7-1: config 0 descriptor??
[ 2277.533066][ T3816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2277.545027][T31741] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[ 2277.571568][ T3816] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2277.652574][  T501] usb 1-1: new high-speed USB device number 117 using dummy_hcd
[ 2277.695036][  T501] usb 1-1: device descriptor read/8, error -71
[ 2277.724238][T31741] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2277.745124][T31741] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2277.767632][T31741] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2277.814785][T31741] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2277.833206][T31741] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2277.854555][T31741] usb 2-1: config 0 descriptor??
[ 2277.972569][  T501] usb 1-1: new high-speed USB device number 118 using dummy_hcd
[ 2277.999408][  T501] usb 1-1: device descriptor read/8, error -71
[ 2278.081341][ T6852] ipheth 7-1:0.196: Unable to find endpoints
[ 2278.116341][  T501] usb usb1-port1: unable to enumerate USB device
[ 2278.116571][ T6852] usb 7-1: USB disconnect, device number 96
[ 2278.208426][ T3832] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[ 2278.299150][T31741] plantronics 0003:047F:FFFF.006C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[ 2278.921181][T31741] usb 2-1: USB disconnect, device number 55
[ 2279.141105][ T3854] fuse: Bad value for 'rootmode'
[ 2279.408091][ T3860] atomic_op ffff88807e440998 conn xmit_atomic 0000000000000000
[ 2279.693713][ T3869] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2279.783190][ T3864] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6834'.
[ 2279.843173][ T3868] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[ 2279.849692][ T3868] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 2279.873132][ T3868] vhci_hcd vhci_hcd.0: Device attached
[ 2280.112879][T31741] usb 35-1: new low-speed USB device number 2 using vhci_hcd
[ 2280.162559][ T6852] usb 1-1: new full-speed USB device number 119 using dummy_hcd
[ 2280.334403][ T6852] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[ 2280.334428][ T6852] usb 1-1: config 0 has an invalid interface number: 2 but max is -1
[ 2280.334442][ T6852] usb 1-1: config 0 has an invalid interface number: 2 but max is -1
[ 2280.334455][ T6852] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2280.334467][ T6852] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 2280.334481][ T6852] usb 1-1: config 0 has no interface number 0
[ 2280.334505][ T6852] usb 1-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2280.337537][ T6852] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2280.337556][ T6852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2280.337570][ T6852] usb 1-1: Product: syz
[ 2280.337580][ T6852] usb 1-1: Manufacturer: syz
[ 2280.337590][ T6852] usb 1-1: SerialNumber: syz
[ 2280.343768][ T6852] usb 1-1: config 0 descriptor??
[ 2280.383212][ T3879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2280.383551][ T3879] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2280.392533][T32473] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[ 2280.568886][T32473] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 2280.568907][T32473] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2280.568922][T32473] usb 2-1: Product: syz
[ 2280.568933][T32473] usb 2-1: Manufacturer: syz
[ 2280.568943][T32473] usb 2-1: SerialNumber: syz
[ 2280.626387][ T6852] usb 1-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[ 2280.626424][ T6852] usb 1-1: MIDIStreaming interface descriptor not found
[ 2280.648477][T16319] usb 7-1: new high-speed USB device number 97 using dummy_hcd
[ 2280.652928][ T6852] usb 1-1: USB disconnect, device number 119
[ 2280.789158][ T3868] gretap0: entered promiscuous mode
[ 2280.792493][T16319] usb 7-1: device descriptor read/64, error -71
[ 2280.802573][ T3868] vlan2: entered promiscuous mode
[ 2280.845461][  T974] udevd[974]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2280.967617][T32473] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[ 2280.983698][T32473] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[ 2280.992023][ T3874] vhci_hcd: connection reset by peer
[ 2281.019550][ T8057] vhci_hcd vhci_hcd.1: stop threads
[ 2281.032445][ T8057] vhci_hcd vhci_hcd.1: release socket
[ 2281.035122][T32473] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 2281.047051][T16319] usb 7-1: new high-speed USB device number 98 using dummy_hcd
[ 2281.090837][ T8057] vhci_hcd vhci_hcd.1: disconnect device
[ 2281.141453][T32473] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[ 2281.182511][T16319] usb 7-1: device descriptor read/64, error -71
[ 2281.232070][T32473] usb 2-1: USB disconnect, device number 56
[ 2281.303694][T16319] usb usb7-port1: attempt power cycle
[ 2281.636333][   T30] kauditd_printk_skb: 20 callbacks suppressed
[ 2281.636349][   T30] audit: type=1326 audit(1765418919.175:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3884 comm="syz.3.6838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04078f749 code=0x7ffc0000
[ 2281.687107][T16319] usb 7-1: new high-speed USB device number 99 using dummy_hcd
[ 2281.698874][   T30] audit: type=1326 audit(1765418919.215:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3884 comm="syz.3.6838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04078f749 code=0x7ffc0000
[ 2281.722570][T32473] usb 1-1: new high-speed USB device number 120 using dummy_hcd
[ 2281.741187][T16319] usb 7-1: device descriptor read/8, error -71
[ 2281.751668][   T30] audit: type=1326 audit(1765418919.215:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3884 comm="syz.3.6838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd04078f34b code=0x7ffc0000
[ 2281.777101][   T30] audit: type=1326 audit(1765418919.215:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3884 comm="syz.3.6838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd04078f34b code=0x7ffc0000
[ 2281.803372][   T30] audit: type=1326 audit(1765418919.215:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3884 comm="syz.3.6838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd04078f34b code=0x7ffc0000
[ 2281.828889][   T30] audit: type=1326 audit(1765418919.215:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3884 comm="syz.3.6838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd04078f34b code=0x7ffc0000
[ 2281.861528][   T30] audit: type=1326 audit(1765418919.215:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3884 comm="syz.3.6838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd04078f34b code=0x7ffc0000
[ 2281.902488][T32473] usb 1-1: Using ep0 maxpacket: 32
[ 2281.909284][T32473] usb 1-1: config 0 has an invalid interface number: 196 but max is 0
[ 2281.922169][T32473] usb 1-1: config 0 has no interface number 0
[ 2281.935459][T32473] usb 1-1: config 0 interface 196 has no altsetting 0
[ 2281.950964][T32473] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[ 2281.979054][T32473] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2281.987220][T16319] usb 7-1: new high-speed USB device number 100 using dummy_hcd
[ 2282.005233][   T30] audit: type=1326 audit(1765418919.215:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3884 comm="syz.3.6838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd04078f34b code=0x7ffc0000
[ 2282.028110][T16319] usb 7-1: device descriptor read/8, error -71
[ 2282.038402][T32473] usb 1-1: Product: syz
[ 2282.042973][T32473] usb 1-1: Manufacturer: syz
[ 2282.047667][T32473] usb 1-1: SerialNumber: syz
[ 2282.054398][   T30] audit: type=1326 audit(1765418919.215:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3884 comm="syz.3.6838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd04078f34b code=0x7ffc0000
[ 2282.078204][T32473] usb 1-1: config 0 descriptor??
[ 2282.096578][   T30] audit: type=1326 audit(1765418919.215:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3884 comm="syz.3.6838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd04078f34b code=0x7ffc0000
[ 2282.143834][T16319] usb usb7-port1: unable to enumerate USB device
[ 2282.301311][ T3887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2282.323657][ T3887] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2282.372153][T32473] ipheth 1-1:0.196: Unable to find endpoints
[ 2282.401720][T32473] usb 1-1: USB disconnect, device number 120
[ 2283.028584][ T3911] CIFS: VFS: Malformed UNC in devname
[ 2283.042161][ T3911] CIFS: VFS: Malformed UNC in devname
[ 2283.055025][ T3911] CIFS: VFS: Malformed UNC in devname
[ 2283.068277][ T3911] CIFS: VFS: Malformed UNC in devname
[ 2283.077470][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 2283.085824][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 2283.098461][ T3911] CIFS: VFS: Malformed UNC in devname
[ 2283.107455][ T3911] CIFS: VFS: Malformed UNC in devname
[ 2283.113302][ T3911] CIFS: VFS: Malformed UNC in devname
[ 2283.118832][ T3911] CIFS: VFS: Malformed UNC in devname
[ 2283.124439][ T3911] CIFS: VFS: Malformed UNC in devname
[ 2283.130077][ T3911] CIFS: VFS: Malformed UNC in devname
[ 2283.262721][   T10] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[ 2283.426445][   T10] usb 5-1: Using ep0 maxpacket: 8
[ 2283.441320][   T10] usb 5-1: config 0 has an invalid interface number: 39 but max is 0
[ 2283.466400][   T10] usb 5-1: config 0 has no interface number 0
[ 2283.476840][   T10] usb 5-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=30.27
[ 2283.488371][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2283.496908][   T10] usb 5-1: Product: syz
[ 2283.501226][   T10] usb 5-1: Manufacturer: syz
[ 2283.506640][   T10] usb 5-1: SerialNumber: syz
[ 2283.521147][   T10] usb 5-1: config 0 descriptor??
[ 2283.542799][   T10] gspca_main: dtcs033-2.14.0 probing 0547:7303
[ 2283.770098][ T3912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2283.782348][ T3912] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2283.821178][ T3912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2283.870918][ T3912] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2283.897888][ T3912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2283.915948][ T3933] geneve2: entered allmulticast mode
[ 2283.937870][ T3912] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2283.970571][ T3912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2284.027819][ T3912] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2284.068901][ T3912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2284.135796][ T3912] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2284.236180][T32473] usb 5-1: USB disconnect, device number 99
[ 2285.222953][T31741] vhci_hcd vhci_hcd.1: vhci_device speed not set
[ 2285.289067][ T3947] netlink: 'syz.6.6851': attribute type 29 has an invalid length.
[ 2285.315928][ T3947] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6851'.
[ 2285.373098][ T3955] fuse: Bad value for 'rootmode'
[ 2285.624422][T32473] usb 1-1: new high-speed USB device number 121 using dummy_hcd
[ 2285.842479][T32473] usb 1-1: Using ep0 maxpacket: 32
[ 2285.858165][T32473] usb 1-1: config 0 has an invalid interface number: 196 but max is 0
[ 2285.870688][T32473] usb 1-1: config 0 has no interface number 0
[ 2285.986776][T32473] usb 1-1: config 0 interface 196 has no altsetting 0
[ 2286.010728][T32473] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[ 2286.042531][T32473] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2286.072450][T32473] usb 1-1: Product: syz
[ 2286.123069][T32473] usb 1-1: Manufacturer: syz
[ 2286.127683][T32473] usb 1-1: SerialNumber: syz
[ 2286.238720][T32473] usb 1-1: config 0 descriptor??
[ 2286.507061][ T3954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2286.532590][ T3954] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2286.599567][T32473] ipheth 1-1:0.196: Unable to find endpoints
[ 2286.619304][T32473] usb 1-1: USB disconnect, device number 121
[ 2287.552695][T31741] usb 5-1: new high-speed USB device number 100 using dummy_hcd
[ 2287.558865][ T3986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6860'.
[ 2287.732554][T31741] usb 5-1: device descriptor read/64, error -71
[ 2287.992532][T31741] usb 5-1: new high-speed USB device number 101 using dummy_hcd
[ 2288.142544][T31741] usb 5-1: device descriptor read/64, error -71
[ 2288.209415][ T3995] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[ 2288.242866][T29843] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[ 2288.274883][T31741] usb usb5-port1: attempt power cycle
[ 2288.412634][T29843] usb 4-1: Using ep0 maxpacket: 32
[ 2288.428190][T29843] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[ 2288.438577][T29843] usb 4-1: config 0 has no interface number 0
[ 2288.448718][T29843] usb 4-1: config 0 interface 184 has no altsetting 0
[ 2288.465643][T29843] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 2288.487411][T29843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2288.500477][T29843] usb 4-1: Product: syz
[ 2288.514510][T29843] usb 4-1: Manufacturer: syz
[ 2288.525696][T29843] usb 4-1: SerialNumber: syz
[ 2288.545904][T29843] usb 4-1: config 0 descriptor??
[ 2288.565609][T29843] smsc75xx v1.0.0
[ 2288.622551][T31741] usb 5-1: new high-speed USB device number 102 using dummy_hcd
[ 2288.663572][T31741] usb 5-1: device descriptor read/8, error -71
[ 2288.912604][T31741] usb 5-1: new high-speed USB device number 103 using dummy_hcd
[ 2288.942965][T31741] usb 5-1: device descriptor read/8, error -71
[ 2289.063772][T31741] usb usb5-port1: unable to enumerate USB device
[ 2289.163131][T29843] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[ 2289.192559][T29843] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 2289.436940][T29843] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 2289.470847][T29843] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[ 2289.511785][T29843] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[ 2289.555351][T29843] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[ 2289.593899][T29843] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71
[ 2289.646433][T29843] usb 4-1: USB disconnect, device number 40
[ 2290.362546][T29843] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[ 2290.513782][ T4029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6870'.
[ 2290.524153][ T4027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6870'.
[ 2290.532524][T29843] usb 4-1: Using ep0 maxpacket: 32
[ 2290.606149][T29843] usb 4-1: config 0 has an invalid interface number: 196 but max is 0
[ 2290.723775][T29843] usb 4-1: config 0 has no interface number 0
[ 2291.023523][T29843] usb 4-1: config 0 interface 196 has no altsetting 0
[ 2291.118306][ T4035] netlink: 'syz.4.6872': attribute type 3 has an invalid length.
[ 2291.202496][T29843] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[ 2291.225375][T29843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2291.264031][T29843] usb 4-1: Product: syz
[ 2291.272849][T29843] usb 4-1: Manufacturer: syz
[ 2291.315455][T29843] usb 4-1: SerialNumber: syz
[ 2291.345387][T29843] usb 4-1: config 0 descriptor??
[ 2291.422483][T31741] usb 5-1: new high-speed USB device number 104 using dummy_hcd
[ 2291.638345][T31741] usb 5-1: Using ep0 maxpacket: 16
[ 2291.653465][ T4022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2291.678431][T31741] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 2291.698419][ T4022] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2291.715704][T31741] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2291.759550][T31741] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2291.787066][T31741] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2291.806308][T29843] ipheth 4-1:0.196: Unable to find endpoints
[ 2291.826578][T31741] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2291.850108][T29843] usb 4-1: USB disconnect, device number 41
[ 2291.867396][T31741] usb 5-1: Product: syz
[ 2291.887221][T31741] usb 5-1: Manufacturer: syz
[ 2291.915823][T31741] usb 5-1: SerialNumber: syz
[ 2292.057532][ T4049] fuse: Unknown parameter 'roqtmode'
[ 2292.338961][T31741] usb 5-1: 0:2 : does not exist
[ 2292.513038][T16571] usb 7-1: new full-speed USB device number 101 using dummy_hcd
[ 2292.663264][T16571] usb 7-1: device descriptor read/64, error -71
[ 2292.690207][ T4060] syzkaller0: entered promiscuous mode
[ 2292.699957][ T4060] syzkaller0: entered allmulticast mode
[ 2292.712470][T29843] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[ 2292.852214][ T4062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6879'.
[ 2292.896526][T29843] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[ 2292.921973][T29843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2292.930811][T16571] usb 7-1: new full-speed USB device number 102 using dummy_hcd
[ 2292.966600][T29843] usb 2-1: Product: syz
[ 2292.978908][T29843] usb 2-1: Manufacturer: syz
[ 2292.992431][T29843] usb 2-1: SerialNumber: syz
[ 2293.009894][T29843] usb 2-1: config 0 descriptor??
[ 2293.037761][T29843] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[ 2293.061862][T29843] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 2293.084805][T29843] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[ 2293.095873][T16571] usb 7-1: device descriptor read/64, error -71
[ 2293.117437][T29843] usb 2-1: media controller created
[ 2293.153879][T16319] usb 5-1: USB disconnect, device number 104
[ 2293.183200][T29843] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2293.242450][T32473] usb 1-1: new high-speed USB device number 122 using dummy_hcd
[ 2293.243023][T16571] usb usb7-port1: attempt power cycle
[ 2293.329751][T29843] DVB: Unable to find symbol mt352_attach()
[ 2293.439394][T32473] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[ 2293.450733][T29843] DVB: Unable to find symbol nxt6000_attach()
[ 2293.461039][T32473] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2293.472258][T29843] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[ 2293.489607][T32473] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2293.506560][T29843] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input129
[ 2293.509343][T32473] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 2293.527531][T32473] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 2293.529348][T29843] dvb-usb: schedule remote query interval to 1000 msecs.
[ 2293.536098][T32473] usb 1-1: Manufacturer: syz
[ 2293.546499][T29843] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[ 2293.558713][T32473] usb 1-1: config 0 descriptor??
[ 2293.559872][T29843] dvb-usb: bulk message failed: -22 (7/0)
[ 2293.569560][T29843] dvb-usb: bulk message failed: -22 (7/0)
[ 2293.570152][T32473] igorplugusb 1-1:0.0: incorrect number of endpoints
[ 2293.591314][T29843] usb 2-1: USB disconnect, device number 57
[ 2293.652808][T16571] usb 7-1: new full-speed USB device number 103 using dummy_hcd
[ 2293.689745][T16571] usb 7-1: device descriptor read/8, error -71
[ 2293.728657][T29843] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[ 2293.753359][ T4074] fuse: Bad value for 'rootmode'
[ 2293.791460][T32473] usb 1-1: USB disconnect, device number 122
[ 2293.932553][T16571] usb 7-1: new full-speed USB device number 104 using dummy_hcd
[ 2293.987502][T16571] usb 7-1: device descriptor read/8, error -71
[ 2294.072551][T31741] usb 5-1: new high-speed USB device number 105 using dummy_hcd
[ 2294.145815][T16571] usb usb7-port1: unable to enumerate USB device
[ 2294.243984][T31741] usb 5-1: Using ep0 maxpacket: 8
[ 2294.256613][T31741] usb 5-1: config 0 has an invalid interface number: 113 but max is 0
[ 2294.270933][T31741] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2294.281446][T31741] usb 5-1: config 0 has no interface number 0
[ 2294.292167][T31741] usb 5-1: config 0 interface 113 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 2294.302447][T31741] usb 5-1: config 0 interface 113 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 7
[ 2294.398407][T31741] usb 5-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a
[ 2294.408009][T31741] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2294.422679][T31741] usb 5-1: Product: syz
[ 2294.433707][T31741] usb 5-1: Manufacturer: syz
[ 2294.440730][T31741] usb 5-1: SerialNumber: syz
[ 2294.456358][T31741] usb 5-1: config 0 descriptor??
[ 2294.472717][ T4089] mac80211_hwsim hwsim70 è: renamed from wlan1 (while UP)
[ 2294.483095][ T4087] loop9: detected capacity change from 0 to 7
[ 2294.494399][T31741] ttusb_dec_send_command: command bulk message failed: error -8
[ 2294.516565][ T4087] Dev loop9: unable to read RDB block 7
[ 2294.526566][T31741] ttusb-dec 5-1:0.113: probe with driver ttusb-dec failed with error -8
[ 2294.535396][ T4087]  loop9: AHDI p3 p4
[ 2294.539335][ T4087] loop9: partition table partially beyond EOD, truncated
[ 2294.547440][T31741] usbhid 5-1:0.113: couldn't find an input interrupt endpoint
[ 2294.557584][ T4087] loop9: p3 size 4227858431 extends beyond EOD, truncated
[ 2294.604115][   T30] kauditd_printk_skb: 28 callbacks suppressed
[ 2294.604134][   T30] audit: type=1400 audit(1765418932.115:2570): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D28 pid=4086 comm="syz.1.6886"
[ 2294.736068][  T977] udevd[977]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory
[ 2294.757466][ T4076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2294.797511][ T4076] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2294.839427][T32473] usb 5-1: USB disconnect, device number 105
[ 2295.105587][T16319] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[ 2295.150179][ T4093] netlink: 'syz.0.6887': attribute type 29 has an invalid length.
[ 2295.166509][ T4093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6887'.
[ 2295.292594][T16319] usb 2-1: Using ep0 maxpacket: 32
[ 2295.348338][T16319] usb 2-1: config 0 has an invalid interface number: 196 but max is 0
[ 2295.356783][T16319] usb 2-1: config 0 has no interface number 0
[ 2295.378200][T16319] usb 2-1: config 0 interface 196 has no altsetting 0
[ 2295.494156][T16319] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[ 2295.608781][T16319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2295.700225][T16319] usb 2-1: Product: syz
[ 2295.711883][T16319] usb 2-1: Manufacturer: syz
[ 2295.727882][T16319] usb 2-1: SerialNumber: syz
[ 2295.756566][T16319] usb 2-1: config 0 descriptor??
[ 2295.832536][T31741] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[ 2295.902501][  T622] usb 7-1: new high-speed USB device number 105 using dummy_hcd
[ 2295.984340][ T4095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2296.012495][T31741] usb 5-1: device descriptor read/64, error -71
[ 2296.019307][ T4095] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2296.052648][  T622] usb 7-1: Using ep0 maxpacket: 32
[ 2296.061383][  T622] usb 7-1: config 0 has an invalid interface number: 215 but max is 0
[ 2296.076777][  T622] usb 7-1: config 0 has no interface number 0
[ 2296.097447][  T622] usb 7-1: New USB device found, idVendor=1608, idProduct=0301, bcdDevice=f1.24
[ 2296.119100][  T622] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2296.137434][  T622] usb 7-1: Product: syz
[ 2296.141713][  T622] usb 7-1: Manufacturer: syz
[ 2296.147457][  T622] usb 7-1: SerialNumber: syz
[ 2296.158975][T16319] ipheth 2-1:0.196: Unable to find endpoints
[ 2296.170849][T16319] usb 2-1: USB disconnect, device number 58
[ 2296.181575][  T622] usb 7-1: config 0 descriptor??
[ 2296.200068][  T622] io_ti 7-1:0.215: required endpoints missing
[ 2296.276510][T31741] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[ 2296.402305][T16319] usb 7-1: USB disconnect, device number 105
[ 2296.432837][T31741] usb 5-1: device descriptor read/64, error -71
[ 2296.552950][T31741] usb usb5-port1: attempt power cycle
[ 2296.592517][  T622] usb 1-1: new high-speed USB device number 123 using dummy_hcd
[ 2296.762212][ T4115] input: syz1 as /devices/virtual/input/input130
[ 2296.772694][  T622] usb 1-1: Using ep0 maxpacket: 32
[ 2296.783435][  T622] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2296.808545][  T622] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 2296.832613][  T622] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 2296.855821][  T622] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 2296.865312][  T622] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2296.885435][  T622] usb 1-1: config 0 descriptor??
[ 2296.891131][ T4113] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 2296.909087][  T622] hub 1-1:0.0: USB hub found
[ 2296.923009][T31741] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[ 2296.966550][T31741] usb 5-1: device descriptor read/8, error -71
[ 2296.994210][T29843] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[ 2297.165019][T29843] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[ 2297.190220][T29843] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2297.222550][T31741] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[ 2297.251729][T29843] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2297.283103][T31741] usb 5-1: device descriptor read/8, error -71
[ 2297.300480][T29843] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 2297.350502][T29843] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 2297.370751][T29843] usb 2-1: Manufacturer: syz
[ 2297.394581][T29843] usb 2-1: config 0 descriptor??
[ 2297.410006][T31741] usb usb5-port1: unable to enumerate USB device
[ 2297.427752][T29843] igorplugusb 2-1:0.0: incorrect number of endpoints
[ 2297.454006][  T622] hub 1-1:0.0: config failed, can't read hub descriptor (err -22)
[ 2297.501314][  T622] usbhid 1-1:0.0: can't add hid device: -71
[ 2297.517309][  T622] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 2297.584439][  T622] usb 1-1: USB disconnect, device number 123
[ 2297.646783][T16319] usb 2-1: USB disconnect, device number 59
[ 2297.816687][ T4143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2297.838458][ T4143] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2297.888839][ T4134] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6900'.
[ 2297.932458][ T4134] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6900'.
[ 2298.075350][  T622] usb 1-1: new high-speed USB device number 124 using dummy_hcd
[ 2298.812950][T16319] usb 7-1: new high-speed USB device number 106 using dummy_hcd
[ 2298.913046][ T4166] loop7: detected capacity change from 16384 to 0
[ 2298.919597][    C1] blk_print_req_error: 5 callbacks suppressed
[ 2298.919614][    C1] I/O error, dev loop7, sector 4096 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2
[ 2298.992629][T16319] usb 7-1: Using ep0 maxpacket: 8
[ 2299.014186][T16319] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 2299.053754][T16319] usb 7-1: config 4 has an invalid interface number: 239 but max is 0
[ 2299.083720][T16319] usb 7-1: config 4 has no interface number 0
[ 2299.089842][T16319] usb 7-1: config 4 interface 239 has no altsetting 0
[ 2299.132809][T16319] usb 7-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.04
[ 2299.150425][T16319] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2299.199463][T16319] usb 7-1: Product: syz
[ 2299.211738][T16319] usb 7-1: Manufacturer: syz
[ 2299.236577][T16319] usb 7-1: SerialNumber: syz
[ 2299.647809][T16319] go7007 7-1:4.239: probe with driver go7007 failed with error -12
[ 2299.721792][T16319] usb 7-1: USB disconnect, device number 106
[ 2299.896874][ T4194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6919'.
[ 2299.905930][ T4194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6919'.
[ 2300.045464][T29843] usb 5-1: new full-speed USB device number 110 using dummy_hcd
[ 2300.274340][T29843] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 2300.313899][T29843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2300.389260][T29843] usb 5-1: config 0 descriptor??
[ 2300.427057][T29843] cp210x 5-1:0.0: cp210x converter detected
[ 2300.440301][ T4203] loop5: detected capacity change from 0 to 7
[ 2300.464528][  T977] Dev loop5: unable to read RDB block 7
[ 2300.486341][  T977]  loop5: unable to read partition table
[ 2300.505919][  T977] loop5: partition table beyond EOD, truncated
[ 2300.534286][ T4203] Dev loop5: unable to read RDB block 7
[ 2300.555070][ T4203]  loop5: unable to read partition table
[ 2300.577607][ T4203] loop5: partition table beyond EOD, truncated
[ 2300.607373][ T4203] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 2300.642014][ T4186] syzkaller1: entered promiscuous mode
[ 2300.682718][ T4186] syzkaller1: entered allmulticast mode
[ 2300.936009][ T4211] netlink: 'syz.6.6924': attribute type 29 has an invalid length.
[ 2300.955135][T29843] usb 5-1: cp210x converter now attached to ttyUSB0
[ 2300.975034][ T4211] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6924'.
[ 2301.122887][T16319] usb 1-1: new high-speed USB device number 125 using dummy_hcd
[ 2301.150898][ T4212] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6924'.
[ 2301.272301][ T4214] FAULT_INJECTION: forcing a failure.
[ 2301.272301][ T4214] name failslab, interval 1, probability 0, space 0, times 0
[ 2301.294020][T16319] usb 1-1: Using ep0 maxpacket: 16
[ 2301.296244][ T4214] CPU: 0 UID: 0 PID: 4214 Comm: syz.3.6926 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2301.296274][ T4214] Tainted: [L]=SOFTLOCKUP
[ 2301.296285][ T4214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2301.296298][ T4214] Call Trace:
[ 2301.296308][ T4214]  <TASK>
[ 2301.296318][ T4214]  dump_stack_lvl+0x189/0x250
[ 2301.296350][ T4214]  ? __pfx____ratelimit+0x10/0x10
[ 2301.296399][ T4214]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2301.296426][ T4214]  ? __pfx__printk+0x10/0x10
[ 2301.296484][ T4214]  ? __pfx___might_resched+0x10/0x10
[ 2301.296525][ T4214]  ? fs_reclaim_acquire+0x7d/0x100
[ 2301.296554][ T4214]  should_fail_ex+0x414/0x560
[ 2301.296591][ T4214]  should_failslab+0xa8/0x100
[ 2301.296620][ T4214]  __kmalloc_noprof+0xdf/0x800
[ 2301.296643][ T4214]  ? tomoyo_encode+0x28b/0x550
[ 2301.296676][ T4214]  tomoyo_encode+0x28b/0x550
[ 2301.296707][ T4214]  tomoyo_realpath_from_path+0x58d/0x5d0
[ 2301.296755][ T4214]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 2301.296788][ T4214]  tomoyo_path_number_perm+0x1e8/0x5a0
[ 2301.296824][ T4214]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 2301.296873][ T4214]  ? __mutex_unlock_slowpath+0x1a1/0x730
[ 2301.296925][ T4214]  ? __fget_files+0x2a/0x420
[ 2301.296957][ T4214]  ? __fget_files+0x3a0/0x420
[ 2301.296983][ T4214]  ? __fget_files+0x2a/0x420
[ 2301.297016][ T4214]  security_file_ioctl+0xcb/0x2d0
[ 2301.297050][ T4214]  __se_sys_ioctl+0x47/0x170
[ 2301.297073][ T4214]  do_syscall_64+0xfa/0xf80
[ 2301.297107][ T4214]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2301.297127][ T4214]  ? clear_bhb_loop+0x60/0xb0
[ 2301.297152][ T4214]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2301.297173][ T4214] RIP: 0033:0x7fd04078f749
[ 2301.297193][ T4214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2301.297211][ T4214] RSP: 002b:00007fd0415f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2301.297234][ T4214] RAX: ffffffffffffffda RBX: 00007fd0409e5fa0 RCX: 00007fd04078f749
[ 2301.297250][ T4214] RDX: 0000200000000280 RSI: 00000000c0045009 RDI: 0000000000000003
[ 2301.297265][ T4214] RBP: 00007fd0415f7090 R08: 0000000000000000 R09: 0000000000000000
[ 2301.297277][ T4214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2301.297292][ T4214] R13: 00007fd0409e6038 R14: 00007fd0409e5fa0 R15: 00007fd040b0fa28
[ 2301.297327][ T4214]  </TASK>
[ 2301.297410][ T4214] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2301.647661][T16319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2301.678913][T16319] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2301.726760][T16319] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 2301.792729][T16319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2301.842626][T16319] usb 1-1: config 0 descriptor??
[ 2301.860020][T16571] usb 5-1: USB disconnect, device number 110
[ 2301.908326][T16571] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 2301.965243][T16571] cp210x 5-1:0.0: device disconnected
[ 2302.201589][ T4228] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6929'.
[ 2302.422427][ T4228] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6929'.
[ 2302.536872][ T4233] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6932'.
[ 2303.207736][ T4249] loop5: detected capacity change from 0 to 7
[ 2303.363265][ T4249] Dev loop5: unable to read RDB block 7
[ 2303.377497][ T4249]  loop5: unable to read partition table
[ 2303.390470][ T4249] loop5: partition table beyond EOD, truncated
[ 2303.405669][ T4249] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 2305.174130][ T4259] FAULT_INJECTION: forcing a failure.
[ 2305.174130][ T4259] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2305.212500][ T4259] CPU: 0 UID: 0 PID: 4259 Comm: syz.6.6937 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2305.212527][ T4259] Tainted: [L]=SOFTLOCKUP
[ 2305.212534][ T4259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2305.212545][ T4259] Call Trace:
[ 2305.212553][ T4259]  <TASK>
[ 2305.212562][ T4259]  dump_stack_lvl+0x189/0x250
[ 2305.212592][ T4259]  ? __pfx____ratelimit+0x10/0x10
[ 2305.212619][ T4259]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2305.212642][ T4259]  ? __pfx__printk+0x10/0x10
[ 2305.212680][ T4259]  should_fail_ex+0x414/0x560
[ 2305.212711][ T4259]  _copy_to_user+0x31/0xb0
[ 2305.212734][ T4259]  simple_read_from_buffer+0xe1/0x170
[ 2305.212762][ T4259]  proc_fail_nth_read+0x1b3/0x220
[ 2305.212785][ T4259]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2305.212808][ T4259]  ? rw_verify_area+0x2a6/0x4d0
[ 2305.212824][ T4259]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2305.212862][ T4259]  vfs_read+0x200/0xa30
[ 2305.212880][ T4259]  ? fdget_pos+0x247/0x320
[ 2305.212910][ T4259]  ? __pfx___mutex_lock+0x10/0x10
[ 2305.212928][ T4259]  ? __pfx_vfs_read+0x10/0x10
[ 2305.212949][ T4259]  ? __fget_files+0x2a/0x420
[ 2305.212978][ T4259]  ? __fget_files+0x3a0/0x420
[ 2305.213003][ T4259]  ? __fget_files+0x2a/0x420
[ 2305.213037][ T4259]  ksys_read+0x145/0x250
[ 2305.213059][ T4259]  ? __pfx_ksys_read+0x10/0x10
[ 2305.213082][ T4259]  ? do_syscall_64+0xbe/0xf80
[ 2305.213116][ T4259]  do_syscall_64+0xfa/0xf80
[ 2305.213146][ T4259]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2305.213167][ T4259]  ? clear_bhb_loop+0x60/0xb0
[ 2305.213191][ T4259]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2305.213210][ T4259] RIP: 0033:0x7f9d0698e15c
[ 2305.213228][ T4259] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 2305.213246][ T4259] RSP: 002b:00007f9d07907030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2305.213267][ T4259] RAX: ffffffffffffffda RBX: 00007f9d06be5fa0 RCX: 00007f9d0698e15c
[ 2305.213282][ T4259] RDX: 000000000000000f RSI: 00007f9d079070a0 RDI: 0000000000000004
[ 2305.213295][ T4259] RBP: 00007f9d07907090 R08: 0000000000000000 R09: 0000000000000000
[ 2305.213308][ T4259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2305.213320][ T4259] R13: 00007f9d06be6038 R14: 00007f9d06be5fa0 R15: 00007f9d06d0fa28
[ 2305.213352][ T4259]  </TASK>
[ 2305.613614][T16319] usbhid 1-1:0.0: can't add hid device: -71
[ 2305.636325][T16319] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 2305.684869][T16319] usb 1-1: USB disconnect, device number 125
[ 2306.062157][ T4279] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6942'.
[ 2306.248986][ T4284] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 2306.255624][ T4284] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[ 2306.257178][ T4289] fuse: Unknown parameter 'user_id00000000000000000000'
[ 2306.345776][ T4284] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 2306.351942][ T4284] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[ 2306.784246][ T4284] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2306.825469][ T4284] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[ 2307.634977][ T4305] input: syz0 as /devices/virtual/input/input131
[ 2307.897867][ T4311] fuse: Bad value for 'rootmode'
[ 2308.225026][ T4284] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 2308.231090][ T4284] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[ 2308.766812][ T4316] fuse: Bad value for 'fd'
[ 2309.036241][ T4321] fuse: Bad value for 'rootmode'
[ 2309.918438][ T4328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2309.955765][ T4328] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2309.968877][ T4328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2309.979926][ T4328] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2310.153233][T32473] usb 2-1: new low-speed USB device number 60 using dummy_hcd
[ 2310.252498][ T2714] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[ 2310.273904][ T1277] Bluetooth: hci0: command 0x0c1a tx timeout
[ 2310.435446][ T2714] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[ 2310.444726][ T2714] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2310.534657][ T2714] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2310.573440][ T2714] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 2310.604284][ T2714] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 2310.633671][ T2714] usb 4-1: Manufacturer: syz
[ 2310.653613][ T2714] usb 4-1: config 0 descriptor??
[ 2310.682353][ T2714] igorplugusb 4-1:0.0: incorrect number of endpoints
[ 2310.692844][ T4343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6959'.
[ 2310.742078][ T4343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6959'.
[ 2310.895167][T31741] usb 4-1: USB disconnect, device number 42
[ 2311.340907][ T4362] fuse: Bad value for 'rootmode'
[ 2311.553907][ T4284] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2311.560057][ T4284] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[ 2312.013034][T16319] usb 5-1: new high-speed USB device number 111 using dummy_hcd
[ 2312.082512][T32473] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[ 2312.185151][T16319] usb 5-1: device descriptor read/64, error -71
[ 2312.323907][T32473] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2312.362474][T32473] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2312.394269][T32473] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 2312.407628][T32473] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2312.416459][T32473] usb 4-1: SerialNumber: syz
[ 2312.443613][T16319] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[ 2312.654278][T16319] usb 5-1: device descriptor read/64, error -71
[ 2312.672745][T32473] usb 4-1: 0:2 : does not exist
[ 2312.684353][T32473] usb 4-1: unit 5 not found!
[ 2312.716483][T32473] usb 4-1: USB disconnect, device number 43
[ 2312.794282][T16319] usb usb5-port1: attempt power cycle
[ 2313.132471][T16319] usb 5-1: new high-speed USB device number 113 using dummy_hcd
[ 2313.132527][T16571] usb 1-1: new high-speed USB device number 126 using dummy_hcd
[ 2313.174970][T16319] usb 5-1: device descriptor read/8, error -71
[ 2313.332787][T16571] usb 1-1: Using ep0 maxpacket: 32
[ 2313.341176][T16571] usb 1-1: config 0 has an invalid interface number: 196 but max is 0
[ 2313.359916][T16571] usb 1-1: config 0 has no interface number 0
[ 2313.383021][T16571] usb 1-1: config 0 interface 196 has no altsetting 0
[ 2313.400785][T16571] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[ 2313.422085][T16571] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2313.434852][T16571] usb 1-1: Product: syz
[ 2313.439545][T16571] usb 1-1: Manufacturer: syz
[ 2313.439655][T16319] usb 5-1: new high-speed USB device number 114 using dummy_hcd
[ 2313.452481][T16571] usb 1-1: SerialNumber: syz
[ 2313.459092][ T4393] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2313.468235][T16571] usb 1-1: config 0 descriptor??
[ 2313.483672][T16319] usb 5-1: device descriptor read/8, error -71
[ 2313.612815][T16319] usb usb5-port1: unable to enumerate USB device
[ 2313.707961][ T4383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2313.720663][ T4383] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2313.732522][  T501] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[ 2313.756419][T16571] ipheth 1-1:0.196: Unable to find endpoints
[ 2313.785192][T16571] usb 1-1: USB disconnect, device number 126
[ 2313.924014][  T501] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[ 2313.942630][  T501] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2313.973479][  T501] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2314.007854][  T501] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 2314.022847][  T501] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 2314.030947][  T501] usb 2-1: Manufacturer: syz
[ 2314.038332][  T501] usb 2-1: config 0 descriptor??
[ 2314.051712][  T501] igorplugusb 2-1:0.0: incorrect number of endpoints
[ 2314.251494][T16571] usb 2-1: USB disconnect, device number 61
[ 2314.604621][ T4413] fuse: Bad value for 'rootmode'
[ 2315.010340][   T30] audit: type=1326 audit(1765418952.545:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4421 comm="syz.1.6982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a8d8f749 code=0x7ffc0000
[ 2315.040104][ T4419] 8021q: adding VLAN 0 to HW filter on device batadv1
[ 2315.124367][ T4419] team0: Port device batadv1 added
[ 2315.156246][   T30] audit: type=1326 audit(1765418952.555:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4421 comm="syz.1.6982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a8d8f749 code=0x7ffc0000
[ 2315.251389][   T30] audit: type=1326 audit(1765418952.625:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4421 comm="syz.1.6982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f67a8d8f749 code=0x7ffc0000
[ 2315.357882][  T501] usb 5-1: new high-speed USB device number 115 using dummy_hcd
[ 2315.397720][ T4418] hub 9-0:1.0: USB hub found
[ 2315.432517][   T30] audit: type=1326 audit(1765418952.625:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4421 comm="syz.1.6982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a8d8f749 code=0x7ffc0000
[ 2315.464193][ T4418] hub 9-0:1.0: 1 port detected
[ 2315.530014][   T30] audit: type=1326 audit(1765418952.625:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4421 comm="syz.1.6982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f67a8d8f749 code=0x7ffc0000
[ 2315.573892][  T501] usb 5-1: Using ep0 maxpacket: 32
[ 2315.593036][  T501] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2315.623278][  T501] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2315.632670][   T30] audit: type=1326 audit(1765418952.625:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4421 comm="syz.1.6982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a8d8f749 code=0x7ffc0000
[ 2315.683736][   T30] audit: type=1326 audit(1765418952.625:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4421 comm="syz.1.6982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f67a8d8f749 code=0x7ffc0000
[ 2315.802712][  T501] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 2315.842156][  T501] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2315.884368][  T501] usb 5-1: config 0 descriptor??
[ 2315.914263][  T501] hub 5-1:0.0: USB hub found
[ 2315.932431][   T30] audit: type=1326 audit(1765418952.625:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4421 comm="syz.1.6982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a8d8f749 code=0x7ffc0000
[ 2316.000452][   T30] audit: type=1326 audit(1765418952.625:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4421 comm="syz.1.6982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a8d8f749 code=0x7ffc0000
[ 2316.061091][   T30] audit: type=1326 audit(1765418952.635:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4421 comm="syz.1.6982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f67a8d8f749 code=0x7ffc0000
[ 2316.131060][  T501] hub 5-1:0.0: 1 port detected
[ 2316.754806][  T501] hub 5-1:0.0: activate --> -90
[ 2316.962720][T32473] usb 1-1: new high-speed USB device number 127 using dummy_hcd
[ 2317.194451][T32473] usb 1-1: config 0 has no interfaces?
[ 2317.213199][T32473] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 2317.230719][T32473] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2317.254229][T32473] usb 1-1: Product: syz
[ 2317.258411][T32473] usb 1-1: Manufacturer: syz
[ 2317.291111][T32473] usb 1-1: SerialNumber: syz
[ 2317.324887][T32473] usb 1-1: config 0 descriptor??
[ 2317.372746][T31741] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[ 2317.532466][T31741] usb 2-1: Using ep0 maxpacket: 16
[ 2317.550011][T31741] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2317.590722][T31741] usb 2-1: config 0 has no interfaces?
[ 2317.609615][T16571] usb 7-1: new high-speed USB device number 107 using dummy_hcd
[ 2317.629262][ T4438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2317.644731][T31741] usb 2-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76
[ 2317.678841][T31741] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2317.687703][ T4438] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2317.710291][T31741] usb 2-1: Product: syz
[ 2317.720085][T31741] usb 2-1: Manufacturer: syz
[ 2317.733421][T31741] usb 2-1: SerialNumber: syz
[ 2317.748566][ T4437] veth0_vlan: left promiscuous mode
[ 2317.763813][T31741] usb 2-1: config 0 descriptor??
[ 2317.764127][ T4437] veth0_vlan: entered promiscuous mode
[ 2317.802578][T16571] usb 7-1: Using ep0 maxpacket: 32
[ 2317.820103][T16571] usb 7-1: config 0 has no interfaces?
[ 2317.849093][T16571] usb 7-1: New USB device found, idVendor=0bdb, idProduct=1002, bcdDevice=1b.8a
[ 2317.871370][T16571] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2317.891387][T16571] usb 7-1: Product: syz
[ 2317.901910][T16571] usb 7-1: Manufacturer: syz
[ 2317.916979][T16571] usb 7-1: SerialNumber: syz
[ 2317.946254][T16571] usb 7-1: config 0 descriptor??
[ 2318.004516][ T4440] netlink: 'syz.1.6986': attribute type 30 has an invalid length.
[ 2318.032015][ T4440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6986'.
[ 2318.050761][  T501] hub 5-1:0.0: hub_ext_port_status failed (err = -32)
[ 2318.067896][ T4440] bond0: option arp_missed_max: invalid value (0)
[ 2318.081862][ T4440] bond0: option arp_missed_max: allowed values 1 - 255
[ 2318.110904][  T501] usb 2-1: USB disconnect, device number 62
[ 2318.177241][T16319] usb 7-1: USB disconnect, device number 107
[ 2318.588382][T16571] usb 5-1: reset high-speed USB device number 115 using dummy_hcd
[ 2318.770602][ T4451] usb usb8: usbfs: process 4451 (syz.1.6989) did not claim interface 6 before use
[ 2318.873002][T16571] usb 5-1: device firmware changed
[ 2318.897780][T16571] usb 5-1: USB disconnect, device number 115
[ 2318.946316][ T4456] nfs: Unknown parameter ''
[ 2319.165497][ T4462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6993'.
[ 2319.185791][ T4462] vlan2: entered allmulticast mode
[ 2319.191464][ T4462] bridge0: port 3(vlan2) entered blocking state
[ 2319.198803][ T4462] bridge0: port 3(vlan2) entered disabled state
[ 2319.209927][ T4462] vlan2: entered promiscuous mode
[ 2319.235576][T16571] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[ 2319.392674][T16571] usb 5-1: Using ep0 maxpacket: 32
[ 2319.405726][T16571] usb 5-1: config 0 has an invalid interface number: 196 but max is 0
[ 2319.418456][T16571] usb 5-1: config 0 has no interface number 0
[ 2319.435372][ T4469] fuse: Bad value for 'rootmode'
[ 2319.435971][T16571] usb 5-1: config 0 interface 196 has no altsetting 0
[ 2319.466919][T16571] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[ 2319.476321][  T501] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[ 2319.494384][T16571] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2319.514349][T16571] usb 5-1: Product: syz
[ 2319.523429][T16571] usb 5-1: Manufacturer: syz
[ 2319.534711][T16571] usb 5-1: SerialNumber: syz
[ 2319.547999][T16571] usb 5-1: config 0 descriptor??
[ 2319.644621][  T501] usb 4-1: Using ep0 maxpacket: 8
[ 2319.669748][  T501] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[ 2319.686474][  T501] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2319.694743][  T501] usb 4-1: Product: syz
[ 2319.700802][  T501] usb 4-1: Manufacturer: syz
[ 2319.707026][  T501] usb 4-1: SerialNumber: syz
[ 2319.722670][  T501] usb 4-1: config 0 descriptor??
[ 2319.765754][  T501] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244)
[ 2319.782272][ T4449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2319.805937][ T4449] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2319.948623][  T501] radio-usb-si4713 4-1:0.0: probe with driver radio-usb-si4713 failed with error -71
[ 2319.974657][  T501] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 2319.999159][  T501] usb 4-1: USB disconnect, device number 44
[ 2320.015191][T16571] ipheth 5-1:0.196: Unable to find endpoints
[ 2320.082708][T16571] usb 5-1: USB disconnect, device number 116
[ 2320.566711][ T4485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6999'.
[ 2320.878866][ T4494] input: syz0 as /devices/virtual/input/input134
[ 2320.912673][T16319] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[ 2320.960923][ T4494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7000'.
[ 2321.152576][  T501] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[ 2321.162491][T16319] usb 2-1: Using ep0 maxpacket: 8
[ 2321.308085][T16319] usb 2-1: config index 0 descriptor too short (expected 6427, got 27)
[ 2321.329441][  T501] usb 4-1: Using ep0 maxpacket: 16
[ 2321.350972][  T501] usb 4-1: config 0 has no interfaces?
[ 2321.360854][  T501] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2321.391623][  T501] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2321.422461][  T501] usb 4-1: Manufacturer: syz
[ 2321.446233][  T501] usb 4-1: config 0 descriptor??
[ 2321.464313][T16319] usb 2-1: config 0 has an invalid interface number: 21 but max is 0
[ 2321.502149][T16319] usb 2-1: config 0 has no interface number 0
[ 2321.519393][T16319] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2321.548896][T16319] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 2321.590401][T16319] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 2321.615675][T16319] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[ 2321.625279][T16319] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[ 2321.640179][T16319] usb 2-1: Product: syz
[ 2321.658532][T16319] usb 2-1: config 0 descriptor??
[ 2321.666956][ T4488] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 2322.263605][ T2714] usb 1-1: USB disconnect, device number 127
[ 2322.300464][ T4485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2322.309871][ T4485] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2322.334185][T16319] usb 2-1: USB disconnect, device number 63
[ 2322.368617][ T4491] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2322.454947][ T4495] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2322.476406][ T4513] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7004'.
[ 2323.049066][ T4529] fuse: Bad value for 'rootmode'
[ 2323.464259][ T4537] random: crng reseeded on system resumption
[ 2323.901485][ T2714] usb 4-1: USB disconnect, device number 45
[ 2324.353004][ T2714] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[ 2324.532499][ T2714] usb 4-1: Using ep0 maxpacket: 32
[ 2324.543199][T29843] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 2324.574840][ T2714] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[ 2324.617910][ T2714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2324.696234][ T2714] usb 4-1: Product: syz
[ 2324.714120][ T2714] usb 4-1: Manufacturer: syz
[ 2324.728633][ T2714] usb 4-1: SerialNumber: syz
[ 2324.742710][T29843] usb 1-1: Using ep0 maxpacket: 32
[ 2324.768866][ T2714] usb 4-1: config 0 descriptor??
[ 2324.789028][T29843] usb 1-1: config 0 has an invalid interface number: 196 but max is 0
[ 2324.828738][T29843] usb 1-1: config 0 has no interface number 0
[ 2324.858729][T29843] usb 1-1: config 0 interface 196 has no altsetting 0
[ 2324.891446][T29843] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[ 2324.922582][T29843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2324.939733][T29843] usb 1-1: Product: syz
[ 2324.960796][T29843] usb 1-1: Manufacturer: syz
[ 2324.984667][T29843] usb 1-1: SerialNumber: syz
[ 2325.016588][T29843] usb 1-1: config 0 descriptor??
[ 2325.393194][ T2714] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 046
[ 2325.415147][ T4544] m920x_read = error: -19
[ 2325.433999][ T4546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2325.566903][ T4556] netlink: 'syz.6.7014': attribute type 19 has an invalid length.
[ 2325.575305][ T4546] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2325.587706][ T4556] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7014'.
[ 2325.619035][T29843] ipheth 1-1:0.196: Unable to find endpoints
[ 2325.674503][T29843] usb 1-1: USB disconnect, device number 2
[ 2325.771098][  T501] usb 4-1: USB disconnect, device number 46
[ 2325.798659][T16085] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 2325.834965][T16085] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 2325.904486][T16085] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 2325.929651][T16085] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 2327.525990][T29843] usb 5-1: new high-speed USB device number 117 using dummy_hcd
[ 2327.630199][T16319] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 2327.683163][T29843] usb 5-1: Using ep0 maxpacket: 16
[ 2327.696522][T29843] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[ 2327.705906][T29843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2327.715408][T29843] usb 5-1: Product: syz
[ 2327.719643][T29843] usb 5-1: Manufacturer: syz
[ 2327.724500][T29843] usb 5-1: SerialNumber: syz
[ 2327.731339][T29843] usb 5-1: config 0 descriptor??
[ 2327.739005][T29843] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[ 2327.747692][T29843] usb 5-1: Detected FT232H
[ 2327.793795][T16319] usb 1-1: Using ep0 maxpacket: 16
[ 2327.828872][T16319] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 2327.859543][T16319] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2327.908238][T16319] usb 1-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 2327.938852][T29843] ftdi_sio ttyUSB0: Unable to read latency timer: -121
[ 2327.951657][T16319] usb 1-1: config 1 interface 0 has no altsetting 0
[ 2327.969930][T16319] usb 1-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40
[ 2327.985563][T16319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2328.010184][T16319] usb 1-1: Product: syz
[ 2328.028391][T16319] usb 1-1: Manufacturer: syz
[ 2328.041114][T16319] usb 1-1: SerialNumber: syz
[ 2328.068070][T16319] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input136
[ 2328.149374][T29843] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[ 2328.171719][T29843] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71
[ 2328.189378][T29843] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 2328.211777][T29843] usb 5-1: USB disconnect, device number 117
[ 2328.229716][T29843] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 2328.251481][T29843] ftdi_sio 5-1:0.0: device disconnected
[ 2328.264524][ T5183] bcm5974 1-1:1.0: could not read from device
[ 2328.300746][ T5183] bcm5974 1-1:1.0: could not read from device
[ 2328.318472][T16319] usb 1-1: USB disconnect, device number 3
[ 2328.330733][ T5183] bcm5974 1-1:1.0: could not read from device
[ 2329.082528][  T501] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[ 2329.263031][  T501] usb 5-1: Using ep0 maxpacket: 32
[ 2329.342452][  T501] usb 5-1: config 0 has an invalid interface number: 196 but max is 0
[ 2329.350852][  T501] usb 5-1: config 0 has no interface number 0
[ 2329.359754][  T501] usb 5-1: config 0 interface 196 has no altsetting 0
[ 2329.375819][T16571] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[ 2329.391746][  T501] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[ 2329.402468][  T501] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2329.410550][  T501] usb 5-1: Product: syz
[ 2329.414902][  T501] usb 5-1: Manufacturer: syz
[ 2329.421677][  T501] usb 5-1: SerialNumber: syz
[ 2329.447420][  T501] usb 5-1: config 0 descriptor??
[ 2329.532805][T16571] usb 4-1: device descriptor read/64, error -71
[ 2329.697400][ T4621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2329.722095][ T4621] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2329.747931][  T501] ipheth 5-1:0.196: Unable to find endpoints
[ 2329.772520][T16571] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[ 2329.787232][  T501] usb 5-1: USB disconnect, device number 118
[ 2329.922724][T16571] usb 4-1: device descriptor read/64, error -71
[ 2329.983095][T16319] usb 2-1: new full-speed USB device number 64 using dummy_hcd
[ 2330.042895][T16571] usb usb4-port1: attempt power cycle
[ 2330.148757][T16319] usb 2-1: config 0 has an invalid interface descriptor of length 2, skipping
[ 2330.169820][T16319] usb 2-1: config 0 has an invalid descriptor of length 60, skipping remainder of the config
[ 2330.190585][T16319] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2330.211574][T16319] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[ 2330.229553][T16319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2330.254116][T16319] usb 2-1: config 0 descriptor??
[ 2330.412594][T16571] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[ 2330.443668][T16571] usb 4-1: device descriptor read/8, error -71
[ 2330.461673][ T4656] netlink: 'syz.4.7036': attribute type 4 has an invalid length.
[ 2330.641861][ T4659] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7037'.
[ 2330.712737][T16571] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[ 2330.743217][T16571] usb 4-1: device descriptor read/8, error -71
[ 2330.853128][T16571] usb usb4-port1: unable to enumerate USB device
[ 2330.922450][T29843] usb 7-1: new high-speed USB device number 108 using dummy_hcd
[ 2331.092572][T29843] usb 7-1: Using ep0 maxpacket: 32
[ 2331.108560][T29843] usb 7-1: config 0 has an invalid interface number: 85 but max is 0
[ 2331.152940][T29843] usb 7-1: config 0 has no interface number 0
[ 2331.183893][T29843] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2331.226253][T29843] usb 7-1: config 0 interface 85 has no altsetting 0
[ 2331.263592][T29843] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 2331.282068][T29843] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2331.314140][T29843] usb 7-1: Product: syz
[ 2331.336979][T29843] usb 7-1: Manufacturer: syz
[ 2331.349973][T29843] usb 7-1: SerialNumber: syz
[ 2331.373999][T29843] usb 7-1: config 0 descriptor??
[ 2332.037331][ T4659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2332.062615][ T4659] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2332.281668][ T4681] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2332.296001][T29843] appletouch 7-1:0.85: Geyser mode initialized.
[ 2332.340067][T29843] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input137
[ 2332.483311][ T4685] veth1_macvtap: left promiscuous mode
[ 2332.514375][ T4685] macsec0: entered allmulticast mode
[ 2332.543563][ T4659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2332.587876][ T4686] veth1_macvtap: entered promiscuous mode
[ 2332.588659][ T4659] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2332.620404][ T4686] veth1_macvtap: entered allmulticast mode
[ 2332.637795][ T4686] macsec0: left allmulticast mode
[ 2332.645262][ T4686] veth1_macvtap: left allmulticast mode
[ 2332.693302][   T30] kauditd_printk_skb: 2 callbacks suppressed
[ 2332.693313][   T30] audit: type=1326 audit(1765418970.245:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4684 comm="syz.3.7041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04078f749 code=0x7ffc0000
[ 2332.800861][T16319] usb 7-1: USB disconnect, device number 108
[ 2332.826752][   T30] audit: type=1326 audit(1765418970.245:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4684 comm="syz.3.7041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04078f749 code=0x7ffc0000
[ 2332.837532][  T501] usb 2-1: USB disconnect, device number 64
[ 2332.956502][   T30] audit: type=1326 audit(1765418970.245:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4684 comm="syz.3.7041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fd04078f749 code=0x7ffc0000
[ 2333.033202][   T30] audit: type=1326 audit(1765418970.295:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4684 comm="syz.3.7041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04078f749 code=0x7ffc0000
[ 2333.109923][   T30] audit: type=1326 audit(1765418970.345:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4684 comm="syz.3.7041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fd04078f749 code=0x7ffc0000
[ 2333.189237][   T30] audit: type=1326 audit(1765418970.345:2588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4684 comm="syz.3.7041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04078f749 code=0x7ffc0000
[ 2333.229882][   T30] audit: type=1326 audit(1765418970.345:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4684 comm="syz.3.7041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04078f749 code=0x7ffc0000
[ 2333.258488][   T30] audit: type=1326 audit(1765418970.415:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4684 comm="syz.3.7041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd04078f749 code=0x7ffc0000
[ 2333.284741][T16319] appletouch 7-1:0.85: input: appletouch disconnected
[ 2333.346432][   T30] audit: type=1326 audit(1765418970.415:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4684 comm="syz.3.7041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04078f749 code=0x7ffc0000
[ 2333.420499][   T30] audit: type=1326 audit(1765418970.735:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4684 comm="syz.3.7041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04078f749 code=0x7ffc0000
[ 2333.519902][ T4693] FAULT_INJECTION: forcing a failure.
[ 2333.519902][ T4693] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2333.569506][ T4693] CPU: 0 UID: 0 PID: 4693 Comm: syz.0.7043 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2333.569536][ T4693] Tainted: [L]=SOFTLOCKUP
[ 2333.569541][ T4693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2333.569553][ T4693] Call Trace:
[ 2333.569562][ T4693]  <TASK>
[ 2333.569570][ T4693]  dump_stack_lvl+0x189/0x250
[ 2333.569600][ T4693]  ? __pfx____ratelimit+0x10/0x10
[ 2333.569627][ T4693]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2333.569649][ T4693]  ? __pfx__printk+0x10/0x10
[ 2333.569678][ T4693]  ? __might_fault+0xb0/0x130
[ 2333.569725][ T4693]  should_fail_ex+0x414/0x560
[ 2333.569759][ T4693]  _copy_to_iter+0x404/0x1790
[ 2333.569802][ T4693]  ? __pfx__copy_to_iter+0x10/0x10
[ 2333.569831][ T4693]  ? fput+0xa0/0xd0
[ 2333.569856][ T4693]  ? __pfx_io_uring_show_fdinfo+0x10/0x10
[ 2333.569886][ T4693]  ? seq_show+0x5bb/0x710
[ 2333.569908][ T4693]  seq_read_iter+0xbf5/0xe20
[ 2333.569946][ T4693]  seq_read+0x369/0x480
[ 2333.569975][ T4693]  ? __pfx_seq_read+0x10/0x10
[ 2333.570004][ T4693]  ? rw_verify_area+0x2a6/0x4d0
[ 2333.570022][ T4693]  ? __pfx_seq_read+0x10/0x10
[ 2333.570042][ T4693]  vfs_read+0x200/0xa30
[ 2333.570059][ T4693]  ? fdget_pos+0x247/0x320
[ 2333.570086][ T4693]  ? __pfx___mutex_lock+0x10/0x10
[ 2333.570105][ T4693]  ? __pfx_vfs_read+0x10/0x10
[ 2333.570126][ T4693]  ? __fget_files+0x2a/0x420
[ 2333.570153][ T4693]  ? __fget_files+0x3a0/0x420
[ 2333.570177][ T4693]  ? __fget_files+0x2a/0x420
[ 2333.570209][ T4693]  ksys_read+0x145/0x250
[ 2333.570229][ T4693]  ? __pfx_ksys_read+0x10/0x10
[ 2333.570250][ T4693]  ? do_syscall_64+0xbe/0xf80
[ 2333.570281][ T4693]  do_syscall_64+0xfa/0xf80
[ 2333.570310][ T4693]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2333.570329][ T4693]  ? clear_bhb_loop+0x60/0xb0
[ 2333.570352][ T4693]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2333.570371][ T4693] RIP: 0033:0x7ff4e3f8f749
[ 2333.570387][ T4693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2333.570413][ T4693] RSP: 002b:00007ff4e4e45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2333.570433][ T4693] RAX: ffffffffffffffda RBX: 00007ff4e41e5fa0 RCX: 00007ff4e3f8f749
[ 2333.570448][ T4693] RDX: 0000000000002020 RSI: 00002000000020c0 RDI: 0000000000000004
[ 2333.570461][ T4693] RBP: 00007ff4e4e45090 R08: 0000000000000000 R09: 0000000000000000
[ 2333.570490][ T4693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2333.570502][ T4693] R13: 00007ff4e41e6038 R14: 00007ff4e41e5fa0 R15: 00007ff4e430fa28
[ 2333.570535][ T4693]  </TASK>
[ 2334.160238][ T4700] bridge2: entered allmulticast mode
[ 2334.282533][T29843] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[ 2334.432549][T16319] usb 5-1: new high-speed USB device number 119 using dummy_hcd
[ 2334.482815][T29843] usb 1-1: Using ep0 maxpacket: 32
[ 2334.489344][T29843] usb 1-1: config 0 has an invalid interface number: 196 but max is 0
[ 2334.502039][T29843] usb 1-1: config 0 has no interface number 0
[ 2334.512469][T29843] usb 1-1: config 0 interface 196 has no altsetting 0
[ 2334.523807][T29843] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[ 2334.533410][T29843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2334.541414][T29843] usb 1-1: Product: syz
[ 2334.545816][T29843] usb 1-1: Manufacturer: syz
[ 2334.550407][T29843] usb 1-1: SerialNumber: syz
[ 2334.557086][T29843] usb 1-1: config 0 descriptor??
[ 2334.593963][T16319] usb 5-1: config 171 has an invalid interface number: 109 but max is 0
[ 2334.610706][T16319] usb 5-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config
[ 2334.629906][T16319] usb 5-1: config 171 has no interface number 0
[ 2334.675504][T16319] usb 5-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023
[ 2334.706965][T16319] usb 5-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 25088, setting to 64
[ 2334.787169][ T4702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2334.812485][T16319] usb 5-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12
[ 2334.858417][T16319] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e
[ 2334.868772][ T4702] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2334.901767][T16319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2334.929364][T29843] ipheth 1-1:0.196: Unable to find endpoints
[ 2334.940586][T16319] usb 5-1: Product: syz
[ 2334.954892][T16319] usb 5-1: Manufacturer: syz
[ 2334.972496][T16319] usb 5-1: SerialNumber: syz
[ 2334.998773][ T4703] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 2335.054466][T29843] usb 1-1: USB disconnect, device number 4
[ 2335.231363][T16319] ath6kl: Failed to submit usb control message: -71
[ 2335.255653][T16319] ath6kl: unable to send the bmi data to the device: -71
[ 2335.268806][T16319] ath6kl: Unable to send get target info: -71
[ 2335.299633][T32473] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[ 2335.316381][T16319] ath6kl: Failed to init ath6kl core: -71
[ 2335.326828][T16319] ath6kl_usb 5-1:171.109: probe with driver ath6kl_usb failed with error -71
[ 2335.364144][T16319] usb 5-1: USB disconnect, device number 119
[ 2335.492488][T32473] usb 2-1: Using ep0 maxpacket: 16
[ 2335.506698][T32473] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 2335.526394][T32473] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2335.537018][T32473] usb 2-1: Product: syz
[ 2335.541299][T32473] usb 2-1: Manufacturer: syz
[ 2335.546122][T32473] usb 2-1: SerialNumber: syz
[ 2335.551899][ T4740] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7053'.
[ 2335.571746][T32473] r8152-cfgselector 2-1: Unknown version 0x0000
[ 2335.591774][T32473] r8152-cfgselector 2-1: config 0 descriptor??
[ 2335.659025][ T4742] loop5: detected capacity change from 0 to 7
[ 2335.667340][ T4742] Dev loop5: unable to read RDB block 7
[ 2335.680590][ T4742]  loop5: unable to read partition table
[ 2335.691413][ T4742] loop5: partition table beyond EOD, truncated
[ 2335.698634][ T4744] syz.6.7055 (4744): drop_caches: 4
[ 2335.712821][T29843] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[ 2335.722419][ T4742] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 2335.882602][T29843] usb 4-1: Using ep0 maxpacket: 16
[ 2335.906459][T29843] usb 4-1: config 0 has no interfaces?
[ 2335.914340][T29843] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2335.936875][T29843] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2335.947167][ T4750] FAULT_INJECTION: forcing a failure.
[ 2335.947167][ T4750] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2335.974762][T29843] usb 4-1: Manufacturer: syz
[ 2335.982247][ T4750] CPU: 0 UID: 0 PID: 4750 Comm: syz.0.7057 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2335.982280][ T4750] Tainted: [L]=SOFTLOCKUP
[ 2335.982289][ T4750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2335.982302][ T4750] Call Trace:
[ 2335.982311][ T4750]  <TASK>
[ 2335.982321][ T4750]  dump_stack_lvl+0x189/0x250
[ 2335.982367][ T4750]  ? __pfx____ratelimit+0x10/0x10
[ 2335.982396][ T4750]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2335.982420][ T4750]  ? __pfx__printk+0x10/0x10
[ 2335.982450][ T4750]  ? __might_fault+0xb0/0x130
[ 2335.982491][ T4750]  should_fail_ex+0x414/0x560
[ 2335.982524][ T4750]  _copy_to_iter+0x404/0x1790
[ 2335.982569][ T4750]  ? __pfx__copy_to_iter+0x10/0x10
[ 2335.982601][ T4750]  ? fput+0xa0/0xd0
[ 2335.982625][ T4750]  ? __pfx_io_uring_show_fdinfo+0x10/0x10
[ 2335.982657][ T4750]  ? seq_show+0x5bb/0x710
[ 2335.982681][ T4750]  seq_read_iter+0xbf5/0xe20
[ 2335.982722][ T4750]  seq_read+0x369/0x480
[ 2335.982751][ T4750]  ? __pfx_seq_read+0x10/0x10
[ 2335.982793][ T4750]  ? rw_verify_area+0x2a6/0x4d0
[ 2335.982810][ T4750]  ? __pfx_seq_read+0x10/0x10
[ 2335.982830][ T4750]  vfs_read+0x200/0xa30
[ 2335.982846][ T4750]  ? fdget_pos+0x247/0x320
[ 2335.982874][ T4750]  ? __pfx___mutex_lock+0x10/0x10
[ 2335.982893][ T4750]  ? __pfx_vfs_read+0x10/0x10
[ 2335.982912][ T4750]  ? __fget_files+0x2a/0x420
[ 2335.982957][ T4750]  ? __fget_files+0x3a0/0x420
[ 2335.982980][ T4750]  ? __fget_files+0x2a/0x420
[ 2335.983015][ T4750]  ksys_read+0x145/0x250
[ 2335.983038][ T4750]  ? __pfx_ksys_read+0x10/0x10
[ 2335.983061][ T4750]  ? do_syscall_64+0xbe/0xf80
[ 2335.983094][ T4750]  do_syscall_64+0xfa/0xf80
[ 2335.983125][ T4750]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2335.983155][ T4750]  ? clear_bhb_loop+0x60/0xb0
[ 2335.983178][ T4750]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2335.983197][ T4750] RIP: 0033:0x7ff4e3f8f749
[ 2335.983213][ T4750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2335.983236][ T4750] RSP: 002b:00007ff4e4e45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2335.983256][ T4750] RAX: ffffffffffffffda RBX: 00007ff4e41e5fa0 RCX: 00007ff4e3f8f749
[ 2335.983270][ T4750] RDX: 0000000000002020 RSI: 00002000000020c0 RDI: 0000000000000004
[ 2335.983282][ T4750] RBP: 00007ff4e4e45090 R08: 0000000000000000 R09: 0000000000000000
[ 2335.983294][ T4750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2335.983305][ T4750] R13: 00007ff4e41e6038 R14: 00007ff4e41e5fa0 R15: 00007ff4e430fa28
[ 2335.983336][ T4750]  </TASK>
[ 2336.252631][T29843] usb 4-1: config 0 descriptor??
[ 2336.311407][T32473] r8152-cfgselector 2-1: Unknown version 0x0000
[ 2336.311437][ T4756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7059'.
[ 2336.312063][ T4756] netlink: 'syz.4.7059': attribute type 8 has an invalid length.
[ 2336.329085][T32473] r8152-cfgselector 2-1: bad CDC descriptors
[ 2336.342412][ T4756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7059'.
[ 2336.361837][ T4756] bond0: entered promiscuous mode
[ 2336.369263][ T4756] bond_slave_0: entered promiscuous mode
[ 2336.376997][ T4756] bond_slave_1: entered promiscuous mode
[ 2336.385225][ T4756] gretap0: entered promiscuous mode
[ 2336.408186][T32473] r8152-cfgselector 2-1: USB disconnect, device number 65
[ 2336.457488][ T4756] bond0: left promiscuous mode
[ 2336.480778][ T4756] bond_slave_0: left promiscuous mode
[ 2336.508361][ T4756] bond_slave_1: left promiscuous mode
[ 2336.522306][ T4756] gretap0: left promiscuous mode
[ 2336.892542][T32473] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[ 2337.102425][T32473] usb 5-1: Using ep0 maxpacket: 16
[ 2337.116782][T32473] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 2337.182487][T32473] usb 5-1: config 159 has an invalid interface number: 195 but max is 0
[ 2337.182827][ T4771] openvswitch: netlink: Flow key attribute not present in set flow.
[ 2337.212628][T32473] usb 5-1: config 159 has no interface number 0
[ 2337.257991][T32473] usb 5-1: config 159 interface 195 altsetting 5 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2337.299333][T32473] usb 5-1: config 159 interface 195 has no altsetting 0
[ 2337.579561][T32473] usb 5-1: New USB device found, idVendor=17e9, idProduct=b889, bcdDevice=ec.5c
[ 2337.605987][T32473] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2337.619975][T32473] usb 5-1: Product: syz
[ 2337.634011][T32473] usb 5-1: Manufacturer: syz
[ 2337.662476][T16319] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[ 2337.688370][T32473] usb 5-1: SerialNumber: syz
[ 2337.756873][ T4780] netlink: 'syz.6.7065': attribute type 4 has an invalid length.
[ 2337.788499][ T4780] netlink: 'syz.6.7065': attribute type 4 has an invalid length.
[ 2337.864323][T16319] usb 2-1: Using ep0 maxpacket: 32
[ 2337.871214][T16319] usb 2-1: config 0 has an invalid interface number: 196 but max is 0
[ 2337.881245][T16319] usb 2-1: config 0 has no interface number 0
[ 2337.888777][T16319] usb 2-1: config 0 interface 196 has no altsetting 0
[ 2337.900417][T16319] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[ 2337.910202][T16319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2337.918568][T16319] usb 2-1: Product: syz
[ 2337.923976][T16319] usb 2-1: Manufacturer: syz
[ 2337.932134][T16319] usb 2-1: SerialNumber: syz
[ 2337.939549][T32473] udl 5-1:159.195: [drm] Unrecognized vendor firmware descriptor
[ 2337.949850][T32473] [drm:udl_init] *ERROR* Selecting channel failed
[ 2337.957124][T16319] usb 2-1: config 0 descriptor??
[ 2337.982596][T32473] [drm] Initialized udl 0.0.1 for 5-1:159.195 on minor 2
[ 2337.989754][T32473] [drm] Initialized udl on minor 2
[ 2337.999871][T32473] udl 5-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 2338.009108][T32473] udl 5-1:159.195: [drm] Cannot find any crtc or sizes
[ 2338.017798][ T6852] udl 5-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 2338.028861][T32473] usb 5-1: USB disconnect, device number 120
[ 2338.036587][ T6852] udl 5-1:159.195: [drm] Cannot find any crtc or sizes
[ 2338.180551][ T4777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2338.196411][ T6857] usb 4-1: USB disconnect, device number 51
[ 2338.211354][ T4777] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2338.259073][T16319] ipheth 2-1:0.196: Unable to find endpoints
[ 2338.295970][T16319] usb 2-1: USB disconnect, device number 66
[ 2338.309452][ T4786] loop5: detected capacity change from 0 to 7
[ 2338.320573][ T4786] Dev loop5: unable to read RDB block 7
[ 2338.327535][ T4786]  loop5: unable to read partition table
[ 2338.333738][ T4786] loop5: partition table beyond EOD, truncated
[ 2338.340092][ T4786] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 2338.372933][T29843] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[ 2338.542562][T29843] usb 1-1: Using ep0 maxpacket: 32
[ 2338.555250][T29843] usb 1-1: config 0 has an invalid interface number: 196 but max is 0
[ 2338.566395][T29843] usb 1-1: config 0 has no interface number 0
[ 2338.574111][T29843] usb 1-1: config 0 interface 196 has no altsetting 0
[ 2338.583543][T29843] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[ 2338.583631][ T4794] FAULT_INJECTION: forcing a failure.
[ 2338.583631][ T4794] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2338.593504][T29843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2338.631612][ T4794] CPU: 0 UID: 0 PID: 4794 Comm: syz.6.7071 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2338.631638][ T4794] Tainted: [L]=SOFTLOCKUP
[ 2338.631646][ T4794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2338.631657][ T4794] Call Trace:
[ 2338.631665][ T4794]  <TASK>
[ 2338.631673][ T4794]  dump_stack_lvl+0x189/0x250
[ 2338.631702][ T4794]  ? __pfx____ratelimit+0x10/0x10
[ 2338.631732][ T4794]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2338.631755][ T4794]  ? __pfx__printk+0x10/0x10
[ 2338.631785][ T4794]  ? fs_reclaim_acquire+0x7d/0x100
[ 2338.631814][ T4794]  should_fail_ex+0x414/0x560
[ 2338.631844][ T4794]  prepare_alloc_pages+0x22b/0x650
[ 2338.631874][ T4794]  __alloc_frozen_pages_noprof+0x123/0x370
[ 2338.631900][ T4794]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 2338.631926][ T4794]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 2338.631955][ T4794]  ? arch_stack_walk+0xfc/0x150
[ 2338.631978][ T4794]  ? policy_nodemask+0x27c/0x720
[ 2338.632005][ T4794]  alloc_pages_mpol+0x232/0x4a0
[ 2338.632031][ T4794]  vma_alloc_folio_noprof+0xe4/0x200
[ 2338.632054][ T4794]  ? __lock_acquire+0x6b6/0x2cf0
[ 2338.632075][ T4794]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[ 2338.632110][ T4794]  folio_prealloc+0x30/0x180
[ 2338.632129][ T4794]  do_pte_missing+0x14e8/0x3330
[ 2338.632168][ T4794]  handle_mm_fault+0x1b26/0x32b0
[ 2338.632208][ T4794]  ? handle_mm_fault+0xdb/0x32b0
[ 2338.632242][ T4794]  ? __pfx_handle_mm_fault+0x10/0x10
[ 2338.632294][ T4794]  ? lock_mm_and_find_vma+0x9c/0x300
[ 2338.632315][ T4794]  do_user_addr_fault+0x764/0x1380
[ 2338.632349][ T4794]  exc_page_fault+0x82/0x100
[ 2338.632379][ T4794]  asm_exc_page_fault+0x26/0x30
[ 2338.632398][ T4794] RIP: 0010:rep_movs_alternative+0x4a/0x90
[ 2338.632420][ T4794] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 e9 bf 48 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[ 2338.632437][ T4794] RSP: 0018:ffffc900034678d8 EFLAGS: 00050206
[ 2338.632454][ T4794] RAX: ffffffff848c1f01 RBX: ffff888048ff8000 RCX: 0000000000001681
[ 2338.632468][ T4794] RDX: 0000000000000000 RSI: ffff888048ff8000 RDI: 00002000000020c0
[ 2338.632481][ T4794] RBP: ffffc90003467a50 R08: ffff888048ff9680 R09: 1ffff110091ff2d0
[ 2338.632496][ T4794] R10: dffffc0000000000 R11: ffffed10091ff2d1 R12: dffffc0000000000
[ 2338.632509][ T4794] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000001681
[ 2338.632530][ T4794]  ? _copy_to_iter+0x411/0x1790
[ 2338.632564][ T4794]  _copy_to_iter+0x493/0x1790
[ 2338.632606][ T4794]  ? __pfx__copy_to_iter+0x10/0x10
[ 2338.632636][ T4794]  ? fput+0xa0/0xd0
[ 2338.632659][ T4794]  ? __pfx_io_uring_show_fdinfo+0x10/0x10
[ 2338.632687][ T4794]  ? seq_show+0x5bb/0x710
[ 2338.632711][ T4794]  seq_read_iter+0xbf5/0xe20
[ 2338.632749][ T4794]  seq_read+0x369/0x480
[ 2338.632776][ T4794]  ? __pfx_seq_read+0x10/0x10
[ 2338.632806][ T4794]  ? rw_verify_area+0x2a6/0x4d0
[ 2338.632823][ T4794]  ? __pfx_seq_read+0x10/0x10
[ 2338.632843][ T4794]  vfs_read+0x200/0xa30
[ 2338.632860][ T4794]  ? fdget_pos+0x247/0x320
[ 2338.632888][ T4794]  ? __pfx___mutex_lock+0x10/0x10
[ 2338.632906][ T4794]  ? __pfx_vfs_read+0x10/0x10
[ 2338.632926][ T4794]  ? __fget_files+0x2a/0x420
[ 2338.632953][ T4794]  ? __fget_files+0x3a0/0x420
[ 2338.632976][ T4794]  ? __fget_files+0x2a/0x420
[ 2338.633008][ T4794]  ksys_read+0x145/0x250
[ 2338.633030][ T4794]  ? __pfx_ksys_read+0x10/0x10
[ 2338.633052][ T4794]  ? do_syscall_64+0xbe/0xf80
[ 2338.633083][ T4794]  do_syscall_64+0xfa/0xf80
[ 2338.633112][ T4794]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2338.633130][ T4794]  ? clear_bhb_loop+0x60/0xb0
[ 2338.633153][ T4794]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2338.633171][ T4794] RIP: 0033:0x7f9d0698f749
[ 2338.633187][ T4794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2338.633203][ T4794] RSP: 002b:00007f9d07907038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2338.633222][ T4794] RAX: ffffffffffffffda RBX: 00007f9d06be5fa0 RCX: 00007f9d0698f749
[ 2338.633235][ T4794] RDX: 0000000000002020 RSI: 00002000000020c0 RDI: 0000000000000004
[ 2338.633247][ T4794] RBP: 00007f9d07907090 R08: 0000000000000000 R09: 0000000000000000
[ 2338.633265][ T4794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2338.633276][ T4794] R13: 00007f9d06be6038 R14: 00007f9d06be5fa0 R15: 00007f9d06d0fa28
[ 2338.633307][ T4794]  </TASK>
[ 2339.057212][T29843] usb 1-1: Product: syz
[ 2339.062014][T29843] usb 1-1: Manufacturer: syz
[ 2339.066671][T29843] usb 1-1: SerialNumber: syz
[ 2339.074430][T29843] usb 1-1: config 0 descriptor??
[ 2339.317431][ T4784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2339.354060][ T4784] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2339.412535][  T622] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[ 2339.463702][ T4799] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7072'.
[ 2339.553234][T29843] ipheth 1-1:0.196: Unable to find endpoints
[ 2339.573726][T29843] usb 1-1: USB disconnect, device number 5
[ 2339.594008][  T622] usb 4-1: Using ep0 maxpacket: 8
[ 2339.626429][  T622] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2339.664201][  T622] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[ 2339.694566][  T622] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2339.711519][  T622] usb 4-1: config 0 descriptor??
[ 2339.783763][  T622] gspca_main: vc032x-2.14.0 probing 046d:0892
[ 2339.835878][ T4775] usb 7-1: new full-speed USB device number 109 using dummy_hcd
[ 2340.028668][ T4775] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 2340.056938][ T4775] usb 7-1: not running at top speed; connect to a high speed hub
[ 2340.085158][ T4775] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2340.101259][ T4775] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2340.126035][ T4775] usb 7-1: string descriptor 0 read error: -22
[ 2340.146727][ T4775] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2340.181282][ T4775] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2340.261598][ T4775] usb 7-1: 0:2 : does not exist
[ 2340.470517][  T622] gspca_vc032x: reg_r err -32
[ 2340.488818][ T4810] netlink: 'syz.0.7075': attribute type 1 has an invalid length.
[ 2340.508421][  T622] vc032x 4-1:0.0: probe with driver vc032x failed with error -32
[ 2340.655448][ T4810] 8021q: adding VLAN 0 to HW filter on device bond1
[ 2340.666458][ T4799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2340.677293][ T4799] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2340.762278][ T4812] bond1: (slave ip6erspan0): making interface the new active one
[ 2340.791217][ T4812] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[ 2340.882531][T31741] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[ 2341.056682][T31741] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2341.069238][T31741] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2341.090832][T31741] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[ 2341.103141][T31741] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2341.116804][ T4775] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[ 2341.127895][T31741] usb 2-1: config 0 descriptor??
[ 2341.173249][ T4775] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5)
[ 2341.195840][ T4775] usb 7-1: 5:0: failed to get current value for ch 1 (-22)
[ 2341.238899][ T4775] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5)
[ 2341.284970][ T4775] usb 7-1: USB disconnect, device number 109
[ 2341.532051][ T4826] loop5: detected capacity change from 0 to 7
[ 2341.551082][ T4826] Dev loop5: unable to read RDB block 7
[ 2341.568834][T31741] hid_parser_main: 1204 callbacks suppressed
[ 2341.568851][T31741] cp2112 0003:10C4:EA90.006D: unknown main item tag 0x0
[ 2341.586767][ T4826]  loop5: unable to read partition table
[ 2341.597824][T31741] cp2112 0003:10C4:EA90.006D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0
[ 2341.679151][ T4826] loop5: partition table beyond EOD, truncated
[ 2341.699856][ T4826] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 2341.765602][T31741] cp2112 0003:10C4:EA90.006D: Part Number: 0x82 Device Version: 0xFE
[ 2341.821291][ T4829] binder: 4789:4829 ioctl 400c620e 200000000100 returned -22
[ 2341.966431][T31741] cp2112 0003:10C4:EA90.006D: error requesting SMBus config
[ 2341.996418][T31741] cp2112 0003:10C4:EA90.006D: probe with driver cp2112 failed with error -71
[ 2342.021931][T31741] usb 2-1: USB disconnect, device number 67
[ 2342.107574][ T4833] IPVS: set_ctl: invalid protocol: 1 172.20.20.187:20001
[ 2342.241230][ T4838] FAULT_INJECTION: forcing a failure.
[ 2342.241230][ T4838] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2342.272732][ T4838] CPU: 0 UID: 0 PID: 4838 Comm: syz.4.7082 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2342.272767][ T4838] Tainted: [L]=SOFTLOCKUP
[ 2342.272777][ T4838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2342.272791][ T4838] Call Trace:
[ 2342.272800][ T4838]  <TASK>
[ 2342.272811][ T4838]  dump_stack_lvl+0x189/0x250
[ 2342.272844][ T4838]  ? __pfx____ratelimit+0x10/0x10
[ 2342.272875][ T4838]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2342.272902][ T4838]  ? __pfx__printk+0x10/0x10
[ 2342.272937][ T4838]  ? fs_reclaim_acquire+0x7d/0x100
[ 2342.272972][ T4838]  should_fail_ex+0x414/0x560
[ 2342.273008][ T4838]  prepare_alloc_pages+0x22b/0x650
[ 2342.273042][ T4838]  __alloc_frozen_pages_noprof+0x123/0x370
[ 2342.273074][ T4838]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 2342.273111][ T4838]  ? policy_nodemask+0x27c/0x720
[ 2342.273144][ T4838]  alloc_pages_mpol+0x232/0x4a0
[ 2342.273177][ T4838]  vma_alloc_folio_noprof+0xe4/0x200
[ 2342.273204][ T4838]  ? __lock_acquire+0x6b6/0x2cf0
[ 2342.273228][ T4838]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[ 2342.273269][ T4838]  folio_prealloc+0x30/0x180
[ 2342.273292][ T4838]  do_pte_missing+0x14e8/0x3330
[ 2342.273339][ T4838]  handle_mm_fault+0x1b26/0x32b0
[ 2342.273387][ T4838]  ? handle_mm_fault+0xdb/0x32b0
[ 2342.273429][ T4838]  ? __pfx_handle_mm_fault+0x10/0x10
[ 2342.273476][ T4838]  ? __pfx___up_read+0x10/0x10
[ 2342.273511][ T4838]  ? lock_mm_and_find_vma+0x9c/0x300
[ 2342.273535][ T4838]  do_user_addr_fault+0x764/0x1380
[ 2342.273577][ T4838]  exc_page_fault+0x82/0x100
[ 2342.273613][ T4838]  asm_exc_page_fault+0x26/0x30
[ 2342.273634][ T4838] RIP: 0010:rep_movs_alternative+0x4a/0x90
[ 2342.273669][ T4838] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 e9 bf 48 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[ 2342.273689][ T4838] RSP: 0018:ffffc9000cb778d8 EFLAGS: 00050206
[ 2342.273710][ T4838] RAX: ffffffff848c1f01 RBX: ffff88802b6e4000 RCX: 0000000000000741
[ 2342.273728][ T4838] RDX: 0000000000000000 RSI: ffff88802b6e4f40 RDI: 0000200000003000
[ 2342.273744][ T4838] RBP: ffffc9000cb77a50 R08: ffff88802b6e5680 R09: 1ffff110056dcad0
[ 2342.273761][ T4838] R10: dffffc0000000000 R11: ffffed10056dcad1 R12: dffffc0000000000
[ 2342.273777][ T4838] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000001681
[ 2342.273802][ T4838]  ? _copy_to_iter+0x411/0x1790
[ 2342.273843][ T4838]  _copy_to_iter+0x493/0x1790
[ 2342.273893][ T4838]  ? __pfx__copy_to_iter+0x10/0x10
[ 2342.273931][ T4838]  ? fput+0xa0/0xd0
[ 2342.273957][ T4838]  ? __pfx_io_uring_show_fdinfo+0x10/0x10
[ 2342.273992][ T4838]  ? seq_show+0x5bb/0x710
[ 2342.274020][ T4838]  seq_read_iter+0xbf5/0xe20
[ 2342.274066][ T4838]  seq_read+0x369/0x480
[ 2342.274099][ T4838]  ? __pfx_seq_read+0x10/0x10
[ 2342.274135][ T4838]  ? rw_verify_area+0x2a6/0x4d0
[ 2342.274156][ T4838]  ? __pfx_seq_read+0x10/0x10
[ 2342.274180][ T4838]  vfs_read+0x200/0xa30
[ 2342.274200][ T4838]  ? fdget_pos+0x247/0x320
[ 2342.274233][ T4838]  ? __pfx___mutex_lock+0x10/0x10
[ 2342.274255][ T4838]  ? __pfx_vfs_read+0x10/0x10
[ 2342.274278][ T4838]  ? __fget_files+0x2a/0x420
[ 2342.274312][ T4838]  ? __fget_files+0x3a0/0x420
[ 2342.274339][ T4838]  ? __fget_files+0x2a/0x420
[ 2342.274378][ T4838]  ksys_read+0x145/0x250
[ 2342.274403][ T4838]  ? __pfx_ksys_read+0x10/0x10
[ 2342.274428][ T4838]  ? do_syscall_64+0xbe/0xf80
[ 2342.274465][ T4838]  do_syscall_64+0xfa/0xf80
[ 2342.274499][ T4838]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2342.274522][ T4838]  ? clear_bhb_loop+0x60/0xb0
[ 2342.274549][ T4838]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2342.274571][ T4838] RIP: 0033:0x7efc9c58f749
[ 2342.274590][ T4838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2342.274610][ T4838] RSP: 002b:00007efc9d4b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2342.274631][ T4838] RAX: ffffffffffffffda RBX: 00007efc9c7e5fa0 RCX: 00007efc9c58f749
[ 2342.274655][ T4838] RDX: 0000000000002020 RSI: 00002000000020c0 RDI: 0000000000000004
[ 2342.274670][ T4838] RBP: 00007efc9d4b5090 R08: 0000000000000000 R09: 0000000000000000
[ 2342.274684][ T4838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2342.274698][ T4838] R13: 00007efc9c7e6038 R14: 00007efc9c7e5fa0 R15: 00007efc9c90fa28
[ 2342.274734][ T4838]  </TASK>
[ 2343.099071][T29843] usb 5-1: new low-speed USB device number 121 using dummy_hcd
[ 2343.099571][ T4844] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7085'.
[ 2343.346373][T29843] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 2343.361740][T29843] usb 5-1: config 0 has no interface number 0
[ 2343.368451][T29843] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 2343.384076][T29843] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 2343.396013][T29843] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 2343.406614][T29843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2343.427215][T29843] usb 5-1: config 0 descriptor??
[ 2343.458177][ T4840] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 2343.478679][T29843] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 2343.510259][T29843] usb 4-1: USB disconnect, device number 52
[ 2343.516321][ T4775] usb 7-1: new high-speed USB device number 110 using dummy_hcd
[ 2343.672999][ T4775] usb 7-1: Using ep0 maxpacket: 16
[ 2343.699061][ T4775] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 2343.736991][ T4775] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2343.757338][ T4775] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2343.770174][T29843] usb 5-1: USB disconnect, device number 121
[ 2343.800495][ T4775] usb 7-1: Product: syz
[ 2343.806438][ T6857] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[ 2343.834156][ T4775] usb 7-1: Manufacturer: syz
[ 2343.853392][ T4775] usb 7-1: SerialNumber: syz
[ 2343.879903][ T4775] usb 7-1: config 0 descriptor??
[ 2343.946007][ T4775] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2343.973844][ T4775] em28xx 7-1:0.0: DVB interface 0 found: bulk
[ 2344.042517][ T6857] usb 1-1: Using ep0 maxpacket: 16
[ 2344.054359][ T6857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 2344.105748][ T6857] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2344.152484][ T6857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2344.181162][ T6857] usb 1-1: Product: syz
[ 2344.202248][ T6857] usb 1-1: Manufacturer: syz
[ 2344.221442][ T6857] usb 1-1: SerialNumber: syz
[ 2344.261947][ T6857] usb 1-1: config 0 descriptor??
[ 2344.493098][T32473] usb 1-1: USB disconnect, device number 6
[ 2344.519813][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 2344.526222][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 2344.532731][ T4775] em28xx 7-1:0.0: unknown em28xx chip ID (242)
[ 2344.574656][  T622] usb 5-1: new high-speed USB device number 122 using dummy_hcd
[ 2344.742493][  T622] usb 5-1: Using ep0 maxpacket: 32
[ 2344.769232][  T622] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2344.802519][  T622] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[ 2344.821831][  T622] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2344.848884][  T622] usb 5-1: config 0 descriptor??
[ 2344.937525][ T4874] FAULT_INJECTION: forcing a failure.
[ 2344.937525][ T4874] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2344.950925][ T4874] CPU: 0 UID: 0 PID: 4874 Comm: syz.1.7093 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2344.950953][ T4874] Tainted: [L]=SOFTLOCKUP
[ 2344.950961][ T4874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2344.950972][ T4874] Call Trace:
[ 2344.950979][ T4874]  <TASK>
[ 2344.950987][ T4874]  dump_stack_lvl+0x189/0x250
[ 2344.951013][ T4874]  ? __pfx____ratelimit+0x10/0x10
[ 2344.951032][ T4874]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2344.951048][ T4874]  ? __pfx__printk+0x10/0x10
[ 2344.951087][ T4874]  should_fail_ex+0x414/0x560
[ 2344.951116][ T4874]  _copy_to_user+0x31/0xb0
[ 2344.951137][ T4874]  simple_read_from_buffer+0xe1/0x170
[ 2344.951162][ T4874]  proc_fail_nth_read+0x1b3/0x220
[ 2344.951179][ T4874]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2344.951195][ T4874]  ? rw_verify_area+0x2a6/0x4d0
[ 2344.951207][ T4874]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2344.951230][ T4874]  vfs_read+0x200/0xa30
[ 2344.951248][ T4874]  ? fdget_pos+0x247/0x320
[ 2344.951274][ T4874]  ? __pfx___mutex_lock+0x10/0x10
[ 2344.951291][ T4874]  ? __pfx_vfs_read+0x10/0x10
[ 2344.951308][ T4874]  ? __fget_files+0x2a/0x420
[ 2344.951328][ T4874]  ? __fget_files+0x3a0/0x420
[ 2344.951344][ T4874]  ? __fget_files+0x2a/0x420
[ 2344.951371][ T4874]  ksys_read+0x145/0x250
[ 2344.951400][ T4874]  ? __pfx_ksys_read+0x10/0x10
[ 2344.951420][ T4874]  ? do_syscall_64+0xbe/0xf80
[ 2344.951451][ T4874]  do_syscall_64+0xfa/0xf80
[ 2344.951471][ T4874]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2344.951484][ T4874]  ? clear_bhb_loop+0x60/0xb0
[ 2344.951501][ T4874]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2344.951518][ T4874] RIP: 0033:0x7f67a8d8e15c
[ 2344.951536][ T4874] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 2344.951552][ T4874] RSP: 002b:00007f67a9cde030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2344.951571][ T4874] RAX: ffffffffffffffda RBX: 00007f67a8fe5fa0 RCX: 00007f67a8d8e15c
[ 2344.951585][ T4874] RDX: 000000000000000f RSI: 00007f67a9cde0a0 RDI: 0000000000000005
[ 2344.951597][ T4874] RBP: 00007f67a9cde090 R08: 0000000000000000 R09: 0000000000000000
[ 2344.951606][ T4874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2344.951614][ T4874] R13: 00007f67a8fe6038 R14: 00007f67a8fe5fa0 R15: 00007f67a910fa28
[ 2344.951636][ T4874]  </TASK>
[ 2345.245828][ T4867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2345.263409][ T4867] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2345.281644][ T4867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2345.297548][ T4867] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2345.318212][ T4867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2345.380983][ T4867] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2345.421791][ T4867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2345.455841][ T4867] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2345.487474][ T4867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2345.509541][ T4867] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2345.544813][ T4775] em28xx 7-1:0.0: failed to get i2c transfer status from bridge register (error=-5)
[ 2345.579256][ T4775] em28xx 7-1:0.0: board has no eeprom
[ 2345.582676][ T6852] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[ 2345.669766][  T622] usbhid 5-1:0.0: can't add hid device: -71
[ 2345.688951][  T622] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 2345.713768][  T622] usb 5-1: USB disconnect, device number 122
[ 2345.752449][ T6852] usb 2-1: Using ep0 maxpacket: 16
[ 2345.774629][ T6852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 2345.801409][ T6852] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2345.822091][ T6852] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2345.831278][ T6852] usb 2-1: Product: syz
[ 2345.839693][ T6852] usb 2-1: Manufacturer: syz
[ 2345.844572][ T6852] usb 2-1: SerialNumber: syz
[ 2345.851827][ T6852] usb 2-1: config 0 descriptor??
[ 2345.861892][ T6852] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2345.891872][ T6852] em28xx 2-1:0.0: DVB interface 0 found: bulk
[ 2345.940342][ T4898] netlink: 'syz.4.7100': attribute type 6 has an invalid length.
[ 2346.067831][ T4878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2346.090930][T16571] usb 4-1: new full-speed USB device number 53 using dummy_hcd
[ 2346.090969][ T4878] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2346.122663][ T4775] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 2346.146760][ T4775] em28xx 7-1:0.0: dvb set to bulk mode.
[ 2346.164473][ T6857] em28xx 7-1:0.0: Binding DVB extension
[ 2346.189986][ T4775] usb 7-1: USB disconnect, device number 110
[ 2346.211933][ T4775] em28xx 7-1:0.0: Disconnecting em28xx
[ 2346.264101][T16571] usb 4-1: device descriptor read/64, error -71
[ 2346.310743][ T6857] em28xx 7-1:0.0: Registering input extension
[ 2346.319895][ T4775] em28xx 7-1:0.0: Closing input extension
[ 2346.344430][ T4775] em28xx 7-1:0.0: Freeing device
[ 2346.522482][T16571] usb 4-1: new full-speed USB device number 54 using dummy_hcd
[ 2346.663346][ T6852] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[ 2346.684653][T16571] usb 4-1: device descriptor read/64, error -71
[ 2346.829053][T16571] usb usb4-port1: attempt power cycle
[ 2347.232496][T16571] usb 4-1: new full-speed USB device number 55 using dummy_hcd
[ 2347.284133][T16571] usb 4-1: device descriptor read/8, error -71
[ 2347.352576][ T4775] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[ 2347.542565][T16571] usb 4-1: new full-speed USB device number 56 using dummy_hcd
[ 2347.562570][ T4775] usb 1-1: Using ep0 maxpacket: 32
[ 2347.574105][ T4775] usb 1-1: config 0 has an invalid interface number: 89 but max is 0
[ 2347.603368][ T4775] usb 1-1: config 0 has no interface number 0
[ 2347.617548][T16571] usb 4-1: device descriptor read/8, error -71
[ 2347.654027][ T4775] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 2347.672415][ T4775] usb 1-1: config 0 interface 89 has no altsetting 0
[ 2347.694661][ T4775] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[ 2347.734964][ T4775] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2347.755240][ T4775] usb 1-1: Product: syz
[ 2347.762434][ T4775] usb 1-1: Manufacturer: syz
[ 2347.772880][T16571] usb usb4-port1: unable to enumerate USB device
[ 2347.780846][ T4775] usb 1-1: SerialNumber: syz
[ 2347.787118][ T6852] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 2347.791509][ T4775] usb 1-1: config 0 descriptor??
[ 2347.822451][ T6852] em28xx 2-1:0.0: board has no eeprom
[ 2347.824715][ T4775] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 2347.860973][ T4775] em28xx 1-1:0.89: Video interface 89 found:
[ 2347.922441][ T6852] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 2347.955837][ T6852] em28xx 2-1:0.0: dvb set to bulk mode.
[ 2347.979536][  T622] em28xx 2-1:0.0: Binding DVB extension
[ 2348.197691][  T622] em28xx 2-1:0.0: Registering input extension
[ 2348.252590][ T6852] usb 7-1: new high-speed USB device number 111 using dummy_hcd
[ 2348.426437][ T4775] em28xx 1-1:0.89: unknown em28xx chip ID (0)
[ 2348.435598][  T622] usb 2-1: USB disconnect, device number 68
[ 2348.460217][  T622] em28xx 2-1:0.0: Disconnecting em28xx
[ 2348.466436][  T622] em28xx 2-1:0.0: Closing input extension
[ 2348.491376][  T622] em28xx 2-1:0.0: Freeing device
[ 2348.517547][ T6852] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 2348.542428][ T6852] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2348.570980][ T6852] usb 7-1: Product: syz
[ 2348.581875][ T6852] usb 7-1: Manufacturer: syz
[ 2348.593716][ T6852] usb 7-1: SerialNumber: syz
[ 2348.644463][ T4915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2348.657949][ T4915] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2348.728020][ T4775] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 2348.738285][ T4775] em28xx 1-1:0.89: board has no eeprom
[ 2348.802954][ T4775] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67)
[ 2348.810664][ T4775] em28xx 1-1:0.89: analog set to bulk mode.
[ 2348.817153][T29843] em28xx 1-1:0.89: Registering V4L2 extension
[ 2348.844108][ T4775] usb 1-1: USB disconnect, device number 7
[ 2348.862477][ T6857] usb 5-1: new high-speed USB device number 123 using dummy_hcd
[ 2348.889840][ T4775] em28xx 1-1:0.89: Disconnecting em28xx
[ 2348.948371][T29843] em28xx 1-1:0.89: Config register raw data: 0xffffffed
[ 2348.955644][T29843] em28xx 1-1:0.89: AC97 chip type couldn't be determined
[ 2348.963043][T29843] em28xx 1-1:0.89: No AC97 audio processor
[ 2348.970313][T29843] usb 1-1: Decoder not found
[ 2348.975335][T29843] em28xx 1-1:0.89: failed to create media graph
[ 2348.981664][T29843] em28xx 1-1:0.89: V4L2 device video103 deregistered
[ 2348.990532][T29843] em28xx 1-1:0.89: Registering snapshot button...
[ 2349.018237][T29843] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input140
[ 2349.028090][ T6852] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 2349.032946][T29843] em28xx 1-1:0.89: Remote control support is not available for this card.
[ 2349.054271][ T6852] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 2349.055804][ T6857] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 2349.076538][ T4775] em28xx 1-1:0.89: Closing input extension
[ 2349.082635][ T6857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2349.090688][ T4775] em28xx 1-1:0.89: Deregistering snapshot button
[ 2349.108839][ T6857] usb 5-1: config 0 descriptor??
[ 2349.118869][ T4775] em28xx 1-1:0.89: Freeing device
[ 2349.127425][ T6857] cp210x 5-1:0.0: cp210x converter detected
[ 2349.133519][T31741] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[ 2349.294773][T31741] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 2349.303460][T31741] usb 2-1: config 0 has no interface number 0
[ 2349.309665][T31741] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2349.320870][T31741] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2349.333231][T31741] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[ 2349.345968][T31741] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2349.357097][T31741] usb 2-1: config 0 descriptor??
[ 2349.533595][ T6857] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -71
[ 2349.544254][ T6857] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71
[ 2349.553491][ T6857] cp210x 5-1:0.0: GPIO initialisation failed: -71
[ 2349.575707][ T6857] usb 5-1: cp210x converter now attached to ttyUSB0
[ 2349.596615][ T4775] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[ 2349.606584][ T6857] usb 5-1: USB disconnect, device number 123
[ 2349.629403][ T6857] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 2349.654374][ T6857] cp210x 5-1:0.0: device disconnected
[ 2349.772463][ T4775] usb 1-1: Using ep0 maxpacket: 32
[ 2349.778572][T31741] prodikeys 0003:041E:2801.006E: unknown main item tag 0x0
[ 2349.788419][T31741] prodikeys 0003:041E:2801.006E: unknown main item tag 0x0
[ 2349.807248][ T4775] usb 1-1: config 0 has an invalid interface number: 196 but max is 0
[ 2349.823534][T31741] prodikeys 0003:041E:2801.006E: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input1
[ 2349.838467][ T4775] usb 1-1: config 0 has no interface number 0
[ 2349.854177][ T4775] usb 1-1: config 0 interface 196 has no altsetting 0
[ 2349.866184][T31741] hid_prodikeys: hid-prodikeys: failed to find output report
[ 2349.866184][T31741] 
[ 2349.889547][ T4775] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[ 2349.912749][ T4775] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2349.921488][ T4939] ==================================================================
[ 2349.929568][ T4939] BUG: KASAN: slab-use-after-free in report_descriptor_read+0xb5/0x100
[ 2349.937813][ T4939] Read of size 7 at addr ffff8880337373e0 by task fido_id/4939
[ 2349.945359][ T4939] 
[ 2349.947691][ T4939] CPU: 1 UID: 0 PID: 4939 Comm: fido_id Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2349.947715][ T4939] Tainted: [L]=SOFTLOCKUP
[ 2349.947721][ T4939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2349.947732][ T4939] Call Trace:
[ 2349.947739][ T4939]  <TASK>
[ 2349.947747][ T4939]  dump_stack_lvl+0x189/0x250
[ 2349.947769][ T4939]  ? __virt_addr_valid+0x1c8/0x5c0
[ 2349.947792][ T4939]  ? rcu_is_watching+0x15/0xb0
[ 2349.947812][ T4939]  ? __kasan_check_byte+0x12/0x40
[ 2349.947831][ T4939]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2349.947849][ T4939]  ? rcu_is_watching+0x15/0xb0
[ 2349.947869][ T4939]  ? lock_release+0x4b/0x3b0
[ 2349.947887][ T4939]  ? __virt_addr_valid+0x1c8/0x5c0
[ 2349.947909][ T4939]  ? __virt_addr_valid+0x4a5/0x5c0
[ 2349.947931][ T4939]  print_report+0xca/0x240
[ 2349.947949][ T4939]  ? report_descriptor_read+0xb5/0x100
[ 2349.947968][ T4939]  kasan_report+0x118/0x150
[ 2349.947987][ T4939]  ? report_descriptor_read+0xb5/0x100
[ 2349.948009][ T4939]  kasan_check_range+0x2b0/0x2c0
[ 2349.948028][ T4939]  ? report_descriptor_read+0xb5/0x100
[ 2349.948048][ T4939]  __asan_memcpy+0x29/0x70
[ 2349.948072][ T4939]  report_descriptor_read+0xb5/0x100
[ 2349.948093][ T4939]  ? __pfx_sysfs_kf_bin_read+0x10/0x10
[ 2349.948108][ T4939]  kernfs_fop_read_iter+0x451/0x6b0
[ 2349.948134][ T4939]  vfs_read+0x55a/0xa30
[ 2349.948152][ T4939]  ? __pfx_vfs_read+0x10/0x10
[ 2349.948170][ T4939]  ? do_sys_openat2+0x15a/0x200
[ 2349.948199][ T4939]  ksys_read+0x145/0x250
[ 2349.948215][ T4939]  ? __pfx_ksys_read+0x10/0x10
[ 2349.948231][ T4939]  ? do_syscall_64+0xbe/0xf80
[ 2349.948257][ T4939]  do_syscall_64+0xfa/0xf80
[ 2349.948281][ T4939]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2349.948297][ T4939]  ? clear_bhb_loop+0x60/0xb0
[ 2349.948314][ T4939]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2349.948331][ T4939] RIP: 0033:0x7fea06ea7407
[ 2349.948356][ T4939] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 2349.948371][ T4939] RSP: 002b:00007ffc2e552a40 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[ 2349.948387][ T4939] RAX: ffffffffffffffda RBX: 00007fea07585880 RCX: 00007fea06ea7407
[ 2349.948399][ T4939] RDX: 0000000000001000 RSI: 00007ffc2e552a90 RDI: 0000000000000004
[ 2349.948409][ T4939] RBP: 00005635fecca730 R08: 0000000000000000 R09: 0000000000000000
[ 2349.948419][ T4939] R10: 0000000000000000 R11: 0000000000000202 R12: 00005635fecc9930
[ 2349.948429][ T4939] R13: 00007ffc2e552a90 R14: 0000000000000004 R15: 00005635f6b194d8
[ 2349.948446][ T4939]  </TASK>
[ 2349.948452][ T4939] 
[ 2350.199775][ T4939] Allocated by task 31741:
[ 2350.204187][ T4939]  kasan_save_track+0x3e/0x80
[ 2350.208891][ T4939]  __kasan_kmalloc+0x93/0xb0
[ 2350.213479][ T4939]  __kmalloc_node_track_caller_noprof+0x575/0x820
[ 2350.219884][ T4939]  kmemdup_noprof+0x2b/0x70
[ 2350.224386][ T4939]  hid_open_report+0x208/0xee0
[ 2350.229142][ T4939]  pk_probe+0x1cb/0xf70
[ 2350.233319][ T4939]  hid_device_probe+0x416/0x7a0
[ 2350.238170][ T4939]  really_probe+0x26d/0xad0
[ 2350.242665][ T4939]  __driver_probe_device+0x18c/0x320
[ 2350.247950][ T4939]  driver_probe_device+0x4f/0x240
[ 2350.252968][ T4939]  __device_attach_driver+0x279/0x430
[ 2350.258330][ T4939]  bus_for_each_drv+0x251/0x2e0
[ 2350.263198][ T4939]  __device_attach+0x2b8/0x430
[ 2350.267960][ T4939]  device_initial_probe+0xa1/0xd0
[ 2350.272987][ T4939]  bus_probe_device+0x12a/0x220
[ 2350.277836][ T4939]  device_add+0x7b6/0xb80
[ 2350.282173][ T4939]  hid_add_device+0x272/0x3e0
[ 2350.286842][ T4939]  usbhid_probe+0xe13/0x12c0
[ 2350.291441][ T4939]  usb_probe_interface+0x668/0xc90
[ 2350.296566][ T4939]  really_probe+0x26d/0xad0
[ 2350.301071][ T4939]  __driver_probe_device+0x18c/0x320
[ 2350.306360][ T4939]  driver_probe_device+0x4f/0x240
[ 2350.311375][ T4939]  __device_attach_driver+0x279/0x430
[ 2350.316749][ T4939]  bus_for_each_drv+0x251/0x2e0
[ 2350.321614][ T4939]  __device_attach+0x2b8/0x430
[ 2350.326379][ T4939]  device_initial_probe+0xa1/0xd0
[ 2350.331418][ T4939]  bus_probe_device+0x12a/0x220
[ 2350.336268][ T4939]  device_add+0x7b6/0xb80
[ 2350.340601][ T4939]  usb_set_configuration+0x1a87/0x2110
[ 2350.346069][ T4939]  usb_generic_driver_probe+0x8d/0x150
[ 2350.351522][ T4939]  usb_probe_device+0x1c4/0x3c0
[ 2350.356369][ T4939]  really_probe+0x26d/0xad0
[ 2350.360870][ T4939]  __driver_probe_device+0x18c/0x320
[ 2350.366160][ T4939]  driver_probe_device+0x4f/0x240
[ 2350.371181][ T4939]  __device_attach_driver+0x279/0x430
[ 2350.376545][ T4939]  bus_for_each_drv+0x251/0x2e0
[ 2350.381394][ T4939]  __device_attach+0x2b8/0x430
[ 2350.386157][ T4939]  device_initial_probe+0xa1/0xd0
[ 2350.391184][ T4939]  bus_probe_device+0x12a/0x220
[ 2350.396046][ T4939]  device_add+0x7b6/0xb80
[ 2350.400398][ T4939]  usb_new_device+0xa39/0x1720
[ 2350.405166][ T4939]  hub_event+0x29b1/0x4ef0
[ 2350.409582][ T4939]  process_scheduled_works+0xad1/0x1770
[ 2350.415133][ T4939]  worker_thread+0x8a0/0xda0
[ 2350.419724][ T4939]  kthread+0x711/0x8a0
[ 2350.423789][ T4939]  ret_from_fork+0x599/0xb30
[ 2350.428372][ T4939]  ret_from_fork_asm+0x1a/0x30
[ 2350.433137][ T4939] 
[ 2350.435456][ T4939] Freed by task 31741:
[ 2350.439522][ T4939]  kasan_save_track+0x3e/0x80
[ 2350.444193][ T4939]  kasan_save_free_info+0x46/0x50
[ 2350.449224][ T4939]  __kasan_slab_free+0x5c/0x80
[ 2350.453982][ T4939]  kfree+0x1c0/0x660
[ 2350.457877][ T4939]  hid_close_report+0x632/0x720
[ 2350.462734][ T4939]  hid_device_probe+0x659/0x7a0
[ 2350.467586][ T4939]  really_probe+0x26d/0xad0
[ 2350.472093][ T4939]  __driver_probe_device+0x18c/0x320
[ 2350.477386][ T4939]  driver_probe_device+0x4f/0x240
[ 2350.482410][ T4939]  __device_attach_driver+0x279/0x430
[ 2350.487772][ T4939]  bus_for_each_drv+0x251/0x2e0
[ 2350.492629][ T4939]  __device_attach+0x2b8/0x430
[ 2350.497391][ T4939]  device_initial_probe+0xa1/0xd0
[ 2350.502416][ T4939]  bus_probe_device+0x12a/0x220
[ 2350.507261][ T4939]  device_add+0x7b6/0xb80
[ 2350.511592][ T4939]  hid_add_device+0x272/0x3e0
[ 2350.516266][ T4939]  usbhid_probe+0xe13/0x12c0
[ 2350.520857][ T4939]  usb_probe_interface+0x668/0xc90
[ 2350.525976][ T4939]  really_probe+0x26d/0xad0
[ 2350.530491][ T4939]  __driver_probe_device+0x18c/0x320
[ 2350.535786][ T4939]  driver_probe_device+0x4f/0x240
[ 2350.540815][ T4939]  __device_attach_driver+0x279/0x430
[ 2350.546185][ T4939]  bus_for_each_drv+0x251/0x2e0
[ 2350.551039][ T4939]  __device_attach+0x2b8/0x430
[ 2350.555810][ T4939]  device_initial_probe+0xa1/0xd0
[ 2350.560847][ T4939]  bus_probe_device+0x12a/0x220
[ 2350.565700][ T4939]  device_add+0x7b6/0xb80
[ 2350.570038][ T4939]  usb_set_configuration+0x1a87/0x2110
[ 2350.575499][ T4939]  usb_generic_driver_probe+0x8d/0x150
[ 2350.580957][ T4939]  usb_probe_device+0x1c4/0x3c0
[ 2350.585807][ T4939]  really_probe+0x26d/0xad0
[ 2350.590310][ T4939]  __driver_probe_device+0x18c/0x320
[ 2350.595598][ T4939]  driver_probe_device+0x4f/0x240
[ 2350.600622][ T4939]  __device_attach_driver+0x279/0x430
[ 2350.605987][ T4939]  bus_for_each_drv+0x251/0x2e0
[ 2350.610849][ T4939]  __device_attach+0x2b8/0x430
[ 2350.615615][ T4939]  device_initial_probe+0xa1/0xd0
[ 2350.620649][ T4939]  bus_probe_device+0x12a/0x220
[ 2350.625498][ T4939]  device_add+0x7b6/0xb80
[ 2350.629838][ T4939]  usb_new_device+0xa39/0x1720
[ 2350.634611][ T4939]  hub_event+0x29b1/0x4ef0
[ 2350.639030][ T4939]  process_scheduled_works+0xad1/0x1770
[ 2350.644573][ T4939]  worker_thread+0x8a0/0xda0
[ 2350.649163][ T4939]  kthread+0x711/0x8a0
[ 2350.653231][ T4939]  ret_from_fork+0x599/0xb30
[ 2350.657819][ T4939]  ret_from_fork_asm+0x1a/0x30
[ 2350.662600][ T4939] 
[ 2350.664946][ T4939] The buggy address belongs to the object at ffff8880337373e0
[ 2350.664946][ T4939]  which belongs to the cache kmalloc-8 of size 8
[ 2350.679175][ T4939] The buggy address is located 0 bytes inside of
[ 2350.679175][ T4939]  freed 8-byte region [ffff8880337373e0, ffff8880337373e8)
[ 2350.692631][ T4939] 
[ 2350.694955][ T4939] The buggy address belongs to the physical page:
[ 2350.701373][ T4939] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33737
[ 2350.710126][ T4939] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 2350.717670][ T4939] page_type: f5(slab)
[ 2350.721684][ T4939] raw: 00fff00000000000 ffff88813ffa6500 0000000000000000 dead000000000001
[ 2350.730268][ T4939] raw: 0000000000000000 0000000000800080 00000000f5000000 0000000000000000
[ 2350.738846][ T4939] page dumped because: kasan: bad access detected
[ 2350.745259][ T4939] page_owner tracks the page as allocated
[ 2350.750970][ T4939] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 23858746208, free_ts 23832604348
[ 2350.769458][ T4939]  post_alloc_hook+0x234/0x290
[ 2350.774221][ T4939]  get_page_from_freelist+0x2365/0x2440
[ 2350.779782][ T4939]  __alloc_frozen_pages_noprof+0x181/0x370
[ 2350.785588][ T4939]  alloc_pages_mpol+0x232/0x4a0
[ 2350.790447][ T4939]  allocate_slab+0x86/0x3b0
[ 2350.794964][ T4939]  ___slab_alloc+0xf2b/0x1960
[ 2350.799644][ T4939]  __slab_alloc+0x65/0x100
[ 2350.804054][ T4939]  __kmalloc_cache_noprof+0x41e/0x700
[ 2350.809426][ T4939]  add_sysfs_param+0x69e/0xa30
[ 2350.814185][ T4939]  kernel_add_sysfs_param+0x7f/0xe0
[ 2350.819381][ T4939]  param_sysfs_builtin+0x18a/0x230
[ 2350.824522][ T4939]  param_sysfs_builtin_init+0x23/0x30
[ 2350.829895][ T4939]  do_one_initcall+0x1fb/0x820
[ 2350.834655][ T4939]  do_initcall_level+0x104/0x190
[ 2350.839585][ T4939]  do_initcalls+0x59/0xa0
[ 2350.843910][ T4939]  kernel_init_freeable+0x334/0x4b0
[ 2350.849112][ T4939] page last free pid 10 tgid 10 stack trace:
[ 2350.855086][ T4939]  __free_frozen_pages+0xbc8/0xd30
[ 2350.860219][ T4939]  vfree+0x25a/0x400
[ 2350.864121][ T4939]  delayed_vfree_work+0x55/0x80
[ 2350.868970][ T4939]  process_scheduled_works+0xad1/0x1770
[ 2350.874514][ T4939]  worker_thread+0x8a0/0xda0
[ 2350.879104][ T4939]  kthread+0x711/0x8a0
[ 2350.883178][ T4939]  ret_from_fork+0x599/0xb30
[ 2350.887767][ T4939]  ret_from_fork_asm+0x1a/0x30
[ 2350.892534][ T4939] 
[ 2350.894852][ T4939] Memory state around the buggy address:
[ 2350.900508][ T4939]  ffff888033737280: 05 fc fc fc 00 fc fc fc fa fc fc fc 05 fc fc fc
[ 2350.908566][ T4939]  ffff888033737300: fa fc fc fc 05 fc fc fc 06 fc fc fc fa fc fc fc
[ 2350.916626][ T4939] >ffff888033737380: 05 fc fc fc fa fc fc fc 05 fc fc fc fa fc fc fc
[ 2350.924678][ T4939]                                                        ^
[ 2350.931867][ T4939]  ffff888033737400: fa fc fc fc fa fc fc fc 04 fc fc fc fa fc fc fc
[ 2350.939921][ T4939]  ffff888033737480: fa fc fc fc fa fc fc fc fa fc fc fc 00 fc fc fc
[ 2350.947972][ T4939] ==================================================================
[ 2350.957855][ T4775] usb 1-1: Product: syz
[ 2350.962048][ T4775] usb 1-1: Manufacturer: syz
[ 2350.966876][ T4775] usb 1-1: SerialNumber: syz
[ 2350.974191][ T4775] usb 1-1: config 0 descriptor??
[ 2350.976740][ T4939] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 2350.976764][ T4939] CPU: 1 UID: 0 PID: 4939 Comm: fido_id Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2350.976797][ T4939] Tainted: [L]=SOFTLOCKUP
[ 2350.976806][ T4939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2350.976821][ T4939] Call Trace:
[ 2350.976831][ T4939]  <TASK>
[ 2350.976841][ T4939]  dump_stack_lvl+0x99/0x250
[ 2350.976879][ T4939]  ? __asan_memcpy+0x40/0x70
[ 2350.976913][ T4939]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2350.976938][ T4939]  ? __pfx__printk+0x10/0x10
[ 2350.976975][ T4939]  vpanic+0x237/0x6d0
[ 2350.977001][ T4939]  ? __pfx_vpanic+0x10/0x10
[ 2350.977025][ T4939]  ? preempt_schedule_common+0x83/0xd0
[ 2350.977056][ T4939]  ? preempt_schedule+0xae/0xc0
[ 2350.977088][ T4939]  panic+0xb9/0xc0
[ 2350.977113][ T4939]  ? __pfx_panic+0x10/0x10
[ 2350.977145][ T4939]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 2350.977176][ T4939]  ? report_descriptor_read+0xb5/0x100
[ 2350.977221][ T4939]  check_panic_on_warn+0x89/0xb0
[ 2350.977254][ T4939]  ? report_descriptor_read+0xb5/0x100
[ 2350.977280][ T4939]  end_report+0x6f/0x140
[ 2350.977305][ T4939]  kasan_report+0x129/0x150
[ 2350.977336][ T4939]  ? report_descriptor_read+0xb5/0x100
[ 2350.977368][ T4939]  kasan_check_range+0x2b0/0x2c0
[ 2350.977394][ T4939]  ? report_descriptor_read+0xb5/0x100
[ 2350.977421][ T4939]  __asan_memcpy+0x29/0x70
[ 2350.977457][ T4939]  report_descriptor_read+0xb5/0x100
[ 2350.977484][ T4939]  ? __pfx_sysfs_kf_bin_read+0x10/0x10
[ 2350.977507][ T4939]  kernfs_fop_read_iter+0x451/0x6b0
[ 2350.977542][ T4939]  vfs_read+0x55a/0xa30
[ 2350.977568][ T4939]  ? __pfx_vfs_read+0x10/0x10
[ 2350.977593][ T4939]  ? do_sys_openat2+0x15a/0x200
[ 2350.977628][ T4939]  ksys_read+0x145/0x250
[ 2350.977655][ T4939]  ? __pfx_ksys_read+0x10/0x10
[ 2350.977679][ T4939]  ? do_syscall_64+0xbe/0xf80
[ 2350.977714][ T4939]  do_syscall_64+0xfa/0xf80
[ 2350.977747][ T4939]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2350.977770][ T4939]  ? clear_bhb_loop+0x60/0xb0
[ 2350.977796][ T4939]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2350.977819][ T4939] RIP: 0033:0x7fea06ea7407
[ 2350.977839][ T4939] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 2350.977867][ T4939] RSP: 002b:00007ffc2e552a40 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[ 2350.977892][ T4939] RAX: ffffffffffffffda RBX: 00007fea07585880 RCX: 00007fea06ea7407
[ 2350.977910][ T4939] RDX: 0000000000001000 RSI: 00007ffc2e552a90 RDI: 0000000000000004
[ 2350.977926][ T4939] RBP: 00005635fecca730 R08: 0000000000000000 R09: 0000000000000000
[ 2350.977942][ T4939] R10: 0000000000000000 R11: 0000000000000202 R12: 00005635fecc9930
[ 2350.977958][ T4939] R13: 00007ffc2e552a90 R14: 0000000000000004 R15: 00005635f6b194d8
[ 2350.977984][ T4939]  </TASK>
[ 2350.979452][ T4939] Kernel Offset: disabled