last executing test programs:

19m12.836270991s ago: executing program 4 (id=5175):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4a}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xd, 0x0, &(0x7f0000000100)="0000000000000000000051229d", 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x586}, 0x50)

19m11.957182031s ago: executing program 4 (id=5176):
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, 0x0, &(0x7f0000000540), 0x6c}, 0x38)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x1e, 0x4, 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x6, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0xffffffff, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0x6, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x5, 0xb1c, 0x1, 0x200, 0xfff, 0xfff]}, 0x45c)
write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x918)
syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

19m11.134491548s ago: executing program 4 (id=5181):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1}, 0x37)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x48005}, 0x8080)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$packet(0x11, 0x3, 0x300)
add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580), 0x0, 0xfffffffffffffffe)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000004085000000820000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r1, r6, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20)
sendmsg(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0)

19m9.987774267s ago: executing program 4 (id=5184):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x1000, 0x3fd, 0x1}, 0x48)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0/file0\x00', r1}, 0x18)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (fail_nth: 4)

19m8.726430253s ago: executing program 4 (id=5186):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b000000070000000100010008"], 0x48)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000000), 0x1000000000000232, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_emit_ethernet(0x56, &(0x7f0000000080)={@random="af0789e1f28b", @empty, @void, {@canfd={0xd, {{0x4, 0x0, 0x1}, 0xa, 0x2, 0x0, 0x0, "e6b32aa824385bf0da1be296cad7ab271eb7677a3187bbbbeaf19addb6ebd475544f6f32af034f8ce175d8ee94029da367fabbffbd8dce7adf580f7290eb1db8"}}}}, &(0x7f0000000000)={0x1, 0x2, [0x1ff, 0xd69, 0x778, 0x6d3]})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000300))
shmget$private(0x0, 0x4000, 0x200, &(0x7f00000f8000/0x4000)=nil)

19m8.477227301s ago: executing program 4 (id=5191):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000019100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000090a010100000000000000000000000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021080003400000014108000f"], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x8000000)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}})
ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000540)={0x1, 0x0, [{0x400000f4, 0x0, 0x9}]})

19m8.099143723s ago: executing program 32 (id=5191):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000019100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000090a010100000000000000000000000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021080003400000014108000f"], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x8000000)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}})
ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000540)={0x1, 0x0, [{0x400000f4, 0x0, 0x9}]})

5m22.508466705s ago: executing program 1 (id=7895):
syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200"/62, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f", 0x7, 0xfffffffffffffffe)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffffffffff280012800b"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f0000000180)={0x3900000000000000, 0x8080000, 0x1, 0xa, 0x19})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

5m22.178905377s ago: executing program 1 (id=7897):
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0x8, "afacd2119ca94c6b377526aeb5ab2a81fc0e3d99f20900"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
gettid()
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x801)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4)

5m20.220102171s ago: executing program 1 (id=7900):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @local}}, 0x80000, 0x9, 0x300, 0x0, 0x55}, 0x9c) (fail_nth: 2)

5m20.121226766s ago: executing program 1 (id=7901):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000300)={0xdf, 0x0, 0x8000})
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x10200, 0x0, &(0x7f0000d1e000/0x2000)=nil})
open(&(0x7f0000000300)='.\x00', 0x0, 0x0) (async)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ustat(0xfffffffeffffffff, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000000100)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x40, 0x3a, 0x0, @private2, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [@dstopts={0x0, 0x8, '\x00', [@padn={0x1, 0xffffff84, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) (async)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000140)={0x5, 0x4, 0xc, 0x7fffffff, @vifc_lcl_addr=@remote, @broadcast}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_matches\x00') (async)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_matches\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
syz_emit_ethernet(0x7e, &(0x7f00000004c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53aff", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x3, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x2080}}]}]}}}}}}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
mkdir(&(0x7f0000000000)='./control\x00', 0x0) (async)
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
rmdir(&(0x7f0000000040)='./control\x00') (async)
rmdir(&(0x7f0000000040)='./control\x00')
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x2, 0x0, 0x0, 0x800081, 0xffffffff})
setgid(0x0) (async)
setgid(0x0)
sendmsg$nl_route(r5, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)

5m19.344092966s ago: executing program 1 (id=7903):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40)
getdents64(r2, 0x0, 0x0)
write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000000, 0x1, 0x2, '\x00', 0x8}}, 0x2a)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b00000000000000000000000000000000000000000200000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000200000000c0000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0020000002000000000000000000000000000000010000000000000007"], 0x0, 0x0, 0x0})

5m18.383930468s ago: executing program 1 (id=7907):
r0 = syz_io_uring_setup(0x822, &(0x7f0000000000)={0x0, 0xbdba, 0x80, 0x1, 0x34e}, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000036f274000000740f9c122426b819dc9e0fc9155300000000009500000000000000cdc564fe7f09e70a8c763e9ea323142ac1e6be01c7515fdf494c43928348938c63ba90086fa56b668bf37338939d9927af17e2d4885c10c50ff5e5e22766576643b431b93e1de2d94983d40a71ce521f3a526ef9bbf4bbf675d0d59f2bf8023dbe556848e99941e85776d0761f75347c2c3956ff3e5f8e435ecdad21847718087e508c5503d43734d01a5c4c0d6dcc91eef25c12c859afb932a5d336630f257d02b00daf07d2e86f1412a498283d7274c1be7fc5aa0af0258df43136fa71bb6060206cde92b7e7c296a34c7a24d14486f1fb81cfd1bc5bab52028c3377b2403ec8d63af1cecf7f9221db4466035af4b1386537045e3c18d5d32d69c1665b5c69472eddba12ac7a9f46028e4f9d808349371c80cd65dbd748f2b0996e94ec5950c59dc513052715be75285b647d235709789cc7415cb093d5349dd476bef0bfd8fbee641417b3b8a72c710fb15e27a7984d9f5530157c60f0beb3a783f6ed1b16b748fafcf0d15a6dfe501a8fe72bae68ef2a1e44e17b1293ef8f7e940e215ec4ba9907dfac75a43a536bc652f1237f33bf9611e5656f492beae746a515a76976a7b9b472000000c9fb10ced266b247ef6ee4aef5fc6830d8e702edce5d5c3cd7b37c5e8350e051bddba1666dba9d906e"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10)
r4 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x2]}, 0x8)
faccessat2(r4, &(0x7f0000000000)='\x00', 0x2, 0x1100)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x1, 0x78)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0)
r5 = gettid()
r6 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffd000/0x3000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x5000)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x3)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=<r7=>0x0)
timer_settime(r7, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r8 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r8, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r9 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10)
sendmsg$tipc(r9, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10)
connect$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0)

5m16.759263652s ago: executing program 33 (id=7907):
r0 = syz_io_uring_setup(0x822, &(0x7f0000000000)={0x0, 0xbdba, 0x80, 0x1, 0x34e}, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000036f274000000740f9c122426b819dc9e0fc9155300000000009500000000000000cdc564fe7f09e70a8c763e9ea323142ac1e6be01c7515fdf494c43928348938c63ba90086fa56b668bf37338939d9927af17e2d4885c10c50ff5e5e22766576643b431b93e1de2d94983d40a71ce521f3a526ef9bbf4bbf675d0d59f2bf8023dbe556848e99941e85776d0761f75347c2c3956ff3e5f8e435ecdad21847718087e508c5503d43734d01a5c4c0d6dcc91eef25c12c859afb932a5d336630f257d02b00daf07d2e86f1412a498283d7274c1be7fc5aa0af0258df43136fa71bb6060206cde92b7e7c296a34c7a24d14486f1fb81cfd1bc5bab52028c3377b2403ec8d63af1cecf7f9221db4466035af4b1386537045e3c18d5d32d69c1665b5c69472eddba12ac7a9f46028e4f9d808349371c80cd65dbd748f2b0996e94ec5950c59dc513052715be75285b647d235709789cc7415cb093d5349dd476bef0bfd8fbee641417b3b8a72c710fb15e27a7984d9f5530157c60f0beb3a783f6ed1b16b748fafcf0d15a6dfe501a8fe72bae68ef2a1e44e17b1293ef8f7e940e215ec4ba9907dfac75a43a536bc652f1237f33bf9611e5656f492beae746a515a76976a7b9b472000000c9fb10ced266b247ef6ee4aef5fc6830d8e702edce5d5c3cd7b37c5e8350e051bddba1666dba9d906e"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10)
r4 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x2]}, 0x8)
faccessat2(r4, &(0x7f0000000000)='\x00', 0x2, 0x1100)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x1, 0x78)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0)
r5 = gettid()
r6 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffd000/0x3000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x5000)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x3)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=<r7=>0x0)
timer_settime(r7, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r8 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r8, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r9 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10)
sendmsg$tipc(r9, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10)
connect$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0)

3m12.749414735s ago: executing program 0 (id=8386):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

3m12.584802809s ago: executing program 0 (id=8387):
socket$netlink(0x10, 0x3, 0x0)
connect$pppoe(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1\x00', <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0xa4, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffc, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x8}}]}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3ff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xb, 0xc98}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0xa4}, 0x1, 0x0, 0x0, 0x600}, 0x0)

3m11.732140743s ago: executing program 0 (id=8388):
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x63)

3m11.550373708s ago: executing program 0 (id=8392):
socket$inet6_udplite(0xa, 0x2, 0x88)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0x81, 0x0, @multicast1}}}}}, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x5, 0x48000)
ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000100)=""/184)
r3 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800)
r4 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_msfilter(r4, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10)

3m10.625011034s ago: executing program 0 (id=8397):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
syz_io_uring_setup(0x468d, &(0x7f0000000680)={0x0, 0x9b92, 0x8, 0xfffffffe, 0x226, 0x0, r0}, &(0x7f0000000300), &(0x7f0000000380))
write$binfmt_script(r0, &(0x7f0000000100), 0xfffffd9d)
r1 = socket(0x1e, 0x4, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000580)={&(0x7f00000001c0), 0xc, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="d80000000314000026a57000fbdbdf250900020073797a320000000008004100727865001400330070696d367265673000000000000000000900020073797a32000000000800410072786500140033007465616d5f736c6176655f31000000000900020073797a30000000000800410072786500140033006e657464657673696d300000000000000900020073797a3100000000080041007278650014003300776732000000000000000000000000000900020073797a3100000000080041007278650014003b0076657468305f746f5f7465616d000000"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004)
connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10)
sendfile(r1, r0, 0x0, 0x8010002b)

3m9.334978247s ago: executing program 0 (id=8403):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400448c0}, 0x0)
syz_open_dev$sndpcmp(0x0, 0x1ff, 0x181800)

2m52.59658193s ago: executing program 34 (id=8403):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400448c0}, 0x0)
syz_open_dev$sndpcmp(0x0, 0x1ff, 0x181800)

2m49.20066673s ago: executing program 2 (id=8482):
socket$nl_generic(0x10, 0x3, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004080}, 0x0)

2m49.114716788s ago: executing program 2 (id=8484):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
socket$inet(0x2, 0x3, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x6734, 0x80, 0x40000, 0x34f}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f00000001c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
io_uring_enter(r1, 0x57de, 0x0, 0x0, 0x0, 0x0)

2m47.07494025s ago: executing program 2 (id=8488):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0x3d}, 0x4e20, 0x3, 'dh\x00', 0x1, 0x800002, 0x6e}, 0x2c)
lsm_get_self_attr(0x65, 0x0, 0x0, 0x0)
mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7e}, {@private=0xa010102, 0x4e20, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44)

2m46.063690926s ago: executing program 2 (id=8491):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f000000a540), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f000000a780)={0x0, 0x0, &(0x7f000000a740)={&(0x7f000000a600)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20042841}, 0x4880)

2m45.796652926s ago: executing program 2 (id=8493):
socket$nl_generic(0x10, 0x3, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004080}, 0x0)

2m45.231802066s ago: executing program 2 (id=8496):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
ustat(0x1, &(0x7f0000000040))
r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d09901020301090236000100"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="000c0100000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
listen(r1, 0xfffffffd)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
r3 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vxcan0\x00'})
sendmmsg$sock(r3, &(0x7f00000048c0)=[{{&(0x7f0000000300)=@caif, 0x80, &(0x7f0000000380)=[{&(0x7f0000000100)="57d2eaad506afc36887a673d64e9406a2df1e483f59e7de91ae7dda56d", 0x1d}, {0x0}, {0x0}], 0x3, &(0x7f0000000740)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x3c}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x60}}, {{&(0x7f00000007c0)=@pptp={0x18, 0x2, {0x1, @remote}}, 0x80, &(0x7f0000001980)=[{0x0}, {&(0x7f00000028c0)="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", 0x3f0}, {&(0x7f0000001840)="4dac368de46605255bde84b5d12022e2f47d80ea10d16f6f1a4e0499542e722f2c13754676da8c78b025318942e24eef4f4d873f4f57196553c27fbdd0758f220b9ba226cfe2b2fa1c6c7f465e53e9e8516158514bca82c3249240a5e44db454c850d44049c7d966eb491a8731c7a28459b3ec0d89d17a0ae8e13fe7c4b94013c7441f99099172228c1b2c95eed269aa982effeebcff22e25650a1c3815ac4f8bd5cfc2707cb30ee1491a2cbbf9bd937cac173b8cb7575d53a36b4", 0xbb}, {&(0x7f0000001940)}], 0x4}}, {{&(0x7f0000001ac0)=@llc={0x1a, 0x1, 0x6, 0x3, 0xe, 0xfe, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x80, &(0x7f0000001a40), 0x0, &(0x7f0000001c40)=[@mark={{0x14, 0x1, 0x24, 0xfffffffc}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x200}}], 0x90}}], 0x3, 0x0)
ioctl$int_in(r1, 0x5452, 0x0)
r4 = accept4(r1, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f0000001000), 0x581, 0x40000000, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000001f00)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203"], 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000004b00)=ANY=[@ANYBLOB="1800000000000000000000000000000095005d19ebe343e4e2000000000000d13ae3f9b2ab573b37a3aaf8cab40f4eb754679911e67e500fff63a892fda110f3fd31cf6d897ea28d796635add343c41986702a8c6498626b6dc8fbcdc025fb237a5323f56e2e90ae2bad1b341d518c18277e1c9f0fd33641ce74809abddcf0c96d992ef5302804793b134a0000000011288de6fdbebef1523820f28d6ac3b419eb8e2637a7bb6bdc5b7dce8ee237f274b718d92f936df5d7e7f53720d9d995098f5272e04187154142f68d4b4bd2a9738d592a0aa5e745b62ab940bb71af"], &(0x7f00000003c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r5}, 0x10)
mkdir(&(0x7f0000002880)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)

2m29.142758886s ago: executing program 35 (id=8496):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
ustat(0x1, &(0x7f0000000040))
r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d09901020301090236000100"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="000c0100000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
listen(r1, 0xfffffffd)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
r3 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vxcan0\x00'})
sendmmsg$sock(r3, &(0x7f00000048c0)=[{{&(0x7f0000000300)=@caif, 0x80, &(0x7f0000000380)=[{&(0x7f0000000100)="57d2eaad506afc36887a673d64e9406a2df1e483f59e7de91ae7dda56d", 0x1d}, {0x0}, {0x0}], 0x3, &(0x7f0000000740)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x3c}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x60}}, {{&(0x7f00000007c0)=@pptp={0x18, 0x2, {0x1, @remote}}, 0x80, &(0x7f0000001980)=[{0x0}, {&(0x7f00000028c0)="1ff790c75eb841d0520eeb28140185e533a4e3a0531f64a473e0393a5a9c174a8f32d0e6eb661646423b26972d3474a54bfa82b42bf942d65613229dd62b31a1e494715e76eeb3d137c4e65fab20bc80fa05f36098f1ca5faee1af158cd86521d5725ae2931b0ffb80403e96170c762dbb7250e045b0cfe34c1f4898dd7c48c41e6751d9301bbaf4a0eabe10a5845b51a9acfc2cc3e6b4c6532c980807bcb3268b268babcb4061bc87d4fb33f72cedb6b13d24e88753debddf82216c93d5e5def2cd7a3cb05edff73b93a45f73661e7f7c9f675d6e4b41236d6e89229859134010e14ac7d92bfe8d2c719a2aace7dc3ce59aa092cccb89862c0a9411893ace915596d631afba09dbb5dc19d1a9dceb39a300ac61eada333b859e4a24e7b67e5ebf38834b9a18ad8f986e9f3ba9c3a0a9e3c5a2c021789fb6fbbd578cc6dcd0d647b7025fcae1199eae03bd92165efaf9cb86991356bb60225748fb63223e39a01f4caea844aaa611989490cebe472df9a98d1669f472677b19aecfcd0f64fd4e3f89ea2666b7862155b35017ec41c2a23803b41557da88e9a41eef97a7ad4d1eff6210b0bab07f068d1522d08e2829d923ee7ec7232f9b86c97ae323ed85f62018a791072f9ebeeebffe271d60a78b3604da12eaa398d68796352b8d7e525b1adc7be252432c4d3a215516c71b41d953ff73b651086a78a97ddebf42cb2d16e89bc1d6654bc48acdfbdd7a1337971b7c20fa9f40de73e5dc499a285aff4e3ab70ff31a9e734cb3a97ef77a6d3325321f3dda45cb780f3387cfe454266848152634aea67f92b8cd7cc198f8a5880fa6f9a678e24b517b2119e5ca0ec600aa101af15b4df8cb978bb33043700f64a7236d4402ec01c8a84f1af1d1cfeb6ad692bc2b797302cf0bb8aab64046fc0184094948c23e151fa88ddd35785127431de2a736a9622b030bacbfae8a7e9ab7642d4823f2c3a9a1840f2de83c2aafa9f44afe4c7ed112e2322a1bc60810fa3064b3b1926888d6b7fe820a0e0896059aa86baa9d56b443065e8d76715545d012daa305c7d8a7a638f7f2a166b95d1e83cf6864798b1e81926a26ff7d7911b66eb8e3c726bfaa5eb829816a501d4a0ee91d760d4a9a37509fbe6b2070edf99cc11ecdb657775188eab56f2017081a13c64766430188a21ef7769d5ff8690e010d4585fac0d541734b1b3ff98656aa82df56a1fc8f7da991065b56d7f5fe9bb7a3ece3b31a9ebc37d3fed211527b6858c6e306e2a5c84e87197537e788910d78af0b807682cd39947a6fc1b4670dcd0cd9d15b51004b2208f738463ce0f30a67863e17ae2ed0bdb8e6642e0307a9eda1d9f0044c94d19b07544896a8c2790ae8f7d6edf38b62e7c58449ad44c995d5205f2eb2f33b7d8eee8e3e20d8be5f2082465d4ba3", 0x3f0}, {&(0x7f0000001840)="4dac368de46605255bde84b5d12022e2f47d80ea10d16f6f1a4e0499542e722f2c13754676da8c78b025318942e24eef4f4d873f4f57196553c27fbdd0758f220b9ba226cfe2b2fa1c6c7f465e53e9e8516158514bca82c3249240a5e44db454c850d44049c7d966eb491a8731c7a28459b3ec0d89d17a0ae8e13fe7c4b94013c7441f99099172228c1b2c95eed269aa982effeebcff22e25650a1c3815ac4f8bd5cfc2707cb30ee1491a2cbbf9bd937cac173b8cb7575d53a36b4", 0xbb}, {&(0x7f0000001940)}], 0x4}}, {{&(0x7f0000001ac0)=@llc={0x1a, 0x1, 0x6, 0x3, 0xe, 0xfe, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x80, &(0x7f0000001a40), 0x0, &(0x7f0000001c40)=[@mark={{0x14, 0x1, 0x24, 0xfffffffc}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x200}}], 0x90}}], 0x3, 0x0)
ioctl$int_in(r1, 0x5452, 0x0)
r4 = accept4(r1, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f0000001000), 0x581, 0x40000000, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000001f00)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203"], 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000004b00)=ANY=[@ANYBLOB="1800000000000000000000000000000095005d19ebe343e4e2000000000000d13ae3f9b2ab573b37a3aaf8cab40f4eb754679911e67e500fff63a892fda110f3fd31cf6d897ea28d796635add343c41986702a8c6498626b6dc8fbcdc025fb237a5323f56e2e90ae2bad1b341d518c18277e1c9f0fd33641ce74809abddcf0c96d992ef5302804793b134a0000000011288de6fdbebef1523820f28d6ac3b419eb8e2637a7bb6bdc5b7dce8ee237f274b718d92f936df5d7e7f53720d9d995098f5272e04187154142f68d4b4bd2a9738d592a0aa5e745b62ab940bb71af"], &(0x7f00000003c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r5}, 0x10)
mkdir(&(0x7f0000002880)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)

2m27.394944308s ago: executing program 3 (id=8577):
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560a84606080ffe020590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75ed", 0x36}], 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r0, 0xffffc000)
socket$rds(0x15, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r3 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000080)={r3})
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00')
pread64(r4, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3)
preadv(r4, 0x0, 0x0, 0xc9, 0x1)
madvise(&(0x7f00005ce000/0x3000)=nil, 0x3000, 0xb)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x51)
pipe2$watch_queue(0x0, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'})
set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0x14, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0)

2m25.685109186s ago: executing program 3 (id=8583):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2m24.683010721s ago: executing program 3 (id=8588):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/70, 0x46}}], 0x1, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0x5, 0x4)
syz_emit_ethernet(0x2a, &(0x7f0000002840)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x1c, 0x68, 0x0, 0x3, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x8}}}}}, 0x0)

2m23.660961694s ago: executing program 3 (id=8592):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40)
getdents64(r4, 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="7b1713b4c6f02da7493fb6859f0143c68a58166f472c5078104b859bc37f9a49a8f85c9101df3b2736ff9bebcb1a3c2f570b28279b8ff7afdef7451b3d10b4578c2e81784b6e4f410800d997f0689546cee0852e9e9c64c1f95df7b136243cf7aee1b8e7a4e1d6e6fc01337370f0dfc098d975e9a6f90a08f5b845054d1e1fc81adadbf2836ff758bade0484377855b05b3556a91827599638458ad30baea03240b302638b88423ecaba6da1e40f6f1b24d60dde1652f2d5f818af43d49dd55c4eadea945e9b6aa744dca07ec2e00320bef5b045414836941469129670c4cdb953ed61efeeae2ced1b7cb3e7fa4c93cce5623a9e33c69d068b801fd1369aba759e2829c67c705853262fef6669aab956f0f733619dd361be5e1414c7e7ff6218e330156d609fa9f3244a0a4fb678a58e70b86f6dabc3331f755b786c42b4198149941a7a58c83f1f2811209025269c5ffcbe0c34ac98cc091cec2c993bca0aa8400ff9e39cc9fba8dda886f95357957bbad8bb850ab92f7aa9bebcdb0ef188749a1742e5597d199f3ccdc2d807bf757da45acc93e3e9645a1036cb041b3c38dafef367b8dae802bbbc03bacb905d40e1da78591687b416ee380103a670aa8f722c76e13f7f0e3effbb37f15a821b8315fe541e3ffc09289d96db1dfa8861e5da41c812b54ee20ca8b3180f2f46db56954791465cb572de0cce16d789d6fff216ca46977ed724dc0cc8cef7b295ebb2998a5c4662e32ae1001e59f3bfefcd72543bfe1aa6688d65c547089ec0fe1f1d9610095a5a4008b14f46775c368417376ee143856031947db71c455dc40eeeda210fbf258452781ce46e51f6df683a7918770f73d324d9401648d271cb9a7e919401567e400fec420cf363444a78eea03e73176abd6546e1657945aa88f64a21e07fc23edd74512cf89781e8ffe9bb1601ab25d31801332a6c5be9cebb6cb08207bb832106553ea9fc19b4b4f1f0cd55efc2925ffef75e9b12f06b5a7496506a274ca25f88398a1734b7013c3f78a2e49ef0d946a1aff362e37c9b5f5473de11401097722adda87944ee3eeb1bdde60e97484af4d2e5f8b0a9c63bb8bb99461b16edd824add1caf9d5247811cc4f6b48004774f1a4fe4dd125ddbfd8b69ff3ee314aeb445bee9f217a2f5a9e0e84ccd8718471f949086df6cdcbf95e568317e31dd01be1b826cf9a09373b16935fc864794a3886a2f4aacc42135db85f8921916a10aa7111a686979e2a5c9959cafc9774c416c4dfe0b9e06657feb2fbc31e7c11f6e2841680986557c1f2b1ec3c0fcc6a749a3c97a5b370550ab7110e25851b13c0b75a7fb0cd3c4659878209867659c216b467bdcf51e786a59fad084886490fc77e186ab827d844d0ac4682651fc4043f8e87b905532a53017ada44feee1f89f9bc6d2a8b144e721a479f7b90acb91033774f4c12df633548a9097c791ec7e80fa2607c86fce6e9abcae1296528b8488ccf18a4bb0fc9b50c15d294e8d380465465b4eeae26eb6800faba611785cd2ff95ca1923dfa47d5923f89e4eadb612002caceaebbe779c4e3a3833455752eae63689ab8dc03db63d82feeab7f1162eed5909b69ccd5abeb9c071da82cfc76cc692a51d99e0c4bdfa6c81c9878e893a77e1e7105e7910827ddb3353612fa8d5e547b43b5abfe50829c1eb7bfda1731db2a9a1e8f0fc298dfa7009679489f9d9323338b7e59f1e48419ca531d88170a5a1995f576aa125edae9e9ea26f6e9c4bc26323b7db0998c528a7b343ccd87ff44c77e6cfc0a324cc1d4ea79c30015f0caaeccd46e5db580aa5ce8030c2b13b37494557da58abbdc7ce9fc9afa49ce0e8a7a6fa058db210ed654203e7879cf5004ebec57522ed34481b749554b36cd7171209b0763e110096704604f2d3f28c5ddc66c877e3ab63f36137d5a67cbf872aa6af79cb3a66c9040009b5e1c7b718c1b8788156b82d6d800dbe9fc3d16c812a963c73599b79efb89aa74bdbd9b1a2dc0b8ad853f79c0867a3a45d7a1645059171877687a72dd5ed4213c0ab84ef6185e7935346a84450887bdb2b216883e907b13b03c133adc04ab3c5f60209bd90aad3d94443105f08f0ee1b2231e1a1f8cce71de74d5308b78b5d99ce4ad4573faba9fab48bc1615f14d453c67714b99f274de041512b07b885679e6f89f481c28b082084b853c9afcda31def2898284d6ca28fb124df67142821c9705e28093ded60992d9587fb466df839aa2a4973dd48f9372a55da6592646fc918e533955566a2d8dc59277308223aea4dbe0daf839f95516b8995e9eec87df1df9d38693e0824dca7423b08d553b0ae1c5c44533b918eaa02dd17b4c8ce515ae7de410970f670e17b5e3c0a207fb8464d5d442694a271d593fc23ac19619bac32ac17cc6705ce2e6262361eba24277a471602e7ca57cc614ee116e60a9e0b6ac5e3228ea2c650baf1a09e9e5c7a1b25a078d1d11a673d88f6ee33e50d036d7fe4b9c06adc70aede2e35c6738b255690ed3f7a8d2d14e36e360f3bb66978d6cfcfc41887c751c0efc9325d4485a2f561060413fe6af4ce40d87a476201f15a584fc7ba18ddfef5f1d729d5f544c2c6b06befccb444f0408451089f20b06f05ab7d6702b97819b0eff6fb090f21afb3076558e692920053702fc2348f8dade0cb2b007f38d6dcd4ed3bb42553b1bd684791743a1941e5bf2ed234f44be64a95b485a3e949538a40542f25ca4bfce44e291037ab282082f02157a96f4ca0a0c5cd39215fd07461093a4d87a7979f7aa97142bf5b9ef71db537f9acc90f22ca2ded5c1ecd1ba972d05db7f71e8466085c9b3e975fa3a948f2c4049d1a8e46f71157017a3a74ad25e215dcfe7a4c5cb0a7baea0b0ec60c5df82555c553ac60dd39174c721edc0304b836a4de539c3ee55401e13848018f889cc4a0fcd01d9f4978eb730fb1b4a94ede0283f8c95062f01c8c8a3169b2d5c50cdd4f3a248d80a26c950b4036fc6ffefaf5101269fe3594c2cc128220a1d0b5f9f23121f2b184894e129159eaa92d9a30e878839be44d20cbdff3c338cc95795c86121b2b498bd376e895c98d67f6a27eecb46a203aa9de744feedf27b6825cc17aaa098b5ca05cad6bdbe320908ed36bdc8a8f2c777eeb9b037b36c0e36019c264b3e36196501d6cc90e7b1899a72bea5c8a24a5ae62e3684a39a06208bd382cd32acfabd742c76334797fa0c09a2a2a7e1240974afe0f3d6eb44590cf171efb7602009a93bde85cea6701c765dbca7c6a879be41dd08847802d4f59e933df65f727cbb45e3a4a5019f503b6fad7e0338e653f8b2c87aa7f196444e0dc1be6d7c4f0c7ddd663d06ff1365a9c362384a33b0315adbfb2d73359c485cd5410d36d21044bd8d3771c5492803b19f7f3a1a5c3248e66786479fa4416a55855adebeb09528ff5add597790b97bddc16bb9b7b33a1f800701c4293e2c8428dc2684726cfe5539ae0a9bf89e1b6f1989fd0433cc865b308bd0c636402b4b285c290e2439b9ecf0eba156fb6b613ea7f97b04506fe28e9471343c854fdfd48945a7f564acc817e609be8f8a7fdee12e9b592fd8c5c08f51ba8cb95be12cfa497d1539a4b8217818d47ebb3cc669014261530205948fdb9983a0e5759afa9b290ce838102661750ab06d7fe65a39efa6af36c042d2dee36402a6686d58eb144b76033cab4482b8fbdd213a90170939ec98df1fdfca4b37b143a971b9b59fc351098942bba090056c20e8cfbfe8fcbe361d068c98a020f67e807b8db2e45cad83c9970907646c0049c05c1ed657d53d859f1a47bfe6f022be0689de224034d0160b1dbc878ba6dd685911288d7af22ff5eedc1634c36e25f51d0757c7b9c73d7937955da356dea68749d464a75f56c9f6ba36cc1ca8c2f3aa34beae14fba894ca705111cdb19094432c2f6caa0eac78ab09b0cee330f36b1b91a6a5d4896cd15d96c12547826559441cbf578f189f5f04526a4cf76d60144090c2386b747ad50f7962ef2950d2c6f4ff8477ad0681ab24c47ea7ded8c9accff0dfa30489f43f0f3182b88e757fd9a1d82e1c9bb4efe5215518a6e48c688b2dabbd15107c5c6245de0acfd740ea54e0ec212f405f25bc3aafc63009631a4e4749296d47c2bcf25cc95afceb0a1ddb3c6124208f5134981c30489b42eeb864b3123b03106c9b234a465d87c30ef36e00244390de36a5dd93794467ef37bd01b86387855d2ac24e05370212e845082bb22c8fcda0f0bc78ddf971b0b9d69fc50e0d907408e9c9ac4e5099f47db2d0c14d888e363ece768555362a08c408d0119c45f158aad695d455d28e223be2862c19262c9f43eff8855b5a9af4f2cede95e415e2f597bb64c8bb2d608f86b15950ffe2e6bea3cdb221cf8b7eb35e0bdf6638283b09c68cda0bf1ccb9e353a7f0afb58d806923e36b22db68615a7e4e04d0932d928afdc8af3963378ebd5e05058160ac67fadb7a7d9ec498e00f63671b84d880d196c93afb4fc823e7d6576ad824ffb4c90fc780b163a292899ccfcaed81dee2c992787a66800e206df3dfc4a6b441d54ccb1a19a587402a663d510e45a5b1aa96fc467efaf7e71cbbff087f3d2922a133466d5ae9f86b0bc39bb3093b87ac2db941b1fd9e40427402781425d6e8856a2c66cbdd274f4c689758db6dd58ec7d766b177739e8c9173f2b1946be5396aad6d7ed29d058ac231e8c2e6a9077b4a217df4580a2d72bcf0b73e4bd07465deb8798a55ee855b82f1fa7d3748a40485bd90fab94b617d92219c4b65efa022936895e51873058615a19b9d1347120c405c3254f290b4c8b99c8ea9dde3a749ec538421a29d27b48ccd83852abe1a461123e4d36e56508d1827880960362d10835df77f9d4be51f1447cac5ae2017a814de58cd99bcc0c194254b17114ea48f5a0cfe6547686088d527c65180474fd460ffea5d48767ceb65c6fa3d7d3c632591d2d9d65c6c3a35a6ae4dc56322cd84734b0e7a092a4c46c1c607afa6d0e477e8d04e4993e595ba708a0f4466cd8a89fbc06d3cd366007296a9f05b66cfdcd5b30b6745e71d513205d5dbe1e8516d9e9cf133caa994ec0ac2c543d107efd4b9a7d9ee1ee415830a6c2ea17114ea9683726f2c82741f9ad4ac1be6772f0809f18c13f4cfc82fd1b7b3bd29615336003c6784c03fbcae475a58a3c4d68099732c326dfb7643eb150f2354918077bb798b5ecf491cdd0765e3e1ed5d0a37840f1a28f7e188a021781f1896dae7153f9d6639bf66be0c7857d7eccd2a1e6c9fd0cc3594477bb005df9b29f680c966161e37bcec97fc2ef7a2c3bf64e4df5785c9b080c7f9c6d7c515408445d55da499c03ba66369a31157bb03588e84a5303c46cd393c5bd6fbbb8deed94b62d67a9351c259b263c6c4fa65a4dbdd7eee080d82cc5e478c885678edbc9cfce74169ab748d7f4a08aec3e114394fc1d5e361267b8f3fcf38a024928d58158560f7da427680e7611a9f1b8255c67e6ea6b597ebd31bed9fd6f85f9b6ee63d4374c1e50597d1c9f3c56b4266bc632ba66ebecc396f6bead40392dcc138098b4166ab7f8714bd4db0615480705dd200da92dc51ec215844d7599e0a6262e8d5dc6a9452db8994d8b8f19ad4029e0b41b5e13fd6b56230cecea57f3111fe6c78876b3e657fab112968e83a0b64ce9837b89f5dad0d5f0b8b410e3a9a56ab2e9143e90fe371a944989ee206eef777cf4a235333c647e45aab910af492bc7c2213246374251e23accf5818aa2f24823bcba12efe3658e1e2cb49a5d4ffd26453829739647eccd106605921641afe16bbe79c8739062eabeeda4d4a42cb70d84e1e1d3506c7bfba5f5135aaae85b03dc6518eb30d832175cedc5bdca95e600e04902d9eda90c1da4bdd3138ac889398c239068857103ad70b5d1d9fac27c8ccfbcfcf126d9a5441bc963bce4669047ac901a14ca7c7e76f94c77159cdbda5360e04bb539a9d5ccd16a8cc88bacaa5b952c86b163575d7f1cab58f0d612d796b570f3c5debd7d9abde7e24de2c252173f1edc93817192699bddad45eeb41ff398c1bee4d2194f38bf4d2b4ed3a8895476bc441f464753139e204ff5dee7f45ce639d7541c0d396141aeff30cbbfa7157a61993eec98a4356df98665546a1d1e8429fb0c78684000862aac50f7d9a1413e89958f4defd3f087769cafc32bcd6016e496b41b7754cfbe42b352346fd585fb19a80f4af9a19811311b5fc6ea8eb5519a3cf7dbc1a06eed41668e332224c1daa01776e0886044f5a95e5dffc8d9ccce7840eeae97e8cc916db95bdc33fb420e28030c6edb011d5281db1dbeac9bfcaf938a757e3939b025d339e69b9692c8c7352787d399f342e96096e37ca208609e5f93629e36ee442db9fb822ea236683f79875e7dc73ec97f98fe0795f9d83f473cc80a589043a7edd953473684ea4e80f698683a0fc1d8863adc44fc13c27a08921a681ca1ad76207b1a97f8fff7db247ea09b3a6407ea83d82d82d171fc80a8f5fb9f19cd7e94fe121a6a0ef9c4cff7a8689c0abf750dadcc7442c2ca5ed437af5e88e89b0a783a1164cd1eb2a33a64c919d9f08fe5aa7a775352ab6027a7b73d6fef51acebec5516c2a5f2b932b2621bbd2cdb415fce9ba1dbc3de205869fa0423adcedd5570ab0b4b64afafaa458b3840b48f018297aa46426d7893418033f00b5378eac6a70275ec860609b07851b88ecb5da05086adfb80f47c71a77301ca0f1520dfb7a800bc8421abf5eb94942ec818e3a1d45f09ff93e6549b3ef6152c6abe38231b4a82e355e27e363184df51418286d7073cf464eee02310e84b3eccabd2120fcca333130357e1967f67a69f437dcf6a20ca21797230aad086bd4c28348f58b80ec5d27626004533993b9f85897d00bc271a62ab67f92e2eed6d900000000549e8344ad90b47fb5c1ed5908bce94d03bbe98a87a1733b5031f89644c2d35d729e1375969a82f0252859219407c5c87f5d249d5eb8c17001fc7c6dc5d1825851b41e5e937f2c39d7f7196f38f83619da2cddce747bb0e906d0fc13a11fc6c2be3d140ea6da886cd5e194ca9dbff565d2a82e7e82dc5a36084bf02029ea05a9cfe1f3dc80489b426a14372232940ffad8124bd515f0a73fa85c2aa0cd51d76a0cc6e75ccc35b702a4fed4d2e2828d98939406ddc6df1048f0a22611859d6bfcbb0873d102e4b8a86b5d9af8056447f6c1552a603d9f67009fa070db73a01e1b4adbe4e841d0b9a92d148b626c386b25687817e5ec07dbbfa1d62d078578fe21d546414e3c5e29e8e086d7e542a2eb74a67127e7f171e076bbdd62767aae3db467db1df13b3121023bcee33f814d767a9ef14651f76ec89910ed33e9804df8619f69ad06bf0559b00d4efbf6f44e922d50a18ffa25d8ac58dec53a93642186c0ca81b07fe5c14c9c13397649a53ebfcec118e5bb84db053e6e505d07a09bb50f33906e7febac3c85ca337111dbfcb7b9becccaaefa3d857d48f0b3d8646d70fdcf2f1dfb89cc3ba1394cb5de24d999c88235418bc0f20d4036bd0113d298b91c44fe042d3b8e4070e3f828499972524601c4725389122c7fc3e38eb799f7b755f23bd5362880b9275e58eab2c8f42e583890cb84e17f35025d1d76dd28171bee561d21451b4b2ebf23b923221c9ea06b924815889d2b605af66539c3b0ffc30c7170a5581727f0faddb257cb6ab28b3456737d3588fa3bce0ba6a2a5c3c94301fa8a4e6db358731bd3a4a62b42181e04241010d7bc3e973b9fe428175ec8f8e6cbd4e53c8bd957621acb1e42504e6f8a7bb30c382058fc9dcd0cd0ba0b789c316cd58d7b5606cc2a66c872f10e6663346d572ecc37ad1c3d8146a137e35e54096ddc2a5e2d26765d75615fecd09b864b29adfe92763ab54272365f56feeb9b57059744e765485ee322cb879fd3c8fd8bc4727d860995c548bcd41852349f1b2227f5a1f39b24549693fb05c04ba8f190673d11eb27d0bf628489f9b8049f5f3a1e1fed97ba9881da0031ef5960b6b0af825cfae8252b931f6151cba9bf889a5c74051a176c56d3cbb8915d3f28f8f684629bd1e3f87f27909b4e8eca6b88cdd60f3b5bbe0641a469e396080fdd2feeac7a11703b758f1815f100ab2ca4403af34a655f4c35e62778c276c96bb94a3d9f58f3bbd7ae6c4f133f7c4199f18d02d66598a54769415b376bb04b520881f23b22b32685ea1ea0dc179ab2f33f07c7039d1a5eedd1905d2a8c7d3c9686758ba5aafdd74f36da7f5522aff5c40e565b50cdd92ce353c3d6c97ce87f0495bdb95d70ea52c8c26b87cd337fd2283b88d7301c32f26833451b8f7c2ee5f44eec58d9eef2a39b3021a29c8747d36a2dbca6c0c085399bb720000000000000009d67e17060abad89c7d8b8970244c2f11ad2f4ae878a3676659b77178a9b651b12cf9c21e658a32999d596af4648f636df4de8c037d1fa63b1a685e8850156bf99e00666dbc03d3e3b44018659743127f91d44c99b578b86a44f3bcf1523c8cb45accc3c5fedfd7796411eddfc3a7a6b7c57ae10fd4bd3fe9f662dc59747ac4b7cc2584ae3ce2e42a41066dd0d560f1b4c83edc57121dade5e397380bec5f40b5d0beb14aef21b2c68ccfd0eb4959b5e7f5b5779903963298e3c9a2141f145137de1d604d9124c3c4f60a4d54da38a7c32ef2632fe66a8ce8e95ee95a570e18e9fbd44884afe291550839dd61e65c952a3f5c6b61850d1c2a77e18fde734a305b407cf6dbf17afd66da6e42f0e8f66092df46c79b44711f6e8aafa831fa1188beea696672b0e94cc3cae584b30dccf053634f792c2d9f4c87e306991b407949f2870b525d123f9ca23142a0ee13d05f51ed4ff2653727ad5bf16453276b2d5e7d7a8a0a1c4847cb61ac4b08d9abee25165a120d156775a534a62f9af3a3b62726101b94ae1e14352262f017c5361b3341952d194a6a2d470e60df3fde61d343e0af8fdff36ad976af6732b732ceb69344550555174fa280153e08f74d81f4ee69c1eb44a3468e8cf78bf7c1663dae3d31553466faa207b8e9887cb54209fac0b6f6d12d9588351c76e6bad884799afe856a25b5fe737d0ba737a0f1a12b4eb3ede48a0c38e6787ab42fca1c7f2ab42fa6104d5a99aa36b73ac3622ccae122524c28a6557cb7d0a7c7eb5de795647dca0621fc2c9599441dae7cc2a8631252abb5e0f22e9355e0a156a1ab7b1641e345045e8303b5f6dda5c3c1cc2637700cea25c004460d101fc42ad78ae477739a4efbacc57272cfafae15292dc3b2800d9f42002c2062af9a1f329e11140f8317242c04ac1f11cdb45f5f9ab18877daa214c151fb9ac54e3e010b5e7944d7217442d5c4fc29956c1333cb932424096f5b6afe1128db53f7171be4372be8bae538bcb3e4a2eb29608678735a667135e0f2660956e9e2a3ed862209efe65d9ab2fbbf88e5d3384fb3362af00e1ec6b4d3ca40df442b70951026438877189c4b0ae136a9a35c131fdf19115e8dc1ee2b938bfbfdb3808aebbe7dfbbd3510c7070388f5813e8bc63be744b99116c4b84ea37d57c5da7a80cc883aa915d84a249ebfa78ceb124c63b3a0720b19483189ee50824e8581556f0520e434803204cd0f3dd09fc97c979f9a7e3f8e5eca8fccde98fc4939551338235c0c6378faade0d18f7050f29189485e01ec120239373c5478cd19ab27570921415a6680924baf9c5829f3f2115460d1fceb8a026fa1a0a0047fe1cd6fcf1861dd3784e006abfddfe79461c5001e4e32d99c5bc203c21f8c711c5ecccf8941093d95a8db73722bb7511443fb2670244cc1249492e92fc4bf7e06ec6f08c5c6931929d58232b551957b771ea5e4a932b037904b81916e662e3fe95af894e80f699e5c00ab664f381bd9c0bd41322a8b3cf367577429fa52c0f1c44ffc626c215e7103cba05bff4931d9a202c1eb9068f44983d1e0c6d9fb5fed738561651e854a3c1b362ae354a0b4a270386ed2dbef093bd82f07f25edfae31901cb86fd214576b25f769bcb215214c63026b2581a8d17779aae03ba310f3243b3631f4b01c9e3eb342c3bdb44d8e47cdc1683e3b1cfffef72e385cc8831f99425fc406575170e1c106618d5429144a436b9e92d241d8118b5cbe0dca5e8ddd86e671e13080eddcf8dee9e317d192a3a5386378de9b1ecd8cf5439cfbe9f65965e5a5f6c145627ac23fe30c2e06e623b0eca15b225b32b65ce568b656cec0e0d6752fdebffd39c7538472ad7a195b56fcad3fab80016ff006df6b01d785191e4fca143b14ce68b32571476a779515ccb14d35cf9aabd4849c03c9bf12a42cfc2a7146ed6c25892a9d1c48f95314f641142d38cd882e54534d69b3fcc18044309e6debef6dc79d7737956418b955d33737115b44360e0bac14b71e2e64f0c8aea428dce5b65e210c108f832a6041c0aab116488e5863cd1039dc8af537908be3541352bdad303de43387503d19d7c0f0390bdc5b95f1dfb0701fd0e14a22c210837cc0a1cb059de474f4476bfe9bddfe3e7977fb299e82d9eefb18111f7c4a5fbd406fca720fec69340d978f4c9832204d67f6fa5793325e04d4af84acde0b56158e4c606394286a4b3cfc04a426a665529b753e1ce2d6c613159844bd069a67b5b96cb8ec993f05a8e252ed3d8ed63d524af0845f519f9d47b85a773f37031cb91055fb963db50e6a1e368f10a82fa40ac055e0201c6d29661eadb76f8154ef9c1cc210ccf1ccb063e8c00324ed6a14fdefa0167a9abb04debbbf5e7b8a57a7772373c765947f0f67b5130d77a6ca6ab166147d4eba97b4ddf1465d25b02f4430227b5713a29fd84664bfdfa5fc450e48f5263eaca67c16033b79bf1cb819511cf16bae6ffd5d05a7d9cc93067b6f2512fea2424a9c7d178f653ffa7ce1c00924707e3817c7cd461cb2a8cc5eadc40821258eaad7720ee3976c5a60025c317480016e5e5bd884f3646651f3bdc1185ec1a4112eb24ba5b3b6f94ac66322042d4bc48cb5befabfcf950cf8a0165fba3fa019324b53fb56bbfaec7f4ec733e84c22f841c1c9c1dc51dd3ac4887e155ac4095a6b8846c8f401f3c2d48d4de18906193a9f05ed59e3b0add8bc27c0bad8418ccbb842123ce1d39fdeeaa7984dfba9ef121ab4d4d35de076262636f3815708e4bcf31e634a290b13317425b1a4a2e4ebf8537092c7e524c126faa9622bf1337168e003857805dd420a51816fea3cd37c34e483f64a2da3ab67442314ffff40727835a1bc7b9971ccb5f83183cf1a135defd468907b988d97028f904c4d9c712f7d0ed6abe4d80712a7b7e06efcbe6a5b83e32beb1556326af7a97437c35c6a706c6cf4403b98f5134547ac167fd1abcb9245ec3450202ab80e553952412032a6c3cfa64441d4aecabd1e182c50bf67801fd3b44b40648ac9926bbbd7095425a429f2a9550c2fd1267cbf6156897b705255cadf1c7f233f4effd788b3f446dba19e68bbf8b42ff6caf984a4eb51328ab5e2bc28366e8b4df4df967a166470a00", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x150, 0x0, 0x0, [{{0x1, 0x3, 0x7, 0x401, 0x7, 0x0, {0x1, 0x3655, 0x6, 0x800000e5, 0x5, 0x80000000000004, 0x8, 0x3, 0x81, 0x1000, 0xffffffff, r2, r3, 0x7, 0x5}}, {0x6, 0x1, 0x7, 0x2, '#:[\v\xe2@)'}}, {{0x1, 0x1, 0x7, 0x2000000000000000, 0xf, 0x6, {0x1, 0x9, 0xffff, 0x6b, 0x625, 0x8000000000000000, 0x9, 0x6, 0x1, 0x2000, 0x4769cc35, 0x0, r3, 0x4, 0x8}}, {0x4, 0x0, 0x8, 0x7fff, 'group_id'}}]}, 0x0, 0x0, 0x0})

2m23.50938154s ago: executing program 3 (id=8593):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x4e24, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x87}, {0x0, 0x2}, {0x0, 0x400000000000000, 0xfffffffffffffffa}, 0xffffffff, 0x6e6bb6, 0x1}, {{@in=@broadcast, 0x40000, 0x3c}, 0xa, @in6=@loopback, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x207}}, 0xe8)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv4_newroute={0x24, 0x1a, 0x1, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, [@RTA_SPORT={0x6}]}, 0x24}}, 0x24008800)
getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, &(0x7f00000000c0))

2m22.567385407s ago: executing program 3 (id=8596):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
ustat(0x1, &(0x7f0000000040))
r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d09901020301090236000100"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="000c0100000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
listen(r1, 0xfffffffd)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
r3 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vxcan0\x00'})
sendmmsg$sock(r3, &(0x7f00000048c0)=[{{&(0x7f0000000300)=@caif, 0x80, &(0x7f0000000380)=[{&(0x7f0000000100)="57d2eaad506afc36887a673d64e9406a2df1e483f59e7de91ae7dda56d", 0x1d}, {0x0}, {0x0}], 0x3, &(0x7f0000000740)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x3c}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x60}}, {{&(0x7f00000007c0)=@pptp={0x18, 0x2, {0x1, @remote}}, 0x80, &(0x7f0000001980)=[{0x0}, {&(0x7f00000028c0)="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", 0x3f0}, {&(0x7f0000001840)="4dac368de46605255bde84b5d12022e2f47d80ea10d16f6f1a4e0499542e722f2c13754676da8c78b025318942e24eef4f4d873f4f57196553c27fbdd0758f220b9ba226cfe2b2fa1c6c7f465e53e9e8516158514bca82c3249240a5e44db454c850d44049c7d966eb491a8731c7a28459b3ec0d89d17a0ae8e13fe7c4b94013c7441f99099172228c1b2c95eed269aa982effeebcff22e25650a1c3815ac4f8bd5cfc2707cb30ee1491a2cbbf9bd937cac173b8cb7575d53a36b412b02944f33bb11bf25486b1", 0xc7}, {&(0x7f0000001940)}], 0x4}}, {{&(0x7f0000001ac0)=@llc={0x1a, 0x1, 0x6, 0x3, 0xe, 0xfe, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x80, &(0x7f0000001a40), 0x0, &(0x7f0000001c40)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x200}}], 0x78}}], 0x3, 0x0)
ioctl$int_in(r1, 0x5452, 0x0)
r4 = accept4(r1, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f0000001000), 0x581, 0x40000000, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x10, 0x2, 0xff, 0x5a, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x22, 0x20}, 0xe)
syz_usb_connect(0x0, 0x24, &(0x7f0000001f00)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203"], 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000004b00)=ANY=[@ANYBLOB="1800000000000000000000000000000095005d19ebe343e4e2000000000000d13ae3f9b2ab573b37a3aaf8cab40f4eb754679911e67e500fff63a892fda110f3fd31cf6d897ea28d796635add343c41986702a8c6498626b6dc8fbcdc025fb237a5323f56e2e90ae2bad1b341d518c18277e1c9f0fd33641ce74809abddcf0c96d992ef5302804793b134a0000000011288de6fdbebef1523820f28d6ac3b419eb8e2637a7bb6bdc5b7dce8ee237f274b718d92f936df5d7e7f53720d9d995098f5272e04187154142f68d4b4bd2a9738d592a0aa5e745b62ab940bb71af"], &(0x7f00000003c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r5}, 0x10)
mkdir(&(0x7f0000002880)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)

2m5.647078064s ago: executing program 36 (id=8596):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
ustat(0x1, &(0x7f0000000040))
r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d09901020301090236000100"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="000c0100000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
listen(r1, 0xfffffffd)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
r3 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vxcan0\x00'})
sendmmsg$sock(r3, &(0x7f00000048c0)=[{{&(0x7f0000000300)=@caif, 0x80, &(0x7f0000000380)=[{&(0x7f0000000100)="57d2eaad506afc36887a673d64e9406a2df1e483f59e7de91ae7dda56d", 0x1d}, {0x0}, {0x0}], 0x3, &(0x7f0000000740)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x3c}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x60}}, {{&(0x7f00000007c0)=@pptp={0x18, 0x2, {0x1, @remote}}, 0x80, &(0x7f0000001980)=[{0x0}, {&(0x7f00000028c0)="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", 0x3f0}, {&(0x7f0000001840)="4dac368de46605255bde84b5d12022e2f47d80ea10d16f6f1a4e0499542e722f2c13754676da8c78b025318942e24eef4f4d873f4f57196553c27fbdd0758f220b9ba226cfe2b2fa1c6c7f465e53e9e8516158514bca82c3249240a5e44db454c850d44049c7d966eb491a8731c7a28459b3ec0d89d17a0ae8e13fe7c4b94013c7441f99099172228c1b2c95eed269aa982effeebcff22e25650a1c3815ac4f8bd5cfc2707cb30ee1491a2cbbf9bd937cac173b8cb7575d53a36b412b02944f33bb11bf25486b1", 0xc7}, {&(0x7f0000001940)}], 0x4}}, {{&(0x7f0000001ac0)=@llc={0x1a, 0x1, 0x6, 0x3, 0xe, 0xfe, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x80, &(0x7f0000001a40), 0x0, &(0x7f0000001c40)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x200}}], 0x78}}], 0x3, 0x0)
ioctl$int_in(r1, 0x5452, 0x0)
r4 = accept4(r1, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f0000001000), 0x581, 0x40000000, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x10, 0x2, 0xff, 0x5a, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x22, 0x20}, 0xe)
syz_usb_connect(0x0, 0x24, &(0x7f0000001f00)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203"], 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000004b00)=ANY=[@ANYBLOB="1800000000000000000000000000000095005d19ebe343e4e2000000000000d13ae3f9b2ab573b37a3aaf8cab40f4eb754679911e67e500fff63a892fda110f3fd31cf6d897ea28d796635add343c41986702a8c6498626b6dc8fbcdc025fb237a5323f56e2e90ae2bad1b341d518c18277e1c9f0fd33641ce74809abddcf0c96d992ef5302804793b134a0000000011288de6fdbebef1523820f28d6ac3b419eb8e2637a7bb6bdc5b7dce8ee237f274b718d92f936df5d7e7f53720d9d995098f5272e04187154142f68d4b4bd2a9738d592a0aa5e745b62ab940bb71af"], &(0x7f00000003c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r5}, 0x10)
mkdir(&(0x7f0000002880)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)

16.841946929s ago: executing program 7 (id=9120):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, <r5=>r3})
ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')
ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000080)=0x2)
syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc00000001090212"], 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)

12.891409474s ago: executing program 7 (id=9129):
socket$nl_crypto(0x10, 0x3, 0x15)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0xd)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000540)={0x3, 0x1, 0x8000000, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfffffd9d)
r2 = socket(0x1e, 0x4, 0x0)
connect$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x8010002b)

9.697895798s ago: executing program 5 (id=9138):
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040)
r0 = syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x40045b17, 0x0)

6.424089823s ago: executing program 7 (id=9146):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000021c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fedbdf2505000000080009000200000008000c00aa0a0000060001000500000008000b"], 0x34}, 0x1, 0x0, 0x0, 0x20008100}, 0x8000)

6.42392261s ago: executing program 5 (id=9147):
socket$inet6_udplite(0xa, 0x2, 0x88)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0x81, 0x0, @multicast1}}}}}, 0x0)
socket$alg(0x26, 0x5, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x24, 0x0, 0x0)
r0 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_msfilter(r0, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac14"], 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0)

6.420802736s ago: executing program 9 (id=9148):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'sit0\x00'})
r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100))
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
write$snddsp(r3, &(0x7f0000000200)="a38d", 0x2)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r3, 0xc06c4124, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5})

6.31030656s ago: executing program 7 (id=9150):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, 0x0)

6.272563047s ago: executing program 9 (id=9151):
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560a84606080ffe020590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75ed", 0x36}], 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r0, 0xffffc000)
socket$rds(0x15, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000080))
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00')
pread64(r3, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x51)
set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0x14, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0)

5.647623811s ago: executing program 5 (id=9156):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r0, 0x5608, 0x3)

4.93491066s ago: executing program 5 (id=9157):
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xd5, 0xe5, 0x8d, 0x10, 0x545, 0x8080, 0x2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xad, 0xf7}}]}}]}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000))
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c)
r4 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x880)
ioctl$CEC_RECEIVE(r4, 0xc0386106, &(0x7f0000000100)={0x2, 0x1e021fe1, 0x9, 0xa40, 0x8, 0x966, "6aa5f6c3a55353193d4a33335756767e", 0x9, 0xa0, 0x6, 0x6, 0x7, 0x4, 0x3})

4.907248888s ago: executing program 6 (id=9158):
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040)
r0 = syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109024800010157004009040000000206"], 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x40045b17, 0x0)

4.499356202s ago: executing program 8 (id=9160):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0xffffe94b, "ff0f000000200000f5a700000000f0ffdefe0000000400000007000000000080"})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r2 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, <r3=>r1})
ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000080)=0x2)

4.468216358s ago: executing program 9 (id=9161):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'sit0\x00'})
r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100))
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
write$snddsp(r3, &(0x7f0000000200)="a38d", 0x2)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r3, 0xc06c4124, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5})

4.385190441s ago: executing program 8 (id=9162):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x101, 0x0)

4.384521764s ago: executing program 7 (id=9163):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0xb49, 0x9, 0x8, 0xfffffffa, 0x4003}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[<r3=>0x0], &(0x7f0000000280), 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000380)={0x601, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000200), &(0x7f0000000300)=[r3], &(0x7f0000000580)})
r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r4, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0)
fchdir(0xffffffffffffffff)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00'})

4.374594789s ago: executing program 9 (id=9164):
syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00')
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)={0x1c, r0, 0x51f4af310aafa50f, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)

4.250173929s ago: executing program 9 (id=9165):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001480), 0x1, 0x0)
lseek(r3, 0x5, 0x2)

4.141479952s ago: executing program 8 (id=9166):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0xcc, 0x2, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_NAT={0x94, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x35}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private1}}}]}]}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x81}, 0x800)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)

3.883799651s ago: executing program 8 (id=9167):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x8000000000000, 0x0, 0x8040}, 0x8004)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000280), 0x800)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x5608, 0x3)

2.511789458s ago: executing program 8 (id=9168):
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x54)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x1, [], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]})
unshare(0x22020600)
r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x4)
openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.controllers\x00', 0x5000000, 0x0)

1.53333147s ago: executing program 5 (id=9169):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0)
copy_file_range(r2, &(0x7f0000000000)=0x3ff, r2, 0x0, 0x6, 0x0)

996.286939ms ago: executing program 6 (id=9170):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000021c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fedbdf2505000000080009000200000008000c00aa0a0000060001000500000008000b"], 0x34}, 0x1, 0x0, 0x0, 0x20008100}, 0x8000)

996.008357ms ago: executing program 5 (id=9171):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587", @ANYRES16], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

872.214328ms ago: executing program 8 (id=9172):
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
socket(0x27, 0x3, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff25, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680))
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
syz_usb_connect(0x2, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x140, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, 0x4})

684.010477ms ago: executing program 6 (id=9173):
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x4c200, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {0x0, 0x2}, 0x0, [0x3, 0x3, 0x3ff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x10000000, 0x99, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x8, 0x0, 0x3, 0x0, 0x6, 0x3, 0x0, 0x3], [0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x6d, 0xffffffff, 0x8000edc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa0000000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xa, 0x2, 0x0, 0x2000079, 0x0, 0x0, 0x0, 0x10000, 0x40000, 0x8, 0xc0000001, 0x0, 0x0, 0xffffffff, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4], [0xffffffff, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffe, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x20000000, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x44, 0x4000400, 0x0, 0x0, 0xfffffffd], [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x2000000, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x10000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x100000]}, 0x45c)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[])
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0x0, 0x2, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x200, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8c], 0xeeee8000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

594.334033ms ago: executing program 7 (id=9174):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, 0x0)

380.629465ms ago: executing program 6 (id=9175):
syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00')
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)={0x1c, r0, 0x51f4af310aafa50f, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)

193.457533ms ago: executing program 6 (id=9176):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x101, 0x0)

41.236765ms ago: executing program 9 (id=9177):
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$inet6(0xa, 0x3, 0x7)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, <r3=>0xffffffffffffffff})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000140)={0x6})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d30000000000000080001"], 0xd4}}, 0x0)
r5 = socket$inet(0xa, 0x801, 0x84)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed5000410"], 0x11)
connect$inet(r5, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r5, 0x8)
sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="cc", 0x1, 0x880, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="93", 0x1, 0x8840, 0x0, 0x0)
close(0xffffffffffffffff)

0s ago: executing program 6 (id=9178):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x8000000000000, 0x0, 0x8040}, 0x8004)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000280), 0x800)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x5608, 0x3)

kernel console output (not intermixed with test programs):

tif_sid_slow(), invalid network interface (0)
[ 2180.110236][ T2715] mroute: pending queue full, dropping entries
[ 2180.430513][ T2714] syz_tun: left allmulticast mode
[ 2180.448114][ T2717] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8248'.
[ 2181.052332][ T2729] tipc: Started in network mode
[ 2181.060304][ T2729] tipc: Node identity 080211000001, cluster identity 4711
[ 2181.070615][ T2729] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2181.405847][  T424] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[ 2181.603804][  T424] usb 3-1: Using ep0 maxpacket: 8
[ 2181.618123][  T424] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 2181.626217][  T424] usb 3-1: config 0 has no interface number 0
[ 2181.656143][  T424] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2181.668111][  T424] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 2181.686137][  T424] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2181.713296][  T424] usb 3-1: config 0 descriptor??
[ 2181.715817][ T5809] usb 6-1: new high-speed USB device number 108 using dummy_hcd
[ 2181.731899][  T424] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 2181.960930][ T5809] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2182.002599][ T5809] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2182.085495][ T5809] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 2182.143327][ T5809] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2182.196417][ T5809] usb 6-1: SerialNumber: syz
[ 2182.271933][ T5979] tipc: Node number set to 134418688
[ 2182.451860][ T2751] loop6: detected capacity change from 0 to 524287999
[ 2182.459398][ T2751] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2182.467472][ T2751] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2182.475531][ T2751] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2182.483552][ T2751] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2182.491574][ T2751] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2182.499709][ T2751] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2182.509037][  T424] usb 7-1: new full-speed USB device number 7 using dummy_hcd
[ 2182.528551][ T2751] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2182.540129][ T2762] netlink: 'syz.5.8259': attribute type 29 has an invalid length.
[ 2182.551702][ T2762] netlink: 'syz.5.8259': attribute type 29 has an invalid length.
[ 2182.593047][ T2751] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2182.601984][ T2751] ldm_validate_partition_table(): Disk read failed.
[ 2182.615965][ T2751] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2182.704237][  T424] usb 7-1: config index 0 descriptor too short (expected 156, got 27)
[ 2182.722714][ T2753] block device autoloading is deprecated and will be removed.
[ 2182.739669][ T2751] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2182.747925][ T2751] Dev loop6: unable to read RDB block 0
[ 2182.754442][ T2751]  loop6: unable to read partition table
[ 2182.760448][ T2751] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[ 2182.770961][  T424] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 2182.806069][  T424] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[ 2182.827237][  T424] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[ 2182.846090][  T424] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 2182.905697][ T2753] syz.0.8256: attempt to access beyond end of device
[ 2182.905697][ T2753] md2: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 2182.932031][  T424] usb 7-1: config 0 interface 0 has no altsetting 0
[ 2182.948956][  T424] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 2182.958233][  T424] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 2182.966931][  T424] usb 7-1: Product: syz
[ 2182.971135][  T424] usb 7-1: Manufacturer: syz
[ 2182.975840][  T424] usb 7-1: SerialNumber: syz
[ 2183.012810][  T424] usb 7-1: config 0 descriptor??
[ 2183.019564][ T2756] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[ 2183.061945][  T424] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 2183.074778][  T424] ldusb 7-1:0.0: LD USB Device #1 now attached to major 180 minor 1
[ 2183.122325][  T424] usb 3-1: USB disconnect, device number 51
[ 2183.285060][ T5865] usb 7-1: USB disconnect, device number 7
[ 2183.292860][ T5865] ldusb 7-1:0.0: LD USB Device #1 now disconnected
[ 2184.025776][ T2779] input: syz0 as /devices/virtual/input/input146
[ 2184.410174][T27649] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[ 2184.621797][T27649] usb 7-1: config 0 has no interfaces?
[ 2184.714307][ T5809] usb 6-1: 0:2 : does not exist
[ 2184.722534][T27649] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2184.761235][T27649] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2184.791062][ T5809] usb 6-1: USB disconnect, device number 108
[ 2184.801535][T27649] usb 7-1: Product: syz
[ 2184.816646][T27649] usb 7-1: Manufacturer: syz
[ 2184.823719][T27649] usb 7-1: SerialNumber: syz
[ 2184.833933][T27649] usb 7-1: config 0 descriptor??
[ 2184.923926][T23548] usb 3-1: new full-speed USB device number 52 using dummy_hcd
[ 2185.090300][T23548] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[ 2185.102801][T23548] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 2185.136425][T23548] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[ 2185.150465][T23548] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[ 2185.162080][T23548] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 2185.175979][T23548] usb 3-1: config 0 interface 0 has no altsetting 0
[ 2185.184819][T23548] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 2185.193964][T23548] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 2185.205468][T23548] usb 3-1: Product: syz
[ 2185.209660][T23548] usb 3-1: Manufacturer: syz
[ 2185.214635][T23548] usb 3-1: SerialNumber: syz
[ 2185.221359][T23548] usb 3-1: config 0 descriptor??
[ 2185.227613][ T2807] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 2185.235978][T23548] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 2185.247205][T23548] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 2185.454151][T23548] usb 3-1: USB disconnect, device number 52
[ 2185.497716][T23548] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[ 2186.179752][ T2859] fanotify: failed to encode fid (type=0, len=0, err=-2)
[ 2186.451806][T23548] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[ 2186.622903][T23548] usb 1-1: Using ep0 maxpacket: 16
[ 2186.657071][T23548] usb 1-1: config index 0 descriptor too short (expected 1828, got 36)
[ 2186.737638][T23548] usb 1-1: config 0 has an invalid interface number: 0 but max is -1
[ 2186.772060][T23548] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 2186.811458][T23548] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[ 2186.856853][T23548] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 2186.899551][T23548] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 2186.939859][T23548] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e
[ 2186.982707][T23548] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2187.007556][T23548] usb 1-1: Product: syz
[ 2187.015614][T23548] usb 1-1: Manufacturer: syz
[ 2187.028221][T23548] usb 1-1: SerialNumber: syz
[ 2187.050620][T23548] usb 1-1: config 0 descriptor??
[ 2187.072395][T23548] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected
[ 2187.105233][T23548] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 87
[ 2187.132418][T23548] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7
[ 2187.165631][T23548] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81
[ 2187.193679][T23548] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1
[ 2187.201356][T23548] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2
[ 2187.208908][T23548] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85
[ 2187.247865][ T5865] usb 4-1: new full-speed USB device number 72 using dummy_hcd
[ 2187.255562][  T424] usb 7-1: USB disconnect, device number 8
[ 2187.272756][T23548] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5
[ 2187.393582][T23548] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[ 2187.429247][T23548] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83
[ 2187.440503][T23548] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4
[ 2187.448354][T23548] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86
[ 2187.462901][ T5865] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[ 2187.464714][T23548] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6
[ 2187.471816][ T5865] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 2187.504968][T23548] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[ 2187.550867][ T2892] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8302'.
[ 2187.560037][ T2892] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8302'.
[ 2187.914391][ T5865] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[ 2187.926258][ T5865] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[ 2187.969356][ T5865] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 2187.988762][ T2895] input: syz1 as /devices/virtual/input/input147
[ 2188.040862][ T5865] usb 4-1: config 0 interface 0 has no altsetting 0
[ 2188.051724][ T2897] netlink: 'syz.2.8296': attribute type 10 has an invalid length.
[ 2188.064974][ T2897] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8296'.
[ 2188.082030][ T5865] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 2188.084766][ T2897] bridge0: port 3(dummy0) entered blocking state
[ 2188.100618][ T2897] bridge0: port 3(dummy0) entered disabled state
[ 2188.107822][ T2897] dummy0: entered allmulticast mode
[ 2188.114087][ T5865] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 2188.115714][ T2897] dummy0: entered promiscuous mode
[ 2188.139690][ T2897] bridge0: port 3(dummy0) entered blocking state
[ 2188.146174][ T2897] bridge0: port 3(dummy0) entered forwarding state
[ 2188.152677][ T5865] usb 4-1: Product: syz
[ 2188.152696][ T5865] usb 4-1: Manufacturer: syz
[ 2188.152711][ T5865] usb 4-1: SerialNumber: syz
[ 2188.186339][ T5865] usb 4-1: config 0 descriptor??
[ 2188.192036][ T2879] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 2188.276760][ T5865] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 2188.300793][ T5865] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 2188.466599][ T2905] netlink: 'syz.6.8306': attribute type 1 has an invalid length.
[ 2188.474863][ T2905] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 2188.482059][ T2905] IPv6: NLM_F_CREATE should be set when creating new route
[ 2188.552508][T23548] usb 1-1: USB disconnect, device number 37
[ 2188.715245][T23548] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[ 2188.892029][T23548] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[ 2188.944922][ T5865] usb 4-1: USB disconnect, device number 72
[ 2189.016677][T23548] keyspan 1-1:0.0: device disconnected
[ 2189.349453][ T5865] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[ 2190.284453][   T30] audit: type=1400 audit(1750984485.436:4079): avc:  denied  { watch watch_reads } for  pid=2938 comm="syz.0.8319" path="/259/file0" dev="tmpfs" ino=1447 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 2191.123586][ T5809] usb 6-1: new full-speed USB device number 109 using dummy_hcd
[ 2191.292819][ T5809] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[ 2191.311489][ T5809] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 2191.348372][ T5809] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[ 2191.380323][ T5809] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[ 2191.401759][   T10] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[ 2191.407183][ T5809] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 2191.452635][ T5809] usb 6-1: config 0 interface 0 has no altsetting 0
[ 2191.465701][ T5809] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 2191.484957][ T5809] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 2191.579400][ T5809] usb 6-1: Product: syz
[ 2191.600306][   T10] usb 4-1: Using ep0 maxpacket: 16
[ 2191.691744][ T5809] usb 6-1: Manufacturer: syz
[ 2191.696668][ T5809] usb 6-1: SerialNumber: syz
[ 2191.712053][ T5809] usb 6-1: config 0 descriptor??
[ 2191.717743][ T2945] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 2191.726602][ T5809] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 2191.743193][ T5809] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 2191.767962][   T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 2191.916026][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2191.941620][   T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2191.953157][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2191.963507][   T10] usb 4-1: Product: syz
[ 2191.985408][T23548] usb 6-1: USB disconnect, device number 109
[ 2191.992649][T23548] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[ 2192.004916][   T10] usb 4-1: Manufacturer: syz
[ 2192.013761][   T10] usb 4-1: SerialNumber: syz
[ 2192.031746][   T10] usb 4-1: config 0 descriptor??
[ 2192.194626][   T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2192.235397][ T5809] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[ 2192.251716][   T10] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[ 2192.460103][ T5809] usb 3-1: Using ep0 maxpacket: 16
[ 2192.844212][   T10] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[ 2192.859121][   T10] em28xx 4-1:0.0: Config register raw data: 0x56
[ 2193.095672][   T10] em28xx 4-1:0.0: AC97 chip type couldn't be determined
[ 2193.117299][   T10] em28xx 4-1:0.0: No AC97 audio processor
[ 2193.531605][   T30] audit: type=1400 audit(1750984488.186:4080): avc:  denied  { mount } for  pid=2968 comm="syz.6.8330" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[ 2193.570637][ T2982] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[ 2193.704809][ T2983] block device autoloading is deprecated and will be removed.
[ 2193.714225][ T2983] syz.3.8322: attempt to access beyond end of device
[ 2193.714225][ T2983] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 2194.239690][ T2991] binder: 2989:2991 ioctl c0306201 200000000240 returned -14
[ 2194.706434][T27649] usb 7-1: new full-speed USB device number 9 using dummy_hcd
[ 2194.892971][T27649] usb 7-1: config index 0 descriptor too short (expected 156, got 27)
[ 2194.905684][T27649] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 2195.100498][T27649] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[ 2195.171151][T27649] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[ 2195.224605][ T2997] input: syz1 as /devices/virtual/input/input148
[ 2195.231057][T27649] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 2195.299953][T27649] usb 7-1: config 0 interface 0 has no altsetting 0
[ 2195.334029][T27649] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 2195.347074][T27649] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 2195.360884][T27649] usb 7-1: Product: syz
[ 2195.365113][T27649] usb 7-1: Manufacturer: syz
[ 2195.371587][T27649] usb 7-1: SerialNumber: syz
[ 2195.392883][T27649] usb 7-1: config 0 descriptor??
[ 2195.398458][ T2994] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 2195.416071][T27649] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 2195.474040][ T5809] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 2195.594914][ T5809] usb 3-1: unable to read config index 0 descriptor/start: -71
[ 2195.602566][T27649] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 2195.611183][ T5809] usb 3-1: can't read configurations, error -71
[ 2195.799474][T27649] usb 7-1: USB disconnect, device number 9
[ 2195.836590][T27649] ldusb 7-1:0.0: LD USB Device #0 now disconnected
[ 2196.110997][T16923] usb 4-1: USB disconnect, device number 73
[ 2196.118894][T16923] em28xx 4-1:0.0: Disconnecting em28xx
[ 2196.145254][T16923] em28xx 4-1:0.0: Freeing device
[ 2197.123270][ T5809] usb 3-1: new full-speed USB device number 54 using dummy_hcd
[ 2197.143209][ T5865] IPVS: starting estimator thread 0...
[ 2197.261832][ T3029] IPVS: using max 46 ests per chain, 110400 per kthread
[ 2197.338480][ T5809] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2197.413820][ T5809] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2197.422495][ T3031] input: syz1 as /devices/virtual/input/input149
[ 2197.486632][ T5809] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2197.496199][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2197.504198][ T5809] usb 3-1: Product: syz
[ 2197.508477][ T5809] usb 3-1: Manufacturer: syz
[ 2197.517144][ T5809] usb 3-1: SerialNumber: syz
[ 2197.702550][ T3041] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98
[ 2197.889326][ T3046] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8355'.
[ 2197.898809][ T3046] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8355'.
[ 2198.431304][ T5809] usb 3-1: 0:2 : does not exist
[ 2198.500108][   T10] usb 6-1: new full-speed USB device number 110 using dummy_hcd
[ 2198.555036][ T5809] usb 3-1: USB disconnect, device number 54
[ 2198.620207][ T3065] binder: 3064:3065 ioctl c0306201 200000000540 returned -22
[ 2198.635778][ T3065] binder: 3064:3065 ioctl c0306201 200000000640 returned -22
[ 2198.666212][   T10] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[ 2198.683297][   T10] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 2198.717896][   T10] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[ 2198.765851][   T10] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[ 2198.807150][ T3071] netlink: 'syz.2.8366': attribute type 10 has an invalid length.
[ 2198.815888][ T3071] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8366'.
[ 2198.847139][   T10] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 2198.933015][ T3071] team0: Port device geneve0 added
[ 2198.991097][   T10] usb 6-1: config 0 interface 0 has no altsetting 0
[ 2199.036735][   T10] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 2199.057037][   T10] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 2199.065529][   T10] usb 6-1: Product: syz
[ 2199.074781][   T10] usb 6-1: Manufacturer: syz
[ 2199.193997][   T10] usb 6-1: SerialNumber: syz
[ 2199.640314][   T10] usb 6-1: config 0 descriptor??
[ 2199.648413][ T3051] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 2199.736448][   T10] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 2200.053809][   T10] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 2200.124488][   T10] usb 6-1: USB disconnect, device number 110
[ 2200.134416][   T10] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[ 2201.258453][ T5809] usb 6-1: new full-speed USB device number 111 using dummy_hcd
[ 2201.309766][ T3106] syz.6.8381: attempt to access beyond end of device
[ 2201.309766][ T3106] nbd6: rw=0, sector=64, nr_sectors = 8 limit=0
[ 2201.324047][ T3106] syz.6.8381: attempt to access beyond end of device
[ 2201.324047][ T3106] nbd6: rw=0, sector=120, nr_sectors = 8 limit=0
[ 2201.337408][ T3106] Mount JFS Failure: -5
[ 2201.341602][ T3106] jfs_mount failed w/return code = -5
[ 2201.487888][ T5809] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2201.532064][ T5809] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2201.592088][ T5809] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2201.626553][ T5809] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2201.693503][ T5809] usb 6-1: Product: syz
[ 2201.739710][ T5809] usb 6-1: Manufacturer: syz
[ 2201.778900][ T5809] usb 6-1: SerialNumber: syz
[ 2203.077033][ T3126] netlink: 'syz.0.8387': attribute type 1 has an invalid length.
[ 2203.105062][   T30] audit: type=1400 audit(1750984497.428:4081): avc:  denied  { create } for  pid=3101 comm="syz.3.8380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[ 2203.226432][ T3126] 8021q: adding VLAN 0 to HW filter on device bond1
[ 2203.435618][   T30] audit: type=1400 audit(1750984497.428:4082): avc:  denied  { ioctl } for  pid=3101 comm="syz.3.8380" path="socket:[131311]" dev="sockfs" ino=131311 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[ 2203.472937][ T5809] usb 6-1: 0:2 : does not exist
[ 2203.528588][ T5809] usb 6-1: USB disconnect, device number 111
[ 2203.598135][   T30] audit: type=1400 audit(1750984497.895:4083): avc:  denied  { write } for  pid=3134 comm="syz.5.8390" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[ 2203.649091][ T3136] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.8390'.
[ 2204.506827][ T3150] ALSA: mixer_oss: invalid OSS volume ''
[ 2204.851587][ T5979] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[ 2205.473905][ T5979] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[ 2205.509640][ T5979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2205.754576][ T5979] usb 4-1: Product: syz
[ 2205.898088][ T5979] usb 4-1: Manufacturer: syz
[ 2205.902713][ T5979] usb 4-1: SerialNumber: syz
[ 2205.928622][ T5979] usb 4-1: config 0 descriptor??
[ 2205.983748][ T3172] binder: 3171:3172 ioctl c0306201 200000000540 returned -22
[ 2206.019821][ T3174] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8404'.
[ 2206.061747][ T3174] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8404'.
[ 2206.152866][ T5979] usb 4-1: ignoring: probably an ADSL modem
[ 2206.314877][    C0] hrtimer: interrupt took 23671 ns
[ 2207.192957][ T5979] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19!
[ 2207.208009][ T5979] usb 4-1: USB disconnect, device number 74
[ 2207.340491][ T3190] ALSA: mixer_oss: invalid OSS volume ''
[ 2207.986529][ T3204] bridge0: port 4(vlan4) entered blocking state
[ 2208.389048][ T3204] bridge0: port 4(vlan4) entered disabled state
[ 2208.395489][ T3204] vlan4: entered allmulticast mode
[ 2208.404715][ T3211] binder: 3210:3211 ioctl c0306201 200000000540 returned -22
[ 2208.474706][ T3204] bond0: entered allmulticast mode
[ 2208.479882][ T3204] bond_slave_0: entered allmulticast mode
[ 2208.574750][ T9478] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2208.581387][ T3204] bond_slave_1: entered allmulticast mode
[ 2208.591127][ T3204] vlan4: entered promiscuous mode
[ 2208.608752][ T3204] bond0: entered promiscuous mode
[ 2208.768932][ T3204] bond_slave_0: entered promiscuous mode
[ 2208.775691][   T30] audit: type=1400 audit(1750984502.731:4084): avc:  denied  { mount } for  pid=3214 comm="syz.3.8416" name="/" dev="rpc_pipefs" ino=131441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[ 2208.803111][ T3204] bond_slave_1: entered promiscuous mode
[ 2209.062419][   T30] audit: type=1400 audit(1750984502.993:4085): avc:  denied  { unmount } for  pid=27176 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[ 2210.008542][ T3224] ALSA: mixer_oss: invalid OSS volume ''
[ 2210.028697][   T30] audit: type=1400 audit(1750984503.087:4086): avc:  denied  { cmd } for  pid=3218 comm="syz.2.8417" path="socket:[131461]" dev="sockfs" ino=131461 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 2210.351231][ T5809] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[ 2210.559094][ T5809] usb 7-1: Using ep0 maxpacket: 32
[ 2210.771141][T27967] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 2211.441625][ T5809] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 2211.455327][ T5809] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 2211.477711][ T5809] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 2211.499872][ T5809] usb 7-1: Product: syz
[ 2211.510123][ T5809] usb 7-1: Manufacturer: syz
[ 2211.516641][ T3236] netlink: 'syz.2.8425': attribute type 10 has an invalid length.
[ 2211.519526][ T5809] usb 7-1: SerialNumber: syz
[ 2211.529785][ T3236] syz_tun: entered promiscuous mode
[ 2211.540927][ T3236] syz_tun: entered allmulticast mode
[ 2211.550317][ T3236] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[ 2211.552607][ T5809] usb 7-1: config 0 descriptor??
[ 2211.577463][ T3222] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 2211.759366][ T3226] syz.3.8420 (3226): drop_caches: 2
[ 2211.811864][ T3238] binder: 3237:3238 ioctl c0306201 200000000540 returned -22
[ 2211.902108][ T5979] usb 7-1: USB disconnect, device number 10
[ 2211.961668][   T30] audit: type=1400 audit(1750984505.725:4087): avc:  denied  { connect } for  pid=3239 comm="syz.3.8427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 2212.863133][ T3246] ALSA: mixer_oss: invalid OSS volume ''
[ 2213.157013][ T5865] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[ 2213.354587][ T5865] usb 4-1: config 255 has too many interfaces: 255, using maximum allowed: 32
[ 2213.397594][ T5865] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 255
[ 2213.510343][ T5865] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2213.531138][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2213.539176][ T5865] usb 4-1: Product: syz
[ 2213.552451][ T5865] usb 4-1: Manufacturer: syz
[ 2213.561670][ T5865] usb 4-1: SerialNumber: syz
[ 2213.733657][ T3264] binder: 3263:3264 ioctl c0306201 200000000540 returned -22
[ 2213.810244][ T3266] netlink: 'syz.6.8438': attribute type 10 has an invalid length.
[ 2213.819094][ T3266] syz_tun: entered promiscuous mode
[ 2213.833958][ T3266] syz_tun: entered allmulticast mode
[ 2213.850731][ T3266] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[ 2214.923372][ T5865] usb 4-1: USB disconnect, device number 75
[ 2215.982485][ T3275] ALSA: mixer_oss: invalid OSS volume ''
[ 2216.022473][ T3277] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8441'.
[ 2216.047147][ T3277] openvswitch: netlink: Flow key attr not present in new flow.
[ 2216.149508][ T3289] binder: 3287:3289 ioctl 4018620d 0 returned -22
[ 2216.159460][ T3289] binder: 3287:3289 ioctl c0306201 200000000540 returned -22
[ 2216.168281][ T3289] binder: 3287:3289 ioctl c0306201 200000000640 returned -22
[ 2216.222931][ T3292] input: syz1 as /devices/virtual/input/input150
[ 2216.321513][ T5865] usb 4-1: new full-speed USB device number 76 using dummy_hcd
[ 2216.567223][   T54] usb 6-1: new high-speed USB device number 112 using dummy_hcd
[ 2217.505169][ T5865] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[ 2217.516173][ T5865] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 2217.558093][ T5865] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[ 2217.829124][   T54] usb 6-1: config 0 has no interfaces?
[ 2218.651363][ T5865] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[ 2218.689952][ T5865] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 2218.717702][ T3306] @: renamed from syz_tun (while UP)
[ 2218.737411][ T5865] usb 4-1: config 0 interface 0 has no altsetting 0
[ 2218.758897][ T5865] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 2218.769818][ T5865] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 2218.780472][ T5865] usb 4-1: Product: syz
[ 2218.784727][ T5865] usb 4-1: Manufacturer: syz
[ 2218.789324][ T5865] usb 4-1: SerialNumber: syz
[ 2218.797222][   T54] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2218.798919][ T5865] usb 4-1: config 0 descriptor??
[ 2218.843479][   T54] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2218.844076][ T3280] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 2218.867847][   T54] usb 6-1: Product: syz
[ 2218.872084][   T54] usb 6-1: Manufacturer: syz
[ 2218.882357][   T54] usb 6-1: SerialNumber: syz
[ 2218.889334][   T54] usb 6-1: config 0 descriptor??
[ 2218.968549][ T5865] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 2219.015812][ T5865] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 2219.080237][ T3311] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.8455'.
[ 2219.230003][ T5865] usb 4-1: USB disconnect, device number 76
[ 2219.245301][ T5865] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[ 2219.286286][ T3313] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8456'.
[ 2219.296048][ T3313] openvswitch: netlink: Flow key attr not present in new flow.
[ 2219.419646][   T30] audit: type=1400 audit(1750984512.693:4088): avc:  denied  { execute } for  pid=3316 comm="syz.6.8458" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=130892 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[ 2219.484832][   T30] audit: type=1400 audit(1750984512.731:4089): avc:  denied  { ioctl } for  pid=3316 comm="syz.6.8458" path="socket:[130897]" dev="sockfs" ino=130897 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[ 2219.588176][ T3321] binder: 3320:3321 ioctl 4018620d 0 returned -22
[ 2219.601796][ T3321] binder: 3320:3321 ioctl c0306201 200000000540 returned -22
[ 2219.611589][ T3321] binder: 3320:3321 ioctl c0306201 200000000640 returned -22
[ 2219.675424][T27649] IPVS: starting estimator thread 0...
[ 2219.776690][ T3324] IPVS: using max 37 ests per chain, 88800 per kthread
[ 2220.365868][ T3331] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8463'.
[ 2220.374989][ T3331] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8463'.
[ 2220.439016][T27649] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[ 2220.619091][T27649] usb 4-1: Using ep0 maxpacket: 16
[ 2220.632713][T27649] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 2220.707751][T27649] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2220.721537][T27649] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2220.735364][T27649] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2220.744617][T27649] usb 4-1: Product: syz
[ 2220.754402][T27649] usb 4-1: Manufacturer: syz
[ 2220.759200][T27649] usb 4-1: SerialNumber: syz
[ 2220.766409][T27649] usb 4-1: config 0 descriptor??
[ 2220.778327][T27649] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2220.793149][T27649] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[ 2221.156572][   T54] usb 6-1: USB disconnect, device number 112
[ 2221.161377][ T3338] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8465'.
[ 2221.176253][ T5809] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[ 2221.430643][T27649] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[ 2221.453857][T27649] em28xx 4-1:0.0: Config register raw data: 0x56
[ 2221.806269][   T30] audit: type=1400 audit(1750984514.845:4090): avc:  denied  { bind } for  pid=3341 comm="syz.6.8467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 2221.839809][T27649] em28xx 4-1:0.0: AC97 chip type couldn't be determined
[ 2221.852376][T27649] em28xx 4-1:0.0: No AC97 audio processor
[ 2222.011617][ T5809] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[ 2222.996357][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2223.132794][ T5809] usb 3-1: Product: syz
[ 2223.158589][ T5809] usb 3-1: Manufacturer: syz
[ 2223.168175][ T5809] usb 3-1: SerialNumber: syz
[ 2223.175115][ T5809] usb 3-1: config 0 descriptor??
[ 2223.193067][ T3360] netlink: 'syz.5.8472': attribute type 1 has an invalid length.
[ 2223.205598][ T3362] input: syz1 as /devices/virtual/input/input151
[ 2223.278375][ T3360] vlan2: entered allmulticast mode
[ 2223.306330][ T3360] veth1: entered allmulticast mode
[ 2223.396414][ T5809] usb 3-1: ignoring: probably an ADSL modem
[ 2223.453035][ T3367] @: renamed from syz_tun (while UP)
[ 2223.720191][ T3373] fanotify: failed to encode fid (type=0, len=0, err=-2)
[ 2223.866639][ T5809] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19!
[ 2223.986507][   T10] usb 6-1: new high-speed USB device number 113 using dummy_hcd
[ 2224.041005][ T5809] usb 3-1: USB disconnect, device number 55
[ 2224.075365][T27967] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2224.089321][ T5865] usb 4-1: USB disconnect, device number 77
[ 2224.121358][T27967] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2224.133170][T27967] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2224.142475][T27967] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2224.142924][ T5865] em28xx 4-1:0.0: Disconnecting em28xx
[ 2224.162594][T27967] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2224.168250][   T10] usb 6-1: Using ep0 maxpacket: 16
[ 2224.181110][   T10] usb 6-1: config index 0 descriptor too short (expected 1828, got 36)
[ 2224.224004][   T10] usb 6-1: config 0 has an invalid interface number: 0 but max is -1
[ 2224.261561][ T5865] em28xx 4-1:0.0: Freeing device
[ 2224.376755][   T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 2224.429998][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[ 2224.444951][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 2224.598537][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 2224.633650][   T10] usb 6-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e
[ 2224.659768][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2224.750234][   T10] usb 6-1: Product: syz
[ 2224.775954][   T10] usb 6-1: Manufacturer: syz
[ 2224.788605][   T10] usb 6-1: SerialNumber: syz
[ 2224.805609][   T10] usb 6-1: config 0 descriptor??
[ 2224.810650][ T5865] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[ 2224.859845][   T10] keyspan 6-1:0.0: Keyspan 2 port adapter converter detected
[ 2224.870544][ T3374] chnl_net:caif_netlink_parms(): no params data found
[ 2224.886633][   T10] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 87
[ 2224.913938][   T10] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 7
[ 2224.929156][   T10] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 81
[ 2224.936865][   T10] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 1
[ 2224.967555][   T10] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 2
[ 2225.002391][   T10] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 85
[ 2225.013118][ T5865] usb 4-1: config 0 has no interfaces?
[ 2225.027195][ T5865] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2225.077214][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2225.153811][   T10] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 5
[ 2225.175250][ T5865] usb 4-1: Product: syz
[ 2225.189046][ T5865] usb 4-1: Manufacturer: syz
[ 2225.218825][ T5865] usb 4-1: SerialNumber: syz
[ 2225.233503][   T10] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[ 2225.242721][   T10] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 83
[ 2225.252091][ T5865] usb 4-1: config 0 descriptor??
[ 2225.257256][   T10] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 4
[ 2225.258300][ T3374] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2225.276899][   T10] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 86
[ 2225.292523][   T10] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 6
[ 2225.328111][   T10] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[ 2225.343059][ T3374] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2225.369981][ T3374] bridge_slave_0: entered allmulticast mode
[ 2225.424392][ T3374] bridge_slave_0: entered promiscuous mode
[ 2225.439181][ T3374] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2225.454097][ T3374] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2225.470332][ T3374] bridge_slave_1: entered allmulticast mode
[ 2225.488544][ T3374] bridge_slave_1: entered promiscuous mode
[ 2225.570921][ T3374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2225.602880][ T3374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2225.649326][ T3374] team0: Port device team_slave_0 added
[ 2225.670115][ T3374] team0: Port device team_slave_1 added
[ 2225.717970][ T3374] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2225.734075][ T3374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2225.761873][ T3374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2225.775053][   T10] usb 6-1: USB disconnect, device number 113
[ 2225.805316][   T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[ 2225.827531][ T3374] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2225.842848][   T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[ 2225.854684][ T3374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2225.881120][   T10] keyspan 6-1:0.0: device disconnected
[ 2225.888396][ T3374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2225.981743][ T3374] hsr_slave_0: entered promiscuous mode
[ 2225.989314][ T3374] hsr_slave_1: entered promiscuous mode
[ 2225.998338][ T3374] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2226.025431][ T3374] Cannot create hsr debugfs directory
[ 2226.166711][ T3411] binder: 3409:3411 ioctl c0306201 200000000240 returned -14
[ 2226.428519][T23447] Bluetooth: hci1: command tx timeout
[ 2226.691709][   T10] usb 6-1: new high-speed USB device number 114 using dummy_hcd
[ 2226.862711][   T10] usb 6-1: Using ep0 maxpacket: 16
[ 2226.901144][   T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 2226.995250][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2227.041576][   T10] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2227.069417][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2228.091891][   T10] usb 6-1: Product: syz
[ 2228.107143][   T10] usb 6-1: Manufacturer: syz
[ 2228.111765][   T10] usb 6-1: SerialNumber: syz
[ 2228.192172][ T5979] usb 4-1: USB disconnect, device number 78
[ 2228.203109][   T10] usb 6-1: config 0 descriptor??
[ 2228.354552][   T10] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2228.723808][T23447] Bluetooth: hci1: command tx timeout
[ 2228.947133][   T10] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class)
[ 2229.066084][ T3374] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 2229.079600][ T3374] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 2229.219849][ T3435] binder: 3433:3435 ioctl c0306201 200000000240 returned -14
[ 2229.286965][   T10] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[ 2229.296513][ T3374] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 2229.305360][   T10] em28xx 6-1:0.0: Config register raw data: 0x56
[ 2229.325798][ T3374] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 2229.842887][   T10] em28xx 6-1:0.0: AC97 chip type couldn't be determined
[ 2229.849990][   T10] em28xx 6-1:0.0: No AC97 audio processor
[ 2230.163396][ T3374] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2230.191525][   T30] audit: type=1400 audit(1750984522.777:4091): avc:  denied  { execute } for  pid=3453 comm="syz.3.8495" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 2230.218438][ T3374] 8021q: adding VLAN 0 to HW filter on device team0
[ 2230.239947][T26999] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2230.247084][T26999] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2230.298627][ T9478] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2230.305778][ T9478] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2230.398380][ T3374] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 2230.419365][ T3374] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2230.444598][T27649] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[ 2230.634017][T27649] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2230.645018][T27649] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2230.667014][T27649] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[ 2230.676342][T27649] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2230.684459][T27649] usb 3-1: Product: syz
[ 2231.118098][T23447] Bluetooth: hci1: command tx timeout
[ 2231.165107][T27649] usb 3-1: Manufacturer: syz
[ 2231.169847][T27649] usb 3-1: SerialNumber: syz
[ 2231.258336][T16923] usb 6-1: USB disconnect, device number 114
[ 2231.303353][T16923] em28xx 6-1:0.0: Disconnecting em28xx
[ 2231.325633][T16923] em28xx 6-1:0.0: Freeing device
[ 2231.346477][T27649] usb 3-1: config 0 descriptor??
[ 2232.019203][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 2232.025582][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 2232.150682][ T3374] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2233.308729][T23447] Bluetooth: hci1: command tx timeout
[ 2233.475510][ T3491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2233.484029][ T3491] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2233.506577][   T30] audit: type=1400 audit(1750984525.864:4092): avc:  denied  { mount } for  pid=3452 comm="syz.2.8496" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[ 2233.523779][ T3374] veth0_vlan: entered promiscuous mode
[ 2233.569648][ T3374] veth1_vlan: entered promiscuous mode
[ 2233.591100][   T30] audit: type=1400 audit(1750984525.864:4093): avc:  denied  { unmount } for  pid=3452 comm="syz.2.8496" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[ 2233.648104][ T3374] veth0_macvtap: entered promiscuous mode
[ 2233.664719][ T3374] veth1_macvtap: entered promiscuous mode
[ 2233.688163][ T3374] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2233.748473][ T3374] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2233.780077][ T3374] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2233.798257][ T3374] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2233.808267][ T3374] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2233.828733][ T3374] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2233.954765][ T3506] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 2233.969745][T26999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2233.986205][T26999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2234.063168][T26999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2234.076277][T26999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2236.919527][ T3550] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 2238.920608][ T3572] netlink: 'syz.6.8529': attribute type 1 has an invalid length.
[ 2238.932570][ T3572] netlink: 224 bytes leftover after parsing attributes in process `syz.6.8529'.
[ 2240.066341][ T3583] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[ 2240.267841][ T3588] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 2240.291856][ T3590] program syz.7.8533 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2241.068875][ T3607] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.8539'.
[ 2242.429026][ T3638] binder: 3637:3638 ioctl c0306201 200000000240 returned -14
[ 2243.260704][   T30] audit: type=1400 audit(1750984534.993:4094): avc:  denied  { setopt } for  pid=3639 comm="syz.3.8549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 2243.331297][ T3648] fuse: Bad value for 'fd'
[ 2245.939112][ T3673] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.8561'.
[ 2246.001128][ T3677] fuse: Bad value for 'fd'
[ 2246.243914][ T3686] netlink: 'syz.6.8567': attribute type 1 has an invalid length.
[ 2246.301235][ T3686] 8021q: adding VLAN 0 to HW filter on device bond1
[ 2246.793180][ T3686] vlan3: entered allmulticast mode
[ 2246.799920][ T3686] veth1: entered allmulticast mode
[ 2246.819174][ T3686] bond1: (slave vlan3): making interface the new active one
[ 2246.833910][ T3686] bond1: (slave vlan3): Enslaving as an active interface with an up link
[ 2247.039694][T27967] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 2247.053787][T27967] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 2247.067553][T27967] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 2247.080965][T27967] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 2247.081360][   T10] IPVS: starting estimator thread 0...
[ 2247.104525][T27967] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 2247.356201][ T3704] IPVS: using max 39 ests per chain, 93600 per kthread
[ 2247.568356][   T30] audit: type=1326 audit(1750984539.025:4095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3711 comm="syz.7.8574" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdccdf8e929 code=0x0
[ 2247.712540][ T3720] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.8576'.
[ 2247.739446][   T30] audit: type=1400 audit(1750984539.175:4096): avc:  denied  { bind } for  pid=3709 comm="syz.5.8573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 2248.018024][ T3698] chnl_net:caif_netlink_parms(): no params data found
[ 2248.236056][ T3698] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2248.244959][ T3698] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2248.252453][ T3698] bridge_slave_0: entered allmulticast mode
[ 2248.262410][ T3698] bridge_slave_0: entered promiscuous mode
[ 2248.382912][ T3698] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2248.424353][ T3698] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2248.645412][ T3698] bridge_slave_1: entered allmulticast mode
[ 2248.675473][ T3698] bridge_slave_1: entered promiscuous mode
[ 2248.801313][ T3698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2248.812940][ T3698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2248.911084][ T3698] team0: Port device team_slave_0 added
[ 2248.936499][ T3698] team0: Port device team_slave_1 added
[ 2248.995441][ T3698] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2249.023745][ T3698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2249.096252][ T3698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2249.144673][ T3698] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2249.159557][ T3698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2249.185437][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2249.212750][ T3698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2249.259259][T27967] Bluetooth: hci6: command tx timeout
[ 2249.292951][ T3698] hsr_slave_0: entered promiscuous mode
[ 2249.299652][ T3698] hsr_slave_1: entered promiscuous mode
[ 2249.308166][ T3698] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2249.316315][ T3698] Cannot create hsr debugfs directory
[ 2249.523680][ T3749] @: renamed from syz_tun (while UP)
[ 2249.688357][ T3698] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 2249.751481][ T3698] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 2249.760604][ T3698] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 2249.791741][ T3698] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 2250.245614][ T3764] netlink: 'syz.7.8585': attribute type 10 has an invalid length.
[ 2250.279387][ T3764] syz_tun: entered promiscuous mode
[ 2250.325085][ T3764] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[ 2250.481548][ T3698] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2250.506584][ T3698] 8021q: adding VLAN 0 to HW filter on device team0
[ 2250.527054][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2250.534220][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2250.589752][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2250.596860][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2251.494702][T27967] Bluetooth: hci6: command tx timeout
[ 2251.944580][   T30] audit: type=1400 audit(1750984543.047:4097): avc:  denied  { getopt } for  pid=3791 comm="syz.3.8593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 2252.202805][ T3698] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2252.342076][ T3797] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.8594'.
[ 2253.496039][ T3698] veth0_vlan: entered promiscuous mode
[ 2253.523049][ T3698] veth1_vlan: entered promiscuous mode
[ 2253.588415][ T3698] veth0_macvtap: entered promiscuous mode
[ 2253.600265][  T424] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[ 2253.612717][ T3698] veth1_macvtap: entered promiscuous mode
[ 2253.630298][ T3698] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2253.652088][ T3698] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2253.708753][T27967] Bluetooth: hci6: command tx timeout
[ 2253.722750][ T3698] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2253.738199][ T3698] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2253.749680][ T3698] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2253.758470][ T3698] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2253.800541][  T424] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2253.859253][  T424] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2253.903434][  T424] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[ 2253.927229][ T9462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2253.930889][  T424] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2253.950005][ T9462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2253.964323][  T424] usb 4-1: Product: syz
[ 2253.990953][  T424] usb 4-1: Manufacturer: syz
[ 2254.001766][  T424] usb 4-1: SerialNumber: syz
[ 2254.003257][ T9462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2254.027847][  T424] usb 4-1: config 0 descriptor??
[ 2254.036131][ T9462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2255.420629][ T3845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2255.435714][ T3845] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2255.947282][T27967] Bluetooth: hci6: command tx timeout
[ 2255.969021][ T3854] fanotify: failed to encode fid (type=0, len=0, err=-2)
[ 2256.310382][ T5809] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[ 2256.394330][ T3864] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8612'.
[ 2256.730763][ T3867] netlink: 'syz.7.8614': attribute type 10 has an invalid length.
[ 2256.871125][ T5809] usb 9-1: Using ep0 maxpacket: 16
[ 2256.880153][ T5809] usb 9-1: config index 0 descriptor too short (expected 1828, got 36)
[ 2256.888882][ T5809] usb 9-1: config 0 has an invalid interface number: 0 but max is -1
[ 2256.897276][ T5809] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 2256.906780][ T5809] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[ 2256.918349][ T5809] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 2256.930845][ T5809] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 2256.958605][ T5809] usb 9-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e
[ 2256.968947][ T5809] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2256.977507][ T5809] usb 9-1: Product: syz
[ 2256.983150][ T5809] usb 9-1: Manufacturer: syz
[ 2256.987827][ T5809] usb 9-1: SerialNumber: syz
[ 2256.994300][ T5809] usb 9-1: config 0 descriptor??
[ 2257.002473][ T5809] keyspan 9-1:0.0: Keyspan 2 port adapter converter detected
[ 2257.010570][ T5809] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 87
[ 2257.018256][ T5809] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 7
[ 2257.026862][ T5809] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 81
[ 2257.036993][ T5809] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 1
[ 2257.041955][T23632] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[ 2257.048229][ T5809] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 2
[ 2257.064125][ T5809] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 85
[ 2257.071801][ T5809] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 5
[ 2257.082253][ T5809] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[ 2257.093256][ T5809] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 83
[ 2257.101332][ T5809] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 4
[ 2257.109115][ T5809] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 86
[ 2257.116879][ T5809] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 6
[ 2257.125087][ T5809] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[ 2257.203469][T23632] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[ 2257.212632][T23632] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2257.224077][T23632] usb 7-1: config 0 descriptor??
[ 2257.235186][ T5809] usb 9-1: USB disconnect, device number 2
[ 2257.255596][ T5809] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[ 2257.268057][ T5809] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[ 2257.277946][ T5809] keyspan 9-1:0.0: device disconnected
[ 2258.765205][   T30] audit: type=1400 audit(1750984549.501:4098): avc:  denied  { ioctl } for  pid=3881 comm="syz.8.8621" path="socket:[134870]" dev="sockfs" ino=134870 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 2258.937963][ T3885] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8622'.
[ 2260.108108][ T3901] netlink: 'syz.5.8627': attribute type 10 has an invalid length.
[ 2260.120497][ T3901] @: entered promiscuous mode
[ 2260.134922][ T3901] bond0: (slave @): Enslaving as an active interface with an up link
[ 2260.210181][T23632] pegasus 7-1:0.0: setup Pegasus II specific registers
[ 2260.351907][T23632] pegasus 7-1:0.0: can't locate MII phy, using default
[ 2260.375749][T23632] pegasus 7-1:0.0: eth9, ELECOM USB Ethernet LD-USB20, 02:5e:24:7d:4a:9c
[ 2260.397391][T23632] usb 7-1: USB disconnect, device number 11
[ 2261.147325][   T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[ 2261.329029][   T10] usb 9-1: Using ep0 maxpacket: 16
[ 2261.631316][   T10] usb 9-1: config index 0 descriptor too short (expected 1828, got 36)
[ 2261.680944][   T10] usb 9-1: config 0 has an invalid interface number: 0 but max is -1
[ 2261.713708][   T10] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 2261.723707][   T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[ 2261.770559][   T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 2261.810211][   T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 2261.856249][   T10] usb 9-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e
[ 2261.990219][ T3933] geneve1: entered promiscuous mode
[ 2262.072370][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2262.086128][   T10] usb 9-1: Product: syz
[ 2262.091532][   T10] usb 9-1: Manufacturer: syz
[ 2262.096196][   T10] usb 9-1: SerialNumber: syz
[ 2262.103165][   T10] usb 9-1: config 0 descriptor??
[ 2262.130076][   T10] keyspan 9-1:0.0: Keyspan 2 port adapter converter detected
[ 2262.137679][ T3933] geneve1: left promiscuous mode
[ 2262.857705][   T10] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 87
[ 2262.865436][   T10] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 7
[ 2262.874134][   T10] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 81
[ 2262.881857][   T10] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 1
[ 2262.889461][   T10] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 2
[ 2262.897464][   T10] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 85
[ 2262.905211][   T10] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 5
[ 2262.914024][   T10] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[ 2262.923140][   T10] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 83
[ 2262.932478][   T10] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 4
[ 2262.940092][   T10] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 86
[ 2262.970993][   T10] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 6
[ 2262.992792][   T10] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[ 2263.130963][   T10] usb 9-1: USB disconnect, device number 3
[ 2263.593662][   T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[ 2263.621739][   T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[ 2263.634860][   T10] keyspan 9-1:0.0: device disconnected
[ 2263.699471][ T3951] netlink: 'syz.6.8646': attribute type 1 has an invalid length.
[ 2263.721246][ T3951] 8021q: adding VLAN 0 to HW filter on device bond2
[ 2265.198824][ T5809] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[ 2265.359198][ T5809] usb 7-1: Using ep0 maxpacket: 16
[ 2265.368810][ T5809] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2265.400127][ T5809] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2265.428868][ T5809] usb 7-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00
[ 2265.438726][ T5809] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2265.449928][ T5809] usb 7-1: config 0 descriptor??
[ 2266.231359][ T5809] usbhid 7-1:0.0: can't add hid device: -71
[ 2266.242555][ T5809] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 2266.255268][ T5809] usb 7-1: USB disconnect, device number 12
[ 2266.261040][ T3986] netlink: 'syz.5.8657': attribute type 1 has an invalid length.
[ 2266.285515][ T3986] 8021q: adding VLAN 0 to HW filter on device bond1
[ 2267.083252][ T4004] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.8663'.
[ 2267.151794][   T30] audit: type=1400 audit(1750984557.340:4099): avc:  denied  { watch } for  pid=4001 comm="syz.7.8665" path="/37" dev="tmpfs" ino=211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 2268.591065][   T30] audit: type=1400 audit(1750984557.340:4100): avc:  denied  { watch_sb } for  pid=4001 comm="syz.7.8665" path="/37" dev="tmpfs" ino=211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 2269.679529][ T4018] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4018 comm=syz.8.8668
[ 2269.708805][   T30] audit: type=1400 audit(1750984559.735:4101): avc:  denied  { bind } for  pid=4013 comm="syz.8.8668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 2270.008531][ T5865] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[ 2270.319825][   T10] usb 6-1: new high-speed USB device number 115 using dummy_hcd
[ 2270.421765][ T4016] binder: 4015:4016 ioctl c0306201 200000000240 returned -14
[ 2270.526152][ T5865] usb 9-1: config 0 has an invalid interface number: 117 but max is 0
[ 2270.617869][   T10] usb 6-1: config 0 has no interfaces?
[ 2270.695279][   T10] usb 6-1: New USB device found, idVendor=0503, idProduct=fa04, bcdDevice=97.e1
[ 2270.707144][ T5865] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2270.939733][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2270.982941][ T5865] usb 9-1: config 0 has no interface number 0
[ 2270.989130][ T5865] usb 9-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[ 2270.999965][T23447] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 2271.009671][T23447] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 2271.017646][T23447] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 2271.021642][   T10] usb 6-1: Product: syz
[ 2271.027814][T23447] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 2271.053501][   T10] usb 6-1: Manufacturer: syz
[ 2271.068342][T23447] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 2271.079457][ T5865] usb 9-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2271.096893][   T10] usb 6-1: SerialNumber: syz
[ 2271.186949][   T10] usb 6-1: config 0 descriptor??
[ 2271.318215][ T5865] usb 9-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[ 2271.356595][ T5865] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2271.380493][ T5865] usb 9-1: Product: syz
[ 2271.390340][ T5865] usb 9-1: Manufacturer: syz
[ 2271.407768][ T5865] usb 9-1: SerialNumber: syz
[ 2271.420556][ T5865] usb 9-1: config 0 descriptor??
[ 2271.573788][ T5809] usb 6-1: USB disconnect, device number 115
[ 2271.609659][ T4024] chnl_net:caif_netlink_parms(): no params data found
[ 2271.966204][ T5865] usbtouchscreen 9-1:0.117: probe with driver usbtouchscreen failed with error -71
[ 2272.040535][ T5865] usb 9-1: USB disconnect, device number 4
[ 2272.601192][ T4024] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2272.618175][ T4024] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2272.627871][ T4024] bridge_slave_0: entered allmulticast mode
[ 2272.648707][ T4024] bridge_slave_0: entered promiscuous mode
[ 2272.663065][ T4024] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2272.670356][ T4024] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2272.677636][   T10] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[ 2272.794649][ T4024] bridge_slave_1: entered allmulticast mode
[ 2272.805391][ T4024] bridge_slave_1: entered promiscuous mode
[ 2272.853854][ T4036] syz.7.8673 (4036): drop_caches: 2
[ 2272.860224][ T4024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2272.873034][ T4024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2272.952697][ T4024] team0: Port device team_slave_0 added
[ 2272.981794][   T10] usb 7-1: Using ep0 maxpacket: 16
[ 2273.063476][ T4024] team0: Port device team_slave_1 added
[ 2273.066855][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2273.095216][ T4024] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2273.102198][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2273.102239][   T10] usb 7-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00
[ 2273.114108][ T4024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2273.147815][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2273.173524][ T4024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2273.301057][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2273.319635][ T4024] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2273.327492][ T4024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2273.463025][T23447] Bluetooth: hci7: command tx timeout
[ 2273.614572][ T4024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2273.645212][   T10] usb 7-1: config 0 descriptor??
[ 2274.373959][   T10] usbhid 7-1:0.0: can't add hid device: -71
[ 2274.408616][ T4024] hsr_slave_0: entered promiscuous mode
[ 2274.415136][ T4024] hsr_slave_1: entered promiscuous mode
[ 2274.421637][ T4024] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2274.426072][   T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 2274.429780][ T4024] Cannot create hsr debugfs directory
[ 2274.911253][   T10] usb 7-1: USB disconnect, device number 13
[ 2275.686504][T23447] Bluetooth: hci7: command tx timeout
[ 2276.593038][ T4081] No source specified
[ 2276.890377][ T4024] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 2276.905935][ T4024] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 2276.928563][ T4024] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 2277.123815][ T4024] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 2277.510895][ T4105] binder: 4104:4105 ioctl c0306201 200000000240 returned -14
[ 2277.848757][ T4024] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2277.910276][T23447] Bluetooth: hci7: command tx timeout
[ 2278.161070][ T4024] 8021q: adding VLAN 0 to HW filter on device team0
[ 2278.186999][T26999] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2278.194171][T26999] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2278.937764][T23447] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[ 2278.946483][T23447] Bluetooth: hci4: Injecting HCI hardware error event
[ 2278.955786][T27967] Bluetooth: hci4: hardware error 0x00
[ 2279.041336][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2279.048484][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2279.373953][ T4024] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 2279.396925][   T54] usb 9-1: new full-speed USB device number 5 using dummy_hcd
[ 2279.416928][ T4024] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2279.573087][   T54] usb 9-1: device descriptor read/64, error -71
[ 2279.611473][ T4133] netlink: 48 bytes leftover after parsing attributes in process `syz.7.8702'.
[ 2279.963075][   T54] usb 9-1: new full-speed USB device number 6 using dummy_hcd
[ 2280.123101][   T54] usb 9-1: device descriptor read/64, error -71
[ 2280.145216][T23447] Bluetooth: hci7: command tx timeout
[ 2280.241022][   T54] usb usb9-port1: attempt power cycle
[ 2280.437424][ T4024] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2280.614949][   T54] usb 9-1: new full-speed USB device number 7 using dummy_hcd
[ 2280.653194][   T54] usb 9-1: device descriptor read/8, error -71
[ 2280.902008][ T4024] veth0_vlan: entered promiscuous mode
[ 2280.925516][   T54] usb 9-1: new full-speed USB device number 8 using dummy_hcd
[ 2280.936640][ T4024] veth1_vlan: entered promiscuous mode
[ 2280.959219][   T54] usb 9-1: device descriptor read/8, error -71
[ 2281.053452][ T4024] veth0_macvtap: entered promiscuous mode
[ 2281.078982][   T54] usb usb9-port1: unable to enumerate USB device
[ 2281.090695][ T4024] veth1_macvtap: entered promiscuous mode
[ 2281.134889][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2281.162594][T27967] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[ 2281.184860][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2281.216144][ T4024] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2281.226488][ T4024] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2281.241807][ T4024] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2281.321156][ T4024] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2281.430682][  T424] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[ 2281.734952][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2281.752244][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2281.780906][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2281.800057][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2281.884782][  T424] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2281.898866][  T424] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2281.964858][  T424] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2281.991067][  T424] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2282.004610][  T424] usb 7-1: Product: syz
[ 2282.008786][  T424] usb 7-1: Manufacturer: syz
[ 2282.013378][  T424] usb 7-1: SerialNumber: syz
[ 2282.953346][ T4158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2282.996964][ T4158] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2283.032170][ T4158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2283.041332][ T4158] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2283.868237][ T4194] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 2284.089446][  T424] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22
[ 2284.132849][  T424] usb 7-1: USB disconnect, device number 14
[ 2284.701768][ T4208] netlink: 'syz.9.8724': attribute type 10 has an invalid length.
[ 2284.738590][ T4208] syz_tun: entered promiscuous mode
[ 2284.902648][ T4208] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[ 2285.866808][ T4228] netlink: 'syz.6.8730': attribute type 9 has an invalid length.
[ 2285.874704][ T4228] netlink: 211988 bytes leftover after parsing attributes in process `syz.6.8730'.
[ 2286.395983][ T4235] binder: 4234:4235 ioctl c0306201 200000000240 returned -14
[ 2287.528096][ T4238] input: syz1 as /devices/virtual/input/input153
[ 2287.728539][ T4244] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.8737'.
[ 2289.208555][ T4271] No source specified
[ 2290.129430][   T10] usb 6-1: new high-speed USB device number 116 using dummy_hcd
[ 2290.696958][   T10] usb 6-1: Using ep0 maxpacket: 16
[ 2290.772166][   T10] usb 6-1: config index 0 descriptor too short (expected 1828, got 36)
[ 2290.910146][   T10] usb 6-1: config 0 has an invalid interface number: 0 but max is -1
[ 2290.918661][   T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 2290.940400][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[ 2290.950380][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 2290.961618][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 2291.478073][   T10] usb 6-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e
[ 2291.538246][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2291.551375][   T10] usb 6-1: Product: syz
[ 2291.555626][   T10] usb 6-1: Manufacturer: syz
[ 2291.560277][   T10] usb 6-1: SerialNumber: syz
[ 2291.592332][   T10] usb 6-1: config 0 descriptor??
[ 2291.627843][   T10] keyspan 6-1:0.0: Keyspan 2 port adapter converter detected
[ 2291.847824][   T10] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 87
[ 2291.884092][   T10] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 7
[ 2291.922104][   T10] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 81
[ 2291.972770][   T10] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 1
[ 2292.005666][   T10] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 2
[ 2292.017769][   T10] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 85
[ 2292.030421][   T10] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 5
[ 2292.039076][   T10] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[ 2292.052425][   T10] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 83
[ 2292.083752][   T10] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 4
[ 2292.135328][   T10] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 86
[ 2292.166893][   T10] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 6
[ 2292.199576][   T10] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[ 2292.379908][   T10] usb 6-1: USB disconnect, device number 116
[ 2292.389164][   T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[ 2292.828801][T27649] libceph: connect (1)[c::]:6789 error -101
[ 2292.838472][   T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[ 2292.850524][T27649] libceph: mon0 (1)[c::]:6789 connect error
[ 2292.869161][   T10] keyspan 6-1:0.0: device disconnected
[ 2293.137874][ T4310] ceph: No mds server is up or the cluster is laggy
[ 2293.226443][T27649] libceph: connect (1)[c::]:6789 error -101
[ 2293.232554][T27649] libceph: mon0 (1)[c::]:6789 connect error
[ 2294.908222][   T10] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[ 2294.916023][  T424] usb 6-1: new full-speed USB device number 117 using dummy_hcd
[ 2295.410578][   T10] usb 10-1: Using ep0 maxpacket: 16
[ 2295.417336][   T10] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 2295.432281][   T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2295.449492][   T10] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2295.459287][   T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2295.471940][   T10] usb 10-1: Product: syz
[ 2295.476802][   T10] usb 10-1: Manufacturer: syz
[ 2295.482353][   T10] usb 10-1: SerialNumber: syz
[ 2295.497858][   T10] usb 10-1: config 0 descriptor??
[ 2295.551610][   T10] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2295.563524][  T424] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[ 2295.573547][   T10] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class)
[ 2295.580696][  T424] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2295.600796][  T424] usb 6-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30
[ 2295.709839][  T424] usb 6-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 2295.783720][  T424] usb 6-1: config 0 interface 0 has no altsetting 0
[ 2295.810671][  T424] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 2295.816583][ T4351] netlink: 'syz.6.8771': attribute type 10 has an invalid length.
[ 2295.828101][  T424] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 2295.841272][  T424] usb 6-1: Product: syz
[ 2295.847439][  T424] usb 6-1: Manufacturer: syz
[ 2295.852248][  T424] usb 6-1: SerialNumber: syz
[ 2295.865862][  T424] usb 6-1: config 0 descriptor??
[ 2295.884307][  T424] ldusb 6-1:0.0: Interrupt in endpoint not found
[ 2296.107140][T23548] usb 6-1: USB disconnect, device number 117
[ 2296.201227][   T10] em28xx 10-1:0.0: unknown em28xx chip ID (0)
[ 2296.210104][   T10] em28xx 10-1:0.0: Config register raw data: 0x56
[ 2296.436629][   T10] em28xx 10-1:0.0: AC97 chip type couldn't be determined
[ 2296.449188][   T10] em28xx 10-1:0.0: No AC97 audio processor
[ 2297.313410][T23548] usb 6-1: new full-speed USB device number 118 using dummy_hcd
[ 2297.413650][ T4385] vlan2: entered allmulticast mode
[ 2297.418800][ T4385] veth1: entered allmulticast mode
[ 2297.476060][T23548] usb 6-1: config 0 has no interfaces?
[ 2297.488137][T23548] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2297.499906][T23548] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2297.509350][T23548] usb 6-1: Product: syz
[ 2297.513552][T23548] usb 6-1: Manufacturer: syz
[ 2297.518958][T23548] usb 6-1: SerialNumber: syz
[ 2297.563542][T23548] usb 6-1: config 0 descriptor??
[ 2297.673959][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 2297.682296][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 2298.167926][   T54] usb 10-1: USB disconnect, device number 2
[ 2298.254082][   T54] em28xx 10-1:0.0: Disconnecting em28xx
[ 2298.330331][   T54] em28xx 10-1:0.0: Freeing device
[ 2299.221655][   T54] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[ 2299.408952][   T54] usb 10-1: Using ep0 maxpacket: 16
[ 2299.415933][   T54] usb 10-1: config index 0 descriptor too short (expected 1792, got 34)
[ 2299.424482][   T54] usb 10-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 2299.434749][   T54] usb 10-1: config 2 has no interfaces?
[ 2299.441994][   T54] usb 10-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25
[ 2299.451294][   T54] usb 10-1: New USB device strings: Mfr=0, Product=251, SerialNumber=3
[ 2299.460941][   T54] usb 10-1: Product: syz
[ 2299.465304][   T54] usb 10-1: SerialNumber: syz
[ 2299.795726][ T4409] input: syz1 as /devices/virtual/input/input154
[ 2300.177397][   T30] audit: type=1400 audit(1750984587.890:4102): avc:  denied  { write } for  pid=4394 comm="syz.9.8787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 2300.211210][   T54] usb 9-1: new full-speed USB device number 9 using dummy_hcd
[ 2300.231091][T27649] usb 6-1: USB disconnect, device number 118
[ 2300.249404][T23548] usb 10-1: USB disconnect, device number 3
[ 2300.385347][   T54] usb 9-1: config index 0 descriptor too short (expected 156, got 27)
[ 2300.395249][   T54] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2300.411875][   T54] usb 9-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30
[ 2300.423133][   T54] usb 9-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 2300.437370][   T54] usb 9-1: config 0 interface 0 has no altsetting 0
[ 2300.449185][   T54] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 2300.458601][   T54] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 2300.467035][   T54] usb 9-1: Product: syz
[ 2300.471444][   T54] usb 9-1: Manufacturer: syz
[ 2300.476042][   T54] usb 9-1: SerialNumber: syz
[ 2300.484912][   T54] usb 9-1: config 0 descriptor??
[ 2300.493730][   T54] ldusb 9-1:0.0: Interrupt in endpoint not found
[ 2300.711676][   T10] usb 9-1: USB disconnect, device number 9
[ 2301.632447][   T10] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[ 2301.809552][   T10] usb 7-1: Using ep0 maxpacket: 16
[ 2301.826513][   T10] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 2301.877713][ T4438] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.8794'.
[ 2301.965044][ T4440] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 2302.358146][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2302.413883][   T10] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2302.461016][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2302.472934][   T10] usb 7-1: Product: syz
[ 2302.478671][   T10] usb 7-1: Manufacturer: syz
[ 2302.483341][   T10] usb 7-1: SerialNumber: syz
[ 2302.490704][   T10] usb 7-1: config 0 descriptor??
[ 2302.515921][   T10] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2302.656209][   T10] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class)
[ 2302.754989][T23632] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[ 2302.918766][T23632] usb 10-1: Using ep0 maxpacket: 16
[ 2302.928336][T23632] usb 10-1: config index 0 descriptor too short (expected 1828, got 36)
[ 2302.950270][T23632] usb 10-1: config 0 has an invalid interface number: 0 but max is -1
[ 2302.966523][T23632] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 2302.978180][T23632] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[ 2302.995408][T23632] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 2303.006382][T23632] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 2303.018295][T23632] usb 10-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e
[ 2303.037485][T23632] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2303.050848][T23632] usb 10-1: Product: syz
[ 2303.057107][T23632] usb 10-1: Manufacturer: syz
[ 2303.061817][T23632] usb 10-1: SerialNumber: syz
[ 2303.071552][T23632] usb 10-1: config 0 descriptor??
[ 2303.079280][T23632] keyspan 10-1:0.0: Keyspan 2 port adapter converter detected
[ 2303.092512][T23632] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 87
[ 2303.100361][T23632] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 7
[ 2303.109335][T23632] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 81
[ 2303.117151][T23632] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 1
[ 2303.124922][T23632] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 2
[ 2303.132720][T23632] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 85
[ 2303.238319][   T10] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[ 2303.245115][T23632] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 5
[ 2303.253081][   T10] em28xx 7-1:0.0: Config register raw data: 0x56
[ 2303.261088][T23632] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[ 2303.270566][T23632] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 83
[ 2303.278373][T23632] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 4
[ 2303.290514][T23632] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 86
[ 2303.298444][T23632] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 6
[ 2303.314086][T23632] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[ 2303.333406][T23632] usb 10-1: USB disconnect, device number 4
[ 2303.367401][T23632] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[ 2303.383867][T23632] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[ 2303.395252][T23632] keyspan 10-1:0.0: device disconnected
[ 2303.427607][ T4451] input: syz1 as /devices/virtual/input/input155
[ 2303.467258][   T10] em28xx 7-1:0.0: AC97 chip type couldn't be determined
[ 2303.474501][   T10] em28xx 7-1:0.0: No AC97 audio processor
[ 2305.110273][   T54] IPVS: starting estimator thread 0...
[ 2305.364035][ T4472] IPVS: using max 44 ests per chain, 105600 per kthread
[ 2305.586804][   T30] audit: type=1326 audit(1750984593.297:4103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.9.8810" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff03818e929 code=0x0
[ 2305.615692][T23632] usb 7-1: USB disconnect, device number 15
[ 2305.626823][T23632] em28xx 7-1:0.0: Disconnecting em28xx
[ 2305.634025][T23632] em28xx 7-1:0.0: Freeing device
[ 2305.735155][ T4478] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.8811'.
[ 2305.969374][ T4486] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 2306.807491][   T30] audit: type=1326 audit(1750984594.391:4104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4489 comm="syz.8.8815" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f253958e929 code=0x0
[ 2306.926234][ T4495] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2308.004306][T27649] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[ 2308.280388][T27649] usb 10-1: config index 0 descriptor too short (expected 65535, got 77)
[ 2308.378630][T27649] usb 10-1: config 255 has too many interfaces: 255, using maximum allowed: 32
[ 2308.422832][T27649] usb 10-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[ 2308.539169][T27649] usb 10-1: config 255 has 0 interfaces, different from the descriptor's value: 255
[ 2308.552309][T27649] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2308.579911][T27649] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2308.588438][T27649] usb 10-1: Product: syz
[ 2308.592907][T27649] usb 10-1: Manufacturer: syz
[ 2308.597870][T27649] usb 10-1: SerialNumber: syz
[ 2309.282284][T27649] usb 10-1: USB disconnect, device number 5
[ 2309.401042][T23548] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[ 2309.617624][   T30] audit: type=1326 audit(1750984597.066:4105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4521 comm="syz.5.8826" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca2218e929 code=0x0
[ 2309.682949][T23548] usb 9-1: Using ep0 maxpacket: 16
[ 2309.700571][T23548] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 2309.725912][T23548] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2309.762129][T23548] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2309.785192][T23548] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2309.807716][T23548] usb 9-1: Product: syz
[ 2309.819874][T23548] usb 9-1: Manufacturer: syz
[ 2309.827858][T23548] usb 9-1: SerialNumber: syz
[ 2309.836481][T23548] usb 9-1: config 0 descriptor??
[ 2309.846286][T23548] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2310.184611][T23548] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class)
[ 2311.011079][T23548] em28xx 9-1:0.0: unknown em28xx chip ID (0)
[ 2311.022019][T23548] em28xx 9-1:0.0: Config register raw data: 0x56
[ 2311.242207][T23548] em28xx 9-1:0.0: AC97 chip type couldn't be determined
[ 2311.282729][T23548] em28xx 9-1:0.0: No AC97 audio processor
[ 2312.144317][ T4556] input: syz1 as /devices/virtual/input/input156
[ 2313.110367][T23632] usb 9-1: USB disconnect, device number 10
[ 2313.118604][T23632] em28xx 9-1:0.0: Disconnecting em28xx
[ 2313.146780][T23632] em28xx 9-1:0.0: Freeing device
[ 2313.617041][ T4577] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8841'.
[ 2313.957845][   T30] audit: type=1400 audit(1750984601.126:4106): avc:  denied  { setopt } for  pid=4579 comm="syz.5.8843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 2314.224265][   T30] audit: type=1326 audit(1750984601.379:4107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4582 comm="syz.6.8844" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f017718e929 code=0x0
[ 2314.376202][ T4587] binder: BINDER_SET_CONTEXT_MGR already set
[ 2314.387284][ T4587] binder: 4585:4587 ioctl 4018620d 200000000040 returned -16
[ 2314.402340][ T4587] binder: 4585:4587 ioctl c0306201 200000000240 returned -11
[ 2314.842318][ T4592] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2314.913323][ T4594] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.8848'.
[ 2315.254534][ T4600] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8849'.
[ 2315.263699][ T4600] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8849'.
[ 2315.541376][T27649] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[ 2315.799891][T27649] usb 7-1: Using ep0 maxpacket: 16
[ 2315.818959][T27649] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 2315.847235][T27649] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2315.865301][T27649] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2315.879072][T27649] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2315.966050][T27649] usb 7-1: Product: syz
[ 2315.970703][T27649] usb 7-1: Manufacturer: syz
[ 2315.975367][T27649] usb 7-1: SerialNumber: syz
[ 2315.982077][T27649] usb 7-1: config 0 descriptor??
[ 2315.991792][T27649] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2316.003897][T27649] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class)
[ 2316.624114][ T4619] binder: BINDER_SET_CONTEXT_MGR already set
[ 2316.630134][ T4619] binder: 4618:4619 ioctl 4018620d 200000000040 returned -16
[ 2316.642906][ T4619] binder: 4618:4619 ioctl c0306201 200000000240 returned -11
[ 2316.700995][T27649] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[ 2316.715439][T27649] em28xx 7-1:0.0: Config register raw data: 0x56
[ 2316.957320][T27649] em28xx 7-1:0.0: AC97 chip type couldn't be determined
[ 2316.986238][T27649] em28xx 7-1:0.0: No AC97 audio processor
[ 2317.315588][ T4641] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 2318.493409][T23632] usb 7-1: USB disconnect, device number 16
[ 2318.499924][T23632] em28xx 7-1:0.0: Disconnecting em28xx
[ 2318.606906][T23632] em28xx 7-1:0.0: Freeing device
[ 2320.603398][ T4694] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 2320.998223][ T8189] Bluetooth: hci8: Frame reassembly failed (-84)
[ 2321.415556][ T4698] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8881'.
[ 2322.927166][ T4718] binder: 4717:4718 ioctl c0306201 200000000240 returned -14
[ 2323.152673][   T30] audit: type=1326 audit(1750984609.657:4108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4723 comm="syz.9.8890" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff03818e929 code=0x0
[ 2323.175746][T23447] Bluetooth: hci8: command 0x1003 tx timeout
[ 2323.182455][T27967] Bluetooth: hci8: Opcode 0x1003 failed: -110
[ 2323.249278][T23548] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[ 2323.472776][T23548] usb 7-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[ 2323.502802][T23548] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2323.523874][T23548] usb 7-1: Product: syz
[ 2323.535971][T23548] usb 7-1: Manufacturer: syz
[ 2323.556853][T23548] usb 7-1: SerialNumber: syz
[ 2323.579522][T23548] usb 7-1: config 0 descriptor??
[ 2323.810575][T23548] usb 7-1: ignoring: probably an ADSL modem
[ 2324.040525][T23548] cxacru 7-1:0.0: usbatm_usb_probe: bind failed: -19!
[ 2324.060901][T23548] usb 7-1: USB disconnect, device number 17
[ 2325.534977][ T4758] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 10802, id = 0
[ 2325.534978][   T30] audit: type=1400 audit(1750984611.958:4109): avc:  denied  { getopt } for  pid=4753 comm="syz.9.8900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 2325.636227][ T4763] netlink: 212376 bytes leftover after parsing attributes in process `syz.9.8904'.
[ 2327.023454][ T4789] binder: 4788:4789 ioctl c0306201 200000000240 returned -14
[ 2327.870738][   T30] audit: type=1400 audit(1750984614.138:4110): avc:  denied  { bind } for  pid=4792 comm="syz.8.8914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 2327.931373][   T54] usb 10-1: new full-speed USB device number 6 using dummy_hcd
[ 2328.632467][   T54] usb 10-1: config index 0 descriptor too short (expected 156, got 27)
[ 2328.641491][   T54] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2328.651995][   T54] usb 10-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30
[ 2328.720328][   T54] usb 10-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 2328.734535][   T54] usb 10-1: config 0 interface 0 has no altsetting 0
[ 2328.754075][   T54] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 2328.764408][   T54] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 2328.898980][T23548] usb 6-1: new full-speed USB device number 119 using dummy_hcd
[ 2328.961739][   T54] usb 10-1: Product: syz
[ 2328.976046][   T54] usb 10-1: Manufacturer: syz
[ 2328.985335][   T54] usb 10-1: SerialNumber: syz
[ 2328.992468][   T54] usb 10-1: config 0 descriptor??
[ 2328.999899][   T54] ldusb 10-1:0.0: Interrupt in endpoint not found
[ 2329.075361][T23548] usb 6-1: device descriptor read/64, error -71
[ 2329.096773][T23632] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[ 2329.223484][   T54] usb 10-1: USB disconnect, device number 6
[ 2329.258345][T23632] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2329.322926][T23632] usb 9-1: config 0 has no interfaces?
[ 2329.328449][T23632] usb 9-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[ 2329.337759][T23632] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2329.338475][T23548] usb 6-1: new full-speed USB device number 120 using dummy_hcd
[ 2329.348007][T23632] usb 9-1: config 0 descriptor??
[ 2329.524354][T23548] usb 6-1: device descriptor read/64, error -71
[ 2329.553102][ T4836] loop8: detected capacity change from 0 to 16384
[ 2329.584659][T23632] usb 9-1: USB disconnect, device number 11
[ 2329.642310][T23548] usb usb6-port1: attempt power cycle
[ 2329.806157][ T4837] loop8: detected capacity change from 16384 to 16320
[ 2330.516462][T23548] usb 6-1: new full-speed USB device number 121 using dummy_hcd
[ 2330.573204][T23548] usb 6-1: device descriptor read/8, error -71
[ 2330.860566][T23548] usb 6-1: new full-speed USB device number 122 using dummy_hcd
[ 2330.904387][T23548] usb 6-1: device descriptor read/8, error -71
[ 2331.039948][T23548] usb usb6-port1: unable to enumerate USB device
[ 2331.718973][   T54] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[ 2331.908629][   T54] usb 10-1: Using ep0 maxpacket: 32
[ 2331.916026][   T54] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2331.928323][   T54] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 2331.938712][   T54] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2331.948064][   T54] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 2331.956582][   T54] usb 10-1: SerialNumber: syz
[ 2332.229067][T23548] usb 6-1: new full-speed USB device number 123 using dummy_hcd
[ 2332.316438][   T10] usb 10-1: USB disconnect, device number 7
[ 2332.459215][ T4868] use of bytesused == 0 is deprecated and will be removed in the future,
[ 2332.468321][ T4868] use the actual size instead.
[ 2332.851084][T23548] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[ 2332.859303][T23548] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2332.869516][T23548] usb 6-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30
[ 2332.880579][T23548] usb 6-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 2332.907837][T23548] usb 6-1: config 0 interface 0 has no altsetting 0
[ 2332.919210][T23548] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 2332.934665][T23548] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 2332.943104][T23548] usb 6-1: Product: syz
[ 2332.965514][T23548] usb 6-1: Manufacturer: syz
[ 2332.998438][T23548] usb 6-1: SerialNumber: syz
[ 2333.023161][T23548] usb 6-1: config 0 descriptor??
[ 2333.053647][T23548] ldusb 6-1:0.0: Interrupt in endpoint not found
[ 2333.511154][T23548] usb 6-1: USB disconnect, device number 123
[ 2334.145804][ T4888] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8945'.
[ 2334.163173][ T4888] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8945'.
[ 2334.484650][ T5865] usb 10-1: new full-speed USB device number 8 using dummy_hcd
[ 2335.639774][ T5865] usb 10-1: device descriptor read/64, error -71
[ 2336.832979][ T5865] usb 10-1: new full-speed USB device number 9 using dummy_hcd
[ 2336.854528][ T4914] netlink: 'syz.5.8953': attribute type 10 has an invalid length.
[ 2336.975885][ T5865] usb 10-1: device descriptor read/64, error -71
[ 2337.172147][ T5865] usb usb10-port1: attempt power cycle
[ 2338.184213][ T4932] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8958'.
[ 2338.252395][ T4932] vlan2: entered allmulticast mode
[ 2338.268240][ T5865] usb usb10-port1: Cannot enable. Maybe the USB cable is bad?
[ 2338.268518][ T4932] veth1: entered allmulticast mode
[ 2338.330152][ T4935] binder: 4934:4935 ioctl c0306201 200000000240 returned -14
[ 2338.899980][ T5865] usb 10-1: new full-speed USB device number 11 using dummy_hcd
[ 2339.451185][ T5865] usb 10-1: config index 0 descriptor too short (expected 156, got 27)
[ 2339.493676][ T5865] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2339.530516][ T5865] usb 10-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30
[ 2339.712377][ T5865] usb 10-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 2339.725940][ T5865] usb 10-1: config 0 interface 0 has no altsetting 0
[ 2340.754297][ T5865] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 2340.769770][ T5865] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 2340.783059][ T5865] usb 10-1: Product: syz
[ 2341.084068][ T5865] usb 10-1: Manufacturer: syz
[ 2341.088786][ T5865] usb 10-1: SerialNumber: syz
[ 2341.213614][   T54] usb 6-1: new full-speed USB device number 124 using dummy_hcd
[ 2341.259789][   T30] audit: type=1400 audit(1750984626.550:4111): avc:  denied  { ioctl } for  pid=4958 comm="syz.7.8967" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[ 2341.260861][ T5865] usb 10-1: config 0 descriptor??
[ 2341.299989][ T5865] ldusb 10-1:0.0: Interrupt in endpoint not found
[ 2342.350157][   T54] usb 6-1: config index 0 descriptor too short (expected 65535, got 27)
[ 2342.360872][ T5865] usb 10-1: USB disconnect, device number 11
[ 2342.363585][   T54] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2342.915644][   T54] usb 6-1: config 0 has no interfaces?
[ 2343.112609][   T54] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 2343.121696][   T54] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 2343.135914][   T54] usb 6-1: Product: syz
[ 2343.140136][   T54] usb 6-1: Manufacturer: syz
[ 2343.144785][   T54] usb 6-1: SerialNumber: syz
[ 2343.157933][   T54] usb 6-1: config 0 descriptor??
[ 2343.576011][   T10] usb 6-1: USB disconnect, device number 124
[ 2344.265115][ T4980] binder: 4979:4980 ioctl c0306201 200000000240 returned -14
[ 2345.337434][ T5002] No source specified
[ 2346.789273][ T5020] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2347.072823][   T30] audit: type=1326 audit(1750984631.760:4112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5014 comm="syz.9.8986" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff03818e929 code=0x0
[ 2347.095594][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2347.136563][ T5018] binder: 5017:5018 ioctl c0306201 200000000240 returned -14
[ 2347.431001][   T10] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[ 2347.687591][   T10] usb 7-1: Using ep0 maxpacket: 8
[ 2347.694400][   T10] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[ 2347.709018][   T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2347.765233][   T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2347.811137][   T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 2347.865824][   T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[ 2347.900265][   T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2348.037843][   T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2348.051338][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2348.070266][   T10] usbtmc 7-1:16.0: probe with driver usbtmc failed with error -22
[ 2348.179951][   T54] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[ 2348.494530][   T54] usb 10-1: config 0 has no interfaces?
[ 2348.505852][ T5023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2348.507586][   T54] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2348.514518][ T5023] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2348.557931][T27649] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[ 2348.573298][   T54] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2348.592870][   T54] usb 10-1: Product: syz
[ 2348.597424][   T54] usb 10-1: Manufacturer: syz
[ 2348.602406][   T54] usb 10-1: SerialNumber: syz
[ 2348.618410][   T54] usb 10-1: config 0 descriptor??
[ 2348.740351][T27649] usb 9-1: Using ep0 maxpacket: 8
[ 2348.759500][T27649] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[ 2348.781584][   T10] usb 7-1: USB disconnect, device number 18
[ 2348.801750][T27649] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2348.811803][T27649] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2348.847774][T27649] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2348.860029][   T54] usb 10-1: USB disconnect, device number 12
[ 2348.877450][T27649] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2348.892077][T27649] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2348.901449][T27649] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2349.182580][T27649] usb 9-1: usb_control_msg returned -32
[ 2349.242170][T27649] usbtmc 9-1:16.0: can't read capabilities
[ 2351.198509][ T5074] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9006'.
[ 2351.271225][ T5079] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9008'.
[ 2351.416386][   T10] usb 9-1: USB disconnect, device number 12
[ 2351.924683][   T30] audit: type=1326 audit(1750984636.634:4113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.7.9009" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdccdf8e929 code=0x0
[ 2352.052548][ T5809] usb 6-1: new high-speed USB device number 125 using dummy_hcd
[ 2352.263538][ T5809] usb 6-1: device descriptor read/64, error -71
[ 2352.616624][ T5809] usb 6-1: new high-speed USB device number 126 using dummy_hcd
[ 2352.899573][ T5809] usb 6-1: device descriptor read/64, error -71
[ 2353.193999][ T5809] usb usb6-port1: attempt power cycle
[ 2354.593950][ T5809] usb 6-1: new high-speed USB device number 127 using dummy_hcd
[ 2355.100789][ T5809] usb 6-1: device descriptor read/8, error -71
[ 2355.369832][ T5125] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9021'.
[ 2355.502517][T27649] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[ 2355.908803][T27649] usb 9-1: Using ep0 maxpacket: 8
[ 2355.966137][T27649] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[ 2355.976772][T27649] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2355.995098][T27649] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2356.188981][T27649] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2356.207742][T27649] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2356.282621][T27649] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2356.295300][T27649] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2356.894497][T27649] usb 9-1: usb_control_msg returned -32
[ 2356.900107][T27649] usbtmc 9-1:16.0: can't read capabilities
[ 2358.465016][ T5809] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 2358.473234][T27649] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[ 2358.557304][ T5865] usb 9-1: USB disconnect, device number 13
[ 2358.698943][ T5809] usb 6-1: device descriptor read/64, error -71
[ 2358.720333][T27649] usb 10-1: Using ep0 maxpacket: 16
[ 2358.731311][T27649] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 2358.752449][   T30] audit: type=1326 audit(1750984643.023:4114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5160 comm="syz.6.9030" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f017718e929 code=0x0
[ 2358.775232][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2358.834968][ T5171] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2358.877025][T27649] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2359.494747][T27649] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2359.505846][ T5173] netlink: 'syz.7.9032': attribute type 9 has an invalid length.
[ 2359.513657][ T5173] netlink: 211988 bytes leftover after parsing attributes in process `syz.7.9032'.
[ 2359.524150][ T5809] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[ 2359.548346][T27649] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2359.575015][T27649] usb 10-1: Product: syz
[ 2359.626827][T27649] usb 10-1: Manufacturer: syz
[ 2359.682582][T27649] usb 10-1: SerialNumber: syz
[ 2359.745289][ T5809] usb 6-1: device descriptor read/64, error -71
[ 2359.759911][T27649] usb 10-1: config 0 descriptor??
[ 2359.770398][T27649] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2359.783039][T27649] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class)
[ 2359.875299][ T5809] usb usb6-port1: attempt power cycle
[ 2360.105265][T27967] Bluetooth: hci1: command 0x0406 tx timeout
[ 2360.114728][   T30] audit: type=1326 audit(1750984644.304:4115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5174 comm="syz.8.9033" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f253958e929 code=0x0
[ 2360.276565][ T5809] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[ 2360.303256][ T5809] usb 6-1: device descriptor read/8, error -71
[ 2360.459484][T27649] em28xx 10-1:0.0: unknown em28xx chip ID (0)
[ 2360.471791][T27649] em28xx 10-1:0.0: Config register raw data: 0x56
[ 2360.569834][ T5809] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[ 2360.679713][ T5809] usb 6-1: device descriptor read/8, error -71
[ 2360.923308][T27649] em28xx 10-1:0.0: AC97 chip type couldn't be determined
[ 2360.930393][T27649] em28xx 10-1:0.0: No AC97 audio processor
[ 2361.051724][ T5809] usb usb6-port1: unable to enumerate USB device
[ 2362.476297][T23632] usb 10-1: USB disconnect, device number 13
[ 2362.484063][T23632] em28xx 10-1:0.0: Disconnecting em28xx
[ 2362.490537][T23632] em28xx 10-1:0.0: Freeing device
[ 2362.758928][ T5219] netlink: 'syz.9.9046': attribute type 9 has an invalid length.
[ 2362.766767][ T5219] netlink: 211988 bytes leftover after parsing attributes in process `syz.9.9046'.
[ 2362.806906][ T5225] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5225 comm=syz.6.9049
[ 2363.488951][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 2363.495869][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 2364.268851][ T5809] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[ 2364.276667][T27649] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[ 2364.308805][ T5251] syz.7.9058: attempt to access beyond end of device
[ 2364.308805][ T5251] nbd7: rw=0, sector=64, nr_sectors = 8 limit=0
[ 2364.322216][ T5251] syz.7.9058: attempt to access beyond end of device
[ 2364.322216][ T5251] nbd7: rw=0, sector=120, nr_sectors = 8 limit=0
[ 2364.335440][ T5251] Mount JFS Failure: -5
[ 2364.339718][ T5251] jfs_mount failed w/return code = -5
[ 2364.450667][ T5809] usb 10-1: device descriptor read/64, error -71
[ 2364.514619][T27649] usb 7-1: Using ep0 maxpacket: 16
[ 2364.529194][T27649] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 2364.544216][T27649] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2364.612428][T27649] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2364.622500][T27649] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2364.653080][T27649] usb 7-1: Product: syz
[ 2364.668235][T27649] usb 7-1: Manufacturer: syz
[ 2364.685093][T27649] usb 7-1: SerialNumber: syz
[ 2364.712370][ T5809] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[ 2364.761255][T27649] usb 7-1: config 0 descriptor??
[ 2364.821297][T27649] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2364.886520][ T5809] usb 10-1: device descriptor read/64, error -71
[ 2364.957530][T27649] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class)
[ 2365.033238][ T5809] usb usb10-port1: attempt power cycle
[ 2365.302871][ T5253] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.9059'.
[ 2365.333148][ T5255] binder: 5254:5255 ioctl c0306201 200000000240 returned -11
[ 2365.584326][T27649] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[ 2365.590929][ T5809] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[ 2365.614929][T27649] em28xx 7-1:0.0: Config register raw data: 0x56
[ 2365.639900][ T5809] usb 10-1: device descriptor read/8, error -71
[ 2366.124358][T27649] em28xx 7-1:0.0: AC97 chip type couldn't be determined
[ 2366.132119][T27649] em28xx 7-1:0.0: No AC97 audio processor
[ 2366.325841][ T5809] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[ 2366.527060][ T5809] usb 10-1: device descriptor read/8, error -71
[ 2366.649304][ T5809] usb usb10-port1: unable to enumerate USB device
[ 2367.404187][   T10] usb 7-1: USB disconnect, device number 19
[ 2367.410698][   T10] em28xx 7-1:0.0: Disconnecting em28xx
[ 2367.427894][   T10] em28xx 7-1:0.0: Freeing device
[ 2368.177059][ T5293] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.9073'.
[ 2368.178864][ T5291] binder: 5290:5291 ioctl c0306201 200000000240 returned -11
[ 2368.763755][ T5310] netlink: 'syz.7.9080': attribute type 9 has an invalid length.
[ 2368.771553][ T5310] netlink: 211988 bytes leftover after parsing attributes in process `syz.7.9080'.
[ 2369.004797][ T5809] usb 10-1: new full-speed USB device number 18 using dummy_hcd
[ 2369.211796][ T5809] usb 10-1: config 0 has no interfaces?
[ 2369.347576][T23632] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[ 2369.650955][T23632] usb 6-1: config 0 has no interfaces?
[ 2369.657545][T23632] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2369.688870][T23632] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2369.715830][T23632] usb 6-1: Manufacturer: syz
[ 2369.727869][T23632] usb 6-1: config 0 descriptor??
[ 2369.765526][ T5809] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2369.795803][ T5809] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2369.803920][ T5809] usb 10-1: Product: syz
[ 2370.041670][ T5809] usb 10-1: Manufacturer: syz
[ 2370.052300][ T5809] usb 10-1: SerialNumber: syz
[ 2370.067261][ T5865] usb 6-1: USB disconnect, device number 7
[ 2370.202145][ T5329] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9085'.
[ 2370.304386][ T5330] sctp: [Deprecated]: syz.6.9085 (pid 5330) Use of int in maxseg socket option.
[ 2370.304386][ T5330] Use struct sctp_assoc_value instead
[ 2370.536865][ T5809] usb 10-1: config 0 descriptor??
[ 2372.870610][ T5865] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[ 2373.586050][T16923] usb 10-1: USB disconnect, device number 18
[ 2373.913979][ T5865] usb 7-1: Using ep0 maxpacket: 8
[ 2373.939883][ T5865] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[ 2373.954930][ T5865] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2374.001862][ T5865] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2374.033334][ T5865] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2374.048105][ T5865] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2374.066390][ T5865] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2374.075633][ T5865] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2374.338730][ T5865] usb 7-1: usb_control_msg returned -32
[ 2374.595979][ T5865] usbtmc 7-1:16.0: can't read capabilities
[ 2374.865345][ T5380] binder: 5379:5380 ioctl c0306201 200000000240 returned -14
[ 2375.585065][ T5390] syz.5.9107 (5390): drop_caches: 2
[ 2375.590621][ T5390] syz.5.9107 (5390): drop_caches: 2
[ 2375.886112][   T10] usb 7-1: USB disconnect, device number 20
[ 2377.332321][ T5413] binder: 5412:5413 ioctl c0306201 200000000240 returned -14
[ 2377.385470][ T5410] kvm: kvm [5409]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0
[ 2377.434229][ T5410] kvm: kvm [5409]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x0
[ 2377.727165][ T5420] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9117'.
[ 2378.206575][ T5423] syz.5.9118 (5423): drop_caches: 2
[ 2378.230286][ T5423] syz.5.9118 (5423): drop_caches: 2
[ 2379.506637][ T5438] netlink: 'syz.9.9123': attribute type 5 has an invalid length.
[ 2379.515246][ T5438] netlink: 199836 bytes leftover after parsing attributes in process `syz.9.9123'.
[ 2379.566390][ T5865] IPVS: starting estimator thread 0...
[ 2379.641856][T16923] usb 7-1: new full-speed USB device number 21 using dummy_hcd
[ 2379.674029][ T5441] IPVS: using max 45 ests per chain, 108000 per kthread
[ 2379.899802][T16923] usb 7-1: config index 0 descriptor too short (expected 156, got 27)
[ 2379.908078][T16923] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[ 2379.920776][T16923] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 2379.932035][T16923] usb 7-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144
[ 2379.945459][T16923] usb 7-1: config 0 interface 0 has no altsetting 0
[ 2379.976413][T16923] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 2379.985910][T16923] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 2379.994579][T16923] usb 7-1: Product: syz
[ 2379.998967][T16923] usb 7-1: Manufacturer: syz
[ 2380.004119][T16923] usb 7-1: SerialNumber: syz
[ 2380.069959][T16923] usb 7-1: config 0 descriptor??
[ 2380.321704][T16923] ldusb 7-1:0.0: Interrupt in endpoint not found
[ 2380.359976][T16923] usb 7-1: USB disconnect, device number 21
[ 2381.993884][T23447] Bluetooth: hci6: command 0x0406 tx timeout
[ 2382.699031][ T5456] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[ 2382.714549][ T5456] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2383.635616][ T5480] ceph: No mds server is up or the cluster is laggy
[ 2383.667500][ T5483] vxfs: WRONG superblock magic 00000000 at 1
[ 2383.675480][ T5483] vxfs: WRONG superblock magic 00000000 at 8
[ 2383.681540][ T5483] vxfs: can't find superblock.
[ 2384.078884][   T54] libceph: connect (1)[c::]:6789 error -101
[ 2384.098742][   T54] libceph: mon0 (1)[c::]:6789 connect error
[ 2384.681833][ T5493] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2384.700303][   T30] audit: type=1326 audit(1750984667.203:4116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5487 comm="syz.6.9135" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f017718e929 code=0x0
[ 2384.983703][   T10] IPVS: starting estimator thread 0...
[ 2385.147470][ T5494] IPVS: using max 80 ests per chain, 192000 per kthread
[ 2385.810435][   T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[ 2386.110473][   T10] usb 6-1: device descriptor read/64, error -71
[ 2386.371583][   T30] audit: type=1400 audit(1750984668.830:4117): avc:  denied  { accept } for  pid=5500 comm="syz.9.9140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 2386.397175][ T9475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2386.438395][   T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[ 2386.449531][ T9475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2386.620602][ T5503] ceph: No mds server is up or the cluster is laggy
[ 2386.638985][   T10] usb 6-1: device descriptor read/64, error -71
[ 2386.762332][   T10] usb usb6-port1: attempt power cycle
[ 2387.125998][   T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 2387.151347][   T10] usb 6-1: device descriptor read/8, error -71
[ 2387.176584][ T5518] vxcan1: entered allmulticast mode
[ 2387.182875][ T5518] vxcan1: left allmulticast mode
[ 2387.788211][   T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[ 2387.810174][   T10] usb 6-1: device descriptor read/8, error -71
[ 2387.927374][   T10] usb usb6-port1: unable to enumerate USB device
[ 2388.626876][ T5524] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5524 comm=syz.8.9145
[ 2388.774056][ T5528] netlink: 'syz.5.9147': attribute type 10 has an invalid length.
[ 2389.403480][ T5542] netlink: 'syz.8.9154': attribute type 9 has an invalid length.
[ 2389.411241][ T5542] netlink: 211988 bytes leftover after parsing attributes in process `syz.8.9154'.
[ 2389.750381][   T30] audit: type=1326 audit(1750984672.020:4118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5545 comm="syz.8.9155" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f253958e929 code=0x0
[ 2389.828921][ T5555] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2390.524526][ T5562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5562 comm=syz.8.9159
[ 2390.578678][ T5809] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[ 2390.633693][   T54] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[ 2390.783316][ T5809] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2390.808819][   T54] usb 6-1: Using ep0 maxpacket: 16
[ 2390.818063][ T5809] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2390.836999][   T54] usb 6-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02
[ 2390.851078][ T5809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2390.867109][   T54] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2390.882215][ T5809] usb 7-1: Product: syz
[ 2390.886612][ T5809] usb 7-1: Manufacturer: syz
[ 2390.892492][   T54] usb 6-1: Product: syz
[ 2390.981896][   T54] usb 6-1: Manufacturer: syz
[ 2390.989905][ T5809] usb 7-1: SerialNumber: syz
[ 2390.997537][   T54] usb 6-1: SerialNumber: syz
[ 2391.007670][   T54] usb 6-1: config 0 descriptor??
[ 2391.176651][ T5581] netlink: 'syz.8.9166': attribute type 9 has an invalid length.
[ 2391.184433][ T5581] netlink: 211988 bytes leftover after parsing attributes in process `syz.8.9166'.
[ 2391.323183][ T5560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2391.476776][ T5560] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2391.486492][ T5809] usb 7-1: bad CDC descriptors
[ 2392.616344][ T5809] usb 7-1: USB disconnect, device number 22
[ 2393.166831][ T5809] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[ 2393.565649][   T10] usb 6-1: USB disconnect, device number 12
[ 2394.598568][  T424] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[ 2394.769054][   T10] usb 9-1: new full-speed USB device number 14 using dummy_hcd
[ 2394.782121][  T424] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[ 2394.821670][  T424] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 2394.850615][  T424] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[ 2394.903981][  T424] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[ 2394.938748][  T424] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 2395.098230][   T10] usb 9-1: config 0 has no interfaces?
[ 2395.115940][  T424] usb 6-1: config 0 interface 0 has no altsetting 0
[ 2395.131000][   T10] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2395.155086][  T424] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 2395.165295][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2395.181844][  T424] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 2395.191754][   T10] usb 9-1: Product: syz
[ 2395.196037][   T10] usb 9-1: Manufacturer: syz
[ 2395.202370][  T424] usb 6-1: Product: syz
[ 2395.206587][   T10] usb 9-1: SerialNumber: syz
[ 2395.211346][  T424] usb 6-1: Manufacturer: syz
[ 2395.218245][   T10] usb 9-1: config 0 descriptor??
[ 2395.223274][  T424] usb 6-1: SerialNumber: syz
[ 2395.230646][  T424] usb 6-1: config 0 descriptor??
[ 2395.236489][ T5598] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22
[ 2395.246140][  T424] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 2395.332842][  T424] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 2395.550198][   T31] INFO: task syz.2.8496:3491 blocked for more than 143 seconds.
[ 2395.558170][   T31]       Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0
[ 2395.845207][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2396.879397][   T31] task:syz.2.8496      state:D stack:26520 pid:3491  tgid:3452  ppid:27966  task_flags:0x400140 flags:0x00004004
[ 2396.893072][   T31] Call Trace:
[ 2396.896484][   T31]  <TASK>
[ 2396.899512][   T31]  __schedule+0x116a/0x5de0
[ 2396.905518][   T31]  ? __pfx___schedule+0x10/0x10
[ 2396.910501][   T31]  ? find_held_lock+0x2b/0x80
[ 2396.915282][   T31]  ? schedule+0x2d7/0x3a0
[ 2396.925207][   T31]  schedule+0xe7/0x3a0
[ 2396.932682][   T31]  schedule_preempt_disabled+0x13/0x30
[ 2396.941508][   T31]  __mutex_lock+0x6c7/0xb90
[ 2396.949128][   T31]  ? nfsd_shutdown_threads+0x5b/0xf0
[ 2396.960558][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 2396.971166][   T31]  ? net_generic+0xea/0x2a0
[ 2396.982376][   T31]  ? nfsd_shutdown_threads+0x5b/0xf0
[ 2396.994975][   T31]  nfsd_shutdown_threads+0x5b/0xf0
[ 2397.000445][   T31]  nfsd_umount+0x48/0xe0
[ 2397.004804][   T31]  deactivate_locked_super+0xbe/0x1a0
[ 2397.010235][   T31]  deactivate_super+0xde/0x100
[ 2397.019915][   T31]  cleanup_mnt+0x225/0x450
[ 2397.025619][   T31]  task_work_run+0x150/0x240
[ 2397.030268][   T31]  ? __pfx_task_work_run+0x10/0x10
[ 2397.035611][   T31]  ? __pfx___x64_sys_umount+0x10/0x10
[ 2397.041011][   T31]  exit_to_user_mode_loop+0xeb/0x110
[ 2397.046457][   T31]  do_syscall_64+0x3f6/0x4c0
[ 2397.051055][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2397.056984][   T31] RIP: 0033:0x7f8e6f98e929
[ 2397.061377][   T31] RSP: 002b:00007f8e7089e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 2397.069909][   T31] RAX: 0000000000000000 RBX: 00007f8e6fbb6080 RCX: 00007f8e6f98e929
[ 2397.077887][   T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0
[ 2397.085896][   T31] RBP: 00007f8e6fa10b39 R08: 0000000000000000 R09: 0000000000000000
[ 2397.094190][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2397.102936][   T31] R13: 0000000000000000 R14: 00007f8e6fbb6080 R15: 00007ffd7c573178
[ 2397.102967][   T31]  </TASK>
[ 2397.103012][   T31] 
[ 2397.103012][   T31] Showing all locks held in the system:
[ 2397.103022][   T31] 3 locks held by ksoftirqd/1/23:
[ 2397.103036][   T31] 1 lock held by khungtaskd/31:
[ 2397.103047][   T31]  #0: ffffffff8e5c4940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[ 2397.103133][   T31] 2 locks held by getty/5571:
[ 2397.103151][   T31]  #0: ffff8880325170a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 2397.103202][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0
[ 2397.103248][   T31] 3 locks held by kworker/u8:28/9478:
[ 2397.103273][   T31] 2 locks held by syz.0.8403/3181:
[ 2397.103285][   T31]  #0: ffffffff903f13f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 2397.103330][   T31]  #1: ffffffff8e9deca8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xdd/0x1a40
[ 2397.103381][   T31] 2 locks held by syz.2.8496/3491:
[ 2397.103391][   T31]  #0: ffff88805f7c20e0 (&type->s_umount_key#88){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100
[ 2397.103443][   T31]  #1: ffffffff8e9deca8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[ 2397.103488][   T31] 2 locks held by syz.3.8596/3845:
[ 2397.103498][   T31]  #0: ffff8880354920e0 (&type->s_umount_key#88){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100
[ 2397.103549][   T31]  #1: ffffffff8e9deca8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[ 2397.109139][   T31] 8 locks held by syz.8.9172/5601:
[ 2397.109159][   T31] 
[ 2397.109165][   T31] =============================================
[ 2397.109165][   T31] 
[ 2397.109174][   T31] NMI backtrace for cpu 0
[ 2397.109185][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) 
[ 2397.109206][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 2397.109215][   T31] Call Trace:
[ 2397.109222][   T31]  <TASK>
[ 2397.109229][   T31]  dump_stack_lvl+0x116/0x1f0
[ 2397.109255][   T31]  nmi_cpu_backtrace+0x27b/0x390
[ 2397.109276][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 2397.109301][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[ 2397.109323][   T31]  watchdog+0xf70/0x12c0
[ 2397.109348][   T31]  ? __pfx_watchdog+0x10/0x10
[ 2397.109366][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[ 2397.109392][   T31]  ? __kthread_parkme+0x19e/0x250
[ 2397.109417][   T31]  ? __pfx_watchdog+0x10/0x10
[ 2397.109435][   T31]  kthread+0x3c2/0x780
[ 2397.109451][   T31]  ? __pfx_kthread+0x10/0x10
[ 2397.109469][   T31]  ? rcu_is_watching+0x12/0xc0
[ 2397.109491][   T31]  ? __pfx_kthread+0x10/0x10
[ 2397.109507][   T31]  ret_from_fork+0x5d4/0x6f0
[ 2397.109531][   T31]  ? __pfx_kthread+0x10/0x10
[ 2397.109547][   T31]  ret_from_fork_asm+0x1a/0x30
[ 2397.109577][   T31]  </TASK>
[ 2397.109583][   T31] Sending NMI from CPU 0 to CPUs 1:
[ 2397.109605][    C1] NMI backtrace for cpu 1
[ 2397.109615][    C1] CPU: 1 UID: 0 PID: 9478 Comm: kworker/u8:28 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) 
[ 2397.109632][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 2397.109642][    C1] Workqueue: bat_events batadv_nc_worker
[ 2397.109661][    C1] RIP: 0010:__kasan_check_byte+0x0/0x50
[ 2397.109681][    C1] Code: 48 8b 43 48 48 8d 50 ff a8 01 48 0f 45 da e9 9c fe ff ff 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 41 54 49 89 f4 55 48 89 fd 53 e8 bd 24 00 00 89 c3 84
[ 2397.109695][    C1] RSP: 0018:ffffc9000c4afaa8 EFLAGS: 00000202
[ 2397.109705][    C1] RAX: 0000000000000001 RBX: ffffffff8e5c4940 RCX: 0000000000000002
[ 2397.109714][    C1] RDX: 0000000000000000 RSI: ffffffff8b4dcb2a RDI: ffffffff8e5c4940
[ 2397.109723][    C1] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 2397.109731][    C1] R10: 0000000000000400 R11: 0000000000000001 R12: 0000000000000000
[ 2397.109740][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2397.109748][    C1] FS:  0000000000000000(0000) GS:ffff888124852000(0000) knlGS:0000000000000000
[ 2397.109762][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2397.109772][    C1] CR2: 0000001b2ec05ff8 CR3: 000000003ddc7000 CR4: 00000000003526f0
[ 2397.109781][    C1] Call Trace:
[ 2397.109786][    C1]  <TASK>
[ 2397.109790][    C1]  lock_acquire+0xfc/0x350
[ 2397.109811][    C1]  ? batadv_nc_worker+0x895/0x1030
[ 2397.109828][    C1]  batadv_nc_worker+0x16a/0x1030
[ 2397.109844][    C1]  ? batadv_nc_worker+0x159/0x1030
[ 2397.109861][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 2397.109880][    C1]  ? __pfx_batadv_nc_worker+0x10/0x10
[ 2397.109904][    C1]  ? rcu_is_watching+0x12/0xc0
[ 2397.109921][    C1]  process_one_work+0x9cc/0x1b70
[ 2397.109938][    C1]  ? __pfx_batadv_nc_worker+0x10/0x10
[ 2397.109954][    C1]  ? __pfx_process_one_work+0x10/0x10
[ 2397.109971][    C1]  ? assign_work+0x1a0/0x250
[ 2397.109991][    C1]  worker_thread+0x6c8/0xf10
[ 2397.110009][    C1]  ? __pfx_worker_thread+0x10/0x10
[ 2397.110022][    C1]  kthread+0x3c2/0x780
[ 2397.110034][    C1]  ? __pfx_kthread+0x10/0x10
[ 2397.110047][    C1]  ? rcu_is_watching+0x12/0xc0
[ 2397.110062][    C1]  ? __pfx_kthread+0x10/0x10
[ 2397.110074][    C1]  ret_from_fork+0x5d4/0x6f0
[ 2397.110091][    C1]  ? __pfx_kthread+0x10/0x10
[ 2397.110106][    C1]  ret_from_fork_asm+0x1a/0x30
[ 2397.110123][    C1]  </TASK>
[ 2397.110951][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 2397.110964][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) 
[ 2397.110986][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 2397.110996][   T31] Call Trace:
[ 2397.111002][   T31]  <TASK>
[ 2397.111009][   T31]  dump_stack_lvl+0x3d/0x1f0
[ 2397.111035][   T31]  panic+0x71c/0x800
[ 2397.111059][   T31]  ? __pfx___irq_work_queue_local+0x10/0x10
[ 2397.111082][   T31]  ? __pfx_panic+0x10/0x10
[ 2397.111107][   T31]  ? preempt_schedule_thunk+0x16/0x30
[ 2397.111133][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 2397.111162][   T31]  ? preempt_schedule_thunk+0x16/0x30
[ 2397.111185][   T31]  ? watchdog+0xdda/0x12c0
[ 2397.111204][   T31]  ? watchdog+0xdcd/0x12c0
[ 2397.111226][   T31]  watchdog+0xdeb/0x12c0
[ 2397.111250][   T31]  ? __pfx_watchdog+0x10/0x10
[ 2397.111268][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[ 2397.111294][   T31]  ? __kthread_parkme+0x19e/0x250
[ 2397.111319][   T31]  ? __pfx_watchdog+0x10/0x10
[ 2397.111339][   T31]  kthread+0x3c2/0x780
[ 2397.111355][   T31]  ? __pfx_kthread+0x10/0x10
[ 2397.111374][   T31]  ? rcu_is_watching+0x12/0xc0
[ 2397.111395][   T31]  ? __pfx_kthread+0x10/0x10
[ 2397.111413][   T31]  ret_from_fork+0x5d4/0x6f0
[ 2397.111436][   T31]  ? __pfx_kthread+0x10/0x10
[ 2397.111453][   T31]  ret_from_fork_asm+0x1a/0x30
[ 2397.111482][   T31]  </TASK>
[ 2397.111678][   T31] Kernel Offset: disabled