last executing test programs:

50m44.066429882s ago: executing program 3 (id=510):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@delchain={0x34, 0x65, 0x200, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3a}, {0x8, 0x9}, {0xf, 0x9}}, [@f_rsvp={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004010}, 0x4000)
r1 = openat$nullb(0xffffff9c, &(0x7f0000000080), 0x40001, 0x0)
pread64(r1, 0x0, 0x0, 0x9)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000fb2355840000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000050c0200000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000e0010380dc010080080003400000000273"], 0x290}, 0x1, 0x0, 0x0, 0x80}, 0x0)

50m43.712451843s ago: executing program 3 (id=511):
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000ffd400", [0x8, 0xffffffff9673e35d]}})

50m43.298115703s ago: executing program 3 (id=513):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0)
ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000040)=[0x2, 0xa])
ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000080)={0x1, 0x1, 0x1})
ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000000c0)=[0x4, 0x4])

50m41.375741886s ago: executing program 3 (id=522):
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r2 = epoll_create1(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00')
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) (async)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000c40)={0x8000203d})
socket(0x26, 0xa, 0x20000000) (async)
r5 = socket(0x26, 0xa, 0x20000000)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x4, 0xfe, 0x2, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x27}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4a044}, 0x20004090)
ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000))
msgsnd(0x0, &(0x7f0000000340), 0x8, 0x800) (async)
msgsnd(0x0, &(0x7f0000000340), 0x8, 0x800)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', <r8=>0x0})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) (async)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x6c, r9, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x54}, 0x20000000)
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd30, 0x25dfdc01, {0x60, 0x0, 0x0, r8, {0x0, 0xfff2}, {0xfff2, 0xffff}, {0x0, 0xfff1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x44080)

50m39.711047644s ago: executing program 3 (id=528):
syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"])
syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff1000040000000000000000000000000000001", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}})

50m39.171979223s ago: executing program 3 (id=530):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois', 0x8)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000240)={0x0, 0xfffffffffffff001, 0x0, [0x6, 0x3, 0xe, 0x200, 0x2], [0x7fffffff, 0x80000001, 0xf, 0x7, 0x5, 0x8, 0xffffffffffffffff, 0xb, 0xa51c, 0x80000000, 0x2, 0x5, 0x24c, 0xa33, 0x1, 0x6, 0x10000, 0x2, 0x10, 0x5, 0x3, 0x8, 0x7c21804a, 0x8, 0x7fff, 0xa, 0x1, 0x1, 0x9, 0xe, 0x1, 0xde1d, 0x7, 0x2, 0x3, 0xffffffffffff8000, 0x6, 0x12, 0x0, 0x0, 0x7f, 0x2, 0x5ba9, 0x8, 0x2, 0x7, 0x8, 0xfffffffffffffb60, 0x400000000, 0x100000000, 0x8001, 0x1, 0x3, 0x5, 0xffff, 0x3, 0x101, 0x0, 0x67c, 0x1684bfb2, 0x1, 0xc, 0x4, 0x0, 0x8000000000000000, 0x3, 0xca7, 0x5, 0x5, 0x100, 0x2da74e41, 0x1, 0x10, 0x80, 0x75, 0x1, 0x2, 0x2, 0x8, 0x9, 0x8000, 0x3, 0x7, 0x7ff, 0x3, 0x7687, 0x1ff, 0x7, 0xe648, 0x2, 0x6, 0xdfb3, 0x3, 0x2, 0xfffffffffffffffd, 0x4, 0x7, 0x13, 0x80, 0x5, 0x8001, 0x0, 0x0, 0x80, 0x7f, 0x3, 0xb4000000, 0x0, 0x6, 0x80, 0x5, 0x662, 0x7, 0x9, 0xca, 0x8, 0x7, 0xc144, 0x2, 0xfffffffffffff36f, 0x4]})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac10009"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040)
sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x0, 0x0, 0x31)
r3 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x17)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x7, 0x2080, 0x3})
recvfrom$inet(r0, &(0x7f0000000080), 0x1875f45bd2ef03ca, 0xc9100120, 0x0, 0xfffffffffffffdb5)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080))

50m38.714741456s ago: executing program 32 (id=530):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois', 0x8)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000240)={0x0, 0xfffffffffffff001, 0x0, [0x6, 0x3, 0xe, 0x200, 0x2], [0x7fffffff, 0x80000001, 0xf, 0x7, 0x5, 0x8, 0xffffffffffffffff, 0xb, 0xa51c, 0x80000000, 0x2, 0x5, 0x24c, 0xa33, 0x1, 0x6, 0x10000, 0x2, 0x10, 0x5, 0x3, 0x8, 0x7c21804a, 0x8, 0x7fff, 0xa, 0x1, 0x1, 0x9, 0xe, 0x1, 0xde1d, 0x7, 0x2, 0x3, 0xffffffffffff8000, 0x6, 0x12, 0x0, 0x0, 0x7f, 0x2, 0x5ba9, 0x8, 0x2, 0x7, 0x8, 0xfffffffffffffb60, 0x400000000, 0x100000000, 0x8001, 0x1, 0x3, 0x5, 0xffff, 0x3, 0x101, 0x0, 0x67c, 0x1684bfb2, 0x1, 0xc, 0x4, 0x0, 0x8000000000000000, 0x3, 0xca7, 0x5, 0x5, 0x100, 0x2da74e41, 0x1, 0x10, 0x80, 0x75, 0x1, 0x2, 0x2, 0x8, 0x9, 0x8000, 0x3, 0x7, 0x7ff, 0x3, 0x7687, 0x1ff, 0x7, 0xe648, 0x2, 0x6, 0xdfb3, 0x3, 0x2, 0xfffffffffffffffd, 0x4, 0x7, 0x13, 0x80, 0x5, 0x8001, 0x0, 0x0, 0x80, 0x7f, 0x3, 0xb4000000, 0x0, 0x6, 0x80, 0x5, 0x662, 0x7, 0x9, 0xca, 0x8, 0x7, 0xc144, 0x2, 0xfffffffffffff36f, 0x4]})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac10009"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040)
sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x0, 0x0, 0x31)
r3 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x17)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x7, 0x2080, 0x3})
recvfrom$inet(r0, &(0x7f0000000080), 0x1875f45bd2ef03ca, 0xc9100120, 0x0, 0xfffffffffffffdb5)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080))

31m41.913345065s ago: executing program 0 (id=5342):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4)
r1 = accept4$alg(r0, 0x0, 0x0, 0x80800)
io_setup(0xff, &(0x7f0000000380)=<r2=>0x0)
sendmsg$alg(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)="8b11", 0x2}], 0x1, 0x0, 0x0, 0x10000}, 0x20000801)
io_submit(r2, 0x2000000000000225, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r1, &(0x7f0000000340), 0x2d}])

31m41.519890023s ago: executing program 0 (id=5345):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000080900010073797a300000000090000000090a010400000000000000000700000008000a40000000000900020073797a30000000600900010073797a3000000000080005400000000d4c001280340001800a0001006c696d6974000000240002800c000240ff000000000010000c000140000000000000008b0800044000000001140001800a0001006c696d6974000000040002800800034000000110"], 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800)

31m41.159849271s ago: executing program 0 (id=5346):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = epoll_create1(0x80000)
r6 = fcntl$dupfd(r4, 0x406, r5)
r7 = getpid()
r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r7, r8, 0x7, r6, &(0x7f0000000100)={r5, r6})
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1223}})
io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x8001)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x1, 0x4, 0x60, 0x7f, 0x17, "9f9413a4d68de2d71b63e573229ac6de50806c"})

31m40.05483304s ago: executing program 0 (id=5350):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0xb, {0x0, 0x0, 0x0, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, r2, 0x3, 0x7fff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
io_setup(0x2, &(0x7f0000000200)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r3, 0x0}])
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000680)={0x73622a85, 0x200a})
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x801, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r9 = dup3(r8, r7, 0x0)
r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0})
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0)
recvmmsg(r11, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x1, 0x20, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r12 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)
r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r14 = openat$cgroup_procs(r13, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r14, &(0x7f0000000080)=r12, 0x12)

31m38.095021103s ago: executing program 0 (id=5362):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000083c0)=ANY=[@ANYBLOB="66643ded231cdda05f88aa0a94009836dd6bf2e6358562a7fdc9e67757d0970d4ff511a8752399106e337d0e1c31c308c101f69130cde68cae30db2937f2f47edcf0878b642c8ec72895cf8a90146eaeac", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)
syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff05000000000000000200000000000000030000000000000002000000000000000500000008000000060000000000000009000000000000000000000000000000ff0000000000000003000000000000000000000000000000ffffff7f570000000300000000800000ff030000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="04000000040000000000000000000000000020003705003a2d285cc980"], 0x0, 0x0, 0x0})
getdents64(r4, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r8, @ANYBLOB="10007d80", @ANYRES32=r6], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000004240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000004200)={&(0x7f00000011c0)={0x3c, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_SEQ={0xa, 0xa, "bd3dc88e3726"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x4081)
preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x2000, 0x0, 0x1f)
timer_create(0x2, &(0x7f0000000000)={0x0, 0x12, 0x1, @thr={&(0x7f00000000c0)="ba8cacdece0aef307ef81f48eece5347174afe0c520d3237c710c05cffbf6ac317421806fd7429915bfcd9b70216ca34b4589e2f1b1b85ae8782581afbbbb0face105a823ea34b2787c844635752dee57bf3fc56c4a7422cfab0230c", &(0x7f0000000140)="626ecbfafe15af1334556c4bdfa634dcd91394a0567168111f6181d1a3b0a7dd3f3642557df0f65e87883051adbc7664a18f703acb087a2e8b88ea2d83629ebbd3753b423703e15466c7b72e02ae956925b93d83617af67ed347b0c3c20509f69dc61cfa60df0a983048047087c4a99851ae8d7a20dbf30406717cdd1453317515ab71f0533df29e7f6c3ed0db8d43ed9ae34ed49e725429d32f8700a4e5490163dba6ca53ab24316fa1f17b83bf80bc44cbcc7d2de5aead96916d276c88ec9c4229aaf7b276b2c5cec8aaaaf62535b3b09e081a2cb382a7bf36a0f1f4d2dc2a6223d0e7e415fb5e9c0baa1c41b08d1af8cee6c8b5dd57597f3c939ef1b2a9ddc025131c3ec78464c2b0bc9c606476ce030bd9a3012fb0b8ca8bd588aa549a51364dcc75516354642786a2792e8ba6626a26eccb34fd2bebf78ea02ca7ea3ae34c67a3ac7c9a40f8673c369ade38be54398295ff030c298bdd94dc3c600bf83dd2f9d53e8ef7248a243b5e48115d18ca923286e212ec2e16c199808583c6de15bbe1ad610ef6be4381126246981383e90003eaa495902a74cf64d023a5ad5fa2bbba4795a05276d2ca0efc7ab325c0b1ac8ddf13279cfff509d8976a431b88ee69b334cbe170a887035c7dcf2f56eb2c6d2a03a1be5c6b2382e8ba424df57d2a626645f0ccbf4e2742ed6e8171c5cdb28845ee3daa15c7123d62e953d65e20e9d4847ac596c0cc88d8785cdc8cc006f0f40b241f6e4cf9bb2bd271199c20cf3ae64624e0a075594214c7658c8bc01fce068eecfb906de803ebaadebc75e93ba0307b806f0ad7495372bfd20483f9c91f5f3f64fa7023dd6cf3185f43b8942520c2047c9314b21f5ee049e0bbe294e8d251669a2caff60943eca60d02f8b83b5700d58703d2094ab59ff1eb2d42fa2a7fa52c1c786988244acb6c3fe6a836cf575f3b4622a776e5903b8693d2d23b17845cf93ea90f96d1491a7ad2bf7fbd1c5d78c98740f331342f3d0d481e2eedb3da9df62d55a6d475aff87f3a912361cb00d7de1a56deb0faea90c1b895d091e2180eb03ae46321e92157caed1266bbc7308d2e0f42e8cf4736b32ede6d12561b64b4a102a8aa456d631a459fc964785c49199f03d6962112c883d67d673ed1d47fd8ef615193231d1878b4b85a5e68eb82f2d676d0118ccc850e96c7206c0204346f1743364c6231c990065dc4b62dd78945725ba3c2f488a01cafb4c0a82f62292c9ca87dc3c56be9eab5d28a107ce51e1f1ddbeb8f045a30ca8e1f3b8d9f1ba67deda1bb01fef541433f1d92187cde76e749d89812a9818c8601061d1e678b08d9f43b492ed101c32518c2f3deca79ea7e3137cca03420f68579c2e31d9887af8fffac9a2c2148f5c9be93cbe40c036fbc4a573c4b6417f7c15ac6d2a5a64acc04c283afe70925ca4e60e55e432f339dd35645da37d9f4b32f5345a138266d73bd6d4236dee8c4500e4a9922889b458418e96ce41953cc71bf9715cf1f50a5c9731d40c133014495b03e18cb5cbcfc36e51edf2e10e24b5f05e6362a1f2c1a73c7e01420e6d89f09e7f8ea9d7e8cecd9b8eadcdaf719ea0941ece3ea84bd1ecb956a92caefbbb0b3738ec951e17869496f507c48f31c077fb050415e4b2f4bebad0c196c58780846daa94a9525c9404c21fe5dab934a5168001643a18ce19c3db54b4349bcef1574a4e645beb243884d0d55884ffb4e30e20d05d4a487c69ccb50185de6c2aa770d9c937bbb9c59ef888417027fa376d6e7e6b4ecd6c60e8ca89bd8c2c1c470aee36301406f0974fea9084ae52a26cc9a6150e233b79a5bb48f9611ff547008220f2e0213c55f5484e53d45ad36681318025e5768c80f3c76e27b453e13b98e03c5f1f9293930eb507da88d741f722eebd45668d3e95c3fd40be71f02424ffa04a22af3f99de5e65ca8a2d622fdef2d0e5238c665fdf499f1a17bbb92871f657c044fe1b54863e106386b984028eb0283338af0f50822b5f74238d1a1106b10357f3469aaa0c637b13dc223dc2af924fd16dda2c9b6972afdaf636534a90dc413e16e5edbfacf636be2b011ee063d4490322459a6edee146cb4e9b5d24b1567381a97df90e4216de4bce82c04edeb1dda429bbccf095bb7ff6c7625d2047d99b81a2604470553a48573f17470d46b45fc35e46a1f5fd6947cd79e439414fc2890bf7912d51181134533c1cddda08891ffa888f1e5305de70314e4e9dfd957b008e1c1f2234dd512ab322cd2818a78d186c520b8cccee07bb8553f2b3d5b2998f83a353bc7171890dca7612cfa3a1b44ae34f66f9531c3525a1a15e50d01e5b47e1d9cd2e8ee983a1e098ae8a0abdbecd63c9c65b0d59808aa7955ab5a742930973472a3bc52c41fecdd6017ffb2f2b66f3b666b93c9cce1ab781ed744c202982ee50fc74047428304b69a403f2cc3f8ce55ce524860b7ed2f014c42dbdec1eef803c0edaa8765575ddc0466fdc6681ce6e96ad93ddb146d5892c802995d66f363b5ebe551f4d29b03216ad3d1654fcf01b8316aa6d3e6f0e23abf35bd2cc480baa11b2929d1a25fe2892c26938f622c0a9dc44eb75cd71ede964c1fb4a04a009e9c3b03ad82894c6f882be76983502e97ef96adc9e95c61bb470bee9446fb27b4eac66027d642de24c0a025566428c3f9481c68f26173cd2073b960816b423e53dc360934f4864838985fc31b7514fdb7dc75059af82b0f1c994fc9fb593adfb1c835c59ee1c1e8865307c9cbcda21505ee9d458c1991992ad3fd635a4facf7599a2f5f0879b029894e4f41d433f011ea67ac74c434e133257f722cc85f913ffd1d36849aac41bd259a998d6bc6e0452282f3b6f5cd3d5d9a96ada67669d69d9c1b5215790413c6aa1bb5a52c9281630a4057b59be91fd04b67869f7cde2a62b170170c64753752d2924bad3bfb7154b3defac11717e60f13cc3fff72a8f69b47a27c5533d9c9bcdbc7c3500ca0bd25433a580a0d083989b9e5aefdece61c0849bef4ddb21c8ee1d5acbb7bc3ff8cf85c9954e6c0fe6bbfb5c3043439528cb882735bf17a7475b800e24097010afd42e7dcce1c3991db8a5c1c823f9d73251ddf78ce98536f0bd641496cd154732ac0a4d18002947f5c7a3ec67f4525f4659a4f3a2a645da5aa6e418cfff89d76935a2b4f09c491cccb0b449f335d42bae86e2f873994635d6eff3caf6712d8a34c687c9983e65a32b5eb377b46f40194f7787a9426b009b9ed293bfaaead58692046d90386e6df46e5be3fc9f2f9682f2ab049190897fdde6d2387e5a8c6cc40d7f8b780c2606c1b6366531fd4278bfde9695874cba5497c6f43ec18333cc5dbc5dd84b27bba304746224ea4c95cad729321db2f1faaffdfa33dab23b880633bb61ec17a289bb0990c701c95e278a8887f469977c37db7635d4e48e2ea98c49c7f975547c1134e5193534f4c01f5374c0b9bde22df7b9ec3dd4b128704ebc3eda1bc0d75269781afd1c61d4c3800174f9bdfaa6b32a8d8d75e813adfebd6a94db75ee36ca31cc6d072cae1faed8163e0b5e73761583db8171403a3a4634ed257b79f4aa48dd38c8e6c8b988c79636c1282fe31b25f21c71b1b3b3f3e4511c1a3aafc6617dab2c99b5318fc395d08fc056079e008638e5f8f706f0c8f0ac62d58411517f58eccccde1192a3f91270265d80d416ee045c0cadd98900edac40ee6c430bec4b2bc07287da09d99abea9a69b7962f9d6c7f5be430ef13e0349f6ef2fd69d6233e4ba931fb0eea431c3355f8e9d688ed8868c11e7ecdf0268421e7319dd33249439da949d72701a88e15c41bb37c63ad29cf4ec180e6e1b139d0e95f4714ed5362ded84d84d9630c185f0d2e0f6ea7b0152d9b40f91a772d9c8fcffa447f778ff51f3a6439614443f13252936053ad13e5d1d913b8973ad2291ee8b60229cc3067d92cf94a1702026e300c1f8749618193ce1439864aed4055dcdd797d327d0b2b4f4a124955901bf836a06263efa36917c3758730a94a4fc31fb7f90608cc8e9ccf45a2b9bb40f3fec4d8015c7719d508af12a3bde4e420a0cea1472c6fc6e99d45e8ec299100446e1add4e5e5bd9f12fc357a60b0150487471713c6e152657fbda63ba4024eba30fdb12619e020b76acbe199004337d44df88f75368755e85138f3a8744e40fed78fce1b5d8335a7f03a835704e15f894ec4a7370698bb78b58ccd3c333b5d12e56f4b8129164c7df5e02dcd2715f8bae941e82b89feb765a39c0373c080ae3c555171857feae16f3b7c08560492dff62ed7d8c1a8ce5b829251ac6e248ed9c0ae18c83a97fc00bfa3821c55addfb4f82411a7ee63b5810c3eb1be91155e82fb0d05751d72767e92025a8ccbffa5d038ed952db8be852166d9ae4207ca3eec8e917e94db347898ed2127850c6f2e3e58728ebfa438b512152a24177f97c677dbbb6e78fd9770f7aecebb9c7aa9fdd94e4a57a3517fe14cd579c5c5d0cd78ad4e6190441d7440c15bc80e1c35ac140edec5f72a0a682ef716453797bfab92e631e6bd1eedf50a9d43ecad45a081fe4e2daa177e3b5f686f81d3b1ad0a310dbbf948f76b42b16992923fab4b114b2479615cdc5e7a57c7787f61b0744c7d16ba297e1fa077c9f18d8feb30aeeb5f9f83167f73c58b62b20f76a91511a6c874ac67d88b1893f96e082d1f873ec47d93aaec5dbcaebdace5d237ec9006f4a24410767d15e487e44e30835e1865ce22bcd15bc30904196569ee7de4f601d06113e9104c12be64bdf85660c4f63f7d913eeb0f208009f4fdd13b9e6bb3f61aaedf4e643c734fb718cfce2c520b68afe4459b7c3889450fd1be40aa62c25cc00f03fe98d2b45ec98f7918dd51b11d38db621caa7f5c10d57d0009ab28bd6947d160234eca127840d2d9cb48a03662d39dfad4f13dd0d191b4f27937184b3c073a9203940f58ec63201c08827d082c0dbb47114340600b322403cf114fe5e6f01399dfaa5e0d02785a787ee34b4349748fb5ea07220e94d7fe1fd9dec8ded822399f9d5aa64e8f220e985a00b02c6d158727fefb2c7fc21f2cb5e7bdbaecc37100daa68f5ba83dd7d4f863c7181a5d2e0a9afff9b866406d869bb3d320628b264ed0f926ad358e830447d929faec4c0562400a17e724d46632197be9b27065640c6afe9927e9baa1f0fe90df208808a4f963d87376e361b36c99db0ddd109c7d0d6640a981aea7b7854f514304ef8d5c65e03cec2d006c1c4eb1dff18b94b9e777c7f1ae281438454d15ee2ad2adc9d87610b995dc8ab6b1f6e4eef66cb7b5f99915d5905fb6cd6901aca047f3b5c5e60413e14decb2a96b456cf1824743d9fa85689673d3857d7f72e65e97206c1b93042277a4a188186aa7528ec31be203f40776e7d1c540fc8ae19c62c68c0e7f5a2087cd48722489ee8b7e1a2db15d379e23422146f297c27388be47276805fe0e96793b026bba23959e4d78c5778c66db45c5c47d1958dd0a5e142b9f04ce4debc6d1e7799972c0f13614bd823f0b92147a0fa8e2a200b8cdd53a469a71f035e3f8b7565b56d5a76686c2367d70277cabe80ad955885a6b45019d1c3a2543debf3adec204b285c70c2073cd353905c0ef704ff089feec642a14a511a3e8ca124a2662d6112e3208351689b359dec9c878b8c575f5092c41ce80c4104102d5669a3e35910d19a4c59f27425603094f75d5e903abb4024a7c39e45d494334647cb45ca11315d0e45afa7f7c9186558ab4edf3277142b61ac9ea44739a2ffa7db6a1eedb6724a1"}}, &(0x7f0000001140))

31m37.20948936s ago: executing program 0 (id=5366):
syz_emit_ethernet(0xaa, &(0x7f0000000680)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x9c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x18, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x5, 0x5, "4eb8a6"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @broadcast, @loopback, @multicast2]}, @cipso={0x86, 0x40, 0xffffffffffffffff, [{0x7, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x7, 0xa, "2189ea43a2149b84"}, {0x6, 0xa, "f7d11634eea26b75"}, {0x0, 0x2}, {0x0, 0x11, "ccf0294e2a3bdb4aa40b249e8e0c1a"}]}]}}}}}}}, 0x0)

31m36.208863672s ago: executing program 33 (id=5366):
syz_emit_ethernet(0xaa, &(0x7f0000000680)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x9c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x18, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x5, 0x5, "4eb8a6"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @broadcast, @loopback, @multicast2]}, @cipso={0x86, 0x40, 0xffffffffffffffff, [{0x7, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x7, 0xa, "2189ea43a2149b84"}, {0x6, 0xa, "f7d11634eea26b75"}, {0x0, 0x2}, {0x0, 0x11, "ccf0294e2a3bdb4aa40b249e8e0c1a"}]}]}}}}}}}, 0x0)

3m59.106124454s ago: executing program 4 (id=11755):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0) (async)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x2, 0x0, &(0x7f00000000c0)=""/51, 0x0, 0x1}) (async, rerun: 64)
r1 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340))
r2 = dup(r1)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) (async)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000003c0)={0x1, r2})

3m58.943550294s ago: executing program 4 (id=11757):
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4804)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r5=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000040)={r5, 0xffff, 0x9}, 0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={r5, 0x2}, &(0x7f0000000240)=0x8)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
sendmsg$AUDIT_GET(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x3e8, 0xf00, 0x70bd29, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4010)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r7=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000100)={r7, @in6={{0xa, 0x4e24, 0x2, @empty, 0x6}}, 0xfcd3, 0x9, 0x7ff, 0x3, 0x0, 0x1a65, 0x6}, &(0x7f0000000000)=0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000003c0)={r7, @in={{0x2, 0x4e24, @remote}}, 0x439d, 0x7, 0x1, 0x0, 0x10, 0x8, 0x4}, 0x9c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="000008000100000000003d00000048f800400000000000f78490783fffffffac1414aa440c670000000004000000030000000005f2250dbb08444b68bb920d3b7bfee2f71973db79759859020f2bfd76458dce3ae04353017b7c0b6a1ae7164db4fa69aa8551ec7acfccd3627713d94b2e68452fdfc1e9c54e2fadd4c63a907ab51ec479e934b327320f4fd6b41d0376bd158b08dab4ff1b530e393e252937c4f7c182757a0de666f0486c7d9c456670db93a2a11bc777ee9145d256d350816696c37de632263700a006dd5f767b4c41cdc9113403b55ac56fe1a9843bdefda18957a5719187a9344c2c88d39d347547b8", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x4e)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="140020003a00010325bd7000495f00700000cf4453"], 0x14}}, 0x0)
r12 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0)
write$uinput_user_dev(r12, &(0x7f0000000840)={'syz0\x00', {0x1, 0x8000, 0x9, 0xac23}, 0x40, [0x10, 0x8000, 0x7, 0x7, 0xffcf, 0x7, 0x8, 0x1ff, 0xe95ab6b, 0x1, 0x4cc59373, 0x0, 0x8001, 0x1, 0x6, 0x8000, 0x4, 0x1, 0x2, 0x6, 0x3, 0x4, 0x10000, 0x0, 0x4e3, 0x1, 0x7fff, 0x9, 0x0, 0x2, 0x1, 0xe, 0x8000, 0x1, 0xa0, 0x80, 0x7, 0x3, 0xbc49, 0x696, 0x8000, 0x1, 0xb, 0x7, 0x7, 0x7, 0x2, 0x3, 0x3, 0xff, 0x1, 0x4, 0x5, 0xffffffff, 0x0, 0x8, 0x7ff, 0x4, 0x8, 0xffffffff, 0x3, 0x100, 0x5, 0xb], [0x7, 0x9d2, 0x80000001, 0x800, 0x3, 0x9, 0x7, 0x7, 0x5, 0x80000001, 0x8, 0x40, 0x9, 0x8, 0x80000001, 0x4, 0x0, 0xd, 0xfffffff7, 0x3, 0x0, 0x2, 0x2, 0x3, 0xb, 0x66fe, 0x6, 0x5, 0xe03, 0x3ff, 0x4, 0xfffffc00, 0x1, 0x4, 0x3ff, 0x3, 0x7f, 0x3, 0xd08, 0x1, 0x1, 0x22, 0xfc000000, 0x0, 0x1, 0x4, 0xe37, 0x3, 0x0, 0x1, 0xe8, 0xffff8000, 0x2, 0xb, 0xd7a8, 0x6, 0xbdc, 0x3e6, 0x2, 0x9, 0x0, 0x8, 0x7fffffff, 0x6], [0x1, 0x9, 0x7, 0x590, 0x10000000, 0xb0, 0x4, 0x5, 0x2, 0x4, 0x6, 0x7, 0x3, 0x3, 0x4, 0xe, 0x8001, 0x1, 0x0, 0x9, 0x200, 0xbf1c, 0x79fc, 0x1, 0xf9, 0xffffff26, 0x0, 0xfffffff7, 0x9, 0x1, 0x7, 0x2, 0x8000, 0x10, 0x5, 0x3, 0x1, 0x10, 0xb8, 0x6, 0xec5f, 0x8001, 0x7fffffff, 0x1b9, 0x8a7, 0x1, 0x8, 0x3, 0x1, 0x1, 0x4, 0x3, 0x74da, 0xec9, 0x140, 0x6, 0x3, 0x6, 0x1, 0x7fff, 0xa, 0x86c, 0x7, 0x1], [0x0, 0x20f, 0x80000001, 0x200, 0x0, 0x3, 0xb, 0x2, 0xffff, 0x4, 0x9, 0x80000000, 0xffff, 0xb7, 0x3a1, 0xfffffff1, 0xffff, 0xc, 0x8000, 0xfffffffe, 0x9, 0x3ff, 0x1, 0xdf76, 0x63, 0xa, 0x7f, 0x100, 0x40, 0x3, 0x2, 0x8, 0x8, 0x7, 0x4, 0x2170, 0x0, 0x2, 0x6b2, 0x9, 0xcd5e, 0x59, 0x9, 0x6, 0x6, 0x6, 0x5, 0x1, 0x0, 0x4, 0x9, 0x6, 0x1, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x5, 0x3, 0x8, 0x1, 0x5, 0x6]}, 0x45c)

3m57.999208532s ago: executing program 4 (id=11761):
syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"])
syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac0000000000000000000000f9ff00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}})

3m54.852487061s ago: executing program 4 (id=11771):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r3, 0x4)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000580)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xfe5f}, {&(0x7f0000000840)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a8049d2a44ce42557b2e72e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c5301001ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb07de2f5d6a9448c3206cff6d290b433f331c2399e99ee3bdecf5689eddc3e54908000000a933bbc47b65ca6e9d7efbee6e3b1dbe87313111e85336d6890002db17751b6044f964dc90ea466f90856112be7f0a54b39a3f66cc4c39544300093158af39cdde429f50d8c7fbc0efaccca18e94b87dc586ee60baa55469755ab00e92b607f2aeee00ad72fb29c1847f85b2f8ec3a34864b18eaaa131a4940c9af11606e5d9360c3f4a2c8308d50c34b1bbaac018469ac346dc2a539e20350297097e7bf21ea0c2a0aa083b2b3543af05c7fb5391a1c81304b520fafb941b2dc3cfb03c3dd8567a459752a5ca573ee7cf4f518af508d141c98dc9914df1521e9ee49decdf2418e7f74adea9fda805bc75906dafd279aee36397966427cdef205c67fbbb3d5", 0x113}, {&(0x7f00000003c0)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdcea4714219a2d4c4b985418cc8fbcd2935f4e8b229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0bea0", 0xbf}], 0x3}, 0x8001)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000700)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000040)=[<r6=>0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x8, 0x7, 0x6})
r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[<r8=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[<r9=>0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r8})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000000)={0xe4, r9, r8})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000380)={0x0, r9, r8})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc01c64b9, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[r6, r9, r10], 0x3, 0x80000})
mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

3m53.963410617s ago: executing program 4 (id=11772):
r0 = syz_open_dev$video4linux(&(0x7f0000000180), 0x0, 0x20080)
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000001c0)=0x5) (async)
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000001c0)=0x5)
syz_usb_connect(0x0, 0x52, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1b, 0x19, 0xf7, 0x20, 0x471, 0x312, 0x9469, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf, 0x0, 0x1, 0xb4, 0xc7, 0x6a, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x1}, [@mixer_unit={0x5, 0x24, 0x4, 0x0, 0x5}]}], [{{0x9, 0x5, 0x7, 0x19, 0x200, 0x8, 0xc, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x1}, @generic={0x10, 0x3b, "a64ca5eab9884d11a74913391d1d"}]}}]}}]}}]}}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x7})
r3 = epoll_create1(0x80000)
r4 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x9, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000140)={0x2000}) (async)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000140)={0x2000})
ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000200))
close(r2)
close(r2)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000240)={'syztnl0\x00', <r5=>0x0, 0x40, 0x1, 0x7ff, 0x6, {{0x7, 0x4, 0x2, 0x7, 0x1c, 0x67, 0x0, 0x0, 0x2f, 0x0, @local, @multicast1, {[@timestamp={0x44, 0x8, 0x8f, 0x0, 0x8, [0xfff]}]}}}}})
signalfd4(r2, &(0x7f00000002c0)={[0x6, 0xa]}, 0x8, 0x800) (async)
r6 = signalfd4(r2, &(0x7f00000002c0)={[0x6, 0xa]}, 0x8, 0x800)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001400)={0xffffffffffffffff, 0x20, &(0x7f00000013c0)={&(0x7f0000000340)=""/126, 0x7e, 0x0, &(0x7f00000003c0)=""/4096, 0x1000}}, 0x10) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001400)={0xffffffffffffffff, 0x20, &(0x7f00000013c0)={&(0x7f0000000340)=""/126, 0x7e, <r7=>0x0, &(0x7f00000003c0)=""/4096, 0x1000}}, 0x10)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000004, 0x6031, 0xffffffffffffffff, 0x5d686000) (async)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000004, 0x6031, 0xffffffffffffffff, 0x5d686000)
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, &(0x7f0000000000)=0x4, 0x5, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x4, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x8}]}, &(0x7f0000000100)='syzkaller\x00', 0xfff, 0x0, 0x0, 0x41100, 0x12, '\x00', r5, @fallback=0x28, r6, 0x8, &(0x7f0000000300)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x0, &(0x7f0000001440)=[0x1], &(0x7f0000001480), 0x10, 0x456}, 0x94)

3m53.140034377s ago: executing program 4 (id=11775):
add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3)
ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000140))
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0x5}, {0x400000b1, 0x0, 0x5}]})
getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000280)={'icmp6\x00'}, &(0x7f00000002c0)=0x1e)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r5, 0xae9a)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, 0xa, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x4054)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

3m52.566697922s ago: executing program 34 (id=11775):
add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3)
ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000140))
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0x5}, {0x400000b1, 0x0, 0x5}]})
getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000280)={'icmp6\x00'}, &(0x7f00000002c0)=0x1e)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r5, 0xae9a)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, 0xa, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x4054)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1m41.796127158s ago: executing program 5 (id=11981):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
socket$inet6(0xa, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r2=>0x0], 0x40000012})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r2], &(0x7f00000002c0)=[0x1], &(0x7f0000000200), &(0x7f0000000300), 0x0, 0x7f})
modify_ldt$write2(0x11, &(0x7f0000000100)={0x8, 0x0, 0x400, 0x1}, 0x10)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0xc17a)
modify_ldt$read(0x0, &(0x7f0000002140)=""/4098, 0xfffffffffffffe8e)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x11)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3)

1m40.032499081s ago: executing program 5 (id=11985):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)={0x28, r2, 0x1, 0x0, 0x80000000, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan0\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10800}, 0x4800) (async)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x0, "08000000000000000000000000000000000000b582000000010000000100"}) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)
recvmmsg(r3, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0)
r4 = dup(r3) (async)
r5 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r8 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
r9 = fsmount(r8, 0x0, 0x86)
fchdir(r9) (async)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r9, 0x84, 0x8, &(0x7f0000000200)=0x3, 0x4)
clock_getres(0x17, 0x0) (async)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r4, 0x0, 0x0, 0x0, 0x80000}) (async)
r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0)
syz_usb_control_io$hid(r10, 0x0, 0x0) (async)
syz_usb_control_io(r10, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
creat(0x0, 0xd931d3864d39dcca)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x9, 0xfffffffe, 0x0, {0x6, 0xffffffffffffffff, 0x80000005, 0x2d, 0x7, 0x5, 0x3, 0x1, 0x9, 0x2000, 0x6, 0x0, 0x0, 0x1, 0x365}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r11 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r11, 0x501c4814, &(0x7f00000000c0)={0x2, 0x100, 0x0, 0x8, 0x4, 0x8}) (async)
io_uring_enter(r5, 0x47f5, 0x0, 0x0, 0x0, 0x0)

1m37.656723887s ago: executing program 5 (id=11998):
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00')
preadv(r0, &(0x7f0000000540), 0x0, 0x2, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x7, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)}], 0x1, 0x0, 0x0, 0x1f000008}, 0x40008004)
socket(0x1d, 0x2, 0x6)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x202a03)
r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x802, 0x100)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r6, 0xc1205531, &(0x7f00000010c0)=""/4101)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f00000001c0)={0x2, 0x2, 0x1})
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100))
syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0x430564)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0xfffffffc}, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x7fffffff, 0x8, 0x0)
fcntl$getownex(r3, 0x10, 0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/netstat\x00')
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs(0x0, &(0x7f00000006c0)='pagemap\x00')
io_uring_enter(r0, 0x251b, 0xc54d, 0x47, &(0x7f00000000c0)={[0xff, 0x7]}, 0x8)
lseek(r2, 0x7ffffffd, 0x4)

1m35.571539876s ago: executing program 5 (id=12004):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r3 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
read$FUSE(r2, &(0x7f0000007100)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000002140)={0x50, 0x0, r4, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0xfffc, 0x200, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50)
read$FUSE(r2, &(0x7f0000002900)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r2, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r5}, 0x10)
syz_fuse_handle_req(r2, &(0x7f0000004940)="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", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x3c}})
ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000180)={0x6, 0x1000, 0x30000000, 0x9, 0x1000})
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x303}, "5c9d42a9bb8b4b5d", "fc2f2041591b1c05383caf93b629fd0d", "2b8ec27d", "c0d50a4a8d6c6094"}, 0x28)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

1m32.397660323s ago: executing program 5 (id=12017):
socket$netlink(0x10, 0x3, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r1, r0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
munmap(&(0x7f0000004000/0x2000)=nil, 0x2000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0})

1m31.84014395s ago: executing program 5 (id=12018):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
socket$packet(0x11, 0x2, 0x300)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0)
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x5, 0x3}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xe, 0x7, 0x41, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18300000fdffffff000000000200000018050000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000500d0000850000000600000095", @ANYRESHEX=r0], &(0x7f00000001c0)='GPL\x00', 0x6, 0x3b, &(0x7f0000000040)=""/59, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x6490, 0x4)
ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000000)=ANY=[])
ioctl$USBDEVFS_REAPURB(r5, 0x4004550c, &(0x7f00000002c0))
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r7 = syz_open_dev$vbi(&(0x7f0000000240), 0x2, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000100)={0xf020000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
write$tun(r4, &(0x7f0000000040)=ANY=[], 0x4c6)
write$cgroup_int(r3, &(0x7f0000000000)=0x2b04, 0xffffffffffffff02)

1m31.604773387s ago: executing program 35 (id=12018):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
socket$packet(0x11, 0x2, 0x300)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0)
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x5, 0x3}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xe, 0x7, 0x41, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18300000fdffffff000000000200000018050000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000500d0000850000000600000095", @ANYRESHEX=r0], &(0x7f00000001c0)='GPL\x00', 0x6, 0x3b, &(0x7f0000000040)=""/59, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x6490, 0x4)
ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000000)=ANY=[])
ioctl$USBDEVFS_REAPURB(r5, 0x4004550c, &(0x7f00000002c0))
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r7 = syz_open_dev$vbi(&(0x7f0000000240), 0x2, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000100)={0xf020000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
write$tun(r4, &(0x7f0000000040)=ANY=[], 0x4c6)
write$cgroup_int(r3, &(0x7f0000000000)=0x2b04, 0xffffffffffffff02)

10.864288563s ago: executing program 6 (id=12329):
r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300021007c109050c04400006030f07059acbf5"], 0x0)
syz_usb_control_io$printer(r0, &(0x7f00000003c0)={0x14, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
openat$kvm(0x0, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000040))
write$char_usb(r1, &(0x7f0000000000)="93", 0xf5)

7.60015682s ago: executing program 6 (id=12341):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002b7d214045058b80ad31000000010902120001000000002a04000000cb33bb00"], 0x0)

7.209878141s ago: executing program 2 (id=12342):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000340)={0x0, 0x3a, &(0x7f00000001c0)={&(0x7f0000000000)={0x3c, 0x0, 0x401, 0x3, 0x0, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x6}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x18000}, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000180)=@v2={0x2000000, [{0x0, 0x6}, {0xfffff7f1, 0x9}]}, 0x14, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x11)
close(0xffffffffffffffff)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00')
r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff)
close(r4)
execveat$binfmt(0xffffffffffffff9c, r3, 0x0, &(0x7f0000000140), 0x0)
r5 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x3f)
write$apparmor_current(r5, &(0x7f0000000480)=@hat={'permhat ', 0x4000000000002, 0x5e, ['permh~t ', '\x00', '}*:.$\x89]%%&\'{:$\x00', '\xb9\b5\x06D/\x8b\x96\x92\'=\xeb&\xa8\xa8h\xb4\xcfJ\xa7*t5>\x9a\xad\x9b\t\xce\xa6\xe2\x88\xd6\xd1%\x92.\x1d\x1f\x14<\xf2\xc3q\xb7K\x8a\xd7(\x00w\x12\x93;\xa1\'T]\xd2\b\x8c\x11\xd2\xc2\xf3l\xaf\xa1E\x16\xb0z\b=Z\x17\xdf\xdbS\xfcC\xa7:u\xb5\x17\xed\xea\xe9\xde>t\x12\xa2VVf\xc1\x97\x90\x82\xa0\x7f\x8d\xc9\x06\xda\xbe,/\x9e\xd7Y\xce;\x1bV\x02,\xba\x8e\xb7\x16\xd0J\x816-\a\xeb\x92\xec\a\xf9\x81u\x1f\xd0\xfcb p\x9c\xf4ZD\xea\x1d&(\xe5\xfaqA\xc2\xd4P\xb63f\xcb\art\xfd\xc2\xcd\xb0kv!aO\x16\x17\x14\xc4\x95\xc8\xa9\xf7\xfe\xbaZ\xf1b\xfa%\xb0\x15\xac11G~\x02\xb3/\x899g\xc1nJ\x04\xcfeG\x8b\xcd\xed\x04O\x90\xf1\x8c\x00\xe1K$\x0f\xcd\xc7\"uE>\xa6\x1c5JOD\x7f\x13:\x1c\xa6A~))\x90\xd4ag\x15+\xf4\x98\xb5\x00'/267, '\x00', 'contention_end\x00']}, 0x14e)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
r6 = openat$binfmt(0xffffffffffffff9c, r3, 0x2, 0x0)
write(r6, &(0x7f0000000180)="01", 0x1)
execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)

6.658002109s ago: executing program 2 (id=12343):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x0, 0x10, &(0x7f0000000000), 0x45, 0xffffffffffffffff, 0xffffffffffffffff, 0xf, 0x0, 0x0, 0x10, 0x1}, 0x48)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x3122bda1c43ba107}, 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5c0000005cd62aba2159b14ffff44edeaf8f1817125e9a96534debfa4b22e3cf8eb2ba30a0e7f67b2dcd68c671e8ad3554a13f7ebd6485ce818ca9e1ab4404da6aa7998154cf2f2783f7f3a1250b5954d7d77aceff3f7349f3b860de7a4731405e9f3e3038053f036adadfdf3ca75c48fa7c690f7a23b0c4d4a410dcd7956df2c77263513881a9beb041166de1298263573a40abd6c43f25aa1e9924bf2293109f936f1da3f41ae100fe581cdd96bb6552263762ec9f8308", @ANYRES16=r2, @ANYBLOB="000227bd7000fedbdf250f00000005003300010000000500380001000000050030000000000008000b000001000005002d000100000008000b000e00000005002d000100000005002e000100000008002c0008000000"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000045)
ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x9)

6.586195255s ago: executing program 2 (id=12344):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0)
sigaltstack(&(0x7f0000000000)={0xffffffffffffffff}, &(0x7f0000000080)={&(0x7f0000000040)=""/2, 0x0, 0x2})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, &(0x7f00000001c0), 0x0, 0x840, 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, &(0x7f0000000100))
r2 = syz_usb_connect$hid(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000400b060a70000002000001090224000100000000090400000103000000092100000001220500090581030000"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f00000003c0)={0x18, &(0x7f0000000680)=ANY=[@ANYBLOB="0000570000005700a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40000)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000140000004000000040"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r3, &(0x7f00000005c0), 0x0}, 0x20)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r4, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x200)

5.94091002s ago: executing program 1 (id=12345):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1bc})
read(r0, &(0x7f0000000140)=""/4096, 0x1000) (async)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0) (async)
r2 = openat$ttyprintk(0xffffff9c, &(0x7f0000000000), 0x4d0503, 0x0)
fsetxattr$security_capability(r2, &(0x7f0000000080), &(0x7f00000000c0)=@v1={0x1000000, [{0x7, 0xb}]}, 0xc, 0x2)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) (async, rerun: 64)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, 0x0, &(0x7f0000000380)) (async, rerun: 64)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000001140)=0xc) (async)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000001180)={0x0, 0x80000, <r4=>0xffffffffffffffff}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000001540)={&(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001480)=[0x0, 0x0], &(0x7f00000014c0)=[0x0, 0x0, <r5=>0x0, 0x0, 0x0], &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x2, 0x5, 0x4})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000001580)={&(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], &(0x7f00000013c0), &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0x5, 0x0, r5}) (async)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

5.756285724s ago: executing program 1 (id=12346):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x6, 0x7, 0x1, 0x4, 0x2, 0x1, 0x0, 0xfd, 0x5, 0x0, 0x0, 0x9, 0xa, 0x1, 0xd, 0x1}})
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e8fce98e377ae0409370c03"], 0x7) (async)
pipe(&(0x7f00000000c0)={<r2=>0xffffffffffffffff})
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async)
r3 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) (async)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x90, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0xe9d, 0x3, 0x6, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x9, 0xffffffff}, 0xd0, 0x9}}) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0xb7, @loopback, 0x10}, 0x1c) (async)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/tcp6\x00')
read$FUSE(r5, &(0x7f0000000840)={0x2020}, 0x2020)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c)
read$FUSE(r2, &(0x7f0000006700)={0x2020}, 0x2020)
syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824"], 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020019000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100"], 0x80}, 0x1, 0x0, 0x0, 0x20044815}, 0x40000)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = io_uring_setup(0x6001, &(0x7f0000000000)={0x0, 0xeec2, 0x800, 0x2, 0x116})
close_range(r7, r7, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)

5.387500458s ago: executing program 1 (id=12348):
socket$nl_route(0x10, 0x3, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0)
ioctl$FBIOBLANK(r2, 0x4611, 0x3)
socket$inet6_tcp(0xa, 0x1, 0x0)
quotactl_fd$Q_GETFMT(r2, 0xffffffff80000402, 0x0, 0x0)
ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000000c0)={0x9, 0x14, 0x12, 0x15, 0x9, 0xc0c9, 0x2, 0x8c, 0xffffffffffffffff})
r3 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0), 0x4)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
ioprio_get$uid(0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140640101000500090084000000060004404e2200000c000280080001"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
pread64(0xffffffffffffffff, &(0x7f0000001600)=""/4103, 0x1007, 0x97)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', <r7=>0x0})
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xfffffffffffffff5]}, 0x8, 0x0)
readv(r8, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0, 0xe00}], 0x10000000000000fb)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="600000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000003000128009000100766c616e00000000200002800600010004000000100003808c00010007000000010000000400048008000500", @ANYRES32=r7], 0x60}, 0x1, 0x0, 0x0, 0x600}, 0x0)

4.560788801s ago: executing program 7 (id=12351):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x0, 0x0)
munmap(&(0x7f0000004000/0x2000)=nil, 0x2000)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0})

4.470673701s ago: executing program 6 (id=12352):
socket$kcm(0x10, 0x2, 0x0)

4.271285956s ago: executing program 7 (id=12353):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000)
r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x2, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc0f8565c, &(0x7f0000000280)={0x1, 0x1, 0x1, {0x0, @pix={0xfffffff5, 0xfffffffd, 0x3131354f, 0x6, 0x0, 0x100, 0x0, 0x0, 0x1, 0x6}}, 0x6})
r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)
rmdir(&(0x7f0000000040)='./bus\x00')
ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
gettid()
timer_create(0x0, 0x0, 0x0)
sendfile(r7, r6, &(0x7f00000000c0)=0x58, 0xa)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000380)={0x353, 0x78, 0x300, 0x0, 0xa, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x1, 0x1, 0x4, 0x9f3, 0x3, 0x1ff, 0x803d, 0x7, 0x7, 0x5f, 0x202, 0x1, 0xc})
r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x33524742, 0x7, 0xa, [{}, {0x0, 0x8}, {}, {0x80}, {}, {0x0, 0xffffffff}, {0x4, 0x1000}, {0x0, 0x4}], 0x4}})
socket$nl_netfilter(0x10, 0x3, 0xc)
add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)

4.220816727s ago: executing program 6 (id=12354):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000340)={0x0, 0x3a, &(0x7f00000001c0)={&(0x7f0000000000)={0x3c, 0x0, 0x401, 0x3, 0x0, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x6}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x18000}, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000180)=@v2={0x2000000, [{0x0, 0x6}, {0xfffff7f1, 0x9}]}, 0x14, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x11)
close(0xffffffffffffffff)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00')
r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff)
close(r4)
execveat$binfmt(0xffffffffffffff9c, r3, 0x0, &(0x7f0000000140), 0x0)
r5 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x3f)
write$apparmor_current(r5, &(0x7f0000000480)=@hat={'permhat ', 0x4000000000002, 0x5e, ['permh~t ', '\x00', '}*:.$\x89]%%&\'{:$\x00', '\xb9\b5\x06D/\x8b\x96\x92\'=\xeb&\xa8\xa8h\xb4\xcfJ\xa7*t5>\x9a\xad\x9b\t\xce\xa6\xe2\x88\xd6\xd1%\x92.\x1d\x1f\x14<\xf2\xc3q\xb7K\x8a\xd7(\x00w\x12\x93;\xa1\'T]\xd2\b\x8c\x11\xd2\xc2\xf3l\xaf\xa1E\x16\xb0z\b=Z\x17\xdf\xdbS\xfcC\xa7:u\xb5\x17\xed\xea\xe9\xde>t\x12\xa2VVf\xc1\x97\x90\x82\xa0\x7f\x8d\xc9\x06\xda\xbe,/\x9e\xd7Y\xce;\x1bV\x02,\xba\x8e\xb7\x16\xd0J\x816-\a\xeb\x92\xec\a\xf9\x81u\x1f\xd0\xfcb p\x9c\xf4ZD\xea\x1d&(\xe5\xfaqA\xc2\xd4P\xb63f\xcb\art\xfd\xc2\xcd\xb0kv!aO\x16\x17\x14\xc4\x95\xc8\xa9\xf7\xfe\xbaZ\xf1b\xfa%\xb0\x15\xac11G~\x02\xb3/\x899g\xc1nJ\x04\xcfeG\x8b\xcd\xed\x04O\x90\xf1\x8c\x00\xe1K$\x0f\xcd\xc7\"uE>\xa6\x1c5JOD\x7f\x13:\x1c\xa6A~))\x90\xd4ag\x15+\xf4\x98\xb5\x00'/267, '\x00', 'contention_end\x00']}, 0x14e)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
r6 = openat$binfmt(0xffffffffffffff9c, r3, 0x2, 0x0)
write(r6, &(0x7f0000000180)="01", 0x1)
execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)

4.091135807s ago: executing program 1 (id=12355):
syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201eb00000000406b1402090000000000010902240001000000000904000001030000000000012205000905810300000000ff"], 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f00000000c0))
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101382, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r1], 0xc4}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xa005, 0x10100}, &(0x7f0000000080)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}})
io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
read$dsp(r7, &(0x7f0000000140)=""/92, 0x5c)

3.809000219s ago: executing program 2 (id=12356):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='maps\x00')
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4]}}, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
openat$audio(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="170000001500add427323b472545b4562d117fffffff8100", 0x18}], 0x1)
r4 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000040), 0x4a000, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@ifindex, 0x16, 0x0, 0xeb, &(0x7f00000001c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], <r5=>0x0}, 0x40)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = dup(r6)
write$UHID_INPUT(r7, &(0x7f00000029c0)={0xa, {"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", 0x1000}}, 0x1006)
r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x4000, r6}, 0x14)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@map, r4, 0x7, 0x8, 0x0, @void, @value=r8, @void, @void, r5}, 0x20)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#Y?0W\xb3W\xd2\xbfP\xee', <r9=>0x0}, 0x30)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES8=r9], 0x64}}, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@fallback=r0, r0, 0x0, 0x21, r0, @void, @void, @void, @value=r9, r5}, 0x20)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x58227}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x1}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0xb5a0}]}}}, @IFLA_PHYS_SWITCH_ID={0x8, 0x24, "565f6085"}, @IFLA_LINKMODE={0x5, 0x11, 0x7f}]}, 0x54}, 0x1, 0x0, 0x0, 0x88c4}, 0x20040800)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x9, 0x12, r11, 0x35674000)
r12 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x20202, 0xa4)
sendfile(r12, r12, 0x0, 0x68)
fsconfig$FSCONFIG_SET_STRING(r12, 0x1, 0x0, 0x0, 0x0)
r13 = eventfd(0x8)
ioctl$KVM_IRQFD(r11, 0x4020ae76, &(0x7f0000000080)={r12, 0x5db0, 0x2, r13})

3.577096474s ago: executing program 8 (id=12357):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
rseq(0x0, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}])
r1 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0)
ioctl$SOUND_MIXER_WRITE_RECSRC(r1, 0xc0044dff, &(0x7f0000000100)=0x9)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xc002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r5=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xfff8}, {0xffff, 0xffff}, {0x16, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000020000000008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x0, 0x81, 0xc, 0x2, 0x12, 0x5}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4040004}, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@cgroup, 0x32, 0x0, 0x5, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], <r6=>0x0}, 0x40)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000940)={0xffffffffffffffff, 0x0, 0x25, 0xa, @val=@netkit={@void, @value, @void, @void, r6}}, 0x1c)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd706086dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300040008001b000000000008000d"], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000)
pselect6(0x40, &(0x7f0000000000)={0x4f, 0x3, 0x9c, 0x400, 0x0, 0x3, 0x8, 0x7fffffff}, &(0x7f0000000080)={0xffff, 0x5, 0x5, 0x5, 0x10000, 0xc1, 0x81, 0x8000000000000000}, &(0x7f0000000100)={0x7fffffffffffffff, 0x0, 0x5, 0x200000000000000, 0xeb, 0x8, 0x401, 0xb}, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x5]}, 0x8})
syz_emit_ethernet(0x62, &(0x7f00000003c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @multicast1}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x10, 0xc2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, '\a\x00'}, @window={0x3, 0x3, 0x81}, @md5sig={0x13, 0x12, "f5c0f39d4786d7de941aad9f438da5f2"}]}}}}}}}, 0x0)
unshare(0x2a020480)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x3, 0x4, 0x2, 0x8}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r8}, 0x0, 0x0}, 0x20)
r9 = dup(r1)
ioctl$TIOCSWINSZ(r9, 0x5414, &(0x7f0000000280)={0x2, 0x1, 0x608, 0xef6})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000180)={'wg0\x00', <r11=>0x0})
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x100, 0x70bd26, 0xbffffffe, {0x0, 0x0, 0x0, 0x0, 0x2e163}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x1}, @IFLA_IPTUN_LINK={0x8, 0x1, r11}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000008}, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\"\a\x00\x00\x00r'], 0x0}, 0x0)

3.206250262s ago: executing program 6 (id=12358):
r0 = socket(0x10, 0x80002, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x12, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './file0', [{}, {0x20, '#! '}]}, 0x10)
execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede01020301090224000500001000090400020200da0383ec0009050602000202000a090582020002000110"], 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000540)={0xffc8, &(0x7f0000000140)=ANY=[@ANYRES8, @ANYRES64, @ANYRES16=r4, @ANYRES32=r1, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
unshare(0x2c020400)
syz_usb_connect$uac1(0x2, 0xa3, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0})
openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x8)
fsopen(&(0x7f0000000000)='f2fs\x00', 0x0)
ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x2)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r5, 0x0, 0x0)

1.307408995s ago: executing program 8 (id=12359):
syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8c0c00", 0x20, 0x6, 0x0, @local, @local, {[], {{0xfffa, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0xb, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x7, @multicast2, 0xb7}, @generic={0x2, 0x2}]}}}}}}}}, 0x0)
socket$kcm(0x10, 0x5, 0x0)

1.180025274s ago: executing program 8 (id=12360):
r0 = semget$private(0x0, 0x1, 0x400)
semctl$SEM_STAT(r0, 0x0, 0x12, &(0x7f0000000000)=""/37) (async)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20000, 0x11)
pread64(r1, &(0x7f0000000380)=""/249, 0xf9, 0xc31)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x4e21, 0x720, @local, 0x5}}, {{0xa, 0x4e23, 0x3, @mcast1, 0xa}}}, 0x104)
unshare(0x26000400) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="183800000000000000000000010000b08b0b7c2eda348140c17969623258c67600000000007b8af8ff00000000b508000000000000638af0ff00000000bfa10000000000002dec794df49531ea07010000f8ffffffbfa400000000000007040000f0ffffffb7020000", @ANYRES32, @ANYBLOB="0000000002000000b703000008000000850000006900000095"], &(0x7f0000000080)='GPL\x00', 0x8008, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

995.41537ms ago: executing program 8 (id=12361):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x2}, &(0x7f0000000180)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x500, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fb7fd, 0x20005}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x2054)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
r9 = socket(0x10, 0x80002, 0x0)
r10 = socket(0x200000000000011, 0x3, 0x3f1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xb, 0x0, 0x0, 0x8}, 0x94)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r11=>0x0})
r12 = syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r12, 0xc2c45513, &(0x7f0000002e00)={{0x8, 0x7, 0x3, 0x2, 'syz0\x00', 0x79}, 0x0, [0x0, 0x200000a, 0x1000, 0x0, 0xb3d, 0x7fffffff, 0x6, 0x0, 0xbc0, 0x7, 0x15c, 0x7, 0x5944, 0x5, 0x7, 0x8004a7, 0x9, 0x5, 0xb, 0x3, 0x2c, 0x400, 0x2000040, 0x10000000, 0x7, 0x80000000, 0x2, 0x800, 0x3, 0x3, 0x4, 0x6, 0x6, 0xff, 0x3ff, 0x1, 0x5, 0x3, 0x5, 0x6, 0x3, 0x8001, 0xffff8007, 0xe, 0xe, 0x0, 0x2, 0x5, 0xe, 0x4, 0x9, 0x80000001, 0x400, 0x1fb, 0x9, 0xfffff647, 0x408, 0x4, 0x1, 0x9, 0x8, 0x9, 0x5, 0x8, 0x98, 0xbe, 0x1, 0xa, 0x7, 0x81, 0x81, 0x10001, 0x2, 0x80000001, 0x69e, 0xb, 0x7000000, 0x1, 0x8, 0xd, 0x7, 0x0, 0x1, 0x3, 0xfffffffd, 0xffff, 0x6, 0x8, 0x7fb, 0x4, 0xef, 0xfd, 0x4, 0x3, 0xf86, 0x58a0, 0x1, 0x7, 0x895, 0x6, 0x9, 0x89, 0xfffffffe, 0xa1a9, 0xe0b2, 0x9, 0xfffff561, 0x12, 0x3, 0x800003, 0xfffffffa, 0x3, 0x2, 0x1, 0x2ba, 0x1, 0x80e, 0x5, 0x8, 0x2, 0xf2, 0x4, 0x1ff, 0x7, 0x2, 0x7, 0x6, 0x3]})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r11, @ANYBLOB="200001"], 0x38}}, 0x0)
sendmmsg$alg(r9, &(0x7f00000000c0), 0x492492492492627, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffff7f, {0x0, 0x0, 0x0, r13, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0x10}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x4000)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0xfff3, 0xffe0}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xffe0, 0x7}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010)

883.764233ms ago: executing program 2 (id=12362):
prctl$PR_CAPBSET_READ(0x17, 0xc) (async)
prctl$PR_CAPBSET_READ(0x17, 0xc)
prctl$PR_CAPBSET_READ(0x17, 0x21)
prctl$PR_CAPBSET_READ(0x17, 0x10)
prctl$PR_CAPBSET_READ(0x17, 0x1c)
prctl$PR_CAPBSET_READ(0x17, 0x5)
prctl$PR_CAPBSET_READ(0x17, 0xb) (async)
prctl$PR_CAPBSET_READ(0x17, 0xb)
prctl$PR_CAPBSET_READ(0x17, 0x13) (async)
prctl$PR_CAPBSET_READ(0x17, 0x13)
prctl$PR_CAPBSET_READ(0x17, 0x1f)
prctl$PR_CAPBSET_READ(0x17, 0x1)
prctl$PR_CAPBSET_READ(0x17, 0x4)
prctl$PR_CAPBSET_READ(0x17, 0x18)
prctl$PR_CAPBSET_READ(0x17, 0x14) (async)
prctl$PR_CAPBSET_READ(0x17, 0x14)
prctl$PR_CAPBSET_READ(0x17, 0xc)
prctl$PR_CAPBSET_READ(0x17, 0x27) (async)
prctl$PR_CAPBSET_READ(0x17, 0x27)
prctl$PR_CAPBSET_READ(0x17, 0x3)
prctl$PR_CAPBSET_READ(0x17, 0x3)
prctl$PR_CAPBSET_READ(0x17, 0x19)
prctl$PR_CAPBSET_READ(0x17, 0x8) (async)
prctl$PR_CAPBSET_READ(0x17, 0x8)
prctl$PR_CAPBSET_READ(0x17, 0x22)
prctl$PR_CAPBSET_READ(0x17, 0xd)
prctl$PR_CAPBSET_READ(0x17, 0x3)
prctl$PR_CAPBSET_READ(0x17, 0x10) (async)
prctl$PR_CAPBSET_READ(0x17, 0x10)
prctl$PR_CAPBSET_READ(0x17, 0x10)
prctl$PR_CAPBSET_READ(0x17, 0x17)
prctl$PR_CAPBSET_READ(0x17, 0x1c) (async)
prctl$PR_CAPBSET_READ(0x17, 0x1c)
prctl$PR_CAPBSET_READ(0x17, 0x0) (async)
prctl$PR_CAPBSET_READ(0x17, 0x0)
prctl$PR_CAPBSET_READ(0x17, 0x26) (async)
prctl$PR_CAPBSET_READ(0x17, 0x26)
prctl$PR_CAPBSET_READ(0x17, 0x3)
r0 = openat$vmci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000480)={&(0x7f0000000040)={{@any, 0x1000}, {@host, 0x1}, 0x400, "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"}, 0x418, 0xfffffff7})

816.252031ms ago: executing program 2 (id=12363):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9f, 0x18, 0x76, 0x20, 0x17ef, 0x7203, 0x2e36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbc, 0x0, 0x2, 0x9e, 0x88, 0x33, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x3}}]}}]}}]}}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0) (async)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)={0x20, 0x3, 0x2, '~K'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x24, &(0x7f0000000000)={0x20, 0xe, 0x2, "f05a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002700), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r2, 0x4068aea3, &(0x7f0000000080)={0xed, 0x0, 0x4}) (async)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x0, 0x30, 0x2, "1eba"}, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000027c0)={0x18, &(0x7f0000002600)={0x20, 0x11, 0x1, "aa"}, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

755.065326ms ago: executing program 8 (id=12364):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r0, 0x11, 0xb, 0x0, &(0x7f00000025c0))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000040)={0xbe, 0x0, 0x1})
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000340)={0x1, 0x0, [{0x4b564d02, 0x0, 0x6000000000000}]})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
fcntl$setpipe(r3, 0x407, 0x1)
ioctl$TUNATTACHFILTER(r4, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0})

735.344598ms ago: executing program 7 (id=12365):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00)
clock_settime(0x700, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x80, 0x10002b, 0x4, 0x4})

660.522532ms ago: executing program 1 (id=12366):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) (async)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db7", 0x2d}, {0x0}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b", 0x19}], 0x3}, 0x0) (async)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async)
syz_io_uring_setup(0x7c71, &(0x7f0000000280)={0x0, 0xaee5, 0x4, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r2=>0x0, &(0x7f00000000c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) (async)
socket$packet(0x11, 0x3, 0x300) (async)
r4 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
ioprio_set$uid(0x3, 0x0, 0x2004) (async)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r7, 0x0, 0x20000023896) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x9}}, 0x20) (async)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x200000e, 0x2172, 0xffffffffffffffff, 0x0) (async)
syz_clone(0x93f0b91, 0x0, 0x0, 0x0, 0x0, 0x0)

653.435939ms ago: executing program 8 (id=12367):
io_setup(0x9, &(0x7f00000000c0)=<r0=>0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0x0, 0xc12}]})
r2 = epoll_create1(0x0)
r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000380)={0xa0000009})
io_getevents(0x0, 0x6, 0x0, 0x0, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
r5 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x224}, &(0x7f0000000040)=<r6=>0x0, &(0x7f00000000c0)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r5, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2}, 0x0, 0x1000})
io_uring_enter(r5, 0x47f8, 0x0, 0x0, 0x0, 0x0)
io_submit(r0, 0x2, &(0x7f0000000380)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x16, r4, &(0x7f0000000100)="231b26a98458691d98b4b8babec35882", 0x10, 0xfb}])

586.690052ms ago: executing program 7 (id=12368):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef)
r2 = syz_io_uring_setup(0x412c, &(0x7f0000000000)={0x0, 0x9cf3, 0x800, 0x1, 0x63}, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_HYPERV_EVENTFD(r4, 0x4020aeb2, &(0x7f0000000000)={0x2})
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x2}, 0x10)
io_setup(0x7, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
syz_io_uring_setup(0x2acd, &(0x7f00000000c0)={0x0, 0x9a55, 0x80, 0x2, 0x39d, 0x0, r2}, &(0x7f0000000180), &(0x7f00000001c0))
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = syz_io_uring_setup(0xbe7, &(0x7f0000000400)={0x0, 0xe7a8, 0x80, 0x3, 0x40024e}, &(0x7f0000000340)=<r8=>0x0, &(0x7f0000000040)=<r9=>0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0xc000)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
r10 = eventfd2(0xff, 0x80001)
socket$nl_netfilter(0x10, 0x3, 0xc)
io_uring_register$IORING_REGISTER_EVENTFD(r7, 0x4, &(0x7f0000000300)=r10, 0x1)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r7, 0x0, 0x0, 0x0, 0x2})
io_uring_enter(r7, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0)
write(r0, &(0x7f0000000300)="240000001a005f0214f9f4070d0903ff80000000fe057ffffffe00000800040001000000", 0x24)

472.242538ms ago: executing program 1 (id=12369):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x3, [@ptr={0x2, 0x0, 0x0, 0x2, 0x5}, @typedef={0xd, 0x0, 0x0, 0x8, 0x2}, @float={0xa}, @enum64={0x8, 0x3, 0x0, 0x13, 0x1, 0x2, [{0x4, 0x65cd, 0x19b}, {0x2, 0xffff8000, 0xff}, {0x6, 0xfffffd3a, 0x5}]}]}, {0x0, [0x5f]}}, &(0x7f0000000940)=""/181, 0x6f, 0xb5, 0x1, 0x5, 0x10000}, 0x28)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x5}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001c80)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x31a0ba6bc06036bf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc4}, 0x1, 0x0, 0x0, 0x8090}, 0x0) (async)
r4 = syz_usb_connect$uac1(0x3, 0xef, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdd, 0x3, 0x1, 0x3, 0x40, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x2}, [@feature_unit={0xb, 0x24, 0x6, 0x9, 0x4, 0x2, [0x8, 0x3], 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x7, 0x2, 0x0, 0x80, "3f49a3c9f9eb9ba4"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xd2, 0x4, 0x7, 0x7}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x1, 0x0, 0x2, "", "9f26ce"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x4, 0x4, 0x80, 0x8, "3c9d9bdbde4b"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xfff5, 0x7, 0x3, "a69abf8a"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x8, 0x2, 0x5, 0x6, "38c5"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x3, 0xd0, 0x8, {0x7, 0x25, 0x1, 0x0, 0x3, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x4, 0x1, 0xd, 0x7}, @as_header={0x7, 0x24, 0x1, 0x10, 0x8, 0x3}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x6, 0x2, 0x2, 0xe2, "c940"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x1ff, 0x3, 0x2, "f8ac"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x7f, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x4, 0x4, 0x0, {0x7, 0x25, 0x1, 0x80, 0x9a, 0x9}}}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x4, 0x8, 0x1, 0x40, 0x81}, 0x19, &(0x7f0000000040)={0x5, 0xf, 0x19, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xa, 0x0, 0x1}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xf, 0x4, 0x8}, @ptm_cap={0x3}]}, 0x1, [{0x2, &(0x7f00000001c0)=@string={0x2}}]})
syz_usb_control_io$uac1(r4, &(0x7f0000000580)={0xc, &(0x7f0000000500)={0x20, 0x6, 0x32, {0x32, 0xc, "6e738f093260baebc778749baf512d93d33d548b1774b185fbf5a1a81d1dffd6bb44c2101e469533d57446502a680324"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}}, &(0x7f0000000880)={0x24, &(0x7f00000005c0)={0x0, 0x7, 0xe2, "231cde6ffd9b5bf6c5e020541e38e8dbf114eb4666e6ed3bb81b5179a69a3b9152cd8a414959eabdfe4e5eeeb0bca819fe9e54235c71e1617b88eff88468a2ad970a68fa94d1a12db5715b8854888a72688cfee88f48199cff8dc848235cad26744f51df2336e58b2dbfd596dbf267cbf50acfb6970d85e86000f754bc972ea55e5cc2817ebbeef84553acfad76368133fbcb6dee48a4f11fb8451d7f33391f52b6d39c3788b47ed3895b2268010259d4401f5969bc0cea0a6d5be4be6b3b6237ddbdfd2b49f0f2c86bfeb7e034c38672e04e83fb3c47d2b6f3056ecec1d0d98da2e"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0xfe}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000740)={0x20, 0x81, 0x1, "1d"}, &(0x7f0000000780)={0x20, 0x82, 0x2, "11aa"}, &(0x7f00000007c0)={0x20, 0x83, 0x1, "f7"}, &(0x7f0000000800)={0x20, 0x84, 0x4, "daab4e07"}, &(0x7f0000000840)={0x20, 0x85, 0x3, "52e594"}})
add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000100)="c4e2", 0xfffff, 0xfffffffffffffffd)

217.304744ms ago: executing program 7 (id=12370):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x48001)
r2 = socket$tipc(0x1e, 0x5, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, r3, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x200}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x10000}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffcf7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7b0}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x200}]]}, 0x7c}, 0x1, 0x0, 0x0, 0x400c801}, 0x884)
r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340)=0x14, 0x40000)
setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000380)=0x200, 0x4)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000003c0)={0x8}, 0x4)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000400)={0x1, [<r6=>0x0]}, &(0x7f0000000440)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000480)={r6, 0x7}, &(0x7f00000004c0)=0x8)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r0)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x60, r7, 0x10, 0x70bd27, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7fffffff}, {0x6}, {0x5}, {0x6, 0x11, 0x7f}, {0x8, 0xb, 0x9}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004800}, 0x4)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000c00)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000bc0)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x4}}, [@NFT_MSG_NEWSETELEM={0x70, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0xa, 0x0, 0x0, {0x1, 0x0, 0x7}}, @NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x401, 0x0, 0x0, {0x6, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x8c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xc16}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x10}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2c17}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x4, 0x0, 0x4}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWSET={0x1b4, 0x9, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_EXPRESSIONS={0x178, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x118, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x108, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'TCPOPTSTRIP\x00'}, @NFTA_TARGET_NAME={0x8, 0x1, 'LOG\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_NAME={0xd, 0x1, 'CONNMARK\x00'}, @NFTA_TARGET_INFO={0xd3, 0x3, "706bb7d886560ea0a8787d155b8006933a8a6cc9fd0656206da3989779385e1a70aa8985715b8204969260d36252be097e869cbc16a56ea72f1791da1d50cadb3f5dae2e972e810693dc882eb559d1eb4bfe31627c78e6f38b11f9a14a2bc76f06c203c900e48a0a9706e2377bcb8b3869712c144c6b8cd8c2465eb33f55a69365a08bce563e02c2aa6054f690daeb700263771c5ec305b8c27fa90e8c79c4b51246f5f40dbbc5ba8bc27b3a422abe57b0ae663955fc40da9ca9f91ad22a0f67a767ab59767a5c7f55304b6a49852e"}]}}}, {0x3c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x64}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xc}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x18c, 0x5, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc}]}, @NFTA_CHAIN_USERDATA={0x8f, 0xc, "27a522dab2096714c64f95c5c9ba473ea2d3be564b05445e8f9f2892472a323f47a9ee08be814081f466714a3dcd1ef746663d6ea9b53e436a483d2887888647844bdc328d1428891242b345d169fcf372b659f42072e5edf57e5714a7c3c91c61056121651228665fc0f35da460dffb131dad46f7768d82e1a21fb272045bbf1a5cb7c60a1148af9149e3"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HOOK={0x48, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan1\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'dvmrp0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_bridge\x00'}]}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3cd7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10001}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x4fc}, 0x1, 0x0, 0x0, 0x48c0}, 0x4000014)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000c40)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x87, 0x60aa, 0x3ff, 0x2, 0xffff1a1c, 0x3, "03c481f8342b4ba8bdacbb3b296aa82f5ba02328bc88bb5650cd48146343722f7c704baf390c2bf02f99772817a2b50f69728bc59c0b2acb8c0efccd16a6273020608cf92b299564c3a932ffc5ec28fbf1662d98b7071c1639a74ddb85d5863d258514cec373362b44269a53a92253a0f6b010934a44a8d97fde76eabd5258b5d06874a2da750e"}}, 0x19f)
sendmsg$NFT_BATCH(r8, &(0x7f0000004840)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000004800)={&(0x7f0000000e40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x3810, 0xe, 0xa, 0x801, 0x0, 0x0, {0x6, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x37f4, 0x3, 0x0, 0x1, [{0x1144, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @bitwise={{0xc}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY={0xf8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x15, 0x1, "5d77f9c0895c812541d271e721a7ec796b"}, @NFTA_DATA_VALUE={0x8e, 0x1, "1c567855fe17c70f74de082dd698f234831cfca150a51655ddb62bf612c47e0b6700c15942dc8e8c17f4446eabb41ebc02eff7f43e24668ec2a25fbaa6f3ad52b7d22963cf95f7e04fdc84faeb80585d5df6a4f066205c988f3cb34a4d60143a50573f521a641ecf50f2e8bcb365b43e3c101ada45ab3c5555aa883491bb6e179dbe3c6c9948670bc5b9"}, @NFTA_DATA_VALUE={0x17, 0x1, "99bf376f7ce999688dbe113cf2136812553e23"}]}, @NFTA_SET_ELEM_DATA={0x1008, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x10, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, {0xb8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0xac, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "6aac7a99"}, @NFTA_DATA_VALUE={0xa0, 0x1, "133b487b4fa846aa402eade2788227792a715e6bdebdf9b155d18075a1b11419f7cad7e1248237545505174305121abddd0f7b5d8131cf940b37b5486f3e5b5d1f055c033570122937e725fe7b5a76d16e769e5fb3ba545038e526e4167390ac8959c4a817f76ee21695d05b7b287c9caaffbc5cb5724abd365d1504587d2411bfd897df27b019451d8d1e13665e0b393702f87e664a965444c3cd33"}]}]}, {0x10dc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY={0x10cc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xefab19a11e2f0b83}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x4b, 0x1, "0108e7091624b48723f71bdee6973a17821ff9423dd45f288ba91a29c8d550e238c25874f3898b8c51ddaff6e7bea294f8e56e4dcd4a493878265fe836431e1ce1d541d8de32f7"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, {0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @flow_offload={{0x11}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xa, 0x1, "8cffb9a2a41c"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x14a0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x220, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5e, 0x1, "9abe270e6e000110e4679d7c9444fe287f71a5cd51c1e80962b09606610039c09dbb28bd9810e35746c887658ae57b8404a7178f5658677d2247eb94ac2fd4260f54ba4f2b8fd8a27a6e96030b8262cb9c706e4b7c7e4729c513"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x1e, 0x1, "2e21f27f59a59db7306ee8c6ab82c3e19b9a35fe3d1a505182a9"}, @NFTA_DATA_VALUE={0xc, 0x1, "09064c27367ba2a0"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x7d, 0x1, "4cd3a6ed61078c7dfea3b3cf5705cef003e603991a516187425a6059eecafc692aad974be922ac6948b79b0b3cb107fcfbd236d3c2085f7798ad26bd33871f56163a62623a343d81a31aaf6f0e3959d38220cc9fa2da59f37d9e91ba5b62697e5bffb731f06495899256d472af7d5fbe8ea2df4ccd6cce2e65"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x5a, 0x1, "5339c9d66544d0829a1311b5ab784bc0ca3365d0138734bae82eb4f0e4a5c8f9e7e329399d4b730b618f47402d89f67c2e4c6b5ba4e39235791402a089b193148eefdf585edcfdf30430e747722cf5ab087adda5fac2"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x21135b356b4bce87}, @NFTA_SET_ELEM_DATA={0x54, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0x7e, 0x6, 0x1, 0x0, "cc2119e41ee132020197559a076850889553027661fea153c437b6fe15d48ff9d220a0c72f909085f5d43f08791c976ed40adc877cfb7af3d8753a316dc59ed23aa89772685cf3927ea2be3a94697f73f2741a6cb65363a9b9a991dee794f423ceefe76cce403628715da02e2f1fa554795788c6c3e2cd55a8e7"}, @NFTA_SET_ELEM_DATA={0x1188, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x49, 0x1, "ac0dd35c75d0be7025dce4099f6dca0718e1457b4a8b148345a71c3b7df47266b5802dcfb89e285a42bb7975a386d7067bde7f2ab05e6ecaf94f1dfe377ad226fbb6c516eb"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}]}, @NFTA_DATA_VALUE={0x93, 0x1, "b8369903d4fceb52ef9c40fa1bf45408f523194f8b6f4a1fabab3aaaf35b192141b35aa6a2e495d7689ba11450d1086ae43b58c2142127bd850e84f2fe182026463a7b42f4652c49b9af0a980dd0d68234aa7dc2eee74175cd34373e995940153b6ce74eaf8288776f7c37addfb40cfac78d6669dd8965df12e739dfc7933a1b508417ba5a64274ea466185e70f06e"}, @NFTA_DATA_VALUE={0x10, 0x1, "261a14cd7d30ad09a21baa77"}, @NFTA_DATA_VALUE={0x36, 0x1, "92ec04a84ec7a63a3cd13434b71d5023cbe3055f4a6890ecce9ea66b9d91e7d1867b847a3446f9a55068f0b938862d2b75e7"}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_DELRULE={0x138, 0x8, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x9d}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0xd8, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xd1}, @NFTA_INNER_EXPR={0x2c, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x67b74e531a63119e}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x60, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb}, @void}}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x14}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb}, @void}}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x3}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x39b0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000041)
r9 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000004d00)=@filter={'filter\x00', 0xe, 0x3, 0x412, [0x0, 0x800048c0, 0x80004ad0, 0x80004ca2], 0x0, &(0x7f0000004880), &(0x7f00000048c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x5, 0x1a, 0x10, 'xfrm0\x00', 'virt_wifi0\x00', 'macvlan1\x00', 'pim6reg1\x00', @empty, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], @remote, [0x448a9b888e7cae42, 0x0, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0xde, [], [], @common=@nflog={'nflog\x00', 0x4c, {{0x4, 0x0, 0x8000, 0x0, 0x0, "f7c7bc6a2d121ca3126fcf0ff4f32b001d0c41d4fe9e545a233a5bd8b5dedb477655f721d2ae2273e35de05f740987cddcd7f295c9142d878380771ef59fee46"}}}}, {0x11, 0x2c, 0x15, 'team_slave_1\x00', 'veth0_to_team\x00', 'macvlan0\x00', 'veth0_to_team\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], @remote, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], 0x6e, 0xbe, 0x102, [], [@common=@redirect={'redirect\x00', 0x4, {{0xfffffffffffffffd}}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x4, {{0x7}}}], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x7f, 0xfa, {0x2}}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x9, 0x0, 0x8808, 'geneve0\x00', 'vlan1\x00', 'team_slave_1\x00', 'nicvf0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, [0xff, 0x0, 0xff, 0xff, 0xd40eec7d61a9eaab, 0xff], @random="21ce90ab869a", [0x1fe, 0x0, 0xff, 0xff, 0x0, 0xff], 0xee, 0x15a, 0x1a2, [@devgroup={{'devgroup\x00', 0x0, 0x14}, {{0x9, 0x0, 0x3, 0x4e, 0x7}}}, @nfacct={{'nfacct\x00', 0x0, 0x24}, {{'syz0\x00', 0xc}}}], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x80, 0x8, {0x2}}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x4, {{0xe0}}}], @common=@log={'log\x00', 0x24, {{0x7, "887693138ff88f0761b090a575b95a92a39b0be2cba372167a499f7e0050", 0xc}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff}]}, 0x462)
r10 = openat$vcsa(0xffffff9c, &(0x7f0000004d80), 0x113200, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000004dc0)=""/41, &(0x7f0000004e00)=0x29)
r11 = syz_mount_image$fuse(&(0x7f0000004e40), &(0x7f0000004e80)='./file0\x00', 0x208045, &(0x7f0000004ec0)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0xffffffffffffffff}}, {@blksize={'blksize', 0x3d, 0xa00}}, {@blksize}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x600}}], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}]}}, 0x1, 0x0, &(0x7f0000005000)="146593984b2be032a90eda69062145b4611aa7507d388fca")
openat(r11, &(0x7f0000005040)='./file0\x00', 0x501000, 0x64)
ioctl$SIOCGETVIFCNT(r9, 0x89e0, &(0x7f0000005080)={0xffffffffffffffff})
r12 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$PIO_UNISCRNMAP(r12, 0x4b6a, &(0x7f00000050c0)="d6fec2e983eab4884ee49f33f7a99eb2fa12d2bacafcaf4c524490531788cad293ee57174a38158cb9c41b23dfffbbf1f24481a94a782a8a4fe5ec2a1b967757b83908ac71a6e8ce358823348b58134dc25f79d92dd8c624678be83a4e74cc3ab949a40dfc1432ab9be9ea188650ecad66d1ecbd236490cdecec6d797b")
fchmodat(r8, &(0x7f0000005140)='./file0\x00', 0x1c7)
ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000005180)={0x4534, 0x1, 0x39db, 0x5})
symlinkat(&(0x7f00000051c0)='./file0\x00', r10, &(0x7f0000005200)='./file0/file0\x00')

89.266783ms ago: executing program 7 (id=12371):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0)
ioctl$EVIOCGLED(r1, 0x5452, &(0x7f0000000240)=""/77)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0xa, 0x2002)
write$evdev(r2, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) (async, rerun: 32)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 32)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4048aecb, &(0x7f0000000000))
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

0s ago: executing program 6 (id=12372):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]})
mknod(0x0, 0x8001420, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r2, 0xffffffffffffffff, 0x0)
r3 = socket(0x10, 0x3, 0x6)
fsopen(&(0x7f00000001c0)='sysv\x00', 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040))
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x3e4, r4, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x6d}}}}, [@NL80211_ATTR_IE={0x116, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xff, 0x34, 0xb}}, @random={0x9, 0x66, "cb3e9243b385f8a6fd64326516c28a9236ede6803d429caa31388f828adad0ab0c6e29567ad40c89db19268bac470dd83de25ad291c518c95be2847b57c56201d7a93a9ec0fec381b029a5d2c4e08a0420abd037b683c467b6a243ff7ec0a02f3c3cf13e4ea0"}, @cf={0x4, 0x6, {0x5, 0x9, 0x3, 0x4}}, @perr={0x84, 0x8f, {0x68, 0x9, [{{}, @broadcast, 0x6227, @void, 0x3c}, {{}, @broadcast, 0x1, @void, 0xe}, {{0x0, 0x1}, @device_a, 0x1, @value, 0x5}, {{0x0, 0x1}, @device_a, 0x36c4, @value=@device_b, 0x2d}, {{}, @device_b, 0x5, @void, 0x29}, {{0x0, 0x1}, @broadcast, 0x40000000, @value=@broadcast, 0x18}, {{}, @broadcast, 0x1, @void, 0x42}, {{}, @device_a, 0x1, @void, 0x3d}, {{0x0, 0x1}, @broadcast, 0x2, @value=@broadcast, 0x17}]}}, @challenge={0x10, 0x1, 0xcf}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xd5}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x60, 0x84, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x13, 0x1, @random="8c68655e7efc21dbaaacb38ee9b911"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="d2062d4f089a"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}]}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x7f}}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x214, 0x84, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}]}, {0x8c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xffffffff}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xaba}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x2}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x10}, @NL80211_BAND_LC={0x8, 0x5, 0x4}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x54, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0xa5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x6}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x4}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x2ec}, @NL80211_BAND_LC={0x8, 0x5, 0x2}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x4}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x6}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xfffffffc}, @NL80211_BAND_LC={0x8, 0x5, 0x6}, @NL80211_BAND_6GHZ={0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xfffffc00}]}, {0xbc, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="e3653de3a175"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x81}, @NL80211_BAND_LC={0x8, 0x5, 0x3}, @NL80211_BAND_LC={0x8, 0x5, 0xffffffff}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x34f8}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="eaa260b9f8bb"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x3}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x40}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_LC={0x8, 0x5, 0x7}, @NL80211_BAND_LC={0x8, 0x5, 0x39}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x101}, @NL80211_BAND_LC={0x8, 0x5, 0x95e6}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x6}, @NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xb}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xe}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x81}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x4}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x3}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xffff}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x15, 0x1, @random="d5164835b31ded82c11cdd6650f9bcea58"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xfffffffc}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x1}]}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="ce3b2398299d"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x63c8}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x82}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x7}]}, 0x3e4}, 0x1, 0x0, 0x0, 0x80}, 0x400d0)
r5 = openat$pidfd(0xffffff9c, &(0x7f0000000340), 0x4002, 0x0)
r6 = openat$nci(0xffffff9c, &(0x7f00000007c0), 0x2, 0x0)
tee(r5, r6, 0x4, 0x4)

kernel console output (not intermixed with test programs):

 different from the interface descriptor's value: 18
[ 3090.406997][T22510] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 3090.428365][T22510] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3090.439074][T22510] usb 2-1: config 0 descriptor??
[ 3090.451263][T27739] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[ 3090.610500][T27739] usb 3-1: Using ep0 maxpacket: 32
[ 3090.635484][T27739] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 3090.652081][T27739] usb 3-1: unable to read config index 0 descriptor/start: -71
[ 3090.659652][T22510] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 113 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 3090.664724][T22510] usb 2-1: USB disconnect, device number 113
[ 3090.689479][T27739] usb 3-1: can't read configurations, error -71
[ 3090.702959][T22510] usblp0: removed
[ 3091.190403][T22510] usb 2-1: new high-speed USB device number 114 using dummy_hcd
[ 3091.291201][ T2600] usb 6-1: new high-speed USB device number 71 using dummy_hcd
[ 3091.351486][T22510] usb 2-1: Using ep0 maxpacket: 32
[ 3091.358442][T22510] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[ 3091.367327][T22510] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 3091.376321][T22510] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 3091.385746][T22510] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 3091.395612][T22510] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 3091.410889][T22510] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 3091.424106][T22510] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 3091.433473][T22510] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3091.445125][T22510] usb 2-1: config 0 descriptor??
[ 3091.460444][ T2600] usb 6-1: Using ep0 maxpacket: 16
[ 3091.467994][ T2600] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3091.479762][ T2600] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 3091.489255][ T2600] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 3091.497950][ T2600] usb 6-1: Manufacturer: syz
[ 3091.505456][ T2600] usb 6-1: config 0 descriptor??
[ 3091.655576][T22510] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 114 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 3091.721420][T15788] netlink: 'syz.5.11930': attribute type 4 has an invalid length.
[ 3091.740331][T27739] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[ 3091.755698][T22510] usb 6-1: USB disconnect, device number 71
[ 3091.862508][T10799] usb 2-1: USB disconnect, device number 114
[ 3091.874378][T10799] usblp0: removed
[ 3091.890373][T27739] usb 3-1: Using ep0 maxpacket: 32
[ 3091.896987][T27739] usb 3-1: config 0 has an invalid interface number: 169 but max is 0
[ 3091.906754][T27739] usb 3-1: config 0 has no interface number 0
[ 3091.913579][T27739] usb 3-1: config 0 interface 169 has no altsetting 0
[ 3091.924132][T27739] usb 3-1: New USB device found, idVendor=0499, idProduct=500c, bcdDevice=33.49
[ 3091.933468][T27739] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3091.941567][T27739] usb 3-1: Product: syz
[ 3091.945774][T27739] usb 3-1: Manufacturer: syz
[ 3091.950609][T27739] usb 3-1: SerialNumber: syz
[ 3091.957553][T27739] usb 3-1: config 0 descriptor??
[ 3091.967209][T27739] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 3092.181400][T22510] usb 3-1: USB disconnect, device number 59
[ 3092.700474][T22510] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[ 3092.723188][   T30] audit: type=1400 audit(1765791892.447:2549): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=15798 comm="syz.1.11936"
[ 3092.891703][T22510] usb 6-1: Using ep0 maxpacket: 32
[ 3092.956393][T22510] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3093.065618][T15808] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11937'.
[ 3093.115138][T15808] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11937'.
[ 3093.126932][T22510] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[ 3093.150014][T22510] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3093.167214][T22510] usb 6-1: Product: syz
[ 3093.177080][T22510] usb 6-1: Manufacturer: syz
[ 3093.187405][T22510] usb 6-1: SerialNumber: syz
[ 3093.205958][T22510] usb 6-1: config 0 descriptor??
[ 3093.245880][T22510] usb 6-1: bad CDC descriptors
[ 3093.257733][T22510] usb 6-1: unsupported MDLM descriptors
[ 3093.555849][T22510] usb 6-1: USB disconnect, device number 72
[ 3093.735485][T15808] hub 1-0:1.0: USB hub found
[ 3093.767137][T15808] hub 1-0:1.0: 1 port detected
[ 3093.791897][   T30] audit: type=1326 audit(1765791893.507:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15810 comm="syz.1.11938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[ 3093.852179][   T30] audit: type=1326 audit(1765791893.507:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15810 comm="syz.1.11938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=50 compat=1 ip=0xf70bd539 code=0x7ffc0000
[ 3093.875044][   T30] audit: type=1326 audit(1765791893.507:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15810 comm="syz.1.11938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[ 3093.897594][   T30] audit: type=1326 audit(1765791893.507:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15810 comm="syz.1.11938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[ 3093.926915][   T30] audit: type=1326 audit(1765791893.507:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15810 comm="syz.1.11938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70bd539 code=0x7ffc0000
[ 3093.952768][   T30] audit: type=1326 audit(1765791893.507:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15810 comm="syz.1.11938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[ 3094.012958][   T30] audit: type=1326 audit(1765791893.507:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15810 comm="syz.1.11938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70bd539 code=0x7ffc0000
[ 3094.050912][   T30] audit: type=1326 audit(1765791893.507:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15810 comm="syz.1.11938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[ 3094.194303][   T30] audit: type=1326 audit(1765791893.507:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15810 comm="syz.1.11938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf70bd539 code=0x7ffc0000
[ 3094.397936][T15819] ip6gretap0: entered promiscuous mode
[ 3094.803360][T15819] ip6gretap0: left promiscuous mode
[ 3095.285707][T10802] usb 2-1: new full-speed USB device number 115 using dummy_hcd
[ 3095.455338][T10802] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 3095.465654][T10802] usb 2-1: no configurations
[ 3095.472303][T10802] usb 2-1: can't read configurations, error -22
[ 3097.081628][T15858] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11950'.
[ 3097.444251][T15869] mac80211_hwsim hwsim72 syzkaller0: left promiscuous mode
[ 3097.470315][T15869] mac80211_hwsim hwsim72 syzkaller0: left allmulticast mode
[ 3097.580267][T10802] usb 6-1: new high-speed USB device number 73 using dummy_hcd
[ 3097.750289][T10802] usb 6-1: Using ep0 maxpacket: 32
[ 3097.764306][T10802] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[ 3097.773070][T10802] usb 6-1: config 0 has no interface number 0
[ 3097.780246][ T2600] usb 2-1: new high-speed USB device number 117 using dummy_hcd
[ 3097.800823][T10802] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 3097.809932][T10802] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3097.821224][T10802] usb 6-1: Product: syz
[ 3097.825433][T10802] usb 6-1: Manufacturer: syz
[ 3097.830348][T10802] usb 6-1: SerialNumber: syz
[ 3097.838082][T10802] usb 6-1: config 0 descriptor??
[ 3097.848717][T10802] smsc95xx v2.0.0
[ 3097.855656][   T30] kauditd_printk_skb: 10 callbacks suppressed
[ 3097.855673][   T30] audit: type=1326 audit(1765791897.587:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15874 comm="syz.7.11956" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703d539 code=0x0
[ 3097.917274][T15875] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 3097.963185][ T2600] usb 2-1: Using ep0 maxpacket: 32
[ 3097.971685][ T2600] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3097.985166][ T2600] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[ 3097.996306][ T2600] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3098.005542][ T2600] usb 2-1: Product: syz
[ 3098.010091][ T2600] usb 2-1: Manufacturer: syz
[ 3098.020179][ T2600] usb 2-1: SerialNumber: syz
[ 3098.026356][   T30] audit: type=1326 audit(1765791897.747:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15874 comm="syz.7.11956" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703d539 code=0x0
[ 3098.029510][ T2600] usb 2-1: config 0 descriptor??
[ 3098.064498][ T2600] usb 2-1: bad CDC descriptors
[ 3098.074682][ T2600] usb 2-1: unsupported MDLM descriptors
[ 3098.281408][T27739] usb 2-1: USB disconnect, device number 117
[ 3098.478730][T10802] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[ 3098.498260][T10802] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 3098.508858][T10802] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[ 3098.523699][T10802] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71
[ 3098.538888][T10802] usb 6-1: USB disconnect, device number 73
[ 3098.763527][T15884] netlink: 'syz.7.11960': attribute type 7 has an invalid length.
[ 3098.974341][T15897] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11959'.
[ 3148.533641][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 3148.539995][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 3171.090397][T12741] Bluetooth: hci2: command 0x0406 tx timeout
[ 3171.361622][   T30] audit: type=1326 audit(1765791971.087:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15921 comm="syz.6.11966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000
[ 3171.413269][   T30] audit: type=1326 audit(1765791971.117:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15921 comm="syz.6.11966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000
[ 3171.558459][   T30] audit: type=1326 audit(1765791971.137:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15921 comm="syz.6.11966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=274 compat=1 ip=0xf7ff6539 code=0x7ffc0000
[ 3171.646923][   T30] audit: type=1326 audit(1765791971.137:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15921 comm="syz.6.11966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000
[ 3171.765952][   T30] audit: type=1326 audit(1765791971.137:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15921 comm="syz.6.11966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=450 compat=1 ip=0xf7ff6539 code=0x7ffc0000
[ 3171.848859][   T30] audit: type=1326 audit(1765791971.137:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15921 comm="syz.6.11966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000
[ 3171.928808][   T30] audit: type=1326 audit(1765791971.147:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15921 comm="syz.6.11966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000
[ 3171.986111][   T30] audit: type=1326 audit(1765791971.147:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15921 comm="syz.6.11966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7ff6539 code=0x7ffc0000
[ 3172.034197][   T30] audit: type=1326 audit(1765791971.147:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15921 comm="syz.6.11966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000
[ 3172.087168][   T30] audit: type=1326 audit(1765791971.147:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15921 comm="syz.6.11966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000
[ 3172.170274][T22510] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[ 3172.330700][T22510] usb 6-1: Using ep0 maxpacket: 32
[ 3172.996109][T22510] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 3173.005180][T22510] usb 6-1: unable to read config index 0 descriptor/start: -71
[ 3173.016110][T22510] usb 6-1: can't read configurations, error -71
[ 3173.724014][T15942] delete_channel: no stack
[ 3173.857939][T15944] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11970'.
[ 3175.702101][T15954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11974'.
[ 3175.770502][T15959] binder: 15955:15959 ioctl c0306201 0 returned -14
[ 3178.066074][T15981] binder: 15980:15981 ioctl c00c620f 800001c0 returned -22
[ 3179.199079][T15993] fuse: Unknown parameter ' '
[ 3180.095925][T15997] tipc: Enabling of bearer <eth:ipvlan0> rejected, max 3 bearers permitted
[ 3180.107372][T15998] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11985'.
[ 3180.118645][T15997] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11985'.
[ 3180.129682][T15997] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11985'.
[ 3180.141498][T15997] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11985'.
[ 3180.400242][T16402] usb 6-1: new high-speed USB device number 76 using dummy_hcd
[ 3180.410639][ T6038] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[ 3180.580194][ T6038] usb 3-1: Using ep0 maxpacket: 8
[ 3180.599760][T16402] usb 6-1: config index 0 descriptor too short (expected 45, got 36)
[ 3180.607983][T16402] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3180.619295][T16402] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3180.634842][T16402] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 3180.676280][T16402] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 3180.696496][T16402] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3180.717890][ T6038] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 3180.731906][T16402] usb 6-1: config 0 descriptor??
[ 3180.743051][ T6038] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3180.761068][ T6038] usb 3-1: Product: syz
[ 3180.770041][ T6038] usb 3-1: Manufacturer: syz
[ 3180.785594][ T6038] usb 3-1: SerialNumber: syz
[ 3180.805944][ T6038] usb 3-1: config 0 descriptor??
[ 3181.007760][T16402] plantronics 0003:047F:FFFF.00F3: reserved main item tag 0xd
[ 3181.047728][T16402] plantronics 0003:047F:FFFF.00F3: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[ 3181.084433][T16009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11987'.
[ 3181.115043][T16009] netlink: 288 bytes leftover after parsing attributes in process `syz.1.11987'.
[ 3181.115276][ T6038] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 3181.155429][   T30] kauditd_printk_skb: 21 callbacks suppressed
[ 3181.155452][   T30] audit: type=1326 audit(1765791980.877:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16007 comm="syz.1.11987" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x0
[ 3181.391323][T10799] usb 6-1: USB disconnect, device number 76
[ 3181.545267][T16402] hid_parser_main: 990 callbacks suppressed
[ 3181.545293][T16402] hid-generic 0000:0000:0000.00F4: unknown main item tag 0x0
[ 3181.593973][T16402] hid-generic 0000:0000:0000.00F4: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 3181.754495][T16034] fido_id[16034]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 3181.824953][T15995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3181.837030][T15995] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3181.861819][ T6038] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 3181.886723][T16041] netlink: 'syz.6.11994': attribute type 8 has an invalid length.
[ 3181.902176][ T6038] usb 3-1: USB disconnect, device number 60
[ 3182.004711][T16044] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 3182.011972][T16044] IPv6: NLM_F_CREATE should be set when creating new route
[ 3182.019300][T16044] IPv6: NLM_F_CREATE should be set when creating new route
[ 3182.440189][T10799] usb 2-1: new high-speed USB device number 118 using dummy_hcd
[ 3182.600297][T10799] usb 2-1: Using ep0 maxpacket: 32
[ 3182.608751][T10799] usb 2-1: config 0 has an invalid descriptor of length 78, skipping remainder of the config
[ 3182.632978][T10799] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[ 3182.642336][T10799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3182.652192][T10799] usb 2-1: Product: syz
[ 3182.666956][T10799] usb 2-1: Manufacturer: syz
[ 3182.675863][T10799] usb 2-1: SerialNumber: syz
[ 3182.687029][T10799] usb 2-1: config 0 descriptor??
[ 3182.699053][T10799] usb 2-1: bad CDC descriptors
[ 3182.705472][T10799] usb 2-1: unsupported MDLM descriptors
[ 3182.815872][T16054] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11999'.
[ 3182.825989][T16055] netlink: 104 bytes leftover after parsing attributes in process `syz.6.11999'.
[ 3182.835576][T16055] netlink: 104 bytes leftover after parsing attributes in process `syz.6.11999'.
[ 3182.844947][T16054] netlink: 104 bytes leftover after parsing attributes in process `syz.6.11999'.
[ 3182.904982][T10799] usb 2-1: USB disconnect, device number 118
[ 3183.780231][T10799] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[ 3183.951485][T10799] usb 2-1: Using ep0 maxpacket: 32
[ 3183.990660][T10799] usb 2-1: config 0 has no interfaces?
[ 3184.015672][T10799] usb 2-1: New USB device found, idVendor=19d2, idProduct=1072, bcdDevice=cd.0c
[ 3184.036472][T10799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3184.054106][T10799] usb 2-1: Product: syz
[ 3184.064397][T10799] usb 2-1: Manufacturer: syz
[ 3184.069032][T10799] usb 2-1: SerialNumber: syz
[ 3184.096457][T10799] usb 2-1: config 0 descriptor??
[ 3184.720472][T16005] usb 2-1: USB disconnect, device number 119
[ 3185.660413][   T30] audit: type=1400 audit(1765791985.377:2603): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=16093 comm="syz.1.12008"
[ 3186.467066][T16104] mac80211_hwsim hwsim76 syzkaller0: entered promiscuous mode
[ 3186.486412][T16104] mac80211_hwsim hwsim76 syzkaller0: entered allmulticast mode
[ 3187.162111][T16116] netlink: 'syz.7.12014': attribute type 2 has an invalid length.
[ 3187.170597][T16116] __nla_validate_parse: 127 callbacks suppressed
[ 3187.170616][T16116] netlink: 28 bytes leftover after parsing attributes in process `syz.7.12014'.
[ 3187.222909][T16114] qrtr: Invalid version 48
[ 3187.425845][T16124] tipc: Enabled bearer <eth:vcan0>, priority 17
[ 3187.886525][T16128] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12016'.
[ 3187.903359][T16128] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12016'.
[ 3187.977791][T16128] bond1: entered allmulticast mode
[ 3188.509316][T12741] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 3188.524857][T12741] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 3188.554978][T12741] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 3188.555014][T10799] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[ 3188.572974][T12741] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 3188.583426][T12741] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 3188.700759][T22510] usb 2-1: new low-speed USB device number 120 using dummy_hcd
[ 3188.828480][T10799] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3188.851472][   T30] audit: type=1400 audit(1765791988.577:2604): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=16140 comm="syz.7.12023"
[ 3188.871761][T10799] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 16
[ 3188.890307][T22510] usb 2-1: config 0 has an invalid interface number: 3 but max is 0
[ 3188.900297][T10799] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[ 3188.940304][T10799] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3188.981291][T10799] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3189.000242][T22510] usb 2-1: config 0 has no interface number 0
[ 3189.012622][T10799] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D
[ 3189.044223][T22510] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x6 has invalid maxpacket 64, setting to 8
[ 3189.045809][T10799] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[ 3189.081357][T10799] usb 3-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41
[ 3189.091284][T10799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3189.111190][T22510] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 3189.146108][T22510] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 8
[ 3189.167326][T22510] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 8
[ 3189.179861][T22510] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 8
[ 3189.200900][T22510] usb 2-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59
[ 3189.224009][T22510] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3189.283065][T22510] usb 2-1: config 0 descriptor??
[ 3189.296578][ T1865] bridge_slave_1: left allmulticast mode
[ 3189.302993][T10799] usb 3-1: Product: syz
[ 3189.311121][T10799] usb 3-1: Manufacturer: syz
[ 3189.315765][T10799] usb 3-1: SerialNumber: syz
[ 3189.331975][T16139] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 3189.339279][ T1865] bridge_slave_1: left promiscuous mode
[ 3189.348525][ T1865] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3189.360028][T22510] hub 2-1:0.3: bad descriptor, ignoring hub
[ 3189.372536][T10799] usb 3-1: config 0 descriptor??
[ 3189.391893][T22510] hub 2-1:0.3: probe with driver hub failed with error -5
[ 3189.568258][T22510] sierra 2-1:0.3: Sierra USB modem converter detected
[ 3189.647369][T22510] usb 2-1: Sierra USB modem converter now attached to ttyUSB0
[ 3189.721453][T22510] usb 2-1: Sierra USB modem converter now attached to ttyUSB1
[ 3189.781129][T22510] usb 2-1: USB disconnect, device number 120
[ 3189.907854][T22510] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[ 3189.950898][T22510] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1
[ 3189.998136][T22510] sierra 2-1:0.3: device disconnected
[ 3190.520322][T16168] program syz.6.12024 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 3190.690917][ T9635] Bluetooth: hci3: command tx timeout
[ 3190.840423][T16005] usb 2-1: new high-speed USB device number 121 using dummy_hcd
[ 3190.974866][ T1865] bond1 (unregistering): Released all slaves
[ 3190.997301][T16005] usb 2-1: device descriptor read/64, error -71
[ 3191.042304][ T1865] bond0 (unregistering): Released all slaves
[ 3191.138518][T16134] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 3191.273984][T10799] usb 3-1: ucan: probing device on interface #0
[ 3191.293688][T16005] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[ 3191.304757][ T1865] tipc: Disabling bearer <eth:syzkaller0>
[ 3191.305518][T10799] usb 3-1: ucan: invalid endpoint configuration
[ 3191.337893][T10799] usb 3-1: ucan: probe failed; try to update the device firmware
[ 3191.346983][ T1865] tipc: Disabling bearer <udp:syz2>
[ 3191.353603][ T1865] tipc: Disabling bearer <ib:wg1>
[ 3191.382343][T10799] usb 3-1: USB disconnect, device number 61
[ 3191.405287][ T1865] tipc: Left network mode
[ 3191.413146][T16184] mac80211_hwsim hwsim76 syzkaller0: left promiscuous mode
[ 3191.443277][T16184] mac80211_hwsim hwsim76 syzkaller0: left allmulticast mode
[ 3191.476091][T16145] chnl_net:caif_netlink_parms(): no params data found
[ 3191.504068][T16005] usb 2-1: device descriptor read/64, error -71
[ 3191.622482][T16005] usb usb2-port1: attempt power cycle
[ 3191.960328][T16005] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[ 3192.005257][T16005] usb 2-1: device descriptor read/8, error -71
[ 3192.032637][T16145] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3192.039932][T16145] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3192.067490][T16145] bridge_slave_0: entered allmulticast mode
[ 3192.078258][T16145] bridge_slave_0: entered promiscuous mode
[ 3192.087799][T16145] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3192.107305][T16145] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3192.115937][T16145] bridge_slave_1: entered allmulticast mode
[ 3192.127613][T16145] bridge_slave_1: entered promiscuous mode
[ 3192.158464][T16200] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12031'.
[ 3192.229646][T16203] bond4: entered allmulticast mode
[ 3192.244097][T16203] 8021q: adding VLAN 0 to HW filter on device bond4
[ 3192.285939][T16005] usb 2-1: new high-speed USB device number 124 using dummy_hcd
[ 3192.295677][ T1865] hsr_slave_0: left promiscuous mode
[ 3192.310796][T16005] usb 2-1: device descriptor read/8, error -71
[ 3192.317162][ T1865] hsr_slave_1: left promiscuous mode
[ 3192.324075][ T1865] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3192.456212][T16005] usb usb2-port1: unable to enumerate USB device
[ 3192.749240][ T1865] team0 (unregistering): Port device team_slave_1 removed
[ 3192.780596][ T9635] Bluetooth: hci3: command tx timeout
[ 3192.827504][ T1865] team0 (unregistering): Port device team_slave_0 removed
[ 3193.260330][T10799] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[ 3193.430230][T10799] usb 3-1: Using ep0 maxpacket: 16
[ 3193.437121][T10799] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 3193.451438][T10799] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 3193.467128][T10799] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 3193.478974][T10799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3193.492341][T10799] usb 3-1: Product: syz
[ 3193.508443][T10799] usb 3-1: Manufacturer: syz
[ 3193.525242][T10799] usb 3-1: SerialNumber: syz
[ 3193.536952][T10799] usb 3-1: config 0 descriptor??
[ 3193.551819][T10799] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 3193.563102][T10799] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[ 3193.627887][T16145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3193.667604][T16145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3193.845178][T16145] team0: Port device team_slave_0 added
[ 3193.872566][T16145] team0: Port device team_slave_1 added
[ 3193.964431][T16230] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12035'.
[ 3193.974060][T16230] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12035'.
[ 3194.001560][T16145] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3194.009033][T16145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 3194.054616][T16145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3194.091123][T16145] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3194.098257][T16145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 3194.126674][T16145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3194.218699][ T1865] IPVS: stop unused estimator thread 0...
[ 3194.246816][T16145] hsr_slave_0: entered promiscuous mode
[ 3194.269372][T16145] hsr_slave_1: entered promiscuous mode
[ 3194.292522][T16145] debugfs: 'hsr0' already exists in 'hsr'
[ 3194.306368][T16145] Cannot create hsr debugfs directory
[ 3194.703833][T10799] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[ 3194.867692][ T9635] Bluetooth: hci3: command tx timeout
[ 3194.917355][   T30] audit: type=1400 audit(1765791994.637:2605): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=16235 comm="syz.7.12037"
[ 3195.073291][T16247] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 3195.120582][T16247] mac80211_hwsim hwsim72 syzkaller0: entered promiscuous mode
[ 3195.137672][T16247] mac80211_hwsim hwsim72 syzkaller0: entered allmulticast mode
[ 3195.201729][T10799] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[ 3195.230821][T16247] tipc: Resetting bearer <eth:syzkaller0>
[ 3195.794311][T16145] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 3195.842504][   T30] audit: type=1326 audit(1765791995.567:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16260 comm="syz.6.12042" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000
[ 3195.866063][T16145] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 3195.910252][T16402] usb 2-1: new high-speed USB device number 125 using dummy_hcd
[ 3195.910265][   T30] audit: type=1326 audit(1765791995.567:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16260 comm="syz.6.12042" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000
[ 3195.910352][   T30] audit: type=1326 audit(1765791995.567:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16260 comm="syz.6.12042" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7ff6539 code=0x7ffc0000
[ 3196.036533][T16145] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 3196.065129][   T30] audit: type=1326 audit(1765791995.567:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16260 comm="syz.6.12042" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000
[ 3196.138645][   T30] audit: type=1326 audit(1765791995.567:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16260 comm="syz.6.12042" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000
[ 3196.174812][T16145] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 3196.217717][T16402] usb 2-1: Using ep0 maxpacket: 16
[ 3196.220251][   T30] audit: type=1326 audit(1765791995.567:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16260 comm="syz.6.12042" exe="/root/syz-executor" sig=0 arch=40000003 syscall=9 compat=1 ip=0xf7ff6539 code=0x7ffc0000
[ 3196.251537][T16402] usb 2-1: config 0 has an invalid interface number: 68 but max is 0
[ 3196.336713][T16402] usb 2-1: config 0 has no interface number 0
[ 3196.362848][   T30] audit: type=1326 audit(1765791995.567:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16260 comm="syz.6.12042" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000
[ 3196.434685][T16402] usb 2-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3196.450283][   T30] audit: type=1326 audit(1765791995.567:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16260 comm="syz.6.12042" exe="/root/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf7ff6539 code=0x7ffc0000
[ 3196.542688][T16402] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4
[ 3196.572777][T16402] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3196.590948][T16402] usb 2-1: Product: syz
[ 3196.595533][   T30] audit: type=1326 audit(1765791995.567:2614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16260 comm="syz.6.12042" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000
[ 3196.615652][T16402] usb 2-1: Manufacturer: syz
[ 3196.672214][T10799] em28xx 3-1:0.0: Unknown AC97 audio processor detected!
[ 3196.686744][T16402] usb 2-1: SerialNumber: syz
[ 3196.725237][T10799] em28xx 3-1:0.0: couldn't setup AC97 register 2
[ 3196.730982][T16402] usb 2-1: config 0 descriptor??
[ 3196.825828][T16402] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 3196.930260][ T9635] Bluetooth: hci3: command tx timeout
[ 3196.938352][T16145] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3197.037257][T16678] usb 2-1: USB disconnect, device number 125
[ 3197.069840][ T4484] usb 2-1: Failed to submit usb control message: -71
[ 3197.088561][ T4484] usb 2-1: unable to send the bmi data to the device: -71
[ 3197.111502][T16145] 8021q: adding VLAN 0 to HW filter on device team0
[ 3197.128438][ T4484] usb 2-1: unable to get target info from device
[ 3197.150252][ T4484] usb 2-1: could not get target info (-71)
[ 3197.155717][T13539] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3197.163381][T13539] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3197.179302][ T4484] usb 2-1: could not probe fw (-71)
[ 3197.249411][T13327] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3197.256672][T13327] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3197.519085][T16145] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3197.641164][T16145] veth0_vlan: entered promiscuous mode
[ 3197.679336][T16145] veth1_vlan: entered promiscuous mode
[ 3197.791010][T16145] veth0_macvtap: entered promiscuous mode
[ 3197.824858][T16145] veth1_macvtap: entered promiscuous mode
[ 3197.860286][T10799] em28xx 3-1:0.0: AC97 command still being executed: not handled properly!
[ 3197.883706][T10799] em28xx 3-1:0.0: couldn't setup AC97 register 6
[ 3197.894826][T16145] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3197.928793][T16145] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3197.967445][T13327] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3197.992348][T13327] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3198.012393][T13327] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3198.031955][T16300] mac80211_hwsim hwsim72 syzkaller0: left promiscuous mode
[ 3198.046778][T16300] mac80211_hwsim hwsim72 syzkaller0: left allmulticast mode
[ 3198.080952][T13327] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3198.380653][T16005] usb 2-1: new high-speed USB device number 126 using dummy_hcd
[ 3198.497999][T16308] could not allocate digest TFM handle sha3-512-generic
[ 3198.570368][T16005] usb 2-1: Using ep0 maxpacket: 32
[ 3198.587435][T16005] usb 2-1: config 0 has an invalid descriptor of length 78, skipping remainder of the config
[ 3198.616433][T16005] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[ 3198.626153][T16005] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3198.634304][T16005] usb 2-1: Product: syz
[ 3198.639044][T16005] usb 2-1: Manufacturer: syz
[ 3198.643899][T16005] usb 2-1: SerialNumber: syz
[ 3198.652271][T16005] usb 2-1: config 0 descriptor??
[ 3198.666799][T16005] usb 2-1: bad CDC descriptors
[ 3198.679408][T16005] usb 2-1: unsupported MDLM descriptors
[ 3198.885607][T17635] usb 2-1: USB disconnect, device number 126
[ 3198.940440][T10799] em28xx 3-1:0.0: couldn't setup AC97 register 54
[ 3198.947408][T10799] em28xx 3-1:0.0: couldn't setup AC97 register 56
[ 3199.001088][T13327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3199.008974][T13327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3199.084706][  T751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3199.094688][  T751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3199.250500][T17635] usb 3-1: USB disconnect, device number 62
[ 3199.477027][T16325] netlink: 44 bytes leftover after parsing attributes in process `syz.6.12050'.
[ 3199.488330][T16325] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12050'.
[ 3199.840334][T16307] usb 3-1: new full-speed USB device number 63 using dummy_hcd
[ 3200.021995][T16307] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3200.032461][T16307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 3200.043783][T16307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64
[ 3200.059894][T16307] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[ 3200.075621][T16307] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 3200.084987][T16307] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 3200.093105][T16307] usb 3-1: Manufacturer: syz
[ 3200.101091][T16307] usb 3-1: config 0 descriptor??
[ 3200.130839][T17635] usb 2-1: new low-speed USB device number 127 using dummy_hcd
[ 3200.281072][T17635] usb 2-1: Invalid ep0 maxpacket: 64
[ 3200.420247][T17635] usb 2-1: new low-speed USB device number 2 using dummy_hcd
[ 3200.495495][T16307] rc_core: IR keymap rc-hauppauge not found
[ 3200.511263][T16307] Registered IR keymap rc-empty
[ 3200.520250][T16307] mceusb 3-1:0.0: Error: mce write urb status = -71
[ 3200.540635][T16307] mceusb 3-1:0.0: Error: mce write urb status = -71
[ 3200.561269][T16307] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[ 3200.573510][ T5786] usb 9-1: new full-speed USB device number 2 using dummy_hcd
[ 3200.596534][T17635] usb 2-1: Invalid ep0 maxpacket: 64
[ 3200.601056][T16307] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input202
[ 3200.616204][T17635] usb usb2-port1: attempt power cycle
[ 3200.639907][T16307] mceusb 3-1:0.0: Error: mce write urb status = -71
[ 3200.662020][T16307] mceusb 3-1:0.0: Error: mce write urb status = -71
[ 3200.680728][T16307] mceusb 3-1:0.0: Error: mce write urb status = -71
[ 3200.722402][T16307] mceusb 3-1:0.0: Error: mce write urb status = -71
[ 3200.752759][ T5786] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 3200.765727][T16307] mceusb 3-1:0.0: Error: mce write urb status = -71
[ 3200.781899][ T5786] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[ 3200.794264][ T5786] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 3200.803641][T16307] mceusb 3-1:0.0: Error: mce write urb status = -71
[ 3200.817807][   T30] kauditd_printk_skb: 20 callbacks suppressed
[ 3200.817857][   T30] audit: type=1400 audit(1765792000.537:2635): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=16341 comm="syz.7.12055"
[ 3200.860406][ T5786] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3200.889919][ T5786] usb 9-1: config 0 descriptor??
[ 3200.895999][T16307] mceusb 3-1:0.0: Error: mce write urb status = -71
[ 3200.913704][T16337] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22
[ 3200.938191][T16307] mceusb 3-1:0.0: Error: mce write urb status = -71
[ 3200.955101][ T5786] hub 9-1:0.0: USB hub found
[ 3200.982324][T17635] usb 2-1: new low-speed USB device number 3 using dummy_hcd
[ 3200.992316][T16307] mceusb 3-1:0.0: Error: mce write urb status = -71
[ 3201.034217][T17635] usb 2-1: Invalid ep0 maxpacket: 64
[ 3201.034228][T16307] mceusb 3-1:0.0: Error: mce write urb status = -71
[ 3201.061045][T16307] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 3201.085844][T16307] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 3201.183633][ T5786] hub 9-1:0.0: config failed, hub doesn't have any ports! (err -19)
[ 3201.230305][T17635] usb 2-1: new low-speed USB device number 4 using dummy_hcd
[ 3201.271146][T17635] usb 2-1: Invalid ep0 maxpacket: 64
[ 3201.285199][T17635] usb usb2-port1: unable to enumerate USB device
[ 3201.475304][T16402] usb 3-1: USB disconnect, device number 63
[ 3201.510229][ T5786] usbhid 9-1:0.0: can't add hid device: -71
[ 3201.620396][ T5786] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 3201.822467][ T5786] usb 9-1: USB disconnect, device number 2
[ 3202.555426][T16379] bridge_slave_0: left allmulticast mode
[ 3202.568902][T16379] bridge_slave_0: left promiscuous mode
[ 3202.579332][T16379] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3202.610099][T16380] netlink: 'syz.8.12062': attribute type 16 has an invalid length.
[ 3202.628643][T16380] netlink: 'syz.8.12062': attribute type 5 has an invalid length.
[ 3202.647732][T16379] netlink: 'syz.8.12062': attribute type 16 has an invalid length.
[ 3202.662841][T16379] netlink: 'syz.8.12062': attribute type 5 has an invalid length.
[ 3203.170268][T27739] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[ 3203.370195][T27739] usb 9-1: Using ep0 maxpacket: 32
[ 3203.381182][T27739] usb 9-1: config 0 has an invalid descriptor of length 78, skipping remainder of the config
[ 3203.424989][T27739] usb 9-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[ 3203.434455][T27739] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3203.460246][T27739] usb 9-1: Product: syz
[ 3203.464502][T27739] usb 9-1: Manufacturer: syz
[ 3203.469134][T27739] usb 9-1: SerialNumber: syz
[ 3203.493978][T27739] usb 9-1: config 0 descriptor??
[ 3203.504977][T27739] usb 9-1: bad CDC descriptors
[ 3203.512229][T27739] usb 9-1: unsupported MDLM descriptors
[ 3203.722236][T27739] usb 9-1: USB disconnect, device number 3
[ 3203.881215][   T30] audit: type=1400 audit(1765792003.607:2636): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=16395 comm="syz.1.12069"
[ 3205.219668][T16420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3205.235506][T16420] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3205.310357][T16402] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[ 3205.480337][T16402] usb 3-1: Using ep0 maxpacket: 8
[ 3205.487791][T16402] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 3205.511503][T16402] usb 3-1: can't read configurations, error -61
[ 3205.605897][T16435] bond2: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[ 3205.617899][T16435] bond2 (unregistering): Released all slaves
[ 3205.646568][T16402] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[ 3205.824667][ T5786] IPVS: starting estimator thread 0...
[ 3205.830570][T16402] usb 3-1: Using ep0 maxpacket: 8
[ 3205.930728][T16446] IPVS: using max 28 ests per chain, 67200 per kthread
[ 3205.962684][T16402] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 3205.973417][T16402] usb 3-1: can't read configurations, error -61
[ 3205.981606][T16402] usb usb3-port1: attempt power cycle
[ 3206.320616][T16402] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[ 3206.371774][T16402] usb 3-1: Using ep0 maxpacket: 8
[ 3206.531648][T16402] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 3206.539348][T16402] usb 3-1: can't read configurations, error -61
[ 3206.720318][T16402] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[ 3206.929806][T16402] usb 3-1: Using ep0 maxpacket: 8
[ 3206.943220][T16402] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 3206.960823][T16402] usb 3-1: can't read configurations, error -61
[ 3206.977239][T16402] usb usb3-port1: unable to enumerate USB device
[ 3207.150272][T17635] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[ 3207.228377][   T30] audit: type=1400 audit(1765792006.947:2637): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=16458 comm="syz.1.12084"
[ 3207.320319][T17635] usb 9-1: Using ep0 maxpacket: 32
[ 3207.327917][T17635] usb 9-1: config 0 has an invalid descriptor of length 78, skipping remainder of the config
[ 3207.358119][T17635] usb 9-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[ 3207.379283][T17635] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3207.396315][T17635] usb 9-1: Product: syz
[ 3207.405237][T17635] usb 9-1: Manufacturer: syz
[ 3207.417450][T17635] usb 9-1: SerialNumber: syz
[ 3207.429913][T17635] usb 9-1: config 0 descriptor??
[ 3207.455253][T17635] usb 9-1: bad CDC descriptors
[ 3207.467673][T17635] usb 9-1: unsupported MDLM descriptors
[ 3207.659424][T16402] usb 9-1: USB disconnect, device number 4
[ 3208.440240][T17635] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[ 3208.450738][    C1] raw-gadget.1 gadget.2: ignoring, device is not running
[ 3208.580168][T17635] usb 3-1: device descriptor read/64, error -32
[ 3208.670421][T16307] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[ 3208.756521][T16478] netlink: 40 bytes leftover after parsing attributes in process `syz.8.12089'.
[ 3208.820346][T17635] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[ 3208.842374][T16307] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 3208.872979][T16307] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 3208.894107][T16307] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 3208.917719][T16307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3208.953910][T16481] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 3208.979743][T16307] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 3209.131605][T17635] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 3209.143898][T17635] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3209.162548][T17635] usb 3-1: config 0 descriptor??
[ 3209.202074][T17635] cp210x 3-1:0.0: cp210x converter detected
[ 3209.250777][T16474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3209.259700][T16474] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3209.621572][T17635] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32
[ 3209.952372][T17635] usb 3-1: cp210x converter now attached to ttyUSB0
[ 3209.977216][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 3209.991244][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 3210.171694][T16473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3210.185669][T16473] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3210.197169][T16307] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[ 3210.235281][T16402] usb 3-1: USB disconnect, device number 69
[ 3210.244582][T16402] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 3210.260513][T16402] cp210x 3-1:0.0: device disconnected
[ 3210.354372][T16307] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30
[ 3210.380140][T16307] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[ 3210.391920][T16307] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33
[ 3210.405596][T16307] usb 9-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00
[ 3210.416438][T16307] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3210.440104][T16307] usb 9-1: config 0 descriptor??
[ 3210.888699][T16307] kye 0003:0458:5005.00F5: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[ 3210.907160][T16307] kye 0003:0458:5005.00F5: hidraw0: USB HID v0.00 Device [HID 0458:5005] on usb-dummy_hcd.8-1/input0
[ 3210.924366][T16307] kye 0003:0458:5005.00F5: tablet-enabling feature report not found
[ 3210.950239][T16307] kye 0003:0458:5005.00F5: tablet enabling failed
[ 3211.103181][T16513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3211.121178][T16513] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3211.146582][T16513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3211.181978][T16513] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3211.186384][   T30] audit: type=1400 audit(1765792010.907:2638): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=16525 comm="syz.2.12098"
[ 3211.215010][T17635] usb 9-1: USB disconnect, device number 5
[ 3211.483908][T17635] usb 2-1: USB disconnect, device number 5
[ 3212.070205][T17635] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[ 3212.226874][T17635] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3212.238286][T17635] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3212.248701][T27739] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[ 3212.256553][T17635] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 3212.272779][T17635] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 3212.283748][T17635] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3212.296347][T17635] usb 9-1: config 0 descriptor??
[ 3212.422488][T27739] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 3212.438083][T27739] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 3212.448696][T27739] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 3212.465378][T27739] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 3212.475154][T27739] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3212.483440][T27739] usb 2-1: Product: syz
[ 3212.487734][T27739] usb 2-1: Manufacturer: syz
[ 3212.493286][T27739] usb 2-1: SerialNumber: syz
[ 3212.505091][T27739] hub 2-1:1.0: bad descriptor, ignoring hub
[ 3212.511474][T27739] hub 2-1:1.0: probe with driver hub failed with error -5
[ 3212.713083][T16565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3212.736448][T16565] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3212.750720][T16565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3212.763632][T16565] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3212.778341][T16565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3212.789334][T16565] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3212.801609][T16565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3212.812346][T16565] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3212.831755][T16565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3212.841746][T16565] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3212.867165][T27739] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[ 3212.926224][T17635] usbhid 9-1:0.0: can't add hid device: -71
[ 3212.935770][T17635] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 3212.951058][T17635] usb 9-1: USB disconnect, device number 6
[ 3215.171092][ T6038] usb 2-1: USB disconnect, device number 6
[ 3215.179106][ T6038] usblp0: removed
[ 3216.820258][T27739] usb 9-1: new full-speed USB device number 7 using dummy_hcd
[ 3216.992167][T27739] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3217.003362][T27739] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 3217.014828][T27739] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[ 3217.025403][T27739] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 3217.034526][T27739] usb 9-1: SerialNumber: syz
[ 3217.040732][ T6038] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[ 3217.059289][T27739] usb 9-1: 0:2 : does not exist
[ 3217.200175][ T6038] usb 2-1: Using ep0 maxpacket: 32
[ 3217.207438][ T6038] usb 2-1: config 0 has an invalid descriptor of length 108, skipping remainder of the config
[ 3217.221695][ T6038] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[ 3217.233230][ T6038] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3217.241887][ T6038] usb 2-1: Product: syz
[ 3217.246273][ T6038] usb 2-1: Manufacturer: syz
[ 3217.252170][ T6038] usb 2-1: SerialNumber: syz
[ 3217.263192][ T6038] usb 2-1: config 0 descriptor??
[ 3217.271493][ T6038] cdc_ether 2-1:0.0: skipping garbage
[ 3217.277277][ T6038] usb 2-1: bad CDC descriptors
[ 3217.285742][ T6038] usb 2-1: unsupported MDLM descriptors
[ 3217.475148][T27739] usb 2-1: USB disconnect, device number 7
[ 3217.502551][T17635] usb 9-1: USB disconnect, device number 7
[ 3217.906987][   T30] audit: type=1400 audit(1765792017.627:2639): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=16636 comm="syz.2.12115"
[ 3218.610912][T27739] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[ 3218.771882][T27739] usb 2-1: config 1 has an invalid interface number: 7 but max is 0
[ 3218.781437][T27739] usb 2-1: config 1 has no interface number 0
[ 3218.787617][T27739] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[ 3218.799926][T27739] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 3218.810597][T27739] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3218.824568][T27739] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[ 3218.834432][T27739] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3218.842683][T27739] usb 2-1: Product: syz
[ 3218.847541][T27739] usb 2-1: Manufacturer: syz
[ 3218.855984][T27739] usb 2-1: SerialNumber: syz
[ 3218.864234][T16654] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 3219.079008][T16654] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 3219.307813][T27739] sierra_net 2-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07
[ 3219.706828][T27739] sierra_net 2-1:1.7 wwan0: Submit SYNC failed -71
[ 3219.743940][T27739] sierra_net 2-1:1.7 wwan0: Send SYNC failed, status -71
[ 3219.790298][T27739] usb 2-1: USB disconnect, device number 8
[ 3219.801140][T27739] sierra_net 2-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem
[ 3219.971735][T27739] sierra_net 2-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19
[ 3220.311905][T16684] trusted_key: encrypted_key: insufficient parameters specified
[ 3221.014938][   T30] audit: type=1400 audit(1765792020.727:2640): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=16696 comm="syz.1.12133"
[ 3221.450550][T16710] netlink: 104 bytes leftover after parsing attributes in process `syz.6.12135'.
[ 3222.465189][T16723] fuse: Unknown parameter 'fZ?0x0000000000000003'
[ 3223.517441][ T9635] Bluetooth: hci3: ACL packet for unknown connection handle 2171
[ 3223.640278][T27739] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[ 3223.802083][T27739] usb 2-1: Using ep0 maxpacket: 16
[ 3223.820815][T27739] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3223.839731][T27739] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 3223.902711][T27739] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice=a8.ac
[ 3223.920249][T17635] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[ 3223.931021][T27739] usb 2-1: New USB device strings: Mfr=113, Product=76, SerialNumber=196
[ 3223.953090][T27739] usb 2-1: Product: syz
[ 3223.957330][T27739] usb 2-1: Manufacturer: syz
[ 3223.973823][T27739] usb 2-1: SerialNumber: syz
[ 3224.072266][T17635] usb 9-1: device descriptor read/64, error -71
[ 3224.202643][T27739] usb 2-1: unknown interface protocol 0x8, assuming v1
[ 3224.209552][T27739] usb 2-1: invalid UAC_HEADER (v1)
[ 3224.277832][T27739] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 3224.318542][T27739] usb 2-1: USB disconnect, device number 9
[ 3224.330265][T17635] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[ 3224.374317][T16013] udevd[16013]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 3224.481507][T17635] usb 9-1: device descriptor read/64, error -71
[ 3224.590675][T17635] usb usb9-port1: attempt power cycle
[ 3224.932684][T17635] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[ 3224.960811][T17635] usb 9-1: device descriptor read/8, error -71
[ 3225.072586][T27739] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[ 3225.200289][T17635] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[ 3225.221251][T17635] usb 9-1: device descriptor read/8, error -71
[ 3225.240355][T27739] usb 2-1: Using ep0 maxpacket: 16
[ 3225.247849][T27739] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[ 3225.256224][T27739] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3225.266619][T27739] usb 2-1: config 0 has no interface number 0
[ 3225.282473][T27739] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[ 3225.291773][T27739] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3225.299802][T27739] usb 2-1: Product: syz
[ 3225.304165][T27739] usb 2-1: Manufacturer: syz
[ 3225.309042][T27739] usb 2-1: SerialNumber: syz
[ 3225.316419][T27739] usb 2-1: config 0 descriptor??
[ 3225.325776][T27739] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[ 3225.335924][T17635] usb usb9-port1: unable to enumerate USB device
[ 3225.342467][T27739] uvcvideo 2-1:0.105: No valid video chain found.
[ 3225.529451][T27739] usb 2-1: USB disconnect, device number 10
[ 3225.658636][T16782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12158'.
[ 3226.104966][T16789] fuse: Bad value for 'group_id'
[ 3226.115727][T16789] fuse: Bad value for 'group_id'
[ 3226.341079][ T9635] Bluetooth: hci2: unexpected event for opcode 0x1804
[ 3226.369275][T16799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3226.389715][T16799] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3226.422571][T16804] usb usb8: usbfs: process 16804 (syz.7.12163) did not claim interface 0 before use
[ 3226.753860][   T30] audit: type=1400 audit(1765792026.477:2641): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=16807 comm="syz.1.12164"
[ 3227.230146][ T5786] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[ 3227.420411][ T5786] usb 9-1: Using ep0 maxpacket: 32
[ 3227.452497][ T5786] usb 9-1: config 0 has an invalid interface number: 2 but max is 0
[ 3227.470376][ T5786] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3227.502997][ T5786] usb 9-1: config 0 has no interface number 0
[ 3227.572612][ T5786] usb 9-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f
[ 3227.590244][ T5786] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3227.600379][ T5786] usb 9-1: Product: syz
[ 3227.610391][ T5786] usb 9-1: Manufacturer: syz
[ 3227.615075][ T5786] usb 9-1: SerialNumber: syz
[ 3227.662326][ T5786] usb 9-1: config 0 descriptor??
[ 3227.876676][ T5786] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[ 3227.908637][ T5786] snd-usb-audio 9-1:0.2: probe with driver snd-usb-audio failed with error -2
[ 3227.941282][T17635] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[ 3227.965931][T16013] udevd[16013]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 3228.079527][T16813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3228.094164][T16813] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3228.112517][T17635] usb 2-1: Using ep0 maxpacket: 8
[ 3228.121292][T16813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3228.132463][T17635] usb 2-1: config index 0 descriptor too short (expected 30, got 18)
[ 3228.134089][T16813] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3228.152985][T17635] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 3228.169876][T17635] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3228.176040][ T5786] usb 9-1: USB disconnect, device number 12
[ 3228.186651][T17635] usb 2-1: Product: syz
[ 3228.204344][T17635] usb 2-1: Manufacturer: syz
[ 3228.209011][T17635] usb 2-1: SerialNumber: syz
[ 3228.247719][T17635] usb 2-1: config 0 descriptor??
[ 3228.281371][T17635] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[ 3228.289514][T17635] usb 2-1: setting power ON
[ 3228.307030][T17635] dvb-usb: bulk message failed: -22 (2/0)
[ 3228.320475][T17635] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 3228.337630][T17635] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[ 3228.349662][T17635] usb 2-1: media controller created
[ 3228.369360][T17635] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 3228.396238][T17635] usb 2-1: selecting invalid altsetting 6
[ 3228.402421][T17635] usb 2-1: digital interface selection failed (-22)
[ 3228.409065][T17635] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[ 3228.419813][T17635] usb 2-1: setting power OFF
[ 3228.425756][T17635] dvb-usb: bulk message failed: -22 (2/0)
[ 3228.432227][T17635] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[ 3228.446341][T17635] (NULL device *): no alternate interface
[ 3228.449305][T16835] binder: BINDER_SET_CONTEXT_MGR already set
[ 3228.510534][T16835] binder: 16828:16835 ioctl 4018620d 800000c0 returned -16
[ 3228.522193][T16816] dvb-usb: bulk message failed: -22 (3/0)
[ 3228.574804][T16816] dvb-usb: bulk message failed: -22 (3/0)
[ 3228.594452][T17635] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[ 3228.635563][T17635] usb 2-1: USB disconnect, device number 12
[ 3228.825898][T16842] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 3229.247609][T16850] netlink: 'syz.1.12173': attribute type 2 has an invalid length.
[ 3229.259587][T16850] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12173'.
[ 3229.278175][T16850] loop6: detected capacity change from 0 to 2640
[ 3229.287086][T16850] buffer_io_error: 3082 callbacks suppressed
[ 3229.287101][T16850] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3229.310254][T16850] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3229.329136][T16850] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3229.349579][T16850] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3229.374303][T16851] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3229.408183][T16849] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3229.437450][T16849] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3229.458957][T16851] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3229.477353][T16849] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3229.514181][T16850] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3229.534722][T16850] ldm_validate_partition_table(): Disk read failed.
[ 3229.559328][T16850] Dev loop6: unable to read RDB block 0
[ 3229.578247][T16850]  loop6: unable to read partition table
[ 3229.599150][T16850] loop_reread_partitions: partition scan of loop6 (3�����) failed (rc=-5)
[ 3229.978955][ T5200] ldm_validate_partition_table(): Disk read failed.
[ 3229.986049][ T5200] Dev loop6: unable to read RDB block 0
[ 3229.992674][ T5200]  loop6: unable to read partition table
[ 3230.917994][   T30] audit: type=1400 audit(1765792030.637:2642): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=16865 comm="syz.2.12177"
[ 3231.006674][T17635] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[ 3231.160218][T17635] usb 2-1: Using ep0 maxpacket: 32
[ 3231.167590][T17635] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3231.179248][T17635] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3231.191961][T17635] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 3231.201328][T17635] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3231.212558][T17635] usb 2-1: config 0 descriptor??
[ 3231.228346][T17635] hub 2-1:0.0: USB hub found
[ 3231.408554][T16878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3231.431774][T16878] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3231.517035][T17635] hub 2-1:0.0: config failed, can't read hub descriptor (err -22)
[ 3231.531534][T17635] usbhid 2-1:0.0: can't add hid device: -71
[ 3231.537952][T17635] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 3231.561168][T17635] usb 2-1: USB disconnect, device number 13
[ 3231.650474][ T6038] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[ 3231.808660][ T6038] usb 9-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[ 3231.820269][ T6038] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3231.830541][ T6038] usb 9-1: Product: syz
[ 3231.835614][ T6038] usb 9-1: Manufacturer: syz
[ 3231.842624][ T6038] usb 9-1: SerialNumber: syz
[ 3231.852378][ T6038] usb 9-1: config 0 descriptor??
[ 3231.912382][T17635] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[ 3232.072787][T17635] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3232.084017][T17635] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3232.094444][T17635] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[ 3232.103746][T17635] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3232.114958][T17635] usb 2-1: config 0 descriptor??
[ 3232.120349][ T5786] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[ 3232.261692][ T6038] usb 9-1: f81604_read: reg: 105 failed: -EPIPE
[ 3232.268692][ T6038] f81604 9-1:0.0: Setting termination of CH#1 failed: -EPIPE
[ 3232.276399][ T6038] f81604 9-1:0.0: probe with driver f81604 failed with error -32
[ 3232.304529][ T5786] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 3232.314082][ T5786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3232.322663][ T5786] usb 3-1: Product: syz
[ 3232.327213][ T5786] usb 3-1: Manufacturer: syz
[ 3232.332106][ T5786] usb 3-1: SerialNumber: syz
[ 3232.343874][ T5786] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 3232.371078][ T6038] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 3232.538345][T17635] hid-steam 0003:28DE:1142.00F6: reserved main item tag 0xe
[ 3232.554450][T17635] hid-steam 0003:28DE:1142.00F6: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0
[ 3232.739704][T17635] usb 2-1: USB disconnect, device number 14
[ 3232.915283][T16888] program syz.2.12185 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 3232.932967][T27739] usb 3-1: USB disconnect, device number 70
[ 3232.988640][T17635] usb 9-1: USB disconnect, device number 13
[ 3233.381375][T17635] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[ 3233.410241][ T6038] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 3233.428587][ T6038] ath9k_htc: Failed to initialize the device
[ 3233.454813][T27739] usb 3-1: ath9k_htc: USB layer deinitialized
[ 3233.550359][T17635] usb 9-1: Using ep0 maxpacket: 16
[ 3233.593426][T17635] usb 9-1: config 0 has an invalid interface number: 4 but max is 0
[ 3233.619892][T17635] usb 9-1: config 0 has no interface number 0
[ 3233.643672][T17635] usb 9-1: config 0 interface 4 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64
[ 3233.679223][T17635] usb 9-1: New USB device found, idVendor=05c6, idProduct=9000, bcdDevice=45.8e
[ 3233.714698][T17635] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3233.741843][T17635] usb 9-1: Product: syz
[ 3233.746176][T17635] usb 9-1: Manufacturer: syz
[ 3233.768550][T17635] usb 9-1: SerialNumber: syz
[ 3233.816036][T17635] usb 9-1: config 0 descriptor??
[ 3233.847038][T16897] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[ 3234.438708][T16913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12191'.
[ 3234.577834][ T5786] usb 9-1: USB disconnect, device number 14
[ 3234.870278][   T30] audit: type=1400 audit(1765792034.587:2643): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=16919 comm="syz.8.12195"
[ 3234.900768][T17635] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[ 3235.062489][T17635] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 3235.070928][T17635] usb 2-1: not running at top speed; connect to a high speed hub
[ 3235.079979][T17635] usb 2-1: config 4 has an invalid interface number: 147 but max is 0
[ 3235.091196][T17635] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[ 3235.113747][T17635] usb 2-1: config 4 has no interface number 0
[ 3235.135145][T17635] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[ 3235.146637][T17635] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3235.163578][T17635] usb 2-1: Product: syz
[ 3235.174176][T17635] usb 2-1: Manufacturer: syz
[ 3235.184312][T17635] usb 2-1: SerialNumber: syz
[ 3235.495606][T16926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3235.536528][T16926] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3236.281611][T16936] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12197'.
[ 3236.331386][T16936] 8021q: adding VLAN 0 to HW filter on device bond1
[ 3236.818117][T16949] mac80211_hwsim hwsim60 syzkaller0: left promiscuous mode
[ 3236.829957][T16949] mac80211_hwsim hwsim60 syzkaller0: left allmulticast mode
[ 3237.084851][T27739] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[ 3237.240198][T27739] usb 3-1: Using ep0 maxpacket: 32
[ 3237.288197][T27739] usb 3-1: config 0 has an invalid descriptor of length 108, skipping remainder of the config
[ 3237.388561][T27739] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[ 3237.420626][T27739] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3237.455286][T27739] usb 3-1: Product: syz
[ 3237.463999][T27739] usb 3-1: Manufacturer: syz
[ 3237.468724][T27739] usb 3-1: SerialNumber: syz
[ 3237.495447][T27739] usb 3-1: config 0 descriptor??
[ 3237.572522][T27739] usb 3-1: bad CDC descriptors
[ 3237.594116][T27739] usb 3-1: unsupported MDLM descriptors
[ 3237.606288][T16964] netlink: 'syz.6.12205': attribute type 1 has an invalid length.
[ 3237.735750][T17635] uvcvideo 2-1:4.147: Found UVC 0.00 device syz (04f2:b746)
[ 3237.765177][T17635] uvcvideo 2-1:4.147: No valid video chain found.
[ 3237.809492][T17635] usb 2-1: USB disconnect, device number 15
[ 3238.455259][T17635] usb 3-1: USB disconnect, device number 71
[ 3238.850577][T16988] netlink: 'syz.6.12211': attribute type 3 has an invalid length.
[ 3238.860106][T16988] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12211'.
[ 3238.911926][T16988] openvswitch: netlink: IP tunnel dst address not specified
[ 3239.840774][T16992] trusted_key: encrypted_key: master key parameter '�Ypr���P��HU�wN��k�zFS��Df\o' is invalid
[ 3240.294423][T17000] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3241.470966][ T6038] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[ 3241.529308][T17033] tipc: Started in network mode
[ 3241.540184][T17033] tipc: Node identity 080211, cluster identity 4711
[ 3241.551325][T17033] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3241.577762][T17033] mac80211_hwsim hwsim69 wlan0: entered promiscuous mode
[ 3241.600143][T17033] mac80211_hwsim hwsim69 wlan0: entered allmulticast mode
[ 3241.651587][ T6038] usb 2-1: Using ep0 maxpacket: 16
[ 3241.679152][ T6038] usb 2-1: config 0 has no interfaces?
[ 3241.689700][T17038] syzkaller1: entered promiscuous mode
[ 3241.698945][ T6038] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 3241.714184][T17038] syzkaller1: entered allmulticast mode
[ 3241.744125][ T6038] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 3241.754662][ T6038] usb 2-1: Manufacturer: syz
[ 3241.762697][ T6038] usb 2-1: config 0 descriptor??
[ 3241.807610][   T30] audit: type=1400 audit(1765792041.527:2644): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=17039 comm="syz.7.12228"
[ 3241.837337][T17045] FAULT_INJECTION: forcing a failure.
[ 3241.837337][T17045] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3241.851148][T17045] CPU: 1 UID: 0 PID: 17045 Comm: syz.6.12229 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3241.851174][T17045] Tainted: [L]=SOFTLOCKUP
[ 3241.851180][T17045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3241.851191][T17045] Call Trace:
[ 3241.851198][T17045]  <TASK>
[ 3241.851206][T17045]  dump_stack_lvl+0x189/0x250
[ 3241.851241][T17045]  ? __pfx____ratelimit+0x10/0x10
[ 3241.851268][T17045]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 3241.851287][T17045]  ? __pfx__printk+0x10/0x10
[ 3241.851311][T17045]  ? __might_fault+0xb0/0x130
[ 3241.851343][T17045]  should_fail_ex+0x414/0x560
[ 3241.851371][T17045]  _copy_from_user+0x2d/0xb0
[ 3241.851391][T17045]  rfkill_fop_write+0x136/0x570
[ 3241.851410][T17045]  ? __pfx_rfkill_fop_write+0x10/0x10
[ 3241.851426][T17045]  ? security_kernfs_init_security+0x240/0x290
[ 3241.851444][T17045]  ? rw_verify_area+0x255/0x4d0
[ 3241.851469][T17045]  ? __pfx_rfkill_fop_write+0x10/0x10
[ 3241.851486][T17045]  vfs_write+0x27e/0xb30
[ 3241.851507][T17045]  ? __pfx_vfs_write+0x10/0x10
[ 3241.851524][T17045]  ? __fget_files+0x2a/0x420
[ 3241.851545][T17045]  ? __fget_files+0x2a/0x420
[ 3241.851564][T17045]  ? __fget_files+0x3a0/0x420
[ 3241.851583][T17045]  ? __fget_files+0x2a/0x420
[ 3241.851609][T17045]  ksys_write+0x145/0x250
[ 3241.851626][T17045]  ? __pfx_ksys_write+0x10/0x10
[ 3241.851644][T17045]  ? __do_fast_syscall_32+0xbe/0x590
[ 3241.851665][T17045]  __do_fast_syscall_32+0x1f7/0x590
[ 3241.851683][T17045]  ? rcu_is_watching+0x15/0xb0
[ 3241.851702][T17045]  ? do_fast_syscall_32+0x34/0x80
[ 3241.851723][T17045]  do_fast_syscall_32+0x34/0x80
[ 3241.851741][T17045]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 3241.851761][T17045] RIP: 0023:0xf7ff6539
[ 3241.851778][T17045] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 3241.851793][T17045] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[ 3241.851813][T17045] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000080
[ 3241.851824][T17045] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000
[ 3241.851834][T17045] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 3241.851843][T17045] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 3241.851852][T17045] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 3241.851875][T17045]  </TASK>
[ 3241.989528][ T6038] usb 2-1: USB disconnect, device number 16
[ 3242.201553][T17050] netlink: 'syz.8.12231': attribute type 4 has an invalid length.
[ 3242.311158][   T30] audit: type=1326 audit(1765792042.037:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17055 comm="syz.8.12233" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70cd539 code=0x0
[ 3242.451566][T17058] loop5: detected capacity change from 0 to 3839
[ 3242.480247][ T6038] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[ 3242.495776][T16013] buffer_io_error: 3486 callbacks suppressed
[ 3242.495793][T16013] Buffer I/O error on dev loop5, logical block 479, async page read
[ 3242.660241][ T6038] usb 3-1: Using ep0 maxpacket: 32
[ 3242.678037][ T6038] usb 3-1: config 0 has an invalid interface number: 188 but max is 0
[ 3242.693158][ T6038] usb 3-1: config 0 has no interface number 0
[ 3242.709815][ T6038] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 3242.730229][T16402] tipc: Node number set to 134353152
[ 3242.965357][ T6038] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[ 3242.988636][ T6038] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3242.997449][ T6038] usb 3-1: Product: syz
[ 3243.003932][ T6038] usb 3-1: Manufacturer: syz
[ 3243.009646][ T6038] usb 3-1: SerialNumber: syz
[ 3243.023616][ T6038] usb 3-1: config 0 descriptor??
[ 3243.030516][T17054] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 3243.248370][T17054] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 3243.330982][T27739] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[ 3243.490366][T27739] usb 2-1: Using ep0 maxpacket: 32
[ 3243.499017][T27739] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 3243.508358][T27739] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8
[ 3243.518343][T27739] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[ 3243.532429][T27739] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 3243.541801][T27739] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3243.550566][T27739] usb 2-1: Product: Ⲽ붼部最⺐샮盔餡墳だ㸔ꉔቩ꼎⸙䁢㝭狝쓝ᯰ뇓휾鎨቟뉚닁Ṏ桠汵諂綱ᢴ魾ꧮ웥ゾ㴘쨇긯ﬤᐾ증兕멢멫䐌잆複㵡叡ꊚ畮ȩ듯늼珻ꈳ䢿䚢텧髊ﭓ痁
[ 3243.573024][T27739] usb 2-1: Manufacturer: э
[ 3243.577589][T27739] usb 2-1: SerialNumber: syz
[ 3245.553184][ T6038] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[ 3245.568565][ T6038] asix 3-1:0.188: probe with driver asix failed with error -71
[ 3245.593973][ T6038] usb 3-1: USB disconnect, device number 72
[ 3245.668816][T17091] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12243'.
[ 3246.173977][T27739] cdc_ncm 2-1:1.0: bind() failure
[ 3246.208404][T27739] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[ 3246.241565][T27739] cdc_ncm 2-1:1.1: bind() failure
[ 3246.281311][T27739] usb 2-1: USB disconnect, device number 17
[ 3246.766094][T27739] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[ 3246.940207][T27739] usb 2-1: Using ep0 maxpacket: 16
[ 3246.967736][T27739] usb 2-1: config 0 has no interfaces?
[ 3246.996714][T27739] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 3247.024731][T27739] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 3247.045864][T27739] usb 2-1: Manufacturer: syz
[ 3247.081354][T27739] usb 2-1: config 0 descriptor??
[ 3247.241595][T17115] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3247.249776][T17115] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3247.432871][T27739] usb 2-1: USB disconnect, device number 18
[ 3247.579882][T17123] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12251'.
[ 3247.614697][T17130] usb usb5: usbfs: process 17130 (syz.8.12252) did not claim interface 0 before use
[ 3247.799843][T17115] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3247.832234][T17115] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3247.963168][  T751] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 3248.006844][  T751] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 3248.026234][  T751] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 3248.044420][T13542] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 3248.161700][T17135] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12254'.
[ 3248.173425][T17135] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12254'.
[ 3248.870543][T16402] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[ 3249.323755][T17165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3249.346200][T17165] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3249.580202][T16402] usb 2-1: device descriptor read/64, error -71
[ 3249.841644][T16402] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[ 3250.010309][T16402] usb 2-1: Using ep0 maxpacket: 8
[ 3250.022376][T16402] usb 2-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 16
[ 3250.037489][T16402] usb 2-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 3250.067737][T16402] usb 2-1: config 1 interface 0 has no altsetting 0
[ 3250.087872][T16402] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[ 3250.103674][T16402] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3250.120574][T16402] usb 2-1: Product: 넆ࢸ䙨졨墨䍓ތ㝬敇孏﹬ꤔ晬㢍쟀ꖠ庹༯ᣣꜣ銐揉ǝ귮ﻂ럕圝獧邪〖Ზ㧂뵢竇焩꼏恹懲帨ൕ尠츫䦞웹爯䤾㬁慴銱왽㌯뫄芉彈Ꭵ著䳆手봡㇎٩衘♰혔⒱窇봸舭弽跙褐漚듉š髢攌⬙
[ 3250.178445][T16402] usb 2-1: Manufacturer: 䎩ᳬ憔랲꞉운㈜ⷑ㠎ユᦜ䖮䳶ᡍᮋ௩䊛㬽틿ᡖ牢遞鋙毄謜泛岖谰≃曎햶쌁駜䅴䊄헩ᄱ੼䰝겦촆넾隗쒺㫀š跟᷎ꈁᩔᰉ쮵ꋔႳ췣콪軕Ӷ儗ࠔ欞鬜鑜֡秉墶焴ⲁ磵恲唰腛ἔ㫵䖗謏惮䥚᝷芋瑠䳨ɋ㊷绺⵿ጫ윦푸ङ筱虅酻뺭撞
[ 3250.249094][T16402] usb 2-1: SerialNumber: 뾝䐿킊☐炶埣㽕㮀ⓑ⏀Ɫ얎萹㡖☍硍ꟽ饑解蹹狁钤蔿牳폸౮⿬访鲉皺쒡➉巌Ⱎ諭᰸閽꣺탟≢贚庻㷺榚垛窮캸喛⛢轉苿⿥ᴬӗ⃁ŏ⾓゛䁗ᇚ⒃縪헏凎躨熔嬔蔜쐓ሯ㊢弟๬鹼ᰦ笅흊䆝┗贆蜐⸟
[ 3250.325721][T17164] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 3250.337454][T17164] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 3250.633140][T16402] usb 2-1: USB disconnect, device number 20
[ 3250.804566][   T30] audit: type=1326 audit(1765792050.527:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17191 comm="syz.8.12268" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70cd539 code=0x0
[ 3251.090602][T17635] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[ 3251.250410][T17635] usb 9-1: Using ep0 maxpacket: 8
[ 3251.259823][T17635] usb 9-1: config 0 has an invalid interface number: 216 but max is 0
[ 3251.277640][T17635] usb 9-1: config 0 has no interface number 0
[ 3251.295209][T17635] usb 9-1: config 0 interface 216 altsetting 3 endpoint 0xD has invalid maxpacket 1023, setting to 64
[ 3251.310646][T17635] usb 9-1: config 0 interface 216 has no altsetting 0
[ 3251.329281][T17635] usb 9-1: New USB device found, idVendor=2001, idProduct=b301, bcdDevice=bf.a6
[ 3251.345755][T17635] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3251.369045][T17635] usb 9-1: Product: syz
[ 3251.379492][T17635] usb 9-1: Manufacturer: syz
[ 3251.392413][T17635] usb 9-1: SerialNumber: syz
[ 3251.419531][T17635] r8152-cfgselector 9-1: Unknown version 0x0000
[ 3251.438075][T17635] r8152-cfgselector 9-1: config 0 descriptor??
[ 3252.602689][T17213] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12274'.
[ 3253.095396][T17218] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12276'.
[ 3253.107390][T17218] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12276'.
[ 3253.124323][T17218] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12276'.
[ 3253.136553][T17218] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12276'.
[ 3253.154769][T17218] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12276'.
[ 3253.165790][T17218] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12276'.
[ 3253.185099][T17218] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12276'.
[ 3253.214890][T17218] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12276'.
[ 3253.244972][T17218] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12276'.
[ 3253.285325][T17218] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3253.312148][T17218] 8021q: adding VLAN 0 to HW filter on device team0
[ 3253.349348][T17218] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 3253.655262][T17229] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[ 3253.927223][T17635] r8152 9-1:0.216: Expected endpoints are not found
[ 3253.953684][T17635] r8152-cfgselector 9-1: USB disconnect, device number 15
[ 3254.446102][T17236] loop4: detected capacity change from 0 to 1
[ 3254.460677][T17236] Dev loop4: unable to read RDB block 1
[ 3254.466307][T17236]  loop4: unable to read partition table
[ 3254.472571][T17635] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[ 3254.482678][T17236] loop4: partition table beyond EOD, truncated
[ 3254.489352][T17236] loop_reread_partitions: partition scan of loop4 (�被x�^>��� ) failed (rc=-5)
[ 3254.645499][T17635] usb 9-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96
[ 3254.655241][T17635] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3254.667791][T17635] usb 9-1: Product: syz
[ 3254.674340][T17635] usb 9-1: Manufacturer: syz
[ 3254.679004][T17635] usb 9-1: SerialNumber: syz
[ 3254.693650][T17635] usb 9-1: config 0 descriptor??
[ 3255.136925][T17635] peak_usb 9-1:0.0 can0: unable to request usb[type=0 value=1] err=-71
[ 3255.150622][T17635] peak_usb 9-1:0.0: unable to read PCAN-USB FD firmware info (err -71)
[ 3255.271696][T17635] peak_usb 9-1:0.0: probe with driver peak_usb failed with error -71
[ 3255.285833][T17635] usb 9-1: USB disconnect, device number 16
[ 3255.992030][   T30] audit: type=1326 audit(1765792055.697:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17255 comm="syz.1.12289" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[ 3256.075707][   T30] audit: type=1326 audit(1765792055.697:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17255 comm="syz.1.12289" exe="/root/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf70bd539 code=0x7ffc0000
[ 3256.124338][   T30] audit: type=1326 audit(1765792055.697:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17255 comm="syz.1.12289" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[ 3256.174215][   T30] audit: type=1326 audit(1765792055.697:2650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17255 comm="syz.1.12289" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf70bd539 code=0x7ffc0000
[ 3256.228463][   T30] audit: type=1326 audit(1765792055.697:2651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17255 comm="syz.1.12289" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[ 3256.281837][   T30] audit: type=1326 audit(1765792055.697:2652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17255 comm="syz.1.12289" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70bd539 code=0x7ffc0000
[ 3256.290572][T17635] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[ 3256.361447][   T30] audit: type=1326 audit(1765792055.707:2653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17255 comm="syz.1.12289" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[ 3256.434960][   T30] audit: type=1326 audit(1765792055.707:2654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17255 comm="syz.1.12289" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70bd539 code=0x7ffc0000
[ 3256.471768][T17635] usb 9-1: Using ep0 maxpacket: 32
[ 3256.493401][T17635] usb 9-1: config 0 has an invalid descriptor of length 108, skipping remainder of the config
[ 3256.497813][   T30] audit: type=1326 audit(1765792055.707:2655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17255 comm="syz.1.12289" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[ 3256.579018][   T30] audit: type=1326 audit(1765792055.707:2656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17255 comm="syz.1.12289" exe="/root/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf70bd539 code=0x7ffc0000
[ 3256.582925][T17635] usb 9-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[ 3256.628526][T17635] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3256.636788][T17635] usb 9-1: Product: syz
[ 3256.641062][T17635] usb 9-1: Manufacturer: syz
[ 3256.645673][T17635] usb 9-1: SerialNumber: syz
[ 3256.659045][T17635] usb 9-1: config 0 descriptor??
[ 3256.714459][T17635] usb 9-1: bad CDC descriptors
[ 3256.733368][T17635] usb 9-1: unsupported MDLM descriptors
[ 3256.757337][T17273] tipc: Started in network mode
[ 3256.771646][T17273] tipc: Node identity 080211, cluster identity 4711
[ 3256.786943][T17273] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3256.798179][T17273] mac80211_hwsim hwsim76 syzkaller0: entered promiscuous mode
[ 3256.807547][T17273] mac80211_hwsim hwsim76 syzkaller0: entered allmulticast mode
[ 3256.843285][T17273] tipc: Resetting bearer <eth:syzkaller0>
[ 3256.910359][ T6038] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[ 3256.920313][    C0] raw-gadget.3 gadget.2: ignoring, device is not running
[ 3256.928225][T17635] usb 9-1: USB disconnect, device number 17
[ 3257.080213][ T6038] usb 3-1: device descriptor read/64, error -32
[ 3257.330860][ T6038] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[ 3257.612217][ T6038] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[ 3257.630355][ T6038] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3257.808784][ T6038] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 3257.845906][ T6038] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 3257.870258][T16307] tipc: Node number set to 134353152
[ 3257.887445][ T6038] usb 3-1: Manufacturer: syz
[ 3257.915463][T17275] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3257.924033][ T6038] usb 3-1: config 0 descriptor??
[ 3257.931928][T17275] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[ 3257.968833][T17275] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3257.990167][T17275] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[ 3258.120218][ T6038] rc_core: IR keymap rc-hauppauge not found
[ 3258.126604][ T6038] Registered IR keymap rc-empty
[ 3258.134909][ T6038] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[ 3258.152616][ T6038] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input204
[ 3258.372691][ T6038] usb 3-1: USB disconnect, device number 74
[ 3258.997354][T17297] @: renamed from syz_tun (while UP)
[ 3259.440133][T17635] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[ 3259.610375][T17635] usb 9-1: Using ep0 maxpacket: 32
[ 3259.622522][T17635] usb 9-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 3259.643484][T17635] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3259.671521][T17635] usb 9-1: Product: syz
[ 3259.687813][T17635] usb 9-1: Manufacturer: syz
[ 3259.701597][T17635] usb 9-1: SerialNumber: syz
[ 3259.742030][T17635] usb 9-1: config 0 descriptor??
[ 3259.769069][T17635] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 3259.785146][T17310] FAULT_INJECTION: forcing a failure.
[ 3259.785146][T17310] name failslab, interval 1, probability 0, space 0, times 0
[ 3259.798646][T17310] CPU: 0 UID: 0 PID: 17310 Comm: syz.7.12301 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3259.798682][T17310] Tainted: [L]=SOFTLOCKUP
[ 3259.798692][T17310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3259.798707][T17310] Call Trace:
[ 3259.798717][T17310]  <TASK>
[ 3259.798727][T17310]  dump_stack_lvl+0x189/0x250
[ 3259.798760][T17310]  ? __pfx____ratelimit+0x10/0x10
[ 3259.798797][T17310]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 3259.798826][T17310]  ? __pfx__printk+0x10/0x10
[ 3259.798866][T17310]  ? __pfx___might_resched+0x10/0x10
[ 3259.798898][T17310]  should_fail_ex+0x414/0x560
[ 3259.798937][T17310]  should_failslab+0xa8/0x100
[ 3259.798968][T17310]  __kmalloc_noprof+0xdf/0x800
[ 3259.798990][T17310]  ? kfree+0x4d/0x660
[ 3259.799019][T17310]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 3259.799057][T17310]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 3259.799090][T17310]  ? tomoyo_domain+0xd8/0x130
[ 3259.799128][T17310]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 3259.799153][T17310]  tomoyo_path_number_perm+0x1e8/0x5a0
[ 3259.799182][T17310]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 3259.799206][T17310]  ? __lock_acquire+0x6b6/0x2cf0
[ 3259.799279][T17310]  ? __fget_files+0x2a/0x420
[ 3259.799314][T17310]  ? __fget_files+0x3a0/0x420
[ 3259.799341][T17310]  ? __fget_files+0x2a/0x420
[ 3259.799374][T17310]  security_file_ioctl_compat+0xcb/0x2d0
[ 3259.799402][T17310]  __ia32_compat_sys_ioctl+0x128/0x840
[ 3259.799426][T17310]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 3259.799449][T17310]  ? __fget_files+0x3a0/0x420
[ 3259.799486][T17310]  ? fput+0xa0/0xd0
[ 3259.799516][T17310]  ? ksys_write+0x22a/0x250
[ 3259.799541][T17310]  ? exc_page_fault+0x82/0x100
[ 3259.799565][T17310]  ? __pfx_ksys_write+0x10/0x10
[ 3259.799591][T17310]  ? __do_fast_syscall_32+0xbe/0x590
[ 3259.799622][T17310]  __do_fast_syscall_32+0x1f7/0x590
[ 3259.799649][T17310]  ? rcu_is_watching+0x15/0xb0
[ 3259.799676][T17310]  ? do_fast_syscall_32+0x34/0x80
[ 3259.799708][T17310]  do_fast_syscall_32+0x34/0x80
[ 3259.799734][T17310]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 3259.799762][T17310] RIP: 0023:0xf703d539
[ 3259.799781][T17310] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 3259.799801][T17310] RSP: 002b:00000000f542d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 3259.799827][T17310] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000400454d1
[ 3259.799843][T17310] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000
[ 3259.799858][T17310] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 3259.799872][T17310] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 3259.799886][T17310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 3259.799920][T17310]  </TASK>
[ 3260.076427][T17310] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 3260.111636][T17296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3260.120953][T17296] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3260.300645][T17635] gspca_stk1135: reg_w 0x2 err -110
[ 3260.308734][T17635] gspca_stk1135: serial bus timeout: status=0x00
[ 3260.320139][T17635] gspca_stk1135: Sensor write failed
[ 3260.325597][T17635] gspca_stk1135: serial bus timeout: status=0x00
[ 3260.333466][T17635] gspca_stk1135: Sensor write failed
[ 3260.344846][T17635] gspca_stk1135: serial bus timeout: status=0x00
[ 3260.351349][T17635] gspca_stk1135: Sensor read failed
[ 3260.356738][T17635] gspca_stk1135: serial bus timeout: status=0x00
[ 3260.363482][T17635] gspca_stk1135: Sensor read failed
[ 3260.368859][T17635] gspca_stk1135: Detected sensor type unknown (0x0)
[ 3260.376519][T17635] gspca_stk1135: serial bus timeout: status=0x00
[ 3260.383276][T17635] gspca_stk1135: Sensor read failed
[ 3260.388605][T17635] gspca_stk1135: serial bus timeout: status=0x00
[ 3260.395146][T17635] gspca_stk1135: Sensor read failed
[ 3260.410149][T17635] gspca_stk1135: serial bus timeout: status=0x00
[ 3260.418209][T17635] gspca_stk1135: Sensor write failed
[ 3260.424400][T17635] gspca_stk1135: serial bus timeout: status=0x00
[ 3260.432497][T17635] gspca_stk1135: Sensor write failed
[ 3260.437906][T17635] stk1135 9-1:0.0: probe with driver stk1135 failed with error -110
[ 3260.452817][T17635] usb 9-1: USB disconnect, device number 18
[ 3260.730204][ T6038] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[ 3260.880310][ T6038] usb 3-1: Using ep0 maxpacket: 32
[ 3260.913504][ T6038] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[ 3260.925897][ T6038] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 3260.947671][T17320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3260.957114][ T6038] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[ 3260.969872][T17320] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3260.980239][ T6038] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[ 3260.993157][ T6038] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[ 3261.032095][T17322] __nla_validate_parse: 15 callbacks suppressed
[ 3261.032116][T17322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12305'.
[ 3261.062840][ T6038] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[ 3261.072393][ T6038] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3261.092425][ T6038] usb 3-1: Product: syz
[ 3261.116571][T17322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12305'.
[ 3261.133507][ T6038] usb 3-1: Manufacturer: syz
[ 3261.138316][ T6038] usb 3-1: SerialNumber: syz
[ 3261.150620][ T6038] usb 3-1: config 0 descriptor??
[ 3261.240175][T17635] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[ 3261.336700][T17322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12305'.
[ 3261.413987][T17635] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 3261.426092][T17635] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 3261.449266][T17635] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[ 3261.475544][T17635] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 3261.493628][T17635] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3261.514590][T17635] usb 9-1: Product: syz
[ 3261.525723][T17635] usb 9-1: Manufacturer: syz
[ 3261.537184][T17635] usb 9-1: SerialNumber: syz
[ 3261.562219][T17635] usb 9-1: config 0 descriptor??
[ 3261.584201][T17321] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 3261.604353][T17321] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 3261.624355][T17635] usb 9-1: ucan: probing device on interface #0
[ 3262.218846][ T6038] iforce 3-1:0.0: usb_submit_urb failed: -110
[ 3262.225822][ T6038] iforce 3-1:0.0: usb_submit_urb failed: -32
[ 3262.240550][ T6038] iforce 3-1:0.0: usb_submit_urb failed: -32
[ 3262.250573][ T6038] iforce 3-1:0.0: usb_submit_urb failed: -32
[ 3262.258568][ T6038] iforce 3-1:0.0: usb_submit_urb failed: -32
[ 3262.278619][ T6038] iforce 3-1:0.0: usb_submit_urb failed: -32
[ 3262.288761][ T6038] iforce 3-1:0.0: usb_submit_urb failed: -32
[ 3262.309580][ T6038] iforce 3-1:0.0: usb_submit_urb failed: -32
[ 3262.320362][ T6038] iforce 3-1:0.0: usb_submit_urb failed: -32
[ 3262.326811][ T6038] iforce 3-1:0.0: usb_submit_urb failed: -32
[ 3262.350732][ T6038] iforce 3-1:0.0: usb_submit_urb failed: -32
[ 3262.357374][ T6038] iforce 3-1:0.0: usb_submit_urb failed: -32
[ 3262.364046][ T6038] iforce 3-1:0.0: usb_submit_urb failed: -32
[ 3262.378768][ T6038] iforce 3-1:0.0: usb_submit_urb failed: -32
[ 3262.396820][ T6038] iforce 3-1:0.0: usb_submit_urb failed: -32
[ 3262.403671][ T6038] iforce 3-1:0.0: usb_submit_urb failed: -32
[ 3262.415944][ T6038] iforce 3-1:0.0: usb_submit_urb failed: -32
[ 3262.428852][ T6038] iforce 3-1:0.0: usb_submit_urb failed: -32
[ 3262.435858][ T6038] iforce 3-1:0.0: usb_submit_urb failed: -32
[ 3262.443903][ T6038] iforce 3-1:0.0: usb_submit_urb failed: -32
[ 3262.454228][ T6038] input input205: Timeout waiting for response from device.
[ 3262.691078][T17635] usb 9-1: ucan: could not read protocol version, ret=-110
[ 3262.708664][T17635] usb 9-1: ucan: probe failed; try to update the device firmware
[ 3262.740468][ T6038] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[ 3262.750993][T17635] usb 9-1: USB disconnect, device number 19
[ 3262.786623][T17336] netlink: 'syz.2.12303': attribute type 3 has an invalid length.
[ 3262.930268][ T6038] usb 2-1: Using ep0 maxpacket: 32
[ 3262.941621][ T6038] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3262.970118][ T6038] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3262.984729][ T6038] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00
[ 3262.996225][ T6038] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3263.012957][ T6038] usb 2-1: config 0 descriptor??
[ 3263.433027][ T6038] corsair 0003:1B1C:1B3E.00F7: unknown main item tag 0x5
[ 3263.442154][ T6038] corsair 0003:1B1C:1B3E.00F7: failed to start in urb: -90
[ 3263.453288][ T6038] corsair 0003:1B1C:1B3E.00F7: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.1-1/input0
[ 3263.521121][T16307] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[ 3263.633278][ T6038] usb 2-1: USB disconnect, device number 21
[ 3263.681583][T16307] usb 9-1: Using ep0 maxpacket: 16
[ 3263.689757][T16307] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 3263.702088][T16307] usb 9-1: config 13 has an invalid interface number: 50 but max is 0
[ 3263.710481][T16307] usb 9-1: config 13 has no interface number 0
[ 3263.716741][T16307] usb 9-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 3263.732225][T16307] usb 9-1: config 13 interface 50 has no altsetting 0
[ 3263.742633][T16307] usb 9-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[ 3263.752003][T16307] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3263.760772][T16307] usb 9-1: Product: syz
[ 3263.765505][T16307] usb 9-1: Manufacturer: syz
[ 3263.770673][T16307] usb 9-1: SerialNumber: syz
[ 3263.849583][T10802] usb 3-1: USB disconnect, device number 75
[ 3263.996081][T16307] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[ 3264.003351][T16307] usb 9-1: MIDIStreaming interface descriptor not found
[ 3264.033964][T16307] usb 9-1: USB disconnect, device number 20
[ 3264.084937][T16033] udevd[16033]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 3264.145748][   T30] kauditd_printk_skb: 8 callbacks suppressed
[ 3264.145768][   T30] audit: type=1400 audit(1765792063.867:2665): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=17350 comm="syz.2.12312"
[ 3264.375874][T17360] FAULT_INJECTION: forcing a failure.
[ 3264.375874][T17360] name failslab, interval 1, probability 0, space 0, times 0
[ 3264.389423][T17360] CPU: 0 UID: 0 PID: 17360 Comm: syz.7.12315 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3264.389457][T17360] Tainted: [L]=SOFTLOCKUP
[ 3264.389466][T17360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3264.389481][T17360] Call Trace:
[ 3264.389491][T17360]  <TASK>
[ 3264.389501][T17360]  dump_stack_lvl+0x189/0x250
[ 3264.389536][T17360]  ? __pfx____ratelimit+0x10/0x10
[ 3264.389573][T17360]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 3264.389600][T17360]  ? __pfx__printk+0x10/0x10
[ 3264.389639][T17360]  ? __pfx___might_resched+0x10/0x10
[ 3264.389662][T17360]  ? fs_reclaim_acquire+0x7d/0x100
[ 3264.389690][T17360]  should_fail_ex+0x414/0x560
[ 3264.389726][T17360]  should_failslab+0xa8/0x100
[ 3264.389755][T17360]  __kmalloc_noprof+0xdf/0x800
[ 3264.389785][T17360]  ? tomoyo_encode+0x28b/0x550
[ 3264.389819][T17360]  tomoyo_encode+0x28b/0x550
[ 3264.389853][T17360]  tomoyo_realpath_from_path+0x58d/0x5d0
[ 3264.389892][T17360]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 3264.389915][T17360]  tomoyo_path_number_perm+0x1e8/0x5a0
[ 3264.389943][T17360]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 3264.389967][T17360]  ? __lock_acquire+0x6b6/0x2cf0
[ 3264.390033][T17360]  ? __fget_files+0x2a/0x420
[ 3264.390065][T17360]  ? __fget_files+0x3a0/0x420
[ 3264.390091][T17360]  ? __fget_files+0x2a/0x420
[ 3264.390122][T17360]  security_file_ioctl_compat+0xcb/0x2d0
[ 3264.390148][T17360]  __ia32_compat_sys_ioctl+0x128/0x840
[ 3264.390173][T17360]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 3264.390195][T17360]  ? __fget_files+0x3a0/0x420
[ 3264.390228][T17360]  ? fput+0xa0/0xd0
[ 3264.390257][T17360]  ? ksys_write+0x22a/0x250
[ 3264.390277][T17360]  ? exc_page_fault+0x82/0x100
[ 3264.390317][T17360]  ? __pfx_ksys_write+0x10/0x10
[ 3264.390342][T17360]  ? __do_fast_syscall_32+0xbe/0x590
[ 3264.390370][T17360]  __do_fast_syscall_32+0x1f7/0x590
[ 3264.390396][T17360]  ? rcu_is_watching+0x15/0xb0
[ 3264.390422][T17360]  ? do_fast_syscall_32+0x34/0x80
[ 3264.390453][T17360]  do_fast_syscall_32+0x34/0x80
[ 3264.390478][T17360]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 3264.390506][T17360] RIP: 0023:0xf703d539
[ 3264.390526][T17360] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 3264.390552][T17360] RSP: 002b:00000000f542d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 3264.390576][T17360] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000400454d1
[ 3264.390592][T17360] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000
[ 3264.390606][T17360] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 3264.390620][T17360] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 3264.390634][T17360] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 3264.390666][T17360]  </TASK>
[ 3264.726638][T17360] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 3264.950218][T17635] usb 2-1: new full-speed USB device number 22 using dummy_hcd
[ 3265.253372][T17635] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[ 3265.282545][T17635] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[ 3265.305225][T17635] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 35185, setting to 64
[ 3265.334246][T17635] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 3265.354979][T17635] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3265.630563][T17361] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 3265.669527][T17361] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 3265.704226][T17635] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 3266.080268][ T6038] usb 3-1: new full-speed USB device number 76 using dummy_hcd
[ 3266.272637][ T6038] usb 3-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=b0.23
[ 3266.304421][ T6038] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3266.347824][ T6038] usb 3-1: config 0 descriptor??
[ 3266.597578][ T6038] usb 3-1: string descriptor 0 read error: -71
[ 3266.607586][ T6038] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input206
[ 3266.634705][ T5185] bcm5974 3-1:0.0: could not read from device
[ 3266.652149][ T5185] bcm5974 3-1:0.0: could not read from device
[ 3266.655245][ T6038] usb 3-1: USB disconnect, device number 76
[ 3266.667785][ T5185] bcm5974 3-1:0.0: could not read from device
[ 3267.420742][T17392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3267.432903][T17392] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3267.779478][T17635] usb 2-1: USB disconnect, device number 22
[ 3267.884634][T17402] FAULT_INJECTION: forcing a failure.
[ 3267.884634][T17402] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3267.898624][T17402] CPU: 1 UID: 0 PID: 17402 Comm: syz.1.12327 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3267.898658][T17402] Tainted: [L]=SOFTLOCKUP
[ 3267.898667][T17402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3267.898681][T17402] Call Trace:
[ 3267.898690][T17402]  <TASK>
[ 3267.898700][T17402]  dump_stack_lvl+0x189/0x250
[ 3267.898732][T17402]  ? __pfx____ratelimit+0x10/0x10
[ 3267.898769][T17402]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 3267.898797][T17402]  ? __pfx__printk+0x10/0x10
[ 3267.898831][T17402]  ? __might_fault+0xb0/0x130
[ 3267.898878][T17402]  should_fail_ex+0x414/0x560
[ 3267.898915][T17402]  _copy_from_user+0x2d/0xb0
[ 3267.898942][T17402]  update_filter+0x90/0x4f0
[ 3267.898969][T17402]  ? tun_get+0x1c/0x2f0
[ 3267.898998][T17402]  ? __pfx_update_filter+0x10/0x10
[ 3267.899026][T17402]  ? tun_get+0x1c/0x2f0
[ 3267.899057][T17402]  __tun_chr_ioctl+0x1343/0x1df0
[ 3267.899093][T17402]  ? __pfx___tun_chr_ioctl+0x10/0x10
[ 3267.899121][T17402]  ? __fget_files+0x2a/0x420
[ 3267.899164][T17402]  ? __fget_files+0x3a0/0x420
[ 3267.899198][T17402]  ? bpf_lsm_file_ioctl_compat+0x9/0x20
[ 3267.899227][T17402]  __ia32_compat_sys_ioctl+0x543/0x840
[ 3267.899253][T17402]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 3267.899275][T17402]  ? __fget_files+0x3a0/0x420
[ 3267.899309][T17402]  ? fput+0xa0/0xd0
[ 3267.899330][T17402]  ? ksys_write+0x22a/0x250
[ 3267.899344][T17402]  ? exc_page_fault+0x82/0x100
[ 3267.899360][T17402]  ? __pfx_ksys_write+0x10/0x10
[ 3267.899378][T17402]  ? __do_fast_syscall_32+0xbe/0x590
[ 3267.899402][T17402]  __do_fast_syscall_32+0x1f7/0x590
[ 3267.899421][T17402]  ? rcu_is_watching+0x15/0xb0
[ 3267.899440][T17402]  ? do_fast_syscall_32+0x34/0x80
[ 3267.899462][T17402]  do_fast_syscall_32+0x34/0x80
[ 3267.899480][T17402]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 3267.899499][T17402] RIP: 0023:0xf70bd539
[ 3267.899514][T17402] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 3267.899527][T17402] RSP: 002b:00000000f54ad55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 3267.899544][T17402] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000400454d1
[ 3267.899555][T17402] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000
[ 3267.899565][T17402] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 3267.899575][T17402] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 3267.899585][T17402] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 3267.899608][T17402]  </TASK>
[ 3268.150376][ T5786] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[ 3268.210357][ T6038] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[ 3268.310315][ T5786] usb 9-1: Using ep0 maxpacket: 8
[ 3268.319504][ T5786] usb 9-1: config 0 has an invalid interface number: 32 but max is 1
[ 3268.327992][ T5786] usb 9-1: config 0 has an invalid interface number: 41 but max is 1
[ 3268.336192][ T5786] usb 9-1: config 0 has no interface number 0
[ 3268.342548][ T5786] usb 9-1: config 0 has no interface number 1
[ 3268.349015][ T5786] usb 9-1: config 0 interface 41 altsetting 15 endpoint 0xB has invalid maxpacket 512, setting to 64
[ 3268.360568][ T5786] usb 9-1: config 0 interface 41 altsetting 15 has an invalid descriptor for endpoint zero, skipping
[ 3268.376514][ T5786] usb 9-1: config 0 interface 41 altsetting 15 endpoint 0x4 has invalid maxpacket 512, setting to 64
[ 3268.395655][ T5786] usb 9-1: config 0 interface 41 altsetting 15 has an endpoint descriptor with address 0x14, changing to 0x4
[ 3268.408040][ T5786] usb 9-1: config 0 interface 41 altsetting 15 has a duplicate endpoint with address 0x4, skipping
[ 3268.419487][ T5786] usb 9-1: config 0 interface 41 altsetting 15 has a duplicate endpoint with address 0xB, skipping
[ 3268.430463][ T6038] usb 3-1: config 0 has an invalid interface number: 83 but max is 0
[ 3268.439117][ T5786] usb 9-1: config 0 interface 41 altsetting 15 endpoint 0x9 has invalid maxpacket 512, setting to 64
[ 3268.453651][ T6038] usb 3-1: config 0 has no interface number 0
[ 3268.459811][ T6038] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61
[ 3268.468992][ T5786] usb 9-1: config 0 interface 41 altsetting 15 has 8 endpoint descriptors, different from the interface descriptor's value: 7
[ 3268.482795][ T6038] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3268.492048][ T5786] usb 9-1: config 0 interface 41 has no altsetting 0
[ 3268.511072][ T6038] usb 3-1: config 0 descriptor??
[ 3268.518949][ T5786] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea7a, bcdDevice=7b.91
[ 3268.531000][ T6038] ttusbir 3-1:0.83: cannot find expected altsetting
[ 3268.541340][ T5786] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3268.549576][ T5786] usb 9-1: Product: syz
[ 3268.553923][ T5786] usb 9-1: Manufacturer: ␊
[ 3268.558636][ T5786] usb 9-1: SerialNumber: syz
[ 3268.566032][ T5786] usb 9-1: config 0 descriptor??
[ 3268.576674][   T30] audit: type=1400 audit(1765792068.307:2666): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=17403 comm="syz.1.12328"
[ 3268.785040][T17398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3268.796644][T17398] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3268.817221][ T5786] cp210x 9-1:0.32: cp210x converter detected
[ 3268.826686][ T5786] cp210x 9-1:0.32: failed to get vendor val 0x370b size 1: -71
[ 3268.837782][ T5786] cp210x 9-1:0.32: querying part number failed
[ 3268.847913][ T5786] usb 9-1: cp210x converter now attached to ttyUSB0
[ 3268.862389][ T5786] cp210x 9-1:0.41: cp210x converter detected
[ 3268.869635][ T5786] cp210x 9-1:0.41: failed to get vendor val 0x370b size 1: -71
[ 3268.877732][ T5786] cp210x 9-1:0.41: querying part number failed
[ 3268.894829][ T5786] usb 9-1: cp210x converter now attached to ttyUSB1
[ 3268.926057][ T5786] usb 9-1: USB disconnect, device number 21
[ 3268.954561][ T5786] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 3268.978213][ T5786] cp210x 9-1:0.32: device disconnected
[ 3268.992069][ T5786] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1
[ 3269.000670][ T5786] cp210x 9-1:0.41: device disconnected
[ 3269.434401][T17420] netlink: 'syz.7.12332': attribute type 4 has an invalid length.
[ 3269.664934][T17428] netlink: 'syz.8.12334': attribute type 9 has an invalid length.
[ 3270.055763][T17428] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12334'.
[ 3270.065250][T17428] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12334'.
[ 3270.163791][T17428] vlan2: entered allmulticast mode
[ 3270.169312][T17428] veth0_to_bond: entered allmulticast mode
[ 3270.940339][T10802] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[ 3271.072630][T17635] usb 3-1: USB disconnect, device number 77
[ 3271.110262][T10802] usb 2-1: Using ep0 maxpacket: 16
[ 3271.117488][T10802] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 3271.135970][T10802] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 3271.146951][T10802] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3271.155368][T10802] usb 2-1: Product: syz
[ 3271.159676][T10802] usb 2-1: Manufacturer: syz
[ 3271.166430][T10802] usb 2-1: SerialNumber: syz
[ 3271.198763][T10802] usb 2-1: config 0 descriptor??
[ 3271.225415][T10802] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 3271.235644][T10802] em28xx 2-1:0.0: DVB interface 0 found: bulk
[ 3271.426208][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 3271.436273][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 3271.673471][T17448] @: renamed from syz_tun (while UP)
[ 3271.924744][T17451] bridge1: entered promiscuous mode
[ 3271.990608][T10802] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[ 3272.461974][T17452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3272.483947][T17452] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3272.543048][T10802] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 3272.552968][T10802] em28xx 2-1:0.0: board has no eeprom
[ 3272.741808][   T30] audit: type=1400 audit(1765792072.467:2667): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=17455 comm="syz.2.12342"
[ 3273.540233][T17635] usb 3-1: new full-speed USB device number 78 using dummy_hcd
[ 3273.712416][T17635] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 3273.723947][T10802] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 3273.732864][T17635] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3273.743603][T10802] em28xx 2-1:0.0: dvb set to bulk mode.
[ 3273.749356][T10799] em28xx 2-1:0.0: Binding DVB extension
[ 3273.773404][T17635] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[ 3273.793976][T17635] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 3273.811151][T17635] usb 3-1: Manufacturer: syz
[ 3273.829258][T17635] usb 3-1: config 0 descriptor??
[ 3273.883779][ T6038] usb 2-1: USB disconnect, device number 23
[ 3273.912918][ T6038] em28xx 2-1:0.0: Disconnecting em28xx
[ 3273.929288][T10799] em28xx 2-1:0.0: Registering input extension
[ 3273.955165][ T6038] em28xx 2-1:0.0: Closing input extension
[ 3273.987041][ T6038] em28xx 2-1:0.0: Freeing device
[ 3274.297547][T17635] cougar 0003:060B:700A.00F8: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[ 3274.986048][T10799] usb 3-1: USB disconnect, device number 78
[ 3275.000871][T17484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12348'.
[ 3275.021492][T17484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12348'.
[ 3275.064839][T17484] vlan2: entered allmulticast mode
[ 3275.070282][T17635] usb 9-1: new high-speed USB device number 22 using dummy_hcd
[ 3275.075014][T17484] veth0_to_bond: entered allmulticast mode
[ 3275.254181][T17635] usb 9-1: Using ep0 maxpacket: 16
[ 3275.285017][T17635] usb 9-1: config 0 has no interfaces?
[ 3275.308391][T17635] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 3275.338756][T17635] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 3275.374322][T17635] usb 9-1: Manufacturer: syz
[ 3275.413979][T17635] usb 9-1: config 0 descriptor??
[ 3275.684257][ T5786] usb 9-1: USB disconnect, device number 22
[ 3275.855416][   T30] audit: type=1400 audit(1765792075.577:2668): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=17498 comm="syz.6.12354"
[ 3276.070156][ T5786] usb 2-1: new full-speed USB device number 24 using dummy_hcd
[ 3276.283615][ T5786] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3276.283675][ T5786] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 3276.283725][ T5786] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00
[ 3276.283753][ T5786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3276.294795][ T5786] usb 2-1: config 0 descriptor??
[ 3276.315020][ T5786] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 3276.630151][ T5786] usb 9-1: new high-speed USB device number 23 using dummy_hcd
[ 3276.680202][ T6038] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[ 3276.799662][ T5786] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[ 3276.799699][ T5786] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3276.799720][ T5786] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3276.799738][ T5786] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[ 3276.799772][ T5786] usb 9-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[ 3276.799791][ T5786] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3276.808439][ T5786] usb 9-1: config 0 descriptor??
[ 3276.833166][ T6038] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3276.833196][ T6038] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3276.833226][ T6038] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[ 3276.833244][ T6038] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3276.836389][ T6038] usb 3-1: config 0 descriptor??
[ 3277.354180][T17511] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3277.354364][T17511] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3277.438727][ T5786] hid-picolcd 0003:04D8:C002.00F9: unknown main item tag 0x7
[ 3277.438758][ T5786] hid-picolcd 0003:04D8:C002.00F9: unknown main item tag 0x0
[ 3277.438779][ T5786] hid-picolcd 0003:04D8:C002.00F9: unknown main item tag 0x0
[ 3277.438799][ T5786] hid-picolcd 0003:04D8:C002.00F9: item fetching failed at offset 5/7
[ 3277.439444][ T5786] hid-picolcd 0003:04D8:C002.00F9: device report parse failed
[ 3277.439548][ T5786] hid-picolcd 0003:04D8:C002.00F9: probe with driver hid-picolcd failed with error -22
[ 3277.515563][ T6038] hid-thrustmaster 0003:044F:B65D.00FA: unknown main item tag 0x0
[ 3277.521928][ T6038] hid-thrustmaster 0003:044F:B65D.00FA: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0
[ 3277.522107][ T6038] hid-thrustmaster 0003:044F:B65D.00FA: Wrong number of endpoints?
[ 3277.739108][T17511] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 3277.829318][T17520] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 3278.430518][T17635] usb 9-1: USB disconnect, device number 23
[ 3278.589248][T10799] usb 2-1: USB disconnect, device number 24
[ 3278.691917][    C0] hid-thrustmaster 0003:044F:B65D.00FA: URB to get model id failed with error -71
[ 3278.692350][T17635] usb 3-1: USB disconnect, device number 79
[ 3278.821788][T17526] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[ 3278.824970][T17526] bond4 (unregistering): Released all slaves
[ 3278.899682][T17532] ip6gretap0: entered promiscuous mode
[ 3278.927743][T17532] ip6gretap0: left promiscuous mode
[ 3279.230584][   T30] audit: type=1326 audit(1765792078.947:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17542 comm="syz.8.12367" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x0
[ 3279.330226][T16307] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[ 3279.500243][T16307] usb 3-1: Using ep0 maxpacket: 32
[ 3279.542514][T16307] usb 3-1: config 0 has an invalid interface number: 188 but max is 0
[ 3279.552261][T16307] usb 3-1: config 0 has no interface number 0
[ 3279.558817][T16307] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 3279.659455][T16307] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[ 3279.669368][T16307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3279.677826][ T6038] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[ 3279.686982][T16307] usb 3-1: Product: syz
[ 3279.692334][T16307] usb 3-1: Manufacturer: syz
[ 3279.698082][T16307] usb 3-1: SerialNumber: syz
[ 3279.711070][T17564] fuse: Bad value for 'fd'
[ 3279.715794][T16307] usb 3-1: config 0 descriptor??
[ 3279.723776][T17539] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 3279.820368][ T6038] usb 2-1: device descriptor read/64, error -71
[ 3279.831254][T17567] 
[ 3279.833653][T17567] =====================================================
[ 3279.840627][T17567] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[ 3279.848121][T17567] syzkaller #0 Tainted: G             L     
[ 3279.854126][T17567] -----------------------------------------------------
[ 3279.861094][T17567] syz.7.12371/17567 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[ 3279.869463][T17567] ffff88801f2ab9f0 (&new->fa_lock){...-}-{3:3}, at: kill_fasync+0x199/0x4d0
[ 3279.878492][T17567] 
[ 3279.878492][T17567] and this task is already holding:
[ 3279.885885][T17567] ffff88809a395028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0
[ 3279.895779][T17567] which would create a new lock dependency:
[ 3279.901757][T17567]  (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){...-}-{3:3}
[ 3279.909893][T17567] 
[ 3279.909893][T17567] but this new dependency connects a SOFTIRQ-irq-safe lock:
[ 3279.919546][T17567]  (&client->buffer_lock){..-.}-{3:3}
[ 3279.919583][T17567] 
[ 3279.919583][T17567] ... which became SOFTIRQ-irq-safe at:
[ 3279.932730][T17567]   lock_acquire+0x117/0x340
[ 3279.937340][T17567]   _raw_spin_lock+0x2e/0x40
[ 3279.941948][T17567]   evdev_pass_values+0xb9/0xbd0
[ 3279.946896][T17567]   evdev_events+0x1e6/0x340
[ 3279.951497][T17567]   input_pass_values+0x288/0x890
[ 3279.956542][T17567]   input_event_dispose+0x3e5/0x6b0
[ 3279.961787][T17567]   input_event+0x89/0xe0
[ 3279.966226][T17567]   hidinput_hid_event+0x145e/0x1e50
[ 3279.971532][T17567]   hid_process_event+0x4be/0x620
[ 3279.976576][T17567]   hid_input_array_field+0x41c/0x5f0
[ 3279.981966][T17567]   hid_report_raw_event+0xdd9/0x1720
[ 3279.987373][T17567]   hid_input_report+0x44b/0x580
[ 3279.992338][T17567]   hid_irq_in+0x47e/0x6d0
[ 3279.996979][T17567]   __usb_hcd_giveback_urb+0x376/0x540
[ 3280.002485][T17567]   dummy_timer+0x85f/0x45b0
[ 3280.007189][T17567]   __hrtimer_run_queues+0x51c/0xc30
[ 3280.012510][T17567]   hrtimer_run_softirq+0x187/0x2b0
[ 3280.017742][T17567]   handle_softirqs+0x27d/0x850
[ 3280.022605][T17567]   __irq_exit_rcu+0xca/0x1f0
[ 3280.027293][T17567]   irq_exit_rcu+0x9/0x30
[ 3280.031637][T17567]   sysvec_apic_timer_interrupt+0xa6/0xc0
[ 3280.037403][T17567]   asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 3280.043655][T17567]   finish_task_switch+0x242/0x940
[ 3280.048788][T17567]   __schedule+0x14c4/0x5000
[ 3280.053399][T17567]   schedule+0x165/0x360
[ 3280.057666][T17567]   do_nanosleep+0x1c5/0x610
[ 3280.062377][T17567]   hrtimer_nanosleep+0x169/0x360
[ 3280.067420][T17567]   __se_sys_clock_nanosleep_time32+0x33b/0x390
[ 3280.073677][T17567]   __do_fast_syscall_32+0x1f7/0x590
[ 3280.078977][T17567]   do_fast_syscall_32+0x34/0x80
[ 3280.083927][T17567]   entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 3280.090357][T17567] 
[ 3280.090357][T17567] to a SOFTIRQ-irq-unsafe lock:
[ 3280.097386][T17567]  (tasklist_lock){.+.+}-{3:3}
[ 3280.097419][T17567] 
[ 3280.097419][T17567] ... which became SOFTIRQ-irq-unsafe at:
[ 3280.110231][T17567] ...
[ 3280.110239][T17567]   lock_acquire+0x117/0x340
[ 3280.117420][T17567]   _raw_read_lock+0x36/0x50
[ 3280.122026][T17567]   __do_wait+0xde/0x740
[ 3280.126302][T17567]   do_wait+0x1e8/0x4f0
[ 3280.130558][T17567]   kernel_wait+0xab/0x170
[ 3280.135037][T17567]   call_usermodehelper_exec_work+0xbe/0x230
[ 3280.141053][T17567]   process_scheduled_works+0xad1/0x1770
[ 3280.146798][T17567]   worker_thread+0x8a0/0xda0
[ 3280.151493][T17567]   kthread+0x711/0x8a0
[ 3280.155763][T17567]   ret_from_fork+0x599/0xb30
[ 3280.160452][T17567]   ret_from_fork_asm+0x1a/0x30
[ 3280.165324][T17567] 
[ 3280.165324][T17567] other info that might help us debug this:
[ 3280.165324][T17567] 
[ 3280.175593][T17567] Chain exists of:
[ 3280.175593][T17567]   &client->buffer_lock --> &new->fa_lock --> tasklist_lock
[ 3280.175593][T17567] 
[ 3280.188829][T17567]  Possible interrupt unsafe locking scenario:
[ 3280.188829][T17567] 
[ 3280.197264][T17567]        CPU0                    CPU1
[ 3280.202646][T17567]        ----                    ----
[ 3280.208116][T17567]   lock(tasklist_lock);
[ 3280.212470][T17567]                                local_irq_disable();
[ 3280.219250][T17567]                                lock(&client->buffer_lock);
[ 3280.226648][T17567]                                lock(&new->fa_lock);
[ 3280.233520][T17567]   <Interrupt>
[ 3280.236981][T17567]     lock(&client->buffer_lock);
[ 3280.242019][T17567] 
[ 3280.242019][T17567]  *** DEADLOCK ***
[ 3280.242019][T17567] 
[ 3280.250172][T17567] 7 locks held by syz.7.12371/17567:
[ 3280.255470][T17567]  #0: ffff888146beb118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480
[ 3280.264739][T17567]  #1: ffff8881446de230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340
[ 3280.274871][T17567]  #2: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340
[ 3280.284561][T17567]  #3: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890
[ 3280.294241][T17567]  #4: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340
[ 3280.303411][T17567]  #5: ffff88809a395028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0
[ 3280.313660][T17567]  #6: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0
[ 3280.322774][T17567] 
[ 3280.322774][T17567] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[ 3280.333193][T17567] -> (&client->buffer_lock){..-.}-{3:3} {
[ 3280.338957][T17567]    IN-SOFTIRQ-W at:
[ 3280.342960][T17567]                     lock_acquire+0x117/0x340
[ 3280.349262][T17567]                     _raw_spin_lock+0x2e/0x40
[ 3280.355524][T17567]                     evdev_pass_values+0xb9/0xbd0
[ 3280.362047][T17567]                     evdev_events+0x1e6/0x340
[ 3280.368209][T17567]                     input_pass_values+0x288/0x890
[ 3280.374897][T17567]                     input_event_dispose+0x3e5/0x6b0
[ 3280.381769][T17567]                     input_event+0x89/0xe0
[ 3280.387678][T17567]                     hidinput_hid_event+0x145e/0x1e50
[ 3280.394553][T17567]                     hid_process_event+0x4be/0x620
[ 3280.401171][T17567]                     hid_input_array_field+0x41c/0x5f0
[ 3280.408127][T17567]                     hid_report_raw_event+0xdd9/0x1720
[ 3280.415071][T17567]                     hid_input_report+0x44b/0x580
[ 3280.421594][T17567]                     hid_irq_in+0x47e/0x6d0
[ 3280.427624][T17567]                     __usb_hcd_giveback_urb+0x376/0x540
[ 3280.434759][T17567]                     dummy_timer+0x85f/0x45b0
[ 3280.441048][T17567]                     __hrtimer_run_queues+0x51c/0xc30
[ 3280.448038][T17567]                     hrtimer_run_softirq+0x187/0x2b0
[ 3280.454841][T17567]                     handle_softirqs+0x27d/0x850
[ 3280.461311][T17567]                     __irq_exit_rcu+0xca/0x1f0
[ 3280.467564][T17567]                     irq_exit_rcu+0x9/0x30
[ 3280.473495][T17567]                     sysvec_apic_timer_interrupt+0xa6/0xc0
[ 3280.480802][T17567]                     asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 3280.488535][T17567]                     finish_task_switch+0x242/0x940
[ 3280.495258][T17567]                     __schedule+0x14c4/0x5000
[ 3280.501481][T17567]                     schedule+0x165/0x360
[ 3280.507324][T17567]                     do_nanosleep+0x1c5/0x610
[ 3280.513505][T17567]                     hrtimer_nanosleep+0x169/0x360
[ 3280.520334][T17567]                     __se_sys_clock_nanosleep_time32+0x33b/0x390
[ 3280.528313][T17567]                     __do_fast_syscall_32+0x1f7/0x590
[ 3280.535201][T17567]                     do_fast_syscall_32+0x34/0x80
[ 3280.541780][T17567]                     entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 3280.549795][T17567]    INITIAL USE at:
[ 3280.553723][T17567]                    lock_acquire+0x117/0x340
[ 3280.559824][T17567]                    _raw_spin_lock+0x2e/0x40
[ 3280.565919][T17567]                    evdev_pass_values+0xb9/0xbd0
[ 3280.572348][T17567]                    evdev_events+0x1e6/0x340
[ 3280.578423][T17567]                    input_pass_values+0x288/0x890
[ 3280.584933][T17567]                    input_event_dispose+0x330/0x6b0
[ 3280.591655][T17567]                    input_inject_event+0x1dd/0x340
[ 3280.598260][T17567]                    evdev_write+0x2fc/0x480
[ 3280.604256][T17567]                    vfs_write+0x27e/0xb30
[ 3280.610082][T17567]                    ksys_write+0x145/0x250
[ 3280.615989][T17567]                    __do_fast_syscall_32+0x1f7/0x590
[ 3280.622779][T17567]                    do_fast_syscall_32+0x34/0x80
[ 3280.629219][T17567]                    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 3280.637140][T17567]  }
[ 3280.639652][T17567]  ... key      at: [<ffffffff99c30820>] evdev_open.__key.26+0x0/0x20
[ 3280.647823][T17567] 
[ 3280.647823][T17567] the dependencies between the lock to be acquired
[ 3280.647836][T17567]  and SOFTIRQ-irq-unsafe lock:
[ 3280.661372][T17567]   -> (tasklist_lock){.+.+}-{3:3} {
[ 3280.666692][T17567]      HARDIRQ-ON-R at:
[ 3280.670956][T17567]                         lock_acquire+0x117/0x340
[ 3280.677582][T17567]                         _raw_read_lock+0x36/0x50
[ 3280.684207][T17567]                         __do_wait+0xde/0x740
[ 3280.690470][T17567]                         do_wait+0x1e8/0x4f0
[ 3280.696663][T17567]                         kernel_wait+0xab/0x170
[ 3280.703242][T17567]                         call_usermodehelper_exec_work+0xbe/0x230
[ 3280.711148][T17567]                         process_scheduled_works+0xad1/0x1770
[ 3280.718705][T17567]                         worker_thread+0x8a0/0xda0
[ 3280.725306][T17567]                         kthread+0x711/0x8a0
[ 3280.731391][T17567]                         ret_from_fork+0x599/0xb30
[ 3280.737996][T17567]                         ret_from_fork_asm+0x1a/0x30
[ 3280.745045][T17567]      SOFTIRQ-ON-R at:
[ 3280.749278][T17567]                         lock_acquire+0x117/0x340
[ 3280.755789][T17567]                         _raw_read_lock+0x36/0x50
[ 3280.762317][T17567]                         __do_wait+0xde/0x740
[ 3280.768489][T17567]                         do_wait+0x1e8/0x4f0
[ 3280.774589][T17567]                         kernel_wait+0xab/0x170
[ 3280.780937][T17567]                         call_usermodehelper_exec_work+0xbe/0x230
[ 3280.788845][T17567]                         process_scheduled_works+0xad1/0x1770
[ 3280.796404][T17567]                         worker_thread+0x8a0/0xda0
[ 3280.803011][T17567]                         kthread+0x711/0x8a0
[ 3280.809192][T17567]                         ret_from_fork+0x599/0xb30
[ 3280.815793][T17567]                         ret_from_fork_asm+0x1a/0x30
[ 3280.822570][T17567]      INITIAL USE at:
[ 3280.826678][T17567]                        lock_acquire+0x117/0x340
[ 3280.833144][T17567]                        _raw_write_lock_irq+0xa2/0xf0
[ 3280.840017][T17567]                        copy_process+0x2185/0x3950
[ 3280.846630][T17567]                        kernel_clone+0x21e/0x820
[ 3280.853064][T17567]                        user_mode_thread+0xdd/0x140
[ 3280.859790][T17567]                        rest_init+0x23/0x300
[ 3280.865874][T17567]                        start_kernel+0x3a7/0x400
[ 3280.872345][T17567]                        x86_64_start_reservations+0x24/0x30
[ 3280.879746][T17567]                        x86_64_start_kernel+0x143/0x1c0
[ 3280.886792][T17567]                        common_startup_64+0x13e/0x147
[ 3280.893746][T17567]      INITIAL READ USE at:
[ 3280.898269][T17567]                             lock_acquire+0x117/0x340
[ 3280.905145][T17567]                             _raw_read_lock+0x36/0x50
[ 3280.912025][T17567]                             __do_wait+0xde/0x740
[ 3280.918569][T17567]                             do_wait+0x1e8/0x4f0
[ 3280.925008][T17567]                             kernel_wait+0xab/0x170
[ 3280.931704][T17567]                             call_usermodehelper_exec_work+0xbe/0x230
[ 3280.940347][T17567]                             process_scheduled_works+0xad1/0x1770
[ 3280.949602][T17567]                             worker_thread+0x8a0/0xda0
[ 3280.957453][T17567]                             kthread+0x711/0x8a0
[ 3280.964023][T17567]                             ret_from_fork+0x599/0xb30
[ 3280.971101][T17567]                             ret_from_fork_asm+0x1a/0x30
[ 3280.978242][T17567]    }
[ 3280.980929][T17567]    ... key      at: [<ffffffff8dc0c058>] tasklist_lock+0x18/0x40
[ 3280.988860][T17567]    ... acquired at:
[ 3280.992845][T17567]    _raw_read_lock+0x36/0x50
[ 3280.997546][T17567]    send_sigio+0x101/0x370
[ 3281.002091][T17567]    kill_fasync+0x24d/0x4d0
[ 3281.006713][T17567]    lease_break_callback+0x26/0x30
[ 3281.011930][T17567]    __break_lease+0x730/0x1620
[ 3281.016804][T17567]    vfs_truncate+0x428/0x520
[ 3281.021507][T17567]    do_sys_truncate+0xdb/0x190
[ 3281.026386][T17567]    __ia32_compat_sys_truncate+0x5b/0x70
[ 3281.032190][T17567]    __do_fast_syscall_32+0x1f7/0x590
[ 3281.037589][T17567]    do_fast_syscall_32+0x34/0x80
[ 3281.042658][T17567]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 3281.049181][T17567] 
[ 3281.051509][T17567]  -> (&f_owner->lock){....}-{3:3} {
[ 3281.056825][T17567]     INITIAL USE at:
[ 3281.060822][T17567]                      lock_acquire+0x117/0x340
[ 3281.067167][T17567]                      _raw_write_lock_irq+0xa2/0xf0
[ 3281.073855][T17567]                      __f_setown+0x67/0x370
[ 3281.079857][T17567]                      tty_fasync+0x2dc/0x350
[ 3281.085944][T17567]                      do_fcntl+0x11d2/0x1a50
[ 3281.092028][T17567]                      do_compat_fcntl64+0x477/0x720
[ 3281.098725][T17567]                      __do_fast_syscall_32+0x1f7/0x590
[ 3281.105674][T17567]                      do_fast_syscall_32+0x34/0x80
[ 3281.112362][T17567]                      entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 3281.120450][T17567]     INITIAL READ USE at:
[ 3281.125013][T17567]                           lock_acquire+0x117/0x340
[ 3281.131717][T17567]                           _raw_read_lock_irqsave+0xaf/0x100
[ 3281.139309][T17567]                           send_sigio+0x38/0x370
[ 3281.145756][T17567]                           kill_fasync+0x24d/0x4d0
[ 3281.152373][T17567]                           sock_wake_async+0x137/0x160
[ 3281.159327][T17567]                           sk_wake_async+0x184/0x280
[ 3281.166143][T17567]                           unix_release_sock+0x747/0xc70
[ 3281.173306][T17567]                           unix_release+0x92/0xd0
[ 3281.179854][T17567]                           sock_close+0xc3/0x240
[ 3281.186321][T17567]                           __fput+0x44c/0xa70
[ 3281.192497][T17567]                           task_work_run+0x1d4/0x260
[ 3281.199543][T17567]                           do_exit+0x6c5/0x2310
[ 3281.205896][T17567]                           do_group_exit+0x21c/0x2d0
[ 3281.212853][T17567]                           get_signal+0x1285/0x1340
[ 3281.219560][T17567]                           arch_do_signal_or_restart+0x9a/0x7a0
[ 3281.227306][T17567]                           exit_to_user_mode_loop+0x87/0x4f0
[ 3281.234775][T17567]                           __do_fast_syscall_32+0x3b4/0x590
[ 3281.242158][T17567]                           do_fast_syscall_32+0x34/0x80
[ 3281.249191][T17567]                           entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 3281.257722][T17567]   }
[ 3281.260318][T17567]   ... key      at: [<ffffffff99912c60>] file_f_owner_allocate.__key+0x0/0x20
[ 3281.269384][T17567]   ... acquired at:
[ 3281.273293][T17567]    _raw_read_lock_irqsave+0xaf/0x100
[ 3281.278781][T17567]    send_sigio+0x38/0x370
[ 3281.283228][T17567]    kill_fasync+0x24d/0x4d0
[ 3281.287843][T17567]    sock_wake_async+0x137/0x160
[ 3281.292800][T17567]    sk_wake_async+0x184/0x280
[ 3281.297589][T17567]    unix_release_sock+0x747/0xc70
[ 3281.302710][T17567]    unix_release+0x92/0xd0
[ 3281.307327][T17567]    sock_close+0xc3/0x240
[ 3281.311849][T17567]    __fput+0x44c/0xa70
[ 3281.316061][T17567]    task_work_run+0x1d4/0x260
[ 3281.321015][T17567]    do_exit+0x6c5/0x2310
[ 3281.325366][T17567]    do_group_exit+0x21c/0x2d0
[ 3281.330146][T17567]    get_signal+0x1285/0x1340
[ 3281.334844][T17567]    arch_do_signal_or_restart+0x9a/0x7a0
[ 3281.340676][T17567]    exit_to_user_mode_loop+0x87/0x4f0
[ 3281.346233][T17567]    __do_fast_syscall_32+0x3b4/0x590
[ 3281.351614][T17567]    do_fast_syscall_32+0x34/0x80
[ 3281.356662][T17567]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 3281.363179][T17567] 
[ 3281.365511][T17567] -> (&new->fa_lock){...-}-{3:3} {
[ 3281.370655][T17567]    IN-SOFTIRQ-R at:
[ 3281.374698][T17567]                     lock_acquire+0x117/0x340
[ 3281.380884][T17567]                     _raw_read_lock_irqsave+0xaf/0x100
[ 3281.387956][T17567]                     kill_fasync+0x199/0x4d0
[ 3281.394058][T17567]                     sock_wake_async+0x137/0x160
[ 3281.400543][T17567]                     sock_def_readable+0x3c1/0x530
[ 3281.407159][T17567]                     tcp_data_queue+0x1e14/0x5e30
[ 3281.413688][T17567]                     tcp_rcv_established+0xf57/0x2580
[ 3281.420591][T17567]                     tcp_v4_do_rcv+0xa90/0x1430
[ 3281.426975][T17567]                     tcp_v4_rcv+0x2675/0x2f20
[ 3281.433249][T17567]                     ip_protocol_deliver_rcu+0x221/0x440
[ 3281.440389][T17567]                     ip_local_deliver_finish+0x3bb/0x6f0
[ 3281.447521][T17567]                     NF_HOOK+0x30c/0x3a0
[ 3281.453373][T17567]                     NF_HOOK+0x30c/0x3a0
[ 3281.459128][T17567]                     __netif_receive_skb+0x143/0x380
[ 3281.465909][T17567]                     process_backlog+0x622/0x1500
[ 3281.472430][T17567]                     __napi_poll+0xae/0x320
[ 3281.478415][T17567]                     net_rx_action+0x672/0xe50
[ 3281.484676][T17567]                     handle_softirqs+0x27d/0x850
[ 3281.491112][T17567]                     run_ksoftirqd+0x9b/0x100
[ 3281.497282][T17567]                     smpboot_thread_fn+0x542/0xa60
[ 3281.503972][T17567]                     kthread+0x711/0x8a0
[ 3281.509708][T17567]                     ret_from_fork+0x599/0xb30
[ 3281.515959][T17567]                     ret_from_fork_asm+0x1a/0x30
[ 3281.522393][T17567]    INITIAL USE at:
[ 3281.526389][T17567]                    lock_acquire+0x117/0x340
[ 3281.532468][T17567]                    _raw_write_lock_irq+0xa2/0xf0
[ 3281.538984][T17567]                    fasync_remove_entry+0xf1/0x1c0
[ 3281.545592][T17567]                    tty_fasync+0x13c/0x350
[ 3281.551502][T17567]                    __fput+0x8a2/0xa70
[ 3281.557065][T17567]                    task_work_run+0x1d4/0x260
[ 3281.563266][T17567]                    exit_to_user_mode_loop+0xff/0x4f0
[ 3281.570299][T17567]                    __do_fast_syscall_32+0x3b4/0x590
[ 3281.577952][T17567]                    do_fast_syscall_32+0x34/0x80
[ 3281.584968][T17567]                    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 3281.593089][T17567]    INITIAL READ USE at:
[ 3281.597627][T17567]                         lock_acquire+0x117/0x340
[ 3281.604184][T17567]                         _raw_read_lock_irqsave+0xaf/0x100
[ 3281.611499][T17567]                         kill_fasync+0x199/0x4d0
[ 3281.617946][T17567]                         do_splice+0xeee/0x1660
[ 3281.624307][T17567]                         __se_sys_splice+0x2e1/0x460
[ 3281.631345][T17567]                         __do_fast_syscall_32+0x1f7/0x590
[ 3281.638559][T17567]                         do_fast_syscall_32+0x34/0x80
[ 3281.645483][T17567]                         entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 3281.653849][T17567]  }
[ 3281.656373][T17567]  ... key      at: [<ffffffff99912c80>] fasync_insert_entry.__key+0x0/0x20
[ 3281.665073][T17567]  ... acquired at:
[ 3281.668883][T17567]    _raw_read_lock_irqsave+0xaf/0x100
[ 3281.674370][T17567]    kill_fasync+0x199/0x4d0
[ 3281.678989][T17567]    evdev_pass_values+0x627/0xbd0
[ 3281.684117][T17567]    evdev_events+0x1e6/0x340
[ 3281.688806][T17567]    input_pass_values+0x288/0x890
[ 3281.694104][T17567]    input_event_dispose+0x330/0x6b0
[ 3281.699413][T17567]    input_inject_event+0x1dd/0x340
[ 3281.704625][T17567]    evdev_write+0x2fc/0x480
[ 3281.709248][T17567]    vfs_write+0x27e/0xb30
[ 3281.713681][T17567]    ksys_write+0x145/0x250
[ 3281.718191][T17567]    __do_fast_syscall_32+0x1f7/0x590
[ 3281.723580][T17567]    do_fast_syscall_32+0x34/0x80
[ 3281.728654][T17567]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 3281.735197][T17567] 
[ 3281.737534][T17567] 
[ 3281.737534][T17567] stack backtrace:
[ 3281.743439][T17567] CPU: 1 UID: 0 PID: 17567 Comm: syz.7.12371 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3281.743467][T17567] Tainted: [L]=SOFTLOCKUP
[ 3281.743474][T17567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3281.743486][T17567] Call Trace:
[ 3281.743496][T17567]  <TASK>
[ 3281.743505][T17567]  dump_stack_lvl+0x189/0x250
[ 3281.743533][T17567]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 3281.743556][T17567]  ? __pfx__printk+0x10/0x10
[ 3281.743587][T17567]  __lock_acquire+0x2a95/0x2cf0
[ 3281.743615][T17567]  ? kill_fasync+0x199/0x4d0
[ 3281.743647][T17567]  lock_acquire+0x117/0x340
[ 3281.743665][T17567]  ? kill_fasync+0x199/0x4d0
[ 3281.743699][T17567]  _raw_read_lock_irqsave+0xaf/0x100
[ 3281.743727][T17567]  ? kill_fasync+0x199/0x4d0
[ 3281.743752][T17567]  ? __pfx__raw_read_lock_irqsave+0x10/0x10
[ 3281.743787][T17567]  ? do_raw_spin_lock+0x121/0x290
[ 3281.743820][T17567]  kill_fasync+0x199/0x4d0
[ 3281.743845][T17567]  ? kill_fasync+0x53/0x4d0
[ 3281.743871][T17567]  evdev_pass_values+0x627/0xbd0
[ 3281.743893][T17567]  ? evdev_pass_values+0x5c1/0xbd0
[ 3281.743913][T17567]  evdev_events+0x1e6/0x340
[ 3281.743929][T17567]  ? evdev_events+0x79/0x340
[ 3281.743949][T17567]  ? input_pass_values+0x8d/0x890
[ 3281.743965][T17567]  input_pass_values+0x288/0x890
[ 3281.743984][T17567]  ? input_handle_event+0x70c/0xf30
[ 3281.744009][T17567]  input_event_dispose+0x330/0x6b0
[ 3281.744034][T17567]  input_inject_event+0x1dd/0x340
[ 3281.744057][T17567]  ? input_inject_event+0xb6/0x340
[ 3281.744085][T17567]  evdev_write+0x2fc/0x480
[ 3281.744105][T17567]  ? __pfx_evdev_write+0x10/0x10
[ 3281.744123][T17567]  ? bpf_lsm_file_permission+0x9/0x20
[ 3281.744143][T17567]  ? security_file_permission+0x75/0x290
[ 3281.744160][T17567]  ? rw_verify_area+0x255/0x4d0
[ 3281.744187][T17567]  ? __pfx_evdev_write+0x10/0x10
[ 3281.744205][T17567]  vfs_write+0x27e/0xb30
[ 3281.744229][T17567]  ? __pfx_vfs_write+0x10/0x10
[ 3281.744246][T17567]  ? __fget_files+0x2a/0x420
[ 3281.744269][T17567]  ? __fget_files+0x2a/0x420
[ 3281.744290][T17567]  ? __fget_files+0x3a0/0x420
[ 3281.744311][T17567]  ? __fget_files+0x2a/0x420
[ 3281.744335][T17567]  ksys_write+0x145/0x250
[ 3281.744354][T17567]  ? __pfx_ksys_write+0x10/0x10
[ 3281.744375][T17567]  ? __do_fast_syscall_32+0xbe/0x590
[ 3281.744396][T17567]  __do_fast_syscall_32+0x1f7/0x590
[ 3281.744416][T17567]  ? rcu_is_watching+0x15/0xb0
[ 3281.744437][T17567]  ? do_fast_syscall_32+0x34/0x80
[ 3281.744458][T17567]  do_fast_syscall_32+0x34/0x80
[ 3281.744477][T17567]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 3281.744503][T17567] RIP: 0023:0xf703d539
[ 3281.744520][T17567] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 3281.744536][T17567] RSP: 002b:00000000f540c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[ 3281.744555][T17567] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000040
[ 3281.744567][T17567] RDX: 0000000000000037 RSI: 0000000000000000 RDI: 0000000000000000
[ 3281.744578][T17567] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 3281.744589][T17567] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 3281.744599][T17567] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 3281.744616][T17567]  </TASK>
[ 3281.756550][T17539] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 3282.140576][ T6038] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[ 3282.232751][   T30] audit: type=1326 audit(1765792081.957:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17570 comm="syz.6.12372" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x50000
[ 3282.240109][   T30] audit: type=1326 audit(1765792081.957:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17570 comm="syz.6.12372" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x50000
[ 3282.240162][   T30] audit: type=1326 audit(1765792081.957:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17570 comm="syz.6.12372" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x50000
[ 3282.240199][   T30] audit: type=1326 audit(1765792081.957:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17570 comm="syz.6.12372" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x50000
[ 3282.240236][   T30] audit: type=1326 audit(1765792081.957:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17570 comm="syz.6.12372" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x50000
[ 3282.240277][   T30] audit: type=1326 audit(1765792081.957:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17570 comm="syz.6.12372" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x50000
[ 3282.240318][   T30] audit: type=1326 audit(1765792081.957:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17570 comm="syz.6.12372" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x50000
[ 3282.240356][   T30] audit: type=1326 audit(1765792081.957:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17570 comm="syz.6.12372" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x50000
[ 3282.240395][   T30] audit: type=1326 audit(1765792081.957:2678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17570 comm="syz.6.12372" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x50000
[ 3282.270158][ T6038] usb 2-1: device descriptor read/64, error -71
[ 3282.741086][ T6038] usb usb2-port1: attempt power cycle
[ 3282.921282][T16307] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[ 3282.931830][T16307] asix 3-1:0.188: probe with driver asix failed with error -71
[ 3282.941790][T16307] usb 3-1: USB disconnect, device number 80