last executing test programs:

9m29.041632397s ago: executing program 2 (id=62):
r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a00000014000200fe8000000000000000200000000000aa05000300000000001c000080060001000200000908000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a034e200000040100000000000000000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d4000980"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804)

9m28.726008726s ago: executing program 2 (id=64):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={@mcast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x59, 0x819}})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)=""/140, &(0x7f0000000100)=0x8c)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48)
listen(r1, 0x3)
r2 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYRES8=r1], 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14)
syz_usb_control_io(r2, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000380)={0x20, 0x15, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)={0x40, 0xb, 0x15, "04820697c4f1e20de9f3f4edc62b86993c81460124"}, 0x0, 0x0, 0x0, 0x0, 0x0})

9m25.544496528s ago: executing program 2 (id=83):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000002, 0x180, 0x400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0)
readv(r3, &(0x7f0000000780)=[{&(0x7f00000002c0)=""/255, 0xff}], 0x1)
setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0)=[{{0x3, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x0, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x1}}], 0x10)
ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece)

9m25.181986688s ago: executing program 2 (id=85):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c)
move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0x126)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000009c0)="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", 0x168}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee560409202f4c5f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec27348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b84359e76eee93584aad3f751172c449fb00"/165, 0xa5}, {&(0x7f0000002f80)="a66554178426362975b882a7d6b43fe537b6b0036a966a05363793ec2f6830cc5b81e514b9cbe4c27c3f3a581556b832100a4233e3e80fda14dd84611893300a863a8a6f6d8e0c7633e168ad7e25d4bd14ba6812101488e9444165b8100d576a996fec019ae11a03498329bcbacd0e8a206bd0de0c7e09f64a57d56974599f09aa148b4224dcffe1b5a1e55bbc1fdae8bf2f72437cf399c4cda11554b21158e3ddb00ddb71a1bd1daa50d631b027238397d692214223af1d685e7a3318da65c9233eba674ff72097411ef3ee19b892b1b36eeb925a6698f4d455b02163a3504ee6accffad7aaf9d19763d886272559ef0501594ea23d45a43e13bba05d7d332750ce5d9d3b37d234f46464fcc5f495e0fae02a24efd67db315c92f9483196bd38b38b3675bc0de5873f9d7b01ee5c564f5573b474e3c9f3b955929d9112007049e4245d68b93f365a90d35c837cc13999f2d6a23be87786e4234d74b1160669c7962b3b413201192565fb93252c153dd735e280e01d13dc34468f67684a4308c7dbe07687e0f56fa54f44b0141895ad75781ca026d813e8c17794b9d87d97136d29aced71b1f526dfab6301b78f1deab7949c97cce6616f4afd46a331e2fb54342dd1964c70a2717f4239c9e5157ac93c42d05f230da440a9227f0f82ee95cc79ca2d3da3f889b37f85f50d75711a910a57d213edb4b981cde33e01ec960885f31511ed7f8e01ddd36d76e1b1e40e81cd21ef9c34134400fdd94e34e5d77f4b7ca3612663e0f6b364be4a9dc775f3b12386ec04960524a9a5e6879e50db657c89a7dc7ec1f919ba8c77e926538599e7969868a5ef3e92817a3402c13de0efcb9fef445ee49f4b0ed26c5dbadff51459d5229661e4b7d2548c9ea4ce89b828daf5f5873e1d9e693ba037fc00ccc3dd74096c0f1ea508ee96ad7d85664947193e011e2f037917af7716d7f27cac25c9785f13baddfeba40997af5f6f4029cf5b781b654a635ee8696078d99025012cbad5af13bc26e2d100726fc98c11f8f16057a8506f29cf30bcf9ab7883ad1708d11bf70ee54fced84c69d90eb302e8aff586c0b25893e09868426cb4649145ede32035c47360fba7fe863cb00b86f583090c5b8d8549ba62cb822ed182fc07f029a826b5c86dccd603408bfc060c80c8ae21be086998f45923e1fe36eea10a66a55cc9f3cb6a296535dabc831fefe26b80ee47c723c596c51e1d7c073df20874eef79a291934c4c6a7c6b656595fc76b25d0d50590c1df29d59842a19a6acd60e783069aa0c21d792129132d59d12cd4417583dc967d7d44f392770da18e30a70a330e7b05aebf09e93aa545ca382a29f810e8a4efc0fffd3660f76892c2027daccfd743734c359bacaec86e4f15ca31b83894b67b3a3539cb5567bbcacd9a52c9b8d87252ddab0dbdd373f7150b87893fa4b6c5e6016f2146471f092a2cf4c75b6ed08a2f27f9f68d1817d7e782c0fa3026fd4e283b6b23bff2a9d84f5cdea217ce396080b623fe6d5da91fcab0e563b8c54af99007f6680efc9fdcd35d1d2ad8539ee04744e38c750114de55b80192c5d6aee8cbc34a47426bb22a9e3e2fcb87530c418a65fad7d5fbb15f569a69fc2cb92dad8f574330fdf2aa6033d1be037d5e3e964ff01329c43401bc86a72025288100ce86c053b922e9a7a692912bca4dabfc0e3a8966a65c96d3a420809c2d600928546a4ea26ff7100081f3ca8a70c64b3a4fc33b3e2546ff4a43502d448f2c0b274a244d32c955b02d897b1c53a2724ff886a1ccc91ea3a22dbd1f5f3f2e33db9ac9aae458a27e2a529ac2d8671f0e30df63a5d1a579b8f5a68f4a53fb4f3f76d41bee8e10635606f2a7fde9af7bd0df3ab9750b0c6c962fbc36e9474e3efac01ea98a4fe6e0f819d62dcde2b9b77fb0d430495ee042d1e70a52debb0d13b09906f77327dd4ccfe2b6796f9aa5e5b2fa9b2249c66b49cd7e1cbdb194c239d7e2e0928a45c8c55904cd345c5d8b92a5526ff51b5c2e477089eeb16cb3996c243c66a82f4349370ac26bef5d900ec582f274cc38b0258993de6cc79574fdacb895721fd4d04f84c4d89e109629f48a24fb3241882f154a35ae6659e0bb35af409c51cb11a26413be88a1e5ae1e8d2b1333a6c80c42c654f269dd875aa7f19517f62b8e031f11bdb11bafcf4b4f06496142579f7769ee41dd24701cd3ed016030f7d5cf24a4cfdcd9b05e38524cd1a81e16b948672329bd111f7442bdc81b68b36495b5f4aa44d7c2fdea8703849a17f7d3327086355ca3b36c10eb38556bf95b3575ba32b97f268af1f1347ed28368828124361f6c1e6b64e6ba9efc3094d50bb049c35db5ea2b3c76576b1a8f37da0711436048ae443523032497e542c04458f04cfffd11c53c431065c20e8add72c0c31caeec12d0bf391fa1c0a75e23d39c31da409083f768f545090b05c54084ffc5d7fd85cea725807638f4ab0026204452a8c198cc60133ce00e9a2b9ebeb30d7f33a1bb25cb2948bf44288cce43b6ac13012d8860fce83d9a0f6f1886723f41130466186ac56d5384bfd04fe87c67528996c1ee1ad8e551dda563e75d5dc8ac6a47990a62c915dc23f4ae6596dcfdb44661de969aec7f6d3fa8f05e106a8db7abeb3682bdc8e87aefbb09e642b2cef2919ddc55ded8dbce0606d3c4a0747a293a991b8cd832381c30813b887a22c2df569c12c430cf7471578eb787acab65b54569bece6921805af9ac41b268ce329a25bacdb02f8f3c4ef930f1799ff940f42c21955ddd5496234d62447d1c9d8e0cc7bb8fd5ca5e9fa2ef99105a4d44d6ce37532407fcccc4e71103baa0c7ff1767e05762424d9301294daa95523792cb73b348c41ec713d19c2b917a4dc50be3f0742762e5055cd6ebb3afa2b89a94c6a921e039ddaee98fc7a961a5e415322bd4b333d83768ee8945f29556f94372a16285cb1ff103640d93b837861f1d0d9e65fe35583b6f76889e7d09a2cdf3c2ef305a0f6d205deedee94ac602974fa58284e33aee55947a7a042abf0759ec8c1410493114454320b5003f23dac1c600a471ff09bdbf5bb40be87a69d388592241d9989f0435eeede193e6994b80a2145eca4afb5e691341e37e4580b0c54d7fc506cc9641020cd342a85fe56946e49854756ae6534edd03de881481e11701851f0f30fedbfcf335c3855c8d9541ef234f8718fbb0d9f127093a3e7c1d49d8a20729ab41a0118683b7044ee490d7137bebbbbfb245d5e30356e102eda0052a37cca70c221475b5c596f68c745701dc6e31f7846270bcd516ded5d0b4666b249a32f0acb1b8a7de8e6f007ee740561f64b7f30b4764ec5116a1eda1526225ddd01b1d999ff17d0798be47e3a5957011aa6e03318897ce1c452b78f9badf89098fe696894953581b01ceffc4fa0eefd654df9ea70b1f2f1e287192a5a20a381e8fad0fb99814208970902fdd28cf6a6457d7873a76359e226e5b203bd6f85bea30cb0ab5817e1b32fbbbd33a4e67f3771b7256a3a9ec20dae8a248af32a909bb5ec28f0f85722b81151f0f0a500a5c39c36476ac42c30bcb68a61a13141541ec54d895f0d7ca1afb728202e77f2f85170a3c2de378f1cfa0c2d1b0353f5d2fd0537017dc5510232a7a27a444476bbca2b84394639cf8ded35568868f9dcfa445b33c694aa8696d899afdf0d98a542e6a3c0212480ef3063ae0b8bcaa133978e9ebd76a3ccf652b0022b3cc7f1c9f2731c1c08f45fc84f7dade8471f6855e3005d75390e36a6646b8ac0dd5da9f9ef4bc35639ac96280bc47a547c0941af4516278b66469c7fc22932cbb2ac92cc12745bdf4ab4411d48396120f0e397ff6c22c54873296a897928d0158a5e63e6d48016cb4af44a3d71296acffe59241a8537f8b2cbc88b8ee2f4090e8e16b8af4700a60d0c199cc45cedf8dfe9a78ddd8637f7a9cfc16b078b1f9acfb8cb35f94b7564b1e23904e40dd5bdef1c78397457c05dd1108c3257bfda2e36b31969e8642c825c9dafe2fa4ee2708023c26255e6c41c2c873923e98eb1397dbc51324dfbec7943a5564fa815b9492d53c6cf6d42cd07165ae54e81f7989f2e406a13bea4df4d4a6971d81a4492e5703b6ba1f21ca5ffd68cdb15a713abd70d411e64d873b9f36ced7f354273c5c9782dd8a410ac28fee250f4b82095f4ab7a5c5a7d57114b6196cc2accdb44e39351a5d7c2c519ff861db8e4a368fdc1c5459f2b4cef0076d9b57b9ba2e76b3d8b87a515fc5c777d7e8023ef898fcf31365abc3e0a1307fa85f29d3c8a7e70d58b1228e83", 0xbe8}, {&(0x7f0000000440)="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", 0x137}, {&(0x7f0000000380)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d460000ae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}], 0x7}}], 0x1, 0x8800)
syz_usbip_server_init(0x1)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcdf, 0x1, 0x0}, &(0x7f00000000c0)=0x40)

9m24.566369526s ago: executing program 2 (id=89):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8000)
read$alg(r1, &(0x7f0000000000)=""/35, 0x23)
recvfrom(r0, &(0x7f0000000300)=""/4096, 0x1000, 0x20, &(0x7f0000001300)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x4, 0x3}}, 0x80)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, 0x0)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="020b6b070200000028bd7000fb2a494ccf63fedbdf25"], 0x10}}, 0x0)

9m23.551860105s ago: executing program 2 (id=90):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000500000003e70014003500776c616e30000000000000000000000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000)

9m23.272018795s ago: executing program 32 (id=90):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000500000003e70014003500776c616e30000000000000000000000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000)

1m59.241958837s ago: executing program 0 (id=1888):
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$MEDIA_IOC_DEVICE_INFO(r0, 0xc1007c00, 0x0) (async, rerun: 32)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64)
msgctl$MSG_STAT(0x0, 0xb, 0x0) (rerun: 64)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r3 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRES8=r3, @ANYRESDEC=r0], 0x48}, 0x1, 0x0, 0x0, 0xd1}, 0x0)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)) (async)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async)
ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]})
r7 = msgget$private(0x0, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c0002800600010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0)
msgsnd(r7, &(0x7f0000000440)=ANY=[], 0xe3, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
r9 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x3b}, 0x5a) (async)
sendmmsg(r9, &(0x7f0000000480), 0x2e9, 0x0) (async)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000, 0x6, 0x0, 0x0, 0x6, 0x900066}) (async)
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x7, 0x4)
syz_usb_connect(0x3, 0x64, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007"], 0x0) (async, rerun: 64)
setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f0000000080)=0x5d6, 0x4) (rerun: 64)

1m59.120580722s ago: executing program 0 (id=1889):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x7, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xfff3, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1m58.930895971s ago: executing program 0 (id=1890):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x4000, 0x100)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={<r1=>0x0, 0x8}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)={<r2=>r1, 0xd}, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8)
r3 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.bfq.idle_time\x00', 0x0, 0x0)
ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000200)={{0x8058000, 0x6000, 0xc, 0x80, 0x3, 0xc3, 0x6, 0x54, 0xd, 0x2, 0x1, 0xff}, {0x58000, 0x8000000, 0x4, 0xd, 0x6, 0xa, 0x8, 0x3, 0x0, 0xf, 0x6, 0xb}, {0xeeee0000, 0x100000, 0x0, 0xfc, 0x1, 0xae, 0x3, 0x82, 0x3, 0x5, 0x5, 0x6}, {0xfec00000, 0x8000000, 0x10, 0x2, 0x5, 0xb, 0x1, 0x80, 0x2, 0x7f, 0xff}, {0x10c000, 0xeeee8000, 0xf, 0x73, 0x7, 0x2, 0x20, 0xff, 0xf, 0xf, 0x9}, {0xffffffff, 0x80a0000, 0x10, 0x4, 0x3, 0x8, 0x80, 0x0, 0x40, 0xfa, 0x9, 0x1}, {0xdddd1000, 0x41000, 0xb, 0x2, 0x7, 0x5, 0x9, 0x3, 0xb, 0x9, 0xff, 0x1}, {0x50000, 0x25000, 0xc, 0x10, 0x4, 0xe, 0x7, 0x9a, 0xc, 0x2, 0x81, 0xe}, {0xffff1000, 0x9}, {0x7000, 0xb}, 0x4000c, 0x0, 0x0, 0x4000, 0xb, 0x8d00, 0x0, [0x2400000000000000, 0xffffffff, 0xfe, 0x40]})
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r3, 0x58, &(0x7f0000000340)}, 0x10)
ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000400))
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000440)={0x0, 0x3, 0x1, 0xd})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x50000008}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, r4, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x6, 0x16}}}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}], @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x100}]}, 0x40}, 0x1, 0x0, 0x0, 0x882}, 0x44093)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x1, 0x100)
r7 = syz_mount_image$fuse(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x6420, &(0x7f0000000700)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}, {@blksize={'blksize', 0x3d, 0x1400}}, {@blksize={'blksize', 0x3d, 0x1400}}, {@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions}, {@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x4}}, {@max_read={'max_read', 0x3d, 0xc1}}, {@max_read={'max_read', 0x3d, 0x5}}], [{@euid_lt={'euid<', 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@fsname}, {@smackfshat={'smackfshat', 0x3d, 'blkio.bfq.idle_time\x00'}}]}}, 0x0, 0x0, &(0x7f0000000900)="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")
linkat(r6, &(0x7f0000000640)='./file0\x00', r7, &(0x7f0000001900)='./file0\x00', 0x1000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001940))
r8 = openat$random(0xffffffffffffff9c, &(0x7f0000001980), 0x561001, 0x0)
sendfile(r8, r3, &(0x7f00000019c0)=0x194, 0x7)
sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x104081000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x5c, 0x1, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48840}, 0x8800)
writev(r3, &(0x7f0000001ec0)=[{&(0x7f0000001b40)="7a3609e2ef5e1b2fa292ec4ac2d3708b8bc5f8c67efbbff6fe3d8ef0f0a715fd0bc9d4d988aedba79e89340245658ae734c4a17e96209391843c2e1611f675e684555a555882e9fd960327fd87bc8cf4ed7441dbec7626c691b2ae1a5954b9bf5692e442f49048c29cd7d99da0602786d1d5c738fdac6586da4e4f73034526a52eebaed759b48eae7ed39cd6f99dd03f393d1ad79f8aecf7a533b511001529642c3a84fb76ec133e75591448093cfd5677ec557c5ccd2a3825d0dfa8d6886bb183d5cb19004be121ca8704c75beeb4469e125fc4115d9d2a8867", 0xda}, {&(0x7f0000001c40)="c620ae1875e28f7fab8e9cb33dd412395fcfc954334cff4cfee4317fdb74f024864bc60b16", 0x25}, {&(0x7f0000001c80)="9d2180ec766cd3e0ffb5a10168dc293a3674bf476d34130021c060d58adcc5b92acb0ae30b8fd6a7035134ebfaddaebb1a827aac440142d4d449d4815f4472ef12cf78e056891030c486f7c02043c4350223c72728d9adc7d017fa89a79be1b7b2f9a6abf10653c7079d94b3be2308fdc3381221e9e74de778de048b253449ed108297cb74", 0x85}, {&(0x7f0000001d40)="da914b62d0e169f69edfb695d637e67560576891a74031d9969685dee35b87", 0x1f}, {&(0x7f0000001d80)="f9c1b7b5293a2c044e440e199fea00783ce5f39f7bf92c", 0x17}, {&(0x7f0000001dc0)='k', 0x1}, {&(0x7f0000001e00)="1f42dd7d25264e61477bd466319070cb642377566b6628504463ced3ce1f27635035a0960dd28f4db68df17f92cc6df75efa38c7960c6dc3c0726d0ce1bdc1d19160d61d1fc61e50c95f723e21f52d5fa6336944853984906a05884922a864f02a3e7b022b3fe25a36ec78095612096677f764f0e8192ebaebdff99ee5c40375e78e866b7a118880baab037041d434fe359f002dca023322", 0x98}], 0x7)
ioctl$DVB_DEMUX_DMX_EXPBUF(r0, 0xc00c6f3e, &(0x7f0000001f40)={0x7, 0x80000, <r9=>r6})
ioctl$UI_DEV_DESTROY(r9, 0x5502)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000001f80)=0xaef, 0x4)
r10 = accept(r9, &(0x7f0000001fc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000002040)=0x80)
sendmsg$IPSET_CMD_HEADER(r10, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x28, 0xc, 0x6, 0x3, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x44044)
socket$inet_udp(0x2, 0x2, 0x0)
r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x16)
syz_kvm_setup_syzos_vm$x86(r11, &(0x7f0000bfe000/0x400000)=nil)

1m58.707751669s ago: executing program 0 (id=1892):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000380)={'gretap0\x00'})
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000b32000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x40)
timer_create(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x40032, 0xf7, 0x2, 0x80, 0x3, 0x7, 0xc, 0x66, 0x4, [0x20040, 0x9, 0x10, 0x40, 0x6, 0x8, 0x5, 0x2174]}})
timer_delete(0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
socket$kcm(0x2b, 0x1, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x340, 0x0, 0x0, 0x1a0, 0x270, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x340}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)
ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x6)
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f00000004c0))
r6 = accept4$tipc(r0, &(0x7f0000000180)=@id, &(0x7f0000000300)=0x10, 0x80000)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f00000003c0)={0x41, 0x0, 0x1}, 0x10)
madvise(&(0x7f0000735000/0x1000)=nil, 0x1000, 0x65)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0)
ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f0000000240)={0x0, 0x1000000})
r8 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x0, 0x3, 0x8, {{0x9, 0x4, 0x0, 0x33, 0x24, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x3c, 0x3, 0x2, [{@empty, 0x8}]}, @noop, @ssrr={0x89, 0x3, 0xb5}]}}}}})
add_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x7e, 0x21, 0x1, 0x60, @dev={0xfe, 0x80, '\x00', 0x2a}, @loopback={0x300, 0x460c6}, 0x1, 0x8, 0x25a1, 0x40}})

1m56.784418981s ago: executing program 0 (id=1904):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0xa8, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x7c, 0x3, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x6c, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x12c}}, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000400)={"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"})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f000001fac0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0xe, 0xf0, 0x40, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x3000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0xdddd0000, 0x9, 0x1, 0x3, 0x9, 0x9, 0x5, 0x5, 0x44, 0xe, 0x4b}, {0x2, 0xd000, 0x0, 0x7, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x1000, 0xf, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x10000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0xeeee8000, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x0, 0xe6e70c00, [0xffffffffffffff47, 0x401, 0x5, 0xc5]})
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x80f, 0x0, 0x8001}]})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = fsopen(&(0x7f0000000580)='tracefs\x00', 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
read$FUSE(r6, &(0x7f0000019200)={0x2020}, 0x2020)
ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000080)={0x2, 0x9, 0x3, 0x6c5, 0x7f, 0x100, "1a6dd4628081832c931e3e93d3e3390f", 0x90, 0x2, 0x1, 0xe1, 0x8, 0x4, 0x8})
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000180)='7\xc0\xd2\xb5\xd3\x1c\x99\x16\x8f\xb6;\xd3$\x12\x96\\_.\xc5\vR\xa5\xe7\xf5n=^\v\x7f\x14.\xe7\x8c\xb3\xb7\xdc\xe1\b\x00\x00\x00\x00\x00\x00\x00\x01\x00\xc5', 0x0)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0)
r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0)
ioctl$I2C_FUNCS(r8, 0x705, 0x0)
msgrcv(0x0, 0x0, 0x2000000, 0x0, 0x86b1b18158a7cb82)
sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="ac020000", @ANYRES16, @ANYBLOB="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", @ANYRESOCT=r4, @ANYRES16=r7], 0x2ac}}, 0x8000)

1m55.50236921s ago: executing program 0 (id=1911):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_usb_connect(0x3, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100005864e6082c105162687e010203010902120001000000000904"], 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaa6cf6566994c681001000080045b4002800000000a3069078ac1414bbac1414aa4e224001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500400009078c5a4ae067eccfa02217ec139d54ec2046468d82bdae10000"], 0x0)
sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x60000100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(0xffffffffffffffff, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r1)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x1d60d4291db393d4}, 0x20000812)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x5b5ace103c07041}, 0x0)
r3 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0x2, 0x70bd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x86, 0x2}, {0x5, 0x40}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x2}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880)
sendmsg$key(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x2, 0xe, 0x4, 0x5, 0x2, 0x0, 0x70bd27, 0x25dfdc02}, 0x10}}, 0x10000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001500010000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000b80)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0xc001)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c"], 0x122}}, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

1m55.116018323s ago: executing program 33 (id=1911):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_usb_connect(0x3, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100005864e6082c105162687e010203010902120001000000000904"], 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaa6cf6566994c681001000080045b4002800000000a3069078ac1414bbac1414aa4e224001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500400009078c5a4ae067eccfa02217ec139d54ec2046468d82bdae10000"], 0x0)
sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x60000100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(0xffffffffffffffff, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r1)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x1d60d4291db393d4}, 0x20000812)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x5b5ace103c07041}, 0x0)
r3 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0x2, 0x70bd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x86, 0x2}, {0x5, 0x40}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x2}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880)
sendmsg$key(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x2, 0xe, 0x4, 0x5, 0x2, 0x0, 0x70bd27, 0x25dfdc02}, 0x10}}, 0x10000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001500010000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000b80)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0xc001)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c"], 0x122}}, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

7.404542684s ago: executing program 6 (id=2468):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x1000000000000000)

7.327268812s ago: executing program 6 (id=2469):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000068a000000000000040000001801000020696c2500000000002020207b1ad8ff00000000bfa100d800000000070100000400ffffb702000008000000b703000002000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0xfed, &(0x7f0000001840)=""/4077}, 0x94)

6.86855174s ago: executing program 6 (id=2471):
close(0xffffffffffffffff)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
preadv(r0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1, 0x3, 0x1)
close(0x3)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xf03}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x400d4)
r4 = userfaultfd(0x80801)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x430})
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f000022a000/0x4000)=nil, 0x800000})
syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001"], 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'})
sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x98, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x57fa}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @remote, 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x400008c1)

6.86154964s ago: executing program 1 (id=2472):
r0 = inotify_init()
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = dup(r1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x3}], 0x1c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000340))
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000080), 0x4a)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000000c0)=0x2009, 0x4)
sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
r7 = socket$inet(0x2, 0x2, 0x73)
setsockopt$inet_opts(r7, 0x0, 0x4, 0x0, 0x0)
sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r2, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="93", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000001380)='R', 0x1}], 0x1}}], 0x2, 0x48014)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800)
name_to_handle_at(r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="100000000200000000000000000000160cd8000002000000"], &(0x7f0000000300), 0x400)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c)
close_range(r0, 0xffffffffffffffff, 0x0)

6.824415979s ago: executing program 5 (id=2473):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7", 0x9}], 0x2}}], 0x1, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x110, 0x29, 0x4, {0x4, 0x1f, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0xf, "09e12e5f0b6bdcf72f2ec7008a15fa"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93}]}}}, @hoplimit={{0x14}}, @hopopts={{0x138, 0x29, 0x36, {0x5e, 0x23, '\x00', [@generic={0xff, 0x23, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0x63, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x310}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280))
r3 = socket(0xa, 0x5, 0x0)
listen(r3, 0x267)
r4 = socket$netlink(0x10, 0x3, 0x4)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1)
recvmmsg(r4, &(0x7f0000002600)=[{{0x0, 0x12, 0x0}}], 0x1, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000002100)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x300, 0x300, 0x3f0, 0x3f0, 0x3f0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ipv6={@remote, @private1, [0xff], [0xffffff00, 0x0, 0xffffff00], 'gre0\x00', 'tunl0\x00', {0xff}, {}, 0x0, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@mcast2, @loopback, [0xffffffff, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffff00, 0xff000000, 0xffffff00], '\x00', '\x00', {}, {0xff}, 0x2c, 0x2, 0x4, 0x50}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@remote, 0x20, 0x8, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r6 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125bd7000fdffffff550000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x20028840)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20004040}, 0x200c0)
sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)

6.587839534s ago: executing program 5 (id=2474):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d0003002e332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}, 0x0)
r2 = creat(&(0x7f0000000940)='./file1\x00', 0x130)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@ipv4_newnexthop={0x24, 0x68, 0x5, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x2, 0x0, 0x4}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}]}, 0x24}}, 0x0)
syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000440)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x1, 0xc73ebdfa468265f4, 0x7}}]}}, &(0x7f0000000000)={0x25, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000580)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000)
r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r7)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
r8 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd)
keyctl$read(0xb, r8, &(0x7f0000000240)=""/112, 0x349b7f55)
execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab?P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb8\x10\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\x03\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7vC\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x2, &(0x7f0000000000)=[{0x34, 0x0, 0x0, 0x2}, {0x3d}]})
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x2c060000)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc1105518, 0x0)
read$FUSE(r2, &(0x7f0000000bc0)={0x2020}, 0x2020)

5.354775969s ago: executing program 1 (id=2480):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r1=>0x0})
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x8006, @local, 0x4}, 0x1c)
connect$netlink(r2, &(0x7f00000000c0)=@unspec, 0xc)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002)

5.08053941s ago: executing program 1 (id=2484):
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) (async)
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34325241, 0x0, 0x9, [{}, {}, {}, {0x3}, {}, {}, {0x0, 0x60}]}}) (async)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r2, 0x40109441, &(0x7f0000000300)={0x63ab97c2, 0x1, 0x7})
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) (async)
r4 = syz_open_procfs(0x0, &(0x7f0000000300)='timerslack_ns\x00')
read$FUSE(r4, &(0x7f00000025c0)={0x2020}, 0x2020) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000400)=0x1, r5, 0x0, 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x1, @loopback, 0x2}, {0xa, 0x4e22, 0x7, @remote, 0x9f93}, r5, 0x7}}, 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r2}, 0x8) (async)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50)
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x103a01, 0x0)
writev(r7, &(0x7f0000004580)=[{&(0x7f0000004080)="0f630a7c48", 0x5}, {0x0}], 0x2)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000", @ANYRES32=r6, @ANYBLOB="a40000000000000000000000000000000000000044", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="02000000030000000300"/28], 0x50) (async)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000400)={&(0x7f0000000000)=[{0x6be3, 0x0, 0x0, &(0x7f0000000440)}, {0xf35, 0x1a01, 0x4a, &(0x7f00000000c0)="e5611303b463accae427fba2a440aa0d9f42d5d391a4e0cd1b9729d99eab7fb7d4d871dfa66fddba7e96686074f7a28193d544f2e6576da11e9ab3051de8646801da7890b5847a74cb68"}], 0x2})

3.862764167s ago: executing program 4 (id=2491):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async)
r1 = socket$kcm(0x10, 0x2, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000080)=0x6, 0x4) (async)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

3.822147319s ago: executing program 1 (id=2492):
r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$6lowpan_control(r0, &(0x7f0000000380)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e)
syz_usb_connect(0x2, 0x2d, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = openat$dsp(0xffffff9c, &(0x7f0000000000), 0x8a880, 0x0)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000240)=0xfffb)
read$dsp(r4, &(0x7f0000000140)=""/60, 0xffffffcc)
read$dsp(r4, &(0x7f00000000c0)=""/82, 0x52)
sendmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb9020a", 0x11}, {0x0}], 0x2, 0x0, 0x0, 0x10}, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x3, 0xfffffe0001000001, 0xfa0d, 0xffffffff}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYRES8=r2], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0xffffffffffffffff)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4010744d, 0x0)
syz_open_dev$audion(0x0, 0x1000000000000003, 0x108580)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="1c00000029004319473ee5db6c5d95520701"], 0x1c}}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
fsync(r3)
r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3)
ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x4919, 0x0)

3.707912718s ago: executing program 6 (id=2493):
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x3, 0x40, 0x4})
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @loopback, 0x8}, 0x1c)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @local, 0x7}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x130, 0x130, 0x98, 0x130, 0x98, 0x398, 0x398, 0x130, 0x398, 0x398, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xff, 'macvlan0\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x2, 0x71}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x23}, 0x0, 0xffffffff, 'vlan1\x00', 'nr0\x00', {0xff}}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6tnl0\x00', {0x42, 0x21800000, 0x7fff, 0x1, 0x0, 0x0, 0x101, 0x78, 0x40}, {0x8001}}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xc, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c)
unshare(0x2020480)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8010, r0, 0xb4091000)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0xc, 0xc001, 0x0, 0x2, 0x3, 0x8f6, 0xfa11, 0xffffffff}, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x109140, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000200)={0x48})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000440)=ANY=[], 0x110)
r8 = inotify_init1(0x0)
r9 = inotify_add_watch(r8, &(0x7f0000000200)='.\x00', 0x44000160)
r10 = dup(r8)
inotify_rm_watch(r10, r9)
ioctl$sock_inet6_tcp_SIOCINQ(r10, 0x541b, &(0x7f0000000280))
ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3)

3.666313343s ago: executing program 4 (id=2494):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280))
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001081000418e00000004fcff", 0x58}], 0x1)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x912}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

3.510478107s ago: executing program 4 (id=2495):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x1, 0x2})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000080)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, 0x0, 0x0)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80)
write$cgroup_int(r6, &(0x7f0000000040)=0x800000000001e8, 0x12)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r7, 0x0, 0x8000)
madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0)

3.416061832s ago: executing program 6 (id=2496):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
socket$xdp(0x2c, 0x3, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
readv(r1, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@multicast2}, {@private=0xa0100ff, 0x1}]}, @lsrr={0x83, 0x3, 0x1}]}}, {{0x4e20, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x3}}}}}}, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffed3, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x1, 0xf}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)

2.648954838s ago: executing program 5 (id=2498):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0)
r1 = socket(0x10, 0x2, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38)
write$binfmt_script(r2, &(0x7f0000000500)={'#! ', './file0'}, 0xb)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40)
writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)="f24b", 0x2}], 0x1)
recvmmsg(r1, &(0x7f00000046c0)=[{{&(0x7f00000003c0)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000003900)=[{&(0x7f0000000440)=""/41, 0x29}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/203, 0xcb}, {&(0x7f0000001640)=""/132, 0x84}, {&(0x7f0000001700)=""/126, 0x7e}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000003780)=""/138, 0x8a}, {&(0x7f0000003840)=""/8, 0x8}, {&(0x7f0000003880)=""/76, 0x4c}], 0xa, &(0x7f00000039c0)=""/225, 0xe1}, 0x96b}, {{&(0x7f0000003ac0)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003b40)=""/234, 0xea}, {&(0x7f0000003c40)=""/142, 0x8e}, {&(0x7f0000003d00)=""/167, 0xa7}, {&(0x7f0000003dc0)=""/47, 0x2f}, {&(0x7f0000003e00)=""/89, 0x59}], 0x5, &(0x7f0000003f00)=""/14, 0xe}, 0xf}, {{&(0x7f0000003f40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004340)=[{&(0x7f0000003fc0)=""/213, 0xd5}, {&(0x7f00000040c0)=""/80, 0x50}, {&(0x7f0000004140)=""/42, 0x2a}, {&(0x7f0000004180)=""/166, 0xa6}, {&(0x7f0000004240)=""/222, 0xde}], 0x5, &(0x7f00000043c0)=""/139, 0x8b}, 0x7}, {{&(0x7f0000004480)=@pppol2tpin6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000004680)=[{&(0x7f0000004500)=""/232, 0xe8}, {&(0x7f0000004600)=""/99, 0x63}], 0x2}, 0x4}], 0x4, 0x10000, &(0x7f00000047c0)={0x0, 0x989680})
close_range(r1, r2, 0x0)
r4 = socket(0x10, 0x803, 0x0)
r5 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000080))
ioctl$NS_GET_OWNER_UID(r5, 0xb704, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x8, 0x3aa}}]}]}]}, 0x40}}, 0x2000080)
r9 = semget$private(0x0, 0x2, 0x80)
semctl$SETALL(r9, 0x0, 0x11, &(0x7f0000004800)=[0x3])
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000004c0)={0x6, &(0x7f0000000040)=[{0x4a3, 0x2, 0x1, 0xdd7}, {0x2a, 0xef, 0x5, 0x6}, {0xf, 0x4, 0x1, 0xfffffff8}, {0x7, 0x4, 0x1, 0x6}, {0x5, 0x5, 0x2, 0xc}, {0x1ff, 0x0, 0x81, 0x2}]}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {0x10}}, 0x24, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRES32=r6, @ANYBLOB="01980000000000002000128008000100677265001400028008000100f78f42632eb493b26a36c98e81095514acc3dbfc677c1c1f0e9bc737d23f4977d88175b1ddfa1b6baea74cff90a7c8f0e307fdf83c67baa167d48b8faff637286970d285e81af83b96158b11f1ead38d3f619e04407e553b589ab9b0aefacee94ee8774fb400"/140, @ANYRES32=r6], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000004f40)={'gre0\x00', &(0x7f0000000240)={'syztnl2\x00', r6, 0x700, 0x20, 0x0, 0x4, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x67, 0x0, 0xdb, 0x29, 0x0, @empty, @empty}}}})

1.436153187s ago: executing program 3 (id=2499):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000068a000000000000040000001801000020696c2500000000002020207b1ad8ff00000000bfa1000102000000070100000400ffffb702000008000000b703000002000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0xfed, &(0x7f0000001840)=""/4077}, 0x94)

1.371975372s ago: executing program 5 (id=2500):
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}})

1.266975257s ago: executing program 3 (id=2501):
r0 = syz_open_dev$dri(&(0x7f0000000140), 0x40000000000001, 0x10002)
r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x4000006, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90a, 0x78, '\x00', @string=&(0x7f0000000040)=0xfa}})
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x34325241, 0x3, [0x2], [0x80ffff, 0x0, 0x3a13, 0xfffffffc], [0x0, 0x0, 0x80000001, 0xffffffff], [0x3, 0xf6, 0x0, 0x10000000000]})

1.250624194s ago: executing program 4 (id=2502):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r0, &(0x7f0000000280)=@caif=@dgm={0x25, 0x5, 0x8}, 0x80)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22202, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000080)={0x26000, 0x103000})
landlock_restrict_self(r4, 0x9)

1.092324586s ago: executing program 5 (id=2503):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x630000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1, 0x0, 0x0, <r2=>0x0})
r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000540)={0x0, 0x5, 0x6, 0x8, 0x94, 0x7, &(0x7f0000000480)="a40272a727f4b22a7e78d3135e454f88ac6087c2f86f71ff50eee0af54d3fbd0241ab29cf851d21fa5541b32ed2f53a4013237a4c77ad3d477b48db7cc4a2b2e440fe965832a1569406ac67c772660e24bcd468b119ea65633d571dcf538b1c682db01df4b6b8be0488573eb35b27b261b9858bfc85bafea89960fe8d7e0dfbddf39953664ba0de07373a8861dc2491cc52b5428"})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x18000, 0x5)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58)
ioctl$AUTOFS_IOC_PROTOVER(r4, 0x80049363, &(0x7f0000000100))
ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000300)={0x30, r2, 0x1, 0x0, 0x6, 0x8, 0xfffffffffffffffb, &(0x7f0000000200)=""/242})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}}, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f00000007c0)={0x6, 'macsec0\x00', {0x2d4}})
ioctl$BTRFS_IOC_QGROUP_LIMIT(r4, 0x8030942b, &(0x7f0000000780)={0x8, {0xa, 0xfffffffffffffffd, 0x8000000000000001, 0x6, 0x2}})
sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00082cbd7000fedbdf256700000008000300", @ANYRES32=r9, @ANYBLOB="da00c5007b1c6d952a083559ca219e5c30bcb3039b9dddaf0ec1aa98bfe4aea10f10b17fc9329fff238a80db1bf798c02726da5a7de28ec5d38e042acde4e307a73131e7e03ea9bad51d4ef5d6178ddf5b0e913c480c49ffb524b59c4072c0783921c8ffd67b2eba4a5f8a8bf226891fac0b1a7e1cb11eeb3912d6c8af73dc57d531ce12bdbe17eadff7d3d4a6ede1168cc39abf518f156d34a85b0cea7ba87eb2eacdd61cfa000d6de84e3ed08d7af757bc40d175298eb5cf153284a387c8ae84bd9c8469e04f98142b4009a56a43e2cde2ec5e217352d9b09f00000800c40009000000"], 0x100}, 0x1, 0x0, 0x0, 0x4}, 0x0)
fgetxattr(r4, &(0x7f0000000340)=@known='trusted.overlay.nlink\x00', &(0x7f0000000380)=""/147, 0x93)
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000000)={0x18, r1, 0x1, 0x0, &(0x7f0000000140)=[{0x100fff, 0x9}]})
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000800)={<r10=>0x0, 0x4}, &(0x7f0000000840)=0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000880)={r10, @in6={{0xa, 0x4e20, 0x3, @local, 0x80000000}}}, 0x84)

977.792356ms ago: executing program 3 (id=2504):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64d9ffffff14000280050001000600000008000200", @ANYRES32=r1], 0x44}}, 0x0)

756.210844ms ago: executing program 4 (id=2505):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_usb_connect$sierra_net(0x4, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0x3, 0x7}, {0x9, 0x5, 0x0, 0x2, 0x10, 0x6, 0xfa}, {0x9, 0x5, 0xc, 0x3, 0x728, 0xff, 0xff, 0x1}}}}}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000600)={0x2c, &(0x7f00000003c0)={0x60, 0x13, 0xfe, {0xfe, 0x22, "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"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf4ff}}, &(0x7f0000000540)={0x0, 0xf, 0x2a, {0x5, 0xf, 0x2a, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x9, 0x3, 0x7, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x6b, "bca0326055f256cf06998500ba1a405a"}, @ptm_cap={0x3}]}}, &(0x7f0000000580)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x1, 0x3, 0x5, "a20c6c6a", "9ba24385"}}, &(0x7f00000005c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x8, 0x40, 0x50, 0x6, 0x6, 0x80}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000640)={0x0, 0xe, 0xd7, "b52d8708df54d41bbb71fe14cfba3bc4908f74e2e45168444aff68fa04914270a7dbf66fd1c0d9e351345f124f03e636fa730433d10f27d14842debcdb04d302a00ee782d6a66ca98ba2eeea689470a3ec6070540b18b41156db964d3550ae8a992b0b211a60df0c33eee27dd1d252cec16b7e9ca267452741d990e2fe65fd4dfbda469702a70d42bffce017f12a27e02c2d010a6170e8d466185f570c955ff23034143920fae33181ceae6b862c90d1371444675dba8ad65a61731bef48d55b1f875918d349d30b64120b896aa2452de8511ded238207"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x99}, &(0x7f0000000840)={0x0, 0x8, 0x1}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x140, 0x4}}, &(0x7f0000000900)={0x40, 0x7, 0x2, 0x40}, &(0x7f0000000940)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000980)={0x40, 0xb, 0x2, 'qQ'}, &(0x7f00000009c0)={0x40, 0xf, 0x2}, &(0x7f0000000a00)={0x40, 0x13, 0x6}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @random="e55b90536b45"}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "9a7d"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0x100}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x86}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0xc3}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x6}}) (async)
syz_usb_control_io(r1, &(0x7f0000000600)={0x2c, &(0x7f00000003c0)={0x60, 0x13, 0xfe, {0xfe, 0x22, "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"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf4ff}}, &(0x7f0000000540)={0x0, 0xf, 0x2a, {0x5, 0xf, 0x2a, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x9, 0x3, 0x7, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x6b, "bca0326055f256cf06998500ba1a405a"}, @ptm_cap={0x3}]}}, &(0x7f0000000580)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x1, 0x3, 0x5, "a20c6c6a", "9ba24385"}}, &(0x7f00000005c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x8, 0x40, 0x50, 0x6, 0x6, 0x80}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000640)={0x0, 0xe, 0xd7, "b52d8708df54d41bbb71fe14cfba3bc4908f74e2e45168444aff68fa04914270a7dbf66fd1c0d9e351345f124f03e636fa730433d10f27d14842debcdb04d302a00ee782d6a66ca98ba2eeea689470a3ec6070540b18b41156db964d3550ae8a992b0b211a60df0c33eee27dd1d252cec16b7e9ca267452741d990e2fe65fd4dfbda469702a70d42bffce017f12a27e02c2d010a6170e8d466185f570c955ff23034143920fae33181ceae6b862c90d1371444675dba8ad65a61731bef48d55b1f875918d349d30b64120b896aa2452de8511ded238207"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x99}, &(0x7f0000000840)={0x0, 0x8, 0x1}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x140, 0x4}}, &(0x7f0000000900)={0x40, 0x7, 0x2, 0x40}, &(0x7f0000000940)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000980)={0x40, 0xb, 0x2, 'qQ'}, &(0x7f00000009c0)={0x40, 0xf, 0x2}, &(0x7f0000000a00)={0x40, 0x13, 0x6}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @random="e55b90536b45"}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "9a7d"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0x100}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x86}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0xc3}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x6}})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) (async)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58)
r3 = accept4$alg(r2, 0x0, 0x0, 0x0)
sendmmsg$sock(r3, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9", 0xf}], 0x3}}], 0x1, 0x0) (async)
sendmmsg$sock(r3, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9", 0xf}], 0x3}}], 0x1, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf4648e", 0xe}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xb8, 0x29, 0x4, {0x4, 0x13, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x1d8, 0x29, 0x36, {0x5e, 0x37, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x360}}], 0x1, 0x810) (async)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf4648e", 0xe}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xb8, 0x29, 0x4, {0x4, 0x13, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x1d8, 0x29, 0x36, {0x5e, 0x37, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x360}}], 0x1, 0x810)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) (async)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x28}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\x00', &(0x7f0000000080)='\x00', 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0xc0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x31}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xc0}}, 0x0)

697.622831ms ago: executing program 5 (id=2506):
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00')
getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@multicast1, @private, <r1=>0x0}, &(0x7f0000000040)=0xc)
setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e22, 0x8, 0x4e20, 0x3, 0x2, 0x20, 0xa0, 0x3c, r1}, {0xf9, 0x2, 0xa, 0xf633, 0xc216, 0xe14, 0x58ff48ec, 0x2}, {0x1, 0x6, 0x2, 0x4}, 0x9, 0x6e6bb1, 0x2, 0x0, 0x2, 0x3}, {{@in6=@loopback, 0x4d4, 0x33}, 0xa, @in=@private=0xa010100, 0x3506, 0x3, 0x0, 0x5, 0x3, 0x4, 0x7f}}, 0xe8)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000a80)={'syz1\x00', {0x5, 0x0, 0x0, 0x1000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6, 0xd127, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x5, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42ac, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xe43, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4], [0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x0, 0x4, 0x0, 0x28, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x526d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x956, 0x0, 0x1]}, 0x45c)
ioctl$UI_SET_RELBIT(r2, 0x40045566, 0xe)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x2)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1)
ioctl$UI_DEV_CREATE(r2, 0x5501)
r3 = fsopen(&(0x7f0000000100)='overlay\x00', 0x1)
fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000003700)='default_permissions', &(0x7f0000003740)="8c", 0x1)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffdcc, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xfeb3}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090e000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000020013"], 0x70}}, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r6=>0x0)
r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
ppoll(&(0x7f0000000080)=[{r7, 0x8108}, {r7, 0x441}], 0x2, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000)
io_submit(r6, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x19, 0x1, 0x0, r4, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])
unshare(0x2020480)
read$FUSE(r0, 0x0, 0x0)

695.541022ms ago: executing program 3 (id=2507):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = accept4$alg(r0, 0x0, 0x0, 0x800)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x6, 0xfff, {<r3=>0xffffffffffffffff}, {}, 0x8, 0x7})
lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
getgroups(0x3, &(0x7f00000002c0)=[0x0, <r5=>0xffffffffffffffff, 0x0])
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, <r6=>0x0})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f0000000480)=0xe8)
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000500)=<r9=>0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000540)={0x0, <r10=>0x0}, &(0x7f0000000580)=0xc)
fcntl$getownex(r1, 0x10, &(0x7f00000005c0)={0x0, <r11=>0x0})
stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000700)=0xc)
r14 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0)
r15 = getpgid(0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000780)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in=@private}, 0x0, @in6=@local}}, &(0x7f0000000880)=0xe8)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000008c0)={{{@in6=@private1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r17=>0x0}}, {{@in6=@private1}, 0x0, @in6}}, &(0x7f00000009c0)=0xe8)
r18 = getgid()
r19 = fcntl$getown(r0, 0x9)
r20 = getuid()
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001180)={0x0, 0x0, <r21=>0x0}, &(0x7f00000011c0)=0xc)
r22 = syz_open_dev$dri(&(0x7f0000001200), 0x9, 0x200)
r23 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001bc0)={0x0, <r24=>0x0})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001c40)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in6=@private2}, 0x0, @in=@broadcast}}, &(0x7f0000001d40)=0xe8)
getresgid(&(0x7f0000001d80)=<r26=>0x0, &(0x7f0000001dc0), &(0x7f0000001e00))
r27 = fcntl$getown(r1, 0x9)
getresuid(&(0x7f0000001e40), &(0x7f0000001e80)=<r28=>0x0, &(0x7f0000001ec0))
sendmmsg$unix(r2, &(0x7f0000006580)=[{{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f00000000c0)="a683aabb5d6ec76a4a04c99c6f3253970a9631554b0ade97686bc2a77b886c28f43d37f7a8cc9dc2073b916cea6c6fdbe8aaecc3bb893c20a47bac7c829ece9ea2b6c413ef398d0af870e314f2ec9fed321fb7fdb929afcf28884cb4d9385d8bcb70e89f3ee80abedb1874fc491dc4055d4f3203ad74610227c1255e8be6da387190", 0x82}], 0x1, &(0x7f0000000a00)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r0, r8, r0, r0, r1]}}, @rights={{0x1c, 0x1, 0x1, [r1, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @rights={{0x30, 0x1, 0x1, [r1, r0, r0, r0, r1, r14, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r15, r16}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r17, r18}}}], 0x150, 0x4000000}}, {{&(0x7f0000000b80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000010c0)=[{&(0x7f0000000c00)="84b065a56d28c993adc25af15252e4127c0ddf63ea7e", 0x16}, {&(0x7f0000000c40)="0c26fa901e5832cc8e3d6cf479f8c4f57badd98da19d6100810825fec87ea420605f5155ba2b3a79c9e9b0549c04fa56a30d79a18724dcb39ea2b88067bd1d134336cd98d21f3aa1aff85241fd2cda9aaa7febf098214d690bbb0d081a0185728ad27adc9ddf5780232ce33a1770dd6b3415be84db0261f008", 0x79}, {&(0x7f0000000cc0)="b9a54d7e3992e0147075defdb62a6e14e0cb0295baf1d7fbe5b141db6441813cc61ac45afeeaf80a7c7e5bce07249bde97b246cafb4609e6323384584c49743190592951e64acae0fe2796d3bc33a71fac450300520861a629db31f6706c0240365a733840522f6c09f552bdbe9a6e182b66c5f8697ea1c1290a1d84cf0302fea13cbbe0532311b94e2bc559c91ebdd11e73140ed2255d939bf99c6872bf9862189762d5c8d00da060e3f66157f6643bf6358923e7cd9e2ab11069fd9b0bc8c947edd08ac2f58d9f450d6ff1f89e1ef76337", 0xd2}, {&(0x7f0000000dc0)="1d9277d2d3bf3c3c9fc3ca90ab4211dd416b5af9b1b409a8cd757154a06d8a20ff03f631ea8cec8b42a97d19151525070e69126f1c1a0f9baf9ac77059209755c98f7d631651699688b799dcb42ded1a3c18af949e6b5c66c5d8d706dc36ce6a90830fc68d6f331a37a5d967b7dc7df117b54a9fa7b33aab2bc5e28666c71e6ef37fae5211715265e869875e8676b8b8aa72676a83a1a5d90a7d58", 0x9b}, {&(0x7f0000000e80)="d026525ecab2e60fd76a6a1369613c385c3227298891a81e0a6e36237488b4", 0x1f}, {&(0x7f0000000ec0)="5809c452d8ca34fb8b7ccfd17151bc6e528d136707832e324166049a07fae83aee57e9733ef8c5b714139069ba4651c5dfc9ad1dc7951a624078f093db9a93e4b347e084588a7cd05b889c1e07b0097095aeb0cf04a04e79a9943dc255a1bdbeb6cf0df75ab23612cecb3df0f8c1cde97155bd216c6456d63c974581146bb93380aff0374bd0b8b2532f02858d6d64ce2362619d9db80162e9cab4c5b64ed76d062db1d1e207771873cdf3d88c4fc1a0e46c21ef1e0d9360fd72bd4a45231193af9c904c0198bc5c26fe7f87d3e501b04f08f023310e277cd3fd4952601b31aa90a55718ac5e06e65a464472", 0xec}, {&(0x7f0000000fc0)="bb1f5cda480db517fc0549ab1ba80734a33c0e5cbb15016a53e267b4ce", 0x1d}, {&(0x7f0000001000)="45b73907ebe9ab8667a3ab2815d572a4c5d0f8b7ee99fdf39b35819c5e0d403a3a", 0x21}, {&(0x7f0000001040)="dec6fbb65f262c3ff72fb3afd067a1f3b83a4c641e653f192c4fbbeeb6f56c960b4ab1549b8d2ca7103316822ecd2949aa6c6d120d110bacd5252a6a8ecc572ff1eebc092c7609c2727a1ca99b879c06cd8b6900619e05de33529e2daec020f5fe", 0x61}], 0x9, &(0x7f0000001240)=[@cred={{0x1c, 0x1, 0x2, {r19, r20, r21}}}, @rights={{0x28, 0x1, 0x1, [r1, r0, r0, r1, r1, r22]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r23]}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}], 0x80, 0x20000805}}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000012c0)="3f2e2367b741cf4fa2dfb062f825f84b5886ae046f50ac9519c4ee1a96d07415c5658b195c3b116fd02a09ae8b8e2a4e3837633a903ed7fe188d723e7dde678c98340e47ee9e6520728f8d7b2f8be5d7f9ef339bd644bb9b41dac8ce674aa847bfb9bf6ed67eade0185dfe1861f084d5bce090502d9a9f547315a6b4cf0d6559e5b5cb6ee9b3741e3f07737cb9cbe2896535b9ce62a6cc40d98f98b9cee582e1f6a0a44d89230d23e06d6a9ae9", 0xad}, {&(0x7f0000001380)="31116939d5aa539d356376b001c586e2e7e6588115bbfe7e10cbd51a551300e21561fc0a70d1e0d46d50fca03d199eabcfecf9577d20c3879bf973fb450d395e2ea16909bf77fc8e7be833904c56bb3d9a74101cfdfb213799b20ada706a244b19601e41754ba2ccc15f29f6850ab8a8e8e9d3af9c2cacd294984cc1009880c41eb588bd2784b8e56c1a7d6acabc38baf38f500f99962431455dff273b9b", 0x9e}], 0x2, 0x0, 0x0, 0x24040882}}, {{&(0x7f0000001480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001b00)=[{&(0x7f0000001500)="36d4d61073b3f50a47cfb4469492699f139b4a7ffea22f699b492a58edf41bc7c4", 0x21}, {&(0x7f0000001540)="bce775bd9c774e8daceeffddbf9b50877d9eb06cba14c77bbbd6a6e8b864a9e2399bdb6c53523a17d7463e1fe77587d23e4f37ffae877f1c2e887470337fda4b834e3e6bc75ecbc5eb9f93457794d32e32f5d24e8f99f862d6c6e3b3182342d6483b58786f949ec0d69508ad3faf1cbb4650f0e02bc826b76c994c0d20ad474e328961b02ab56af3973ac0cf99a3bf0271f42c3b63c0908abcfe57cc35ec524518fdb8012afbf92e85d4185e61e363927ea8aba248d9b60ddb355ecc553d4a1a80a45b7caf87a893591b9948d7b262f0103f4a479f55c40ce001e52bcbb67b95effe61b553ed8d31af5f6725204f61484ff192", 0xf3}, {&(0x7f0000001640)="04c28e8330cfc0862ad8fb2e2e154095385df3c439d662050d48c123321d045b310efb826dacbed7f84ea0de8e354177f557cce970463c2c794f9608a840c539070586c1fab33d277cfb4ef71b198813bd38ea912e41b10d0e72055134c14dbeff701275c3a06957013dc81b8019ecc1aa629cac7036514e86b8874a00de5a577bf642ec51062c4f7af2d69c63f0c3412922c2dc6b2de28dfd43ee70a2ff5cfaa2634a145a8357349c33fdb60265999162fa947b75545bb0d485d66454743ec46f0a4a83cf3996fb966e6dee13cfed6239d44f50800199169d741006ae142597", 0xe0}, {&(0x7f0000001740)="f648451a6b4baeb210d7cb0bbd0a4dc908859e1037d0f9ffbabb996f477ddd4049f68b5765ac61708a8c2ce4805381de8b89cc3b2aa4d50e7e925d3726eae4a69005", 0x42}, {&(0x7f00000017c0)="fbb6c395adc27c8523d5b815df52fd4a186b212be4448a0eebc5801a0ba71a123ced038c12f0107a809c97ef610e4e88a67b9d7e60b762b36baa2d0658f2733101ca5a7b0ed0389c4bac5f1153823cbade7edc78873b2eb33c66384395299bfb30bf5462b6", 0x65}, {&(0x7f0000001840)="6f533d800b397bb321b8420d9c1278425d58ab364d9fadbcd980922ddc6a5e27bf8d03de5ad2172a63ce28d00492ff91f439c1782f8d779d871dc12edcc309dc85469f53310ee9b3b6dcbf5dcf3e98141aa56e9b5da0aee065d0fd71b7d9c98f8b08b602c5e1e9da6dbca3df4b3b8c9c47c64b21d5ba8a637de8f6b8bce595697503b159a7586fbbf82a0a1b2cd5059a8d2eb63d57", 0x95}, {&(0x7f0000001900)="45247a6afa42e5e0ba44ff3fd8dc84d6550cf50edc4c17419204d69d41ab0979df076983e03832173f9b25e7402bf67c5b8bde96e9a9d0143c0e20c8bf21947861a1a9cc93a14c9b105f6e66dcbbf8807ac2ee8c98132c6aaa472fccbe115934087f5d6aadc8b2240b084fa989d255144ac7c8fda37b8e389af51438334960f8af70b05d2624", 0x86}, {&(0x7f00000019c0)}, {&(0x7f0000001a00)="77feacbb2fdfd2c6ee29285e98d203c67fc42918682ceaa9eaf053aaf490e531af81dcfe560e67c10d371b84d3c733f1595d5e63a58d79234e927fc236dd81dac9402eab2453409f7113d36bf3d61d11861d15850d6b72a544e5ccee97db42c176306b5fe8534c4a2cfaa90573c08681933e53052a65191deb1a373e6fdc7e363ef0f5a7fa552b297e1fda565cfc3a4785f348cf85081dcddae80a228f5c0c5c3b51e3d972dfc2251d507faff580e41b739890a3decb166bc2cd2a23961b99a994fa4c384e6f203b2acac7377fb7ef74385020f4373d589c4e", 0xd9}], 0x9, &(0x7f0000002200)=[@cred={{0x1c, 0x1, 0x2, {r24, r25, r26}}}, @rights={{0x2c, 0x1, 0x1, [r1, r1, r1, r1, r1, r1, r0]}}, @rights={{0x20, 0x1, 0x1, [r0, r1, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r27, r28}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0xe8, 0x4000010}}, {{&(0x7f0000002300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002740)=[{&(0x7f0000002380)="e117c6b461c169977e0ab2baf5b2a7d98b73e35388cde8e74340c868b7524c59f1879e80915dc8d91a7d0fab817b7ff7c851bc2776012d4c35e866572c5316009eba28343b7909ae8b79e14f17390f7363864720401de0e43d85bdc8321cf5fba497dafa33a91c1982b26224e8f04f0e2bfec46ca9707516f3f5c39170bb", 0x7e}, {&(0x7f0000002400)="67a3ef8788f4af533a973daf9760d55d4db05ec7d486a71499a5766680ec497b888bcdc0f0cd45c0395bfd502505bb8bcd26322ce7fe7d6f46322ed366fcbd333c0db6b0a53edf25678aee6a520d8a03f22aec2401e46b90602abaaaf57e056d14eedf97975c0d127bdc45652f65b7411c0697f6aeb89739f5d6b4a33b7c24861d3ef4dc21fece2c4ed5551d2e2b9bf41282269db50eb3c479b4b72eb638286cc9c7", 0xa2}, {&(0x7f00000024c0)="e706d25e7706d794d18397e17c467be688f2583a5766077eb6c67dbb998cad7e1efa261df388e68960733cef9d02a71a3c2fcbdbf99045971d2be7fc16eaff0c334ba60bafe15e4eb69e909fe31349a2c958434c7a99a49fdfc3477c1fb8a3e7c81165098f12d1d21848e45ec3158fb232355f8b1135273bbabb260032426115286294c78fb34c9965618ffd5a93410cdfde5b4911ecdef874488776fcd4b8b542df14970ba639cb4a5207eebb164df54ab0c43e0c19fe972689e54d6e37aace720182ce2cb591bb3dbd2f42256efc7f317143d950b96047433431b8190ec3ac2fd5a109306aae9aeff4072365", 0xed}, {&(0x7f00000025c0)="5c750670c5967d76829ceae2e175a3473737", 0x12}, {&(0x7f0000002600)="e20342c9f0b8e8bbd1cb68b1cf62558ccaebb50dae5b83b3d7be73ae6af5a1eabdc51a7eb6efec8a4e18d66687028da34570c008428a02a4ffc310b2ba397e96ef43ec71a99eca509fb8e7f3778b6f74", 0x50}, {&(0x7f0000002680)="a7a7262e207470127ce4d653f8fc152397a71504a495b9d033fdfacb60bb66e8d3b6020d93fe8f9960bdaf40db286e37af1e416d21735f41f965e75290c2cf41940af86af78d3c5d266191bd6df9dd2d079f464be3a6442ecc36d5d7287b62728fedbaaade429e41a49dea5b7cbcb15e6d83d796ac360b3175869b274593357d04b945ba10e55fc9c4f2ab9ed7a0df6502ce0258ea45f6c22a9f1bd33703d0aa58233115da165d88f282dd", 0xab}], 0x6, &(0x7f0000002880)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r1]}}], 0x40, 0x10}}, {{&(0x7f00000028c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002b40)=[{&(0x7f0000002940)="e3c0739b5cfc540d2842b4d2c47734ed36c4a57c14de7366b3ce8d9feec5d503764bfc052f3f89a3759b5bf904d41f2eb9ff7bccea1463ae905114d8ca591bed534645c65b0fa6a00f3a19cbc82b99a9d120c08c62971a5858207f938da0709734ef1085e024a9dc7d403006b669ae0b571299bcf14e1b6504868d0d3f313f64eafa4e7bbb744c7ec06ef4d0770329fb91a3f86b1a93840ad80d4b33930a4d2adb912d9bdf93b6a04d51f23ea8203bbd8bb59953ad8945fe2ca3fb39a23e36267a71ce1bfd5f11ec2b270ba838b6c1e9aa5dc70f14e7d2fe", 0xd8}, {&(0x7f0000002a40)="e8893596c5a146b6163f76792a15c5d19a99b89c9cf8fb3a3c859e06e470de56b44cabf090360327e83746283ae62a79cc8cab029b6f6036f53847df3683cb89ec0a867184d039066e6ccdc62e377f363e6f501b62cd610009b38ac23c7a340f0964f97609eb7f19fa83da00eefda8277a60cde7bf33c4074d08e6114b9fd34acb8602a92f98140c323501626af81008730a190fe5fe689bb82c0753c950ee52adeb8cbca6086c3531640652bffbbe57c00b3afc9f2051e22132be81df7c4f08548e26440424ffdba8895c01a67d374f44997b5c", 0xd4}], 0x2, &(0x7f0000003080)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r1, r0]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x38, 0x1, 0x1, [r0, r1, r1, r0, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0xf0, 0x400c485}}, {{&(0x7f0000003180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004380)=[{&(0x7f0000003200)="ace756820aba76a583382045c8b5e2110f96221a27284fe665173e30d95e9119951ad08028cf1525e58c3d3fa4b459c6fccbdde50a1290cdfd30b4e64fb47bee5e9165824e4435bb5025d5ee0e5adaaf327f11f9afdb0059f0589fd35536ca5e249ae0b46e", 0x65}, {&(0x7f0000003280)="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", 0x1000}, {&(0x7f0000004280)="39ae1b44fbd8d7a4e9cd326b21f960c44adb8c7ec8d2c02063c6be89cc6096aa0e77798e3ee7bf4ed0abbd384e1450247ab0f17718b712ee488805015616bdcfcb0cdc4d56955d23bd8fea3538cbda8d2d8bf67983047f314bad0f4d187358e69a1af775cfdc7e9378fcb67e1be4362ee525d1832a39e218f822300c491f13263599e264cd3a61c718c5d01e802c57166873b827bd2e0e366395d035f3c3e1fbda1b5eb09fcd00749a40770ed8dcf1385f77d0e500c2c64847ae45cbd8f26d07d490774c6aba3f28f20d64bb7d8095fa4debcacb2e", 0xd5}], 0x3, &(0x7f0000006500)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, r1, r0, r0, r0]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r0]}}], 0x78, 0x8004}}], 0x7, 0x40880)

692.432976ms ago: executing program 6 (id=2508):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0xfffffffa)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019100)='net/udp6\x00')
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
preadv2(r3, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000640)=""/92, 0x5c}], 0x2, 0x4, 0x3ff, 0xa)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$GIO_UNISCRNMAP(r2, 0x4b69, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r4})
io_setup(0x8, &(0x7f0000000600)=<r5=>0x0)
io_submit(r5, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2582)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r6, 0xc04c5349, &(0x7f00000000c0)={0x7fffffff, 0x0, 0x2})
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r7, 0xffffffffffffffff, 0x0)
unshare(0x6020400)
r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/cgroup\x00')
ioctl$NS_GET_NSTYPE(r8, 0xb703, 0x0)

492.62808ms ago: executing program 3 (id=2509):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000500000000000014003500776c616e30000000000000004000000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000)

301.537799ms ago: executing program 4 (id=2510):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x50, 0x11, 0x0, 0x0)
syz_emit_ethernet(0x403, &(0x7f0000000780)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\b@', 0x3cd, 0x3a, 0xff, @remote, @remote, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "00001c050000000026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8675b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x22, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e603000000000000002bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200fff500000000000000000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0xe, "129ac490dce967c4b7a94f7e8e88605aa6be1a02a734ebfedc19193a907378895f81ed3431fbde625de0dea8e00f31eef5bea8ccaef3e62679909097b46124f9f473576a7ee27a2c7c9be6fa6be4d2472a16fad17e490293927bc15aec85521761402c8501e2f0c93d227a9c3445d7066b3cfd6d"}]}}}}}}, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0)
clock_adjtime(0x5, &(0x7f0000004dc0)={0xb, 0x45, 0x8c, 0x4, 0x9, 0x7cca, 0xa, 0xc634, 0x2, 0x4, 0x7c, 0x7, 0x1, 0x8c, 0xcfe, 0x0, 0x0, 0x40000080000, 0xfffffffffffffff9, 0x6, 0x7, 0xa5, 0x1, 0x9014, 0x10, 0x8000006})
r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7})
ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000400)=0x1)
close(0x3)
r5 = socket(0xa, 0x5, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r5, 0x0, 0x486, &(0x7f0000000180), &(0x7f00000001c0)=0xc)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

233.438972ms ago: executing program 1 (id=2511):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"43531ebb28aa52b8fd68f9666100378fbb43c925aafac3d5decac66a68c745a1", 0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000000c0)={"b278ae28a9928dee17e1a94d8d11b79dd8dd09dc4e32b36acd08cb1a44078dcd", r2})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0x20000006}]}, 0x54}}, 0x0)

517.364µs ago: executing program 3 (id=2512):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffffffc}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x20000000) (async)
connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) (async)
syz_emit_ethernet(0x66, &(0x7f00000003c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "c172f5", 0x30, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[], @param_prob={0x4, 0x0, 0x0, 0xffbf, {0x5, 0x6, "d05041", 0x400, 0x88, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}}}}}, 0x0) (async, rerun: 64)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (rerun: 64)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$FE_GET_EVENT(r2, 0x80286f4e, &(0x7f0000000080)={0x0, {0x0, 0x0, @vsb}}) (async)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async)
ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000040)={0xe, 0xfff})
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in6=@loopback, @in=@broadcast}, {@in=@dev, 0x0, 0x6c}, @in6=@mcast2}, 0x0, 0x7fff}, [@proto={0x5, 0x1b}]}, 0x100}}, 0x0) (async)
socket$key(0xf, 0x3, 0x2) (async)
socket$nl_generic(0x10, 0x3, 0x10)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 32)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000380)={'\x00', 0x1, 0x4, 0x7f, 0x81, 0x4}) (async)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0) (async)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044001}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)

0s ago: executing program 1 (id=2513):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@mcast2, @private2, @private2, 0xb5, 0x0, 0x0, 0x100, 0xc00000, 0x800a0002})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0)
syz_usb_connect$cdc_ncm(0x1, 0x9b, &(0x7f0000000400)=ANY=[@ANYBLOB="12015002020000ff2505a1a44000010203010902890002017eb0040904000001020d00000724060001bd4e05240088690d240f0101000000070001000e06241a770e140c241b060001008f0808000d08241c0a000201000c241b800009000d0601007607240a0202038104240202090581031000fea77f0904010000020d00000904010102020d0000090582021000efa91009050302ff034602a9"], &(0x7f0000000600)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x201, 0x9, 0x40, 0x6, 0x8, 0x5a}, 0xc, &(0x7f0000000500)={0x5, 0xf, 0xc, 0x1, [@generic={0x7, 0x10, 0x2, "e7d1bdfe"}]}, 0x1, [{0x93, &(0x7f0000000540)=@string={0x93, 0x3, "fe08ebfd3f2bbbac1f8622d5b7bddea800d17d6be2290a5037e220ad62578b9f9604a9beb687de6bd53724f0844d4305564e3ad7d7ab01fd96d2cd8d07849643b27cc59df3c62f7b7eb427a2f40496d026faf8946f054e5b578cef3b3334af2db1aad8da6f3c201582fa27e94eb737e817bbed21684d6708e6889ca0b42440b5b24a828f6cb16ae54a4f68ba6d588aa4d8"}}]})
r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x301340)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'gretap0\x00', <r3=>0x0, 0x7, 0x1, 0x6, 0xfffffff4, {{0x8, 0x4, 0x1, 0x8, 0x20, 0x65, 0x0, 0x8, 0x4, 0x0, @multicast1, @rand_addr=0x64010100, {[@rr={0x7, 0xb, 0x90, [@multicast1, @multicast1]}]}}}}})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x11bc}}, 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl2\x00', r3, 0x2f, 0x81, 0x2, 0x7, 0x8, @loopback, @private1, 0x40, 0x8000, 0xffffeb3e, 0x4}})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
unlink(0x0)
ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000180)={0x3, 0x100, 0x4, 0x8, 0x7, 0x3, 0x3, 0x6, 0x4, 0x9, 0xe9, 0x9, 0x4, 0xe})

kernel console output (not intermixed with test programs):

ng attributes in process `syz.3.1973'.
[  572.212831][ T5194] Dev loop2: unable to read RDB block 7
[  572.229782][ T5194]  loop2: unable to read partition table
[  572.247261][ T5194] loop2: partition table beyond EOD, truncated
[  572.279834][ T9699] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0023/input/input57
[  572.409697][ T9699] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0023/input/input58
[  572.472367][ T9699] input: syz Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0023/input/input59
[  572.550918][ T9699] input: syz Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0023/input/input60
[  572.612418][ T9699] uclogic 0003:256C:006D.0023: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.1-1/input0
[  572.678976][ T9699] usb 2-1: USB disconnect, device number 105
[  572.882132][ T5144] Bluetooth: hci1: command 0x0c1a tx timeout
[  573.076885][T13808] fido_id[13808]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  573.271300][T13814] loop4: detected capacity change from 0 to 1
[  573.305926][T13814] Dev loop4: unable to read RDB block 1
[  573.416904][T13814]  loop4: unable to read partition table
[  573.431943][T13814] loop4: partition table beyond EOD, truncated
[  573.468956][T13814] loop_reread_partitions: partition scan of loop4 (�被x�^>��� ) failed (rc=-5)
[  573.539529][T13815] netlink: 'syz.6.1977': attribute type 21 has an invalid length.
[  573.550875][ T5194] Dev loop4: unable to read RDB block 1
[  573.589929][ T5194]  loop4: unable to read partition table
[  573.601948][T13815] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1977'.
[  573.615352][ T5194] loop4: partition table beyond EOD, truncated
[  573.616919][T13819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  573.657733][T13819] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  573.697304][T13819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  573.727507][T13819] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  574.302255][ T9699] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[  574.402898][T13836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1984'.
[  574.473769][ T5194] Dev loop2: unable to read RDB block 7
[  574.482251][ T9699] usb 2-1: Using ep0 maxpacket: 32
[  574.487690][ T5194]  loop2: unable to read partition table
[  574.493970][ T5194] loop2: partition table beyond EOD, truncated
[  574.501670][ T9699] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  574.532297][ T9699] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  574.582163][ T9699] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  574.594923][   T30] audit: type=1800 audit(1775123894.730:2753): pid=13843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1987" name="SYSV00000000" dev="tmpfs" ino=9 res=0 errno=0
[  574.616480][ T9699] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  574.642938][ T9699] usb 2-1: config 1 interface 1 has no altsetting 0
[  574.652912][ T9699] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  574.671969][T13846] xt_hashlimit: size too large, truncated to 1048576
[  574.679767][ T9699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  574.696670][ T9699] usb 2-1: Product: syz
[  574.700870][ T9699] usb 2-1: Manufacturer: syz
[  574.722378][ T9699] usb 2-1: SerialNumber: syz
[  574.980149][T13855] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication
[  575.311040][ T9699] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor
[  575.332522][ T9699] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor
[  575.423430][ T9699] usb 2-1: USB disconnect, device number 106
[  575.689800][ T9691] usb 6-1: USB disconnect, device number 101
[  576.252323][T13868] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1992'.
[  576.486359][T13883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1997'.
[  576.673203][ T5894] usb 6-1: new high-speed USB device number 102 using dummy_hcd
[  576.763339][T13878] netlink: 'syz.4.1993': attribute type 21 has an invalid length.
[  576.771424][   T30] audit: type=1326 audit(1775123896.900:2754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13897 comm="syz.1.2002" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb43eb9c819 code=0x0
[  576.772707][T13878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1993'.
[  576.872023][T13902] veth1_to_hsr: entered promiscuous mode
[  576.879710][T13902] macsec2: entered promiscuous mode
[  576.885536][T13902] macsec2: entered allmulticast mode
[  576.891214][T13902] veth1_to_hsr: entered allmulticast mode
[  576.892247][ T5894] usb 6-1: Using ep0 maxpacket: 32
[  576.911725][ T5894] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 32, changing to 7
[  576.941380][ T5894] usb 6-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40
[  576.959905][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  576.972337][ T5894] usb 6-1: Product: syz
[  576.976685][ T5894] usb 6-1: Manufacturer: syz
[  576.981516][ T5894] usb 6-1: SerialNumber: syz
[  577.210156][T13881] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1996'.
[  577.410367][ T5894] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  577.434593][ T5894] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  577.576571][T13910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  577.647110][T13910] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  577.652697][ T5894] usb 6-1: USB disconnect, device number 102
[  577.815295][   T30] audit: type=1800 audit(1775123897.950:2755): pid=13914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2006" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0
[  578.254327][T13926] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication
[  578.277231][T13927] netlink: 392 bytes leftover after parsing attributes in process `syz.6.2008'.
[  578.433093][ T9699] usb 6-1: new high-speed USB device number 103 using dummy_hcd
[  578.472583][T13930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2009'.
[  579.311403][T13950] netlink: 'syz.4.2012': attribute type 10 has an invalid length.
[  579.426439][T13950] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  579.626895][T13955] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2012'.
[  579.727984][T13957] netlink: 'syz.3.2014': attribute type 1 has an invalid length.
[  579.902185][ T9699] usb 6-1: Using ep0 maxpacket: 8
[  579.953896][ T9699] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  580.031147][ T9699] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  580.123462][ T9699] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 46624, setting to 1024
[  580.174342][ T9699] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  580.196099][T13957] 8021q: adding VLAN 0 to HW filter on device bond6
[  580.216053][ T9699] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  580.306766][ T9699] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  580.329655][T13960] bond6: (slave wlan0): Enslaving as an active interface with a down link
[  580.371716][ T9699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  580.682230][ T9699] usb 6-1: GET_CAPABILITIES returned 0
[  580.734532][ T9699] usbtmc 6-1:16.0: can't read capabilities
[  581.027555][T13978] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  581.433290][ T9702] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[  581.638505][ T9702] usb 4-1: unable to get BOS descriptor or descriptor too short
[  581.699364][ T9702] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 185, changing to 7
[  581.763988][ T9702] usb 4-1: string descriptor 0 read error: -22
[  581.806196][ T9702] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  581.827622][T13996] netlink: 'syz.1.2018': attribute type 10 has an invalid length.
[  581.867113][ T9702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  581.917476][T13999] netlink: 'syz.1.2018': attribute type 30 has an invalid length.
[  581.943348][T13996] team0: Device netdevsim0 failed to register rx_handler
[  582.000727][ T9702] usb 4-1: selecting invalid altsetting 1
[  582.054512][ T9702] usb 4-1: unit 3 not found!
[  582.174661][ T9702] usb 4-1: cannot request logical cluster ID: 35217 (err: -5)
[  582.184688][T14004] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2021'.
[  582.227285][ T9702] usb 4-1: invalid MIXER UNIT descriptor 6
[  582.256927][ T9702] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -5
[  582.307197][ T9702] usb 4-1: selecting invalid altsetting 1
[  582.366829][ T9702] usb 4-1: unit 3 not found!
[  583.135742][ T9700] usb 6-1: USB disconnect, device number 103
[  583.534245][ T5894] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[  583.602274][ T9700] usb 6-1: new high-speed USB device number 104 using dummy_hcd
[  583.696959][ T5894] usb 2-1: too many configurations: 9, using maximum allowed: 8
[  583.734939][ T5894] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  583.761315][ T5894] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  583.772207][ T9700] usb 6-1: Using ep0 maxpacket: 32
[  583.791410][ T9700] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  583.791792][ T5894] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  583.839814][ T9700] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  583.842166][ T5894] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  583.894812][ T9700] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  583.906906][ T9700] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  583.919137][ T5894] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  583.958971][ T9700] usb 6-1: config 0 descriptor??
[  583.990085][ T5894] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  584.036225][ T5894] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  584.075411][ T9702] usb 4-1: cannot request logical cluster ID: 35217 (err: -71)
[  584.083219][ T5894] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  584.097261][ T5894] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  584.126601][ T9702] usb 4-1: invalid MIXER UNIT descriptor 6
[  584.128802][ T5894] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  584.146146][ T9702] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -71
[  584.168290][ T9702] usb 4-1: selecting invalid altsetting 1
[  584.184603][ T5894] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  584.196262][ T9702] usb 4-1: unit 3 not found!
[  584.203581][ T5894] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  584.225157][ T5894] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  584.232493][ T9702] usb 4-1: cannot request logical cluster ID: 35217 (err: -71)
[  584.246877][ T5894] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  584.278663][ T5894] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  584.295413][ T9702] usb 4-1: invalid MIXER UNIT descriptor 6
[  584.319616][ T5894] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  584.355669][ T5894] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  584.385185][ T5894] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  584.440739][ T5894] usb 2-1: Product: syz
[  584.460080][ T5894] usb 2-1: Manufacturer: syz
[  584.484587][ T9700] koneplus 0003:1E7D:2D51.0024: global environment stack underflow
[  584.490465][ T5894] usb 2-1: SerialNumber: syz
[  584.515098][ T5894] usb 2-1: config 0 descriptor??
[  584.541472][ T9700] koneplus 0003:1E7D:2D51.0024: item 0 4 1 11 parsing failed
[  584.562693][ T9700] koneplus 0003:1E7D:2D51.0024: parse failed
[  584.568829][ T9700] koneplus 0003:1E7D:2D51.0024: probe with driver koneplus failed with error -22
[  584.586956][ T9702] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -71
[  584.615355][ T5894] yurex 2-1:0.0: Could not find endpoints
[  584.617549][ T9702] usb 4-1: USB disconnect, device number 107
[  584.807194][ T9700] usb 6-1: USB disconnect, device number 104
[  584.841244][T14057] netlink: 'syz.6.2032': attribute type 21 has an invalid length.
[  584.852574][T14053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  584.884240][T14057] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2032'.
[  584.903875][T14053] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  584.913281][T14036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  584.933537][T14036] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  584.949639][T14053] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2031'.
[  584.964533][ T5894] usb 2-1: USB disconnect, device number 107
[  585.134932][ T9702] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[  585.295810][ T9702] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  585.338115][ T9702] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  585.367503][T14073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  585.376232][ T9702] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  585.402778][ T9702] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  585.413094][T14073] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  585.447562][ T9702] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  585.472148][ T9702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  585.493956][ T9702] usb 4-1: config 0 descriptor??
[  585.695947][T14084] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2036'.
[  585.752143][T14084] all: renamed from ip6tnl0 (while UP)
[  585.904593][T14094] netlink: 'syz.6.2039': attribute type 1 has an invalid length.
[  586.033198][T14098] mac80211_hwsim hwsim25 wlan0: entered promiscuous mode
[  586.058617][T14096] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer.
[  586.083675][ T5894] usb 6-1: new high-speed USB device number 105 using dummy_hcd
[  586.131166][ T9702] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  586.253163][ T5894] usb 6-1: Using ep0 maxpacket: 8
[  586.283807][ T5894] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  586.302192][ T5894] usb 6-1: config 179 has no interface number 0
[  586.308621][ T5894] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  586.342139][ T5894] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  586.366740][ T5894] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  586.397370][ T5894] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  586.449505][ T5894] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  586.494608][ T5894] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  586.512263][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  586.540617][T14092] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  586.768917][T14117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  586.792815][T14117] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  586.827268][ T9691] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input62
[  587.017034][ T9702] usb 6-1: USB disconnect, device number 105
[  587.017129][    C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  587.031711][    C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  587.104367][ T9700] usb 4-1: USB disconnect, device number 108
[  587.112550][ T5823] usb 2-1: new high-speed USB device number 108 using dummy_hcd
[  587.282240][ T5823] usb 2-1: Using ep0 maxpacket: 16
[  587.292586][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  587.304072][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  587.315112][ T5823] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  587.324830][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  587.339936][ T5823] usb 2-1: config 0 descriptor??
[  587.568998][T14120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  587.597860][T14120] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  587.664498][ T5823] usbhid 2-1:0.0: can't add hid device: -71
[  587.684488][ T5823] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  587.729230][ T5823] usb 2-1: USB disconnect, device number 108
[  587.818020][ T5194] Dev loop2: unable to read RDB block 7
[  587.847103][ T5194]  loop2: unable to read partition table
[  587.860900][ T5194] loop2: partition table beyond EOD, truncated
[  589.937316][T14159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  589.985857][T14159] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  590.252278][ T9691] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[  590.452153][ T9691] usb 4-1: Using ep0 maxpacket: 16
[  590.481585][ T9691] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  590.502181][ T9691] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  590.530034][ T9691] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  590.570439][ T9691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  590.602772][ T9691] usb 4-1: Product: syz
[  590.626910][ T9691] usb 4-1: Manufacturer: syz
[  590.631567][ T9691] usb 4-1: SerialNumber: syz
[  590.916496][T14162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  590.926035][T14162] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  591.003514][ T9691] usb 4-1: 0:2 : does not exist
[  591.043804][ T9691] usb 4-1: unit 9 not found!
[  591.083171][ T9691] usb 4-1: 4:0: cannot get min/max values for control 1 (id 4)
[  591.139588][ T9691] usb 4-1: 4:0: cannot get min/max values for control 2 (id 4)
[  591.169824][ T9691] usb 4-1: 4:0: cannot get min/max values for control 3 (id 4)
[  591.193832][ T9691] usb 4-1: 4:0: cannot get min/max values for control 4 (id 4)
[  591.211974][ T9691] usb 4-1: 4:0: cannot get min/max values for control 5 (id 4)
[  591.226817][ T9691] usb 4-1: 4:0: cannot get min/max values for control 6 (id 4)
[  591.282907][ T9691] usb 4-1: USB disconnect, device number 109
[  591.354891][T13758] udevd[13758]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  591.622281][ T9691] usb 4-1: new low-speed USB device number 110 using dummy_hcd
[  591.635377][T14176] tipc: Failed to remove unknown binding: 66,1,1/4:413045613/413045615
[  591.656606][T14181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  591.673808][T14181] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  591.804279][ T9691] usb 4-1: Invalid ep0 maxpacket: 16
[  591.925597][    T9] usb 6-1: new high-speed USB device number 106 using dummy_hcd
[  591.942280][ T9691] usb 4-1: new low-speed USB device number 111 using dummy_hcd
[  592.102908][    T9] usb 6-1: Using ep0 maxpacket: 16
[  592.116634][ T9691] usb 4-1: Invalid ep0 maxpacket: 16
[  592.126822][    T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  592.147526][ T9691] usb usb4-port1: attempt power cycle
[  592.163033][    T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  592.209444][    T9] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  592.389719][T14195] netlink: 'syz.1.2063': attribute type 10 has an invalid length.
[  592.415157][T14195] team0: Port device dummy0 added
[  592.423637][T14196] netlink: 'syz.1.2063': attribute type 10 has an invalid length.
[  592.431861][T14195] netlink: 'syz.1.2063': attribute type 10 has an invalid length.
[  592.449706][T14196] team0: Port device dummy0 removed
[  592.502456][ T9691] usb 4-1: new low-speed USB device number 112 using dummy_hcd
[  592.621257][ T9691] usb 4-1: Invalid ep0 maxpacket: 16
[  592.763127][T14199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  592.802266][ T5194] Dev loop2: unable to read RDB block 7
[  592.802317][ T9691] usb 4-1: new low-speed USB device number 113 using dummy_hcd
[  592.818745][T14199] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  592.847350][ T5194]  loop2: unable to read partition table
[  592.864797][ T5194] loop2: partition table beyond EOD, truncated
[  592.953069][ T9691] usb 4-1: Invalid ep0 maxpacket: 16
[  592.980260][ T9691] usb usb4-port1: unable to enumerate USB device
[  593.157983][T14206] bond11: (slave erspan0): Device is not bonding slave
[  593.192998][T14206] bond11: option active_slave: invalid value (erspan0)
[  593.238674][T14206] bond11 (unregistering): Released all slaves
[  594.142876][T14232] fuse: Unknown parameter 'grou00000000000000000000'
[  594.250525][T14222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2068'.
[  594.343621][T14233] --map-set only usable from mangle table
[  594.463686][    T9] usb 6-1: string descriptor 0 read error: -71
[  594.487909][ T5823] usb 2-1: new high-speed USB device number 109 using dummy_hcd
[  594.490679][    T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  594.533564][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  594.637744][T14233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2068'.
[  594.652873][    T9] usb 6-1: rejected 1 configuration due to insufficient available bus power
[  594.679949][    T9] usb 6-1: no configuration chosen from 1 choice
[  594.728283][    T9] usb 6-1: USB disconnect, device number 106
[  594.836776][ T5823] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  594.856095][ T5823] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  594.884125][ T5823] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  594.915731][ T5823] usb 2-1: config 220 has no interface number 2
[  594.939083][ T5823] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  594.976658][ T5823] usb 2-1: config 220 interface 0 has no altsetting 0
[  594.993108][ T5823] usb 2-1: config 220 interface 76 has no altsetting 0
[  595.020720][ T5823] usb 2-1: config 220 interface 1 has no altsetting 0
[  595.055659][ T5823] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  595.062183][    T9] usb 6-1: new full-speed USB device number 107 using dummy_hcd
[  595.065207][T14248] netlink: 'syz.6.2076': attribute type 3 has an invalid length.
[  595.094037][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  595.103762][T14248] netlink: 666 bytes leftover after parsing attributes in process `syz.6.2076'.
[  595.132445][ T5823] usb 2-1: Product: syz
[  595.136696][ T5823] usb 2-1: Manufacturer: syz
[  595.141324][ T5823] usb 2-1: SerialNumber: syz
[  595.181548][T14252] netlink: 'syz.3.2077': attribute type 1 has an invalid length.
[  595.225585][    T9] usb 6-1: unable to get BOS descriptor or descriptor too short
[  595.269939][    T9] usb 6-1: not running at top speed; connect to a high speed hub
[  595.316536][    T9] usb 6-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40
[  595.341958][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  595.350751][    T9] usb 6-1: Product: syz
[  595.355238][    T9] usb 6-1: Manufacturer: syz
[  595.368070][    T9] usb 6-1: SerialNumber: syz
[  595.410935][ T5823] uvcvideo 2-1:220.1: Unknown video format 40000000-0000-2800-0000-000000000000
[  595.432744][ T5823] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  595.440131][ T5823] uvcvideo 2-1:220.0: No valid video chain found.
[  595.478294][ T5823] usb 2-1: selecting invalid altsetting 0
[  595.523260][T14260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2079'.
[  595.551097][ T5823] usb 2-1: selecting invalid altsetting 0
[  595.560973][T14260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2079'.
[  595.582941][ T5823] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[  595.609820][ T5823] usb 2-1: USB disconnect, device number 109
[  595.676006][T14260] netlink: 'syz.3.2079': attribute type 4 has an invalid length.
[  596.160836][T14271] netlink: 'syz.4.2081': attribute type 25 has an invalid length.
[  596.207354][T14271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2081'.
[  596.254533][T14271] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  596.528051][    T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  596.581558][    T9] usb 6-1: MIDIStreaming interface descriptor not found
[  596.814958][    T9] usb 6-1: USB disconnect, device number 107
[  596.824495][T14290] Invalid logical block size (3)
[  596.967516][ T6007] udevd[6007]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  597.030309][T14296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2089'.
[  597.132399][ T9691] usb 2-1: new full-speed USB device number 110 using dummy_hcd
[  597.152204][   T30] audit: type=1326 audit(1775123917.280:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14293 comm="syz.5.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37cf9c819 code=0x7ffc0000
[  597.275724][   T30] audit: type=1326 audit(1775123917.280:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14293 comm="syz.5.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37cf9c819 code=0x7ffc0000
[  597.302173][    T9] usb 4-1: new high-speed USB device number 114 using dummy_hcd
[  597.331540][ T9691] usb 2-1: device descriptor read/64, error -71
[  597.423160][   T30] audit: type=1326 audit(1775123917.380:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14293 comm="syz.5.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa37cf9c819 code=0x7ffc0000
[  597.492219][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  597.514252][T14303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2090'.
[  597.534633][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 17728, setting to 1024
[  597.546002][   T30] audit: type=1326 audit(1775123917.380:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14293 comm="syz.5.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37cf9c819 code=0x7ffc0000
[  597.623363][ T9691] usb 2-1: new full-speed USB device number 111 using dummy_hcd
[  597.632620][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  597.638551][   T30] audit: type=1326 audit(1775123917.380:2760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14293 comm="syz.5.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37cf9c819 code=0x7ffc0000
[  597.668210][T14304] --map-set only usable from mangle table
[  597.717835][T14305] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2090'.
[  597.736167][   T30] audit: type=1326 audit(1775123917.410:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14293 comm="syz.5.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fa37cf9c819 code=0x7ffc0000
[  597.790060][    T9] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  597.810148][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  597.821439][    T9] usb 4-1: Product: syz
[  597.829511][    T9] usb 4-1: Manufacturer: syz
[  597.839136][ T9691] usb 2-1: device descriptor read/64, error -71
[  597.868167][    T9] usb 4-1: SerialNumber: syz
[  597.904171][    T9] usb 4-1: config 0 descriptor??
[  597.926393][T14291] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  597.948352][T14291] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  597.962801][ T9691] usb usb2-port1: attempt power cycle
[  598.204214][    T9] dm9601 4-1:0.0: probe with driver dm9601 failed with error -71
[  598.317336][    T9] usb 4-1: USB disconnect, device number 114
[  598.335791][ T9691] usb 2-1: new full-speed USB device number 112 using dummy_hcd
[  598.373002][ T9691] usb 2-1: device descriptor read/8, error -71
[  598.576686][   T30] audit: type=1326 audit(1775123918.700:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14293 comm="syz.5.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37cf9c819 code=0x7ffc0000
[  598.630203][ T9691] usb 2-1: new full-speed USB device number 113 using dummy_hcd
[  598.673115][ T9691] usb 2-1: device descriptor read/8, error -71
[  598.732455][   T30] audit: type=1326 audit(1775123918.730:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14293 comm="syz.5.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37cf9c819 code=0x7ffc0000
[  598.782696][T14311] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2088'.
[  598.805669][ T9691] usb usb2-port1: unable to enumerate USB device
[  598.850780][   T30] audit: type=1326 audit(1775123918.790:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14293 comm="syz.5.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fa37cf9c819 code=0x7ffc0000
[  598.972306][   T30] audit: type=1326 audit(1775123918.790:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14293 comm="syz.5.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37cf9c819 code=0x7ffc0000
[  599.105447][T14314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  599.156050][T14314] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  599.195930][T14314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  599.242611][T14314] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  599.275448][T14314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  599.300979][T14314] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  599.321423][T14314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  599.363744][T14314] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  599.384197][T14314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  599.412714][T14314] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  599.431995][T14314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  599.473609][T14314] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  599.602261][ T9702] usb 4-1: new full-speed USB device number 115 using dummy_hcd
[  599.773531][ T9702] usb 4-1: not running at top speed; connect to a high speed hub
[  599.806549][ T9702] usb 4-1: New USB device found, idVendor=1430, idProduct=cd3f, bcdDevice=a6.66
[  599.822661][ T9702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  599.833954][T14320] netlink: 'syz.1.2095': attribute type 25 has an invalid length.
[  599.841483][ T9702] usb 4-1: Product: syz
[  599.847202][ T9702] usb 4-1: Manufacturer: syz
[  599.851841][ T9702] usb 4-1: SerialNumber: syz
[  599.862167][T14320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2095'.
[  599.879974][T14320] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6)
[  600.079528][T14330] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2099'.
[  600.121960][ T9702] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  600.137823][T14330] ip6gre1: entered promiscuous mode
[  600.156126][T14330] ip6gre1: entered allmulticast mode
[  600.261762][T14336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2101'.
[  600.306151][ T9702] usb 4-1: USB disconnect, device number 115
[  600.326079][T14329] syzkaller0: entered promiscuous mode
[  600.331632][T14329] syzkaller0: entered allmulticast mode
[  600.439036][T14337] random: crng reseeded on system resumption
[  600.849018][T14341] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2102'.
[  600.893839][T14350] Cannot find del_set index 0 as target
[  601.015799][T14354] xt_hashlimit: max too large, truncated to 1048576
[  601.648586][T14341] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[  601.670320][T14341] macsec1: entered promiscuous mode
[  601.690478][T14341] macsec1: entered allmulticast mode
[  602.186504][T14341] netdevsim netdevsim6 netdevsim0: entered allmulticast mode
[  602.384938][T14363] netlink: 'syz.5.2108': attribute type 25 has an invalid length.
[  602.393257][T14350] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2102'.
[  602.403980][T14363] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2108'.
[  602.416694][T14353] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2106'.
[  602.434762][T14353] bridge_slave_1: default FDB implementation only supports local addresses
[  602.475967][T14363] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  602.658105][T14365] x_tables: duplicate underflow at hook 1
[  602.746167][T14365] geneve2: entered promiscuous mode
[  602.916882][T14375] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  602.955865][T14375] syzkaller0: entered promiscuous mode
[  602.979279][T14375] syzkaller0: entered allmulticast mode
[  603.136941][T14387] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2115'.
[  604.025240][T14411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2121'.
[  604.101455][T14412] --map-set only usable from mangle table
[  604.202708][T14411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2121'.
[  604.806346][T14423] random: crng reseeded on system resumption
[  604.900670][T14429] syzkaller0: entered promiscuous mode
[  604.919345][T14429] syzkaller0: entered allmulticast mode
[  605.527295][T14448] netlink: 'syz.3.2133': attribute type 25 has an invalid length.
[  605.537032][T14448] netlink: 'syz.3.2133': attribute type 28 has an invalid length.
[  605.542196][ T9691] usb 2-1: new full-speed USB device number 114 using dummy_hcd
[  605.706205][ T9691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  605.720825][ T9691] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  605.757592][ T9691] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00
[  605.778227][ T9691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  605.794260][ T9691] usb 2-1: config 0 descriptor??
[  605.849742][T14458] syzkaller0: entered promiscuous mode
[  605.866890][T14458] syzkaller0: entered allmulticast mode
[  605.882320][ T5956] usb 4-1: new high-speed USB device number 116 using dummy_hcd
[  605.892170][    T9] usb 6-1: new high-speed USB device number 108 using dummy_hcd
[  606.048301][ T5956] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  606.059579][    T9] usb 6-1: Using ep0 maxpacket: 8
[  606.092521][    T9] usb 6-1: unable to get BOS descriptor or descriptor too short
[  606.107739][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  606.131283][    T9] usb 6-1: unable to read config index 0 descriptor/start: -71
[  606.146983][    T9] usb 6-1: can't read configurations, error -71
[  606.157640][ T5956] usb 4-1: config 0 descriptor??
[  606.222835][ T9691] hid_parser_main: 28 callbacks suppressed
[  606.222854][ T9691] saitek 0003:06A3:0621.0026: unknown main item tag 0x0
[  606.256999][T14465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  606.274915][T14465] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  606.283060][ T9691] saitek 0003:06A3:0621.0026: unknown main item tag 0x0
[  606.345005][ T9691] saitek 0003:06A3:0621.0026: unknown main item tag 0x0
[  606.370501][T14472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  606.385222][T14472] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  606.406264][ T9691] saitek 0003:06A3:0621.0026: unknown main item tag 0x0
[  606.451332][ T5956] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  606.501840][ T9691] saitek 0003:06A3:0621.0026: unknown main item tag 0x0
[  606.524399][ T9691] saitek 0003:06A3:0621.0026: unknown main item tag 0x0
[  606.544098][ T9691] saitek 0003:06A3:0621.0026: unknown main item tag 0x0
[  606.567081][ T9691] saitek 0003:06A3:0621.0026: unknown main item tag 0x0
[  606.584042][ T9691] saitek 0003:06A3:0621.0026: unknown main item tag 0x0
[  606.591398][ T9691] saitek 0003:06A3:0621.0026: unknown main item tag 0x0
[  606.652176][ T9691] saitek 0003:06A3:0621.0026: hidraw0: USB HID v0.fe Device [HID 06a3:0621] on usb-dummy_hcd.1-1/input0
[  606.663605][ T5956] [drm:udl_init] *ERROR* Selecting channel failed
[  606.718563][ T5956] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2
[  606.771187][ T5956] [drm] Initialized udl on minor 2
[  606.802343][ T5956] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  606.821686][   T30] kauditd_printk_skb: 15 callbacks suppressed
[  606.821706][   T30] audit: type=1326 audit(1775123926.950:2781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14474 comm="syz.5.2143" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa37cf9c819 code=0x0
[  606.854538][ T5956] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  606.872454][ T9691] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  606.897831][ T5956] usb 4-1: USB disconnect, device number 116
[  606.920436][ T9691] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  606.979072][ T9691] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  607.128604][T14479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2145'.
[  607.143208][ T9691] usb 2-1: USB disconnect, device number 114
[  607.189326][T14479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2145'.
[  607.238435][T14483] fuse: Bad value for 'user_id'
[  607.264905][T14483] fuse: Bad value for 'user_id'
[  607.316102][ T5918] hid-generic 0000:0000:0000.0027: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  607.692844][T14492] loop4: detected capacity change from 0 to 1
[  607.728613][T14492] Dev loop4: unable to read RDB block 1
[  607.765706][T14492]  loop4: unable to read partition table
[  607.801715][T14499] syzkaller0: entered promiscuous mode
[  607.814951][T14492] loop4: partition table beyond EOD, truncated
[  607.825916][T14499] syzkaller0: entered allmulticast mode
[  607.842593][T14492] loop_reread_partitions: partition scan of loop4 (�被x�^>��� ) failed (rc=-5)
[  608.324497][T14510] syzkaller1: entered promiscuous mode
[  608.330212][T14510] syzkaller1: entered allmulticast mode
[  608.886259][T14526] xt_hashlimit: size too large, truncated to 1048576
[  609.375961][T14532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2157'.
[  609.477847][T14535] netlink: 'syz.6.2158': attribute type 3 has an invalid length.
[  609.523743][ T5194] Dev loop2: unable to read RDB block 7
[  609.552181][ T5194]  loop2: unable to read partition table
[  609.568333][ T5194] loop2: partition table beyond EOD, truncated
[  609.779425][T14546] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  609.823843][T14545] trusted_key: encrypted_key: insufficient parameters specified
[  609.845400][T14548] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2157'.
[  610.752426][ T9702] usb 4-1: new high-speed USB device number 117 using dummy_hcd
[  610.946441][ T9702] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  610.958373][ T9702] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[  610.983754][ T9702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  611.075189][ T9702] usb 4-1: config 0 descriptor??
[  611.111339][T14551] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  611.452357][ T5918] usb 6-1: new full-speed USB device number 110 using dummy_hcd
[  611.553683][ T9702] hid_parser_main: 29 callbacks suppressed
[  611.553711][ T9702] logitech-djreceiver 0003:046D:C71F.0028: unknown main item tag 0x0
[  611.602454][ T9702] logitech-djreceiver 0003:046D:C71F.0028: unknown main item tag 0x0
[  611.624031][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 4
[  611.661739][ T9702] logitech-djreceiver 0003:046D:C71F.0028: unknown main item tag 0x0
[  611.685037][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 13368, setting to 1023
[  611.707120][ T9702] logitech-djreceiver 0003:046D:C71F.0028: unknown main item tag 0x0
[  611.725813][ T9702] logitech-djreceiver 0003:046D:C71F.0028: unknown main item tag 0x0
[  611.745828][ T5918] usb 6-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb
[  611.770551][ T9702] logitech-djreceiver 0003:046D:C71F.0028: unknown main item tag 0x0
[  611.782250][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  611.790465][ T5918] usb 6-1: Product: syz
[  611.812291][ T9702] logitech-djreceiver 0003:046D:C71F.0028: unknown main item tag 0x0
[  611.828905][ T5918] usb 6-1: Manufacturer: syz
[  611.835339][ T9702] logitech-djreceiver 0003:046D:C71F.0028: unknown main item tag 0x0
[  611.852139][ T5918] usb 6-1: SerialNumber: syz
[  611.867610][ T9702] logitech-djreceiver 0003:046D:C71F.0028: unknown main item tag 0x0
[  611.884599][ T5918] usb 6-1: config 0 descriptor??
[  611.904707][ T9702] logitech-djreceiver 0003:046D:C71F.0028: unknown main item tag 0x0
[  611.920402][ T9702] logitech-djreceiver 0003:046D:C71F.0028: reserved main item tag 0xd
[  611.963152][ T9702] logitech-djreceiver 0003:046D:C71F.0028: hidraw0: USB HID v7f.fd Device [HID 046d:c71f] on usb-dummy_hcd.3-1/input0
[  612.224562][ T5918] usbtouchscreen 6-1:0.0: probe with driver usbtouchscreen failed with error -71
[  612.267722][ T5918] usb 6-1: USB disconnect, device number 110
[  612.802432][ T5956] usb 6-1: new high-speed USB device number 111 using dummy_hcd
[  612.848508][T14578] netlink: 'syz.1.2171': attribute type 21 has an invalid length.
[  612.862834][T14578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2171'.
[  612.911566][T14588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  612.933724][T14588] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  612.991816][ T5956] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  613.015943][ T5956] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  613.032314][ T5956] usb 6-1: Product: syz
[  613.042818][ T5956] usb 6-1: Manufacturer: syz
[  613.051342][ T5956] usb 6-1: SerialNumber: syz
[  613.137768][ T5918] usb 4-1: reset high-speed USB device number 117 using dummy_hcd
[  613.274018][ T5956] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  613.297668][ T5956] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  613.309187][ T5956] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  613.328650][ T5956] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71
[  613.387638][ T5956] usb 6-1: USB disconnect, device number 111
[  613.561443][T14604] xt_CT: You must specify a L4 protocol and not use inversions on it
[  613.793595][T14612] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2180'.
[  613.851002][T14612] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  614.087346][T14623] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2184'.
[  614.097973][T14623] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  614.114754][T14623] batman_adv: batadv0: Removing interface: batadv_slave_0
[  614.132964][ T5956] usb 2-1: new full-speed USB device number 115 using dummy_hcd
[  614.257049][ T9702] usb 4-1: USB disconnect, device number 117
[  614.286878][ T5956] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  614.296607][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  614.342155][ T5956] usb 2-1: Product: syz
[  614.352456][ T5956] usb 2-1: Manufacturer: syz
[  614.367281][ T5956] usb 2-1: SerialNumber: syz
[  614.387285][ T5956] usb 2-1: config 0 descriptor??
[  614.415592][T14627] netlink: 'syz.5.2185': attribute type 21 has an invalid length.
[  614.439309][T14627] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2185'.
[  614.611518][ T5956] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  614.679632][ T5956] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  614.722561][ T5956] usb 2-1: USB disconnect, device number 115
[  614.861249][T14647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  614.886396][T14649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  614.896265][T14647] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  614.921333][T14649] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  615.323709][T14663] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2194'.
[  615.771696][T14691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2197'.
[  615.785062][T14691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2197'.
[  616.150008][T14703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2205'.
[  616.261891][T14701] netlink: 'syz.6.2204': attribute type 21 has an invalid length.
[  616.306199][T14701] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2204'.
[  616.932303][ T9702] usb 6-1: new high-speed USB device number 112 using dummy_hcd
[  617.019864][T14724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  617.043376][T14725] loop4: detected capacity change from 0 to 1
[  617.066718][T14724] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  617.083504][T13730] Dev loop4: unable to read RDB block 1
[  617.089110][T13730]  loop4: unable to read partition table
[  617.122225][ T9702] usb 6-1: Using ep0 maxpacket: 32
[  617.122510][T13730] loop4: partition table beyond EOD, truncated
[  617.135600][T14725] Dev loop4: unable to read RDB block 1
[  617.146935][ T9702] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  617.165127][T14725]  loop4: unable to read partition table
[  617.181140][ T9702] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  617.191615][T14725] loop4: partition table beyond EOD, truncated
[  617.201537][T14725] loop_reread_partitions: partition scan of loop4 (�被x�^>��� ) failed (rc=-5)
[  617.212601][ T9702] usb 6-1: config 0 interface 0 has no altsetting 0
[  617.243656][ T9702] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  617.271664][   T30] audit: type=1800 audit(1775123937.400:2782): pid=14734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2213" name="SYSV00000000" dev="tmpfs" ino=10 res=0 errno=0
[  617.292590][ T9702] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  617.300625][ T9702] usb 6-1: Product: syz
[  617.344993][ T9702] usb 6-1: Manufacturer: syz
[  617.351808][ T9702] usb 6-1: SerialNumber: syz
[  617.370856][ T9702] usb 6-1: config 0 descriptor??
[  617.570174][T14746] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  617.625025][ T9702] gs_usb 6-1:0.0: Configuring for 1 interfaces
[  617.686427][T14737] bond7: option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  617.725074][T14737] bond7 (unregistering): Released all slaves
[  617.906459][T14752] syzkaller0: entered promiscuous mode
[  617.912713][T14752] syzkaller0: entered allmulticast mode
[  618.065173][ T9702] usb 6-1: USB disconnect, device number 112
[  618.992429][ T9702] usb 6-1: new high-speed USB device number 113 using dummy_hcd
[  619.152480][ T9702] usb 6-1: Using ep0 maxpacket: 32
[  619.171247][ T9702] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  619.186942][ T9702] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  619.208295][ T9702] usb 6-1: Product: syz
[  619.225180][ T9702] usb 6-1: Manufacturer: syz
[  619.241676][ T9702] usb 6-1: SerialNumber: syz
[  619.275288][ T9702] usb 6-1: config 0 descriptor??
[  619.308360][ T9702] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  619.690951][T14773] kvm: pic: non byte write
[  619.979682][ T9702] gspca_ov534_9: reg_w failed -71
[  620.342180][ T9702] gspca_ov534_9: Unknown sensor 0000
[  620.342292][ T9702] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22
[  620.436686][ T9702] usb 6-1: USB disconnect, device number 113
[  620.494356][T14791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2220'.
[  620.683610][T14794] --map-set only usable from mangle table
[  620.837669][T14794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2220'.
[  620.979766][ T5194] Dev loop2: unable to read RDB block 7
[  620.993581][ T5194]  loop2: unable to read partition table
[  621.021117][ T5194] loop2: partition table beyond EOD, truncated
[  621.062142][ T5956] usb 4-1: new low-speed USB device number 118 using dummy_hcd
[  621.264243][ T5956] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  621.321005][ T5956] usb 4-1: config 0 has no interface number 0
[  621.401550][ T5956] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  621.492974][ T5956] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  621.718883][ T5956] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  621.801835][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  621.872910][ T9702] usb 6-1: new high-speed USB device number 114 using dummy_hcd
[  621.902623][ T5956] usb 4-1: config 0 descriptor??
[  621.908614][T14808] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  622.079656][ T5956] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  622.084186][ T9702] usb 6-1: Using ep0 maxpacket: 16
[  622.137531][ T9702] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  622.161735][ T9702] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  622.194472][ T9702] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  622.237375][ T9702] usb 6-1: Product: syz
[  622.241628][ T9702] usb 6-1: Manufacturer: syz
[  622.257170][ T5956] usb 4-1: USB disconnect, device number 118
[  622.257333][    C1] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  622.281457][T14834] sctp: [Deprecated]: syz.1.2228 (pid 14834) Use of int in maxseg socket option.
[  622.281457][T14834] Use struct sctp_assoc_value instead
[  622.306127][ T9702] usb 6-1: SerialNumber: syz
[  622.339512][T14837] ip6t_REJECT: ECHOREPLY is not supported
[  622.361900][ T9702] usb 6-1: config 0 descriptor??
[  622.387363][ T9702] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  622.437530][ T9702] em28xx 6-1:0.0: DVB interface 0 found: bulk
[  622.882581][ T5956] usb 2-1: new high-speed USB device number 116 using dummy_hcd
[  622.996100][ T9702] em28xx 6-1:0.0: chip ID is em2874
[  623.064959][ T5956] usb 2-1: config 248 has an invalid descriptor of length 0, skipping remainder of the config
[  623.100805][ T5956] usb 2-1: config 248 has 0 interfaces, different from the descriptor's value: 1
[  623.125644][T14844] fuse: Bad value for 'user_id'
[  623.141167][T14844] fuse: Bad value for 'user_id'
[  623.141778][ T5956] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  623.183355][ T5956] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  623.244425][ T5956] usb 2-1: Manufacturer: syz
[  623.397321][T14847] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2232'.
[  623.423279][T14847] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2232'.
[  623.691899][T14851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  623.724076][T14840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  623.733143][T14851] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  623.768021][T14840] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  624.020256][ T9702] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  624.034257][ T9702] em28xx 6-1:0.0: board has no eeprom
[  624.102221][ T9702] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  624.140011][ T9702] em28xx 6-1:0.0: dvb set to bulk mode.
[  624.162899][ T9700] em28xx 6-1:0.0: Binding DVB extension
[  624.197577][ T9702] usb 6-1: USB disconnect, device number 114
[  624.214954][ T5194] Dev loop2: unable to read RDB block 7
[  624.234554][ T9702] em28xx 6-1:0.0: Disconnecting em28xx
[  624.240492][ T5194]  loop2: unable to read partition table
[  624.256563][ T5194] loop2: partition table beyond EOD, truncated
[  624.264987][T14865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  624.284192][T14865] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  624.319458][T14865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  624.337524][ T9700] em28xx 6-1:0.0: Registering input extension
[  624.350215][T14865] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  624.461127][ T9691] usb 2-1: USB disconnect, device number 116
[  624.488023][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  624.494526][ T9700] rc_core: IR keymap rc-pinnacle-pctv-hd not found
[  624.505009][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  624.522578][ T9700] Registered IR keymap rc-empty
[  624.530292][ T9700] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  624.562868][ T9700] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input65
[  624.579602][ T9700] em28xx 6-1:0.0: Input extension successfully initialized
[  624.587291][ T9702] em28xx 6-1:0.0: Closing input extension
[  624.630210][ T9702] em28xx 6-1:0.0: Freeing device
[  624.947144][T14881] binder: 14880:14881 ioctl c00c6211 0 returned -14
[  625.200605][T14888] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  625.238835][T14888] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false
[  625.312232][ T9691] usb 2-1: new high-speed USB device number 117 using dummy_hcd
[  625.496958][ T9691] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  625.582742][ T9691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  625.705186][ T9691] usb 2-1: Product: syz
[  625.709423][ T9691] usb 2-1: Manufacturer: syz
[  625.777050][ T9691] usb 2-1: SerialNumber: syz
[  626.082146][T14899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  626.127689][T14899] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  626.343461][ T9691] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  626.376228][ T9691] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  626.507628][T14899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  626.535930][ T9691] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  626.576434][T14899] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  626.598701][ T9691] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  626.641513][ T9691] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  626.683634][ T9691] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  626.714116][ T9691] usb 2-1: USB disconnect, device number 117
[  626.872869][ T5194] Dev loop2: unable to read RDB block 7
[  626.878666][ T5194]  loop2: unable to read partition table
[  626.892429][ T5194] loop2: partition table beyond EOD, truncated
[  627.232872][T14914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  627.255196][T14914] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  627.523181][ T9702] usb 2-1: new high-speed USB device number 118 using dummy_hcd
[  627.692785][ T9700] usb 6-1: new high-speed USB device number 115 using dummy_hcd
[  627.722735][ T9702] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  627.742414][ T9702] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  627.773116][ T9702] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  627.782532][ T9702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  627.813186][ T9702] usb 2-1: SerialNumber: syz
[  627.892178][ T9700] usb 6-1: Using ep0 maxpacket: 32
[  627.901033][ T9700] usb 6-1: config 2 has an invalid interface number: 88 but max is 0
[  627.913485][ T9700] usb 6-1: config 2 has no interface number 0
[  627.930721][ T9700] usb 6-1: config 2 interface 88 has no altsetting 0
[  627.955519][ T9700] usb 6-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[  627.972329][ T9700] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  627.991227][ T9700] usb 6-1: Product: syz
[  628.003750][ T9700] usb 6-1: Manufacturer: syz
[  628.009275][ T9700] usb 6-1: SerialNumber: syz
[  628.058773][T14912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  628.083263][T14912] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  628.119990][ T9702] usb 2-1: 0:2 : does not exist
[  628.315971][ T9702] usb 2-1: USB disconnect, device number 118
[  628.399612][T13758] udevd[13758]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  628.618796][   T30] audit: type=1800 audit(1775123948.750:2783): pid=14945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2255" name="file0" dev="tmpfs" ino=2519 res=0 errno=0
[  628.839946][T14950] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  629.525825][T14971] kAFS: unable to lookup cell '�'
[  629.673603][T14978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2266'.
[  629.927211][T14984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  629.953162][T14984] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  630.138382][T14984] kvm: pic: non byte write
[  630.374609][ T9700] asix 6-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  630.410277][ T9700] asix 6-1:2.88: probe with driver asix failed with error -71
[  630.450959][ T9700] usb 6-1: USB disconnect, device number 115
[  630.733221][T14996] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2271'.
[  630.819829][T14997] Cannot find del_set index 0 as target
[  631.259074][T14997] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2271'.
[  631.493102][ T9702] usb 6-1: new high-speed USB device number 116 using dummy_hcd
[  631.512438][T15009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2275'.
[  631.563491][T15009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2275'.
[  631.609999][T15009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2275'.
[  631.655405][T15009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2275'.
[  631.684142][ T9702] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82
[  631.696925][T15009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2275'.
[  631.712338][ T9702] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  631.735132][T15009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2275'.
[  631.747883][ T9702] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  631.765513][T15009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2275'.
[  631.777878][ T9702] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  631.814752][ T9702] usb 6-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f
[  631.850377][ T9702] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  631.910130][T15009] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  631.931321][ T9702] usb 6-1: Product: syz
[  631.949308][ T9702] usb 6-1: Manufacturer: syz
[  631.992645][ T9702] usb 6-1: SerialNumber: syz
[  632.052820][ T9702] usb 6-1: config 0 descriptor??
[  632.080594][ T9702] redrat3 6-1:0.0: Couldn't find all endpoints
[  632.263848][T15011] netlink: 'syz.5.2276': attribute type 39 has an invalid length.
[  632.317035][ T9691] usb 6-1: USB disconnect, device number 116
[  632.359421][T15024] netlink: 'syz.6.2279': attribute type 5 has an invalid length.
[  632.419848][T15024] geneve3: entered promiscuous mode
[  632.442325][T15024] geneve3: entered allmulticast mode
[  632.459064][T10599] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  632.492193][T10599] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  632.526411][T10599] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  632.544348][T10602] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  633.145193][T15045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  633.172920][T15045] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  633.204193][    T9] usb 6-1: new high-speed USB device number 117 using dummy_hcd
[  633.362435][    T9] usb 6-1: Using ep0 maxpacket: 16
[  633.370395][    T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  633.383051][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  633.397888][    T9] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  633.408657][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  633.417821][    T9] usb 6-1: Product: syz
[  633.422344][    T9] usb 6-1: Manufacturer: syz
[  633.427143][    T9] usb 6-1: SerialNumber: syz
[  633.439369][    T9] usb 6-1: config 0 descriptor??
[  633.456985][    T9] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  633.467618][    T9] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class)
[  633.725535][    T9] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[  633.737103][    T9] em28xx 6-1:0.0: Config register raw data: 0xfffffffb
[  633.747993][    T9] em28xx 6-1:0.0: AC97 chip type couldn't be determined
[  633.757475][    T9] em28xx 6-1:0.0: No AC97 audio processor
[  633.776745][    T9] usb 6-1: USB disconnect, device number 117
[  633.794482][    T9] em28xx 6-1:0.0: Disconnecting em28xx
[  633.816946][    T9] em28xx 6-1:0.0: Freeing device
[  634.143314][T15062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  634.163159][T15062] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  634.714180][T15070] __nla_validate_parse: 12 callbacks suppressed
[  634.714242][T15070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2289'.
[  634.789405][T15071] --map-set only usable from mangle table
[  635.101959][T15076] netlink: 'syz.1.2291': attribute type 25 has an invalid length.
[  635.142394][T15076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2291'.
[  636.133502][T15087] netlink: 'syz.6.2294': attribute type 4 has an invalid length.
[  636.173404][T15071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2289'.
[  636.196785][T15094] netlink: 'syz.6.2294': attribute type 4 has an invalid length.
[  636.213161][T15076] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6)
[  636.912107][    T9] usb 6-1: new full-speed USB device number 118 using dummy_hcd
[  637.097442][    T9] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  637.128303][    T9] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  637.153785][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[  637.171468][    T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=0320, bcdDevice= 0.00
[  637.191573][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  637.213681][    T9] usb 6-1: config 0 descriptor??
[  637.584252][T15118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2303'.
[  637.712221][ T9702] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[  637.740670][    T9] hid_parser_main: 445 callbacks suppressed
[  637.740699][    T9] apple 0003:05AC:0320.0029: unknown main item tag 0x0
[  637.861348][    T9] apple 0003:05AC:0320.0029: unknown main item tag 0x0
[  637.872129][ T9702] usb 2-1: Using ep0 maxpacket: 32
[  637.889504][ T9702] usb 2-1: config 0 has no interfaces?
[  637.906482][ T9702] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  637.926085][ T9702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  637.931801][    T9] apple 0003:05AC:0320.0029: unknown main item tag 0x0
[  637.953030][    T9] apple 0003:05AC:0320.0029: unknown main item tag 0x0
[  637.960834][    T9] apple 0003:05AC:0320.0029: unknown main item tag 0x0
[  637.970463][    T9] apple 0003:05AC:0320.0029: unknown main item tag 0x0
[  637.979344][    T9] apple 0003:05AC:0320.0029: unknown main item tag 0x0
[  637.985252][ T9702] usb 2-1: config 0 descriptor??
[  637.987153][    T9] apple 0003:05AC:0320.0029: unknown main item tag 0x0
[  637.999361][    T9] apple 0003:05AC:0320.0029: unknown main item tag 0x0
[  638.009775][    T9] apple 0003:05AC:0320.0029: unknown main item tag 0x0
[  638.030441][T15133] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2299'.
[  638.079694][    T9] apple 0003:05AC:0320.0029: hidraw0: USB HID v7f.fd Device [HID 05ac:0320] on usb-dummy_hcd.5-1/input0
[  638.287548][T15111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  638.322553][T15111] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  638.582362][    T9] usb 6-1: USB disconnect, device number 118
[  638.993710][    T9] usb 2-1: USB disconnect, device number 119
[  639.145368][T15158] netlink: 'syz.3.2310': attribute type 21 has an invalid length.
[  639.156417][T15158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2310'.
[  639.175078][ T9699] usb 6-1: new high-speed USB device number 119 using dummy_hcd
[  639.342450][ T9699] usb 6-1: Using ep0 maxpacket: 16
[  639.350970][ T9699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  639.365019][ T9699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  639.375686][ T9699] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  639.390347][ T9699] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  639.400000][ T9699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  639.411111][ T9699] usb 6-1: config 0 descriptor??
[  639.432281][    T9] usb 2-1: new high-speed USB device number 120 using dummy_hcd
[  639.603969][    T9] usb 2-1: no configurations
[  639.622260][    T9] usb 2-1: can't read configurations, error -22
[  639.638007][T15156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  639.650571][T15156] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  639.651539][T15161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  639.664575][T15162] netlink: 'syz.3.2314': attribute type 1 has an invalid length.
[  639.675039][T15161] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  639.689268][T15161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  639.700727][T15161] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  639.717537][T15162] 8021q: adding VLAN 0 to HW filter on device bond7
[  639.735465][T15164] bond7: (slave geneve2): making interface the new active one
[  639.745462][T15164] bond7: (slave geneve2): Enslaving as an active interface with an up link
[  639.755906][T10598] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  639.766078][T10598] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  639.772226][    T9] usb 2-1: new high-speed USB device number 121 using dummy_hcd
[  639.801459][T15162] bond8 (unregistering): Released all slaves
[  639.821086][T10598] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  639.831712][T10598] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  639.924588][ T9699] input: HID 0955:7214 Haptics as /devices/virtual/input/input67
[  639.935315][    T9] usb 2-1: no configurations
[  639.944945][    T9] usb 2-1: can't read configurations, error -22
[  639.965553][    T9] usb usb2-port1: attempt power cycle
[  640.034632][ T9699] shield 0003:0955:7214.002A: Registered Thunderstrike controller
[  640.062745][ T9699] shield 0003:0955:7214.002A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0
[  640.146473][ T9699] usb 6-1: USB disconnect, device number 119
[  640.154760][ T9700] shield 0003:0955:7214.002A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  640.187729][ T9700] shield 0003:0955:7214.002A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  640.212882][ T9700] shield 0003:0955:7214.002A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  640.251959][ T9700] shield 0003:0955:7214.002A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  640.316589][    T9] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[  640.358861][    T9] usb 2-1: no configurations
[  640.375333][    T9] usb 2-1: can't read configurations, error -22
[  640.522286][    T9] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[  640.557096][T15176] libceph: resolve 'c' (ret=-3): failed
[  640.753852][    T9] usb 2-1: device not accepting address 123, error -71
[  640.784510][    T9] usb usb2-port1: unable to enumerate USB device
[  641.182300][    T9] usb 2-1: new high-speed USB device number 124 using dummy_hcd
[  641.402177][    T9] usb 2-1: Using ep0 maxpacket: 32
[  641.418459][   T30] audit: type=1800 audit(1775123961.550:2784): pid=15177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2318" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  641.424029][    T9] usb 2-1: config 7 has an invalid interface number: 160 but max is 0
[  641.505921][    T9] usb 2-1: config 7 has an invalid interface association descriptor of length 2, skipping
[  641.532378][    T9] usb 2-1: config 7 has no interface number 0
[  641.547731][    T9] usb 2-1: config 7 interface 160 altsetting 6 has a duplicate endpoint with address 0x5, skipping
[  641.586708][    T9] usb 2-1: config 7 interface 160 has no altsetting 0
[  641.609733][    T9] usb 2-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a
[  641.650922][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  641.702388][    T9] usb 2-1: Product: syz
[  641.742151][    T9] usb 2-1: Manufacturer: syz
[  641.762308][    T9] usb 2-1: SerialNumber: syz
[  642.091980][T15182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  642.114721][T15182] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  642.163479][    T9] usb 2-1: USB disconnect, device number 124
[  642.438019][T15207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  642.459488][T15207] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  642.467734][ T5956] usb 6-1: new high-speed USB device number 120 using dummy_hcd
[  642.634228][ T5956] usb 6-1: config 0 has no interfaces?
[  642.639999][ T5956] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  642.649399][ T5956] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  642.661639][ T5956] usb 6-1: config 0 descriptor??
[  642.899375][ T9691] usb 6-1: USB disconnect, device number 120
[  643.002853][T15225] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2333'.
[  643.302267][ T9691] usb 4-1: new high-speed USB device number 119 using dummy_hcd
[  643.362558][ T5956] usb 6-1: new high-speed USB device number 121 using dummy_hcd
[  643.462353][ T9691] usb 4-1: Using ep0 maxpacket: 16
[  643.470076][ T9691] usb 4-1: config 0 has an invalid interface number: 251 but max is 0
[  643.478647][ T9691] usb 4-1: config 0 has no interface number 0
[  643.485001][ T9691] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  643.495474][ T9691] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  643.508462][ T9691] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  643.517784][ T9691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  643.526366][ T9691] usb 4-1: Product: syz
[  643.531337][ T9691] usb 4-1: Manufacturer: syz
[  643.536465][ T9691] usb 4-1: SerialNumber: syz
[  643.543784][ T5956] usb 6-1: unable to get BOS descriptor or descriptor too short
[  643.553273][ T5956] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[  643.564501][ T5956] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7
[  643.576458][ T9691] usb 4-1: config 0 descriptor??
[  643.586104][T15227] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  643.598048][T15227] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  643.608308][ T5956] usb 6-1: string descriptor 0 read error: -22
[  643.615124][ T5956] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  643.625448][ T5956] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  643.691257][T15229] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2335'.
[  643.810567][T15227] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  643.818675][T15227] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  643.849163][ T5956] usb 6-1: Can't get UAC3 power state for id 10
[  643.942237][ T5918] usb 2-1: new full-speed USB device number 125 using dummy_hcd
[  644.072136][ T5918] usb 2-1: device descriptor read/64, error -71
[  644.312236][ T5918] usb 2-1: new full-speed USB device number 126 using dummy_hcd
[  644.452203][ T5918] usb 2-1: device descriptor read/64, error -71
[  644.459874][ T5956] usb 6-1: 2:0: failed to get current value for ch 0 (-32)
[  644.566637][ T5918] usb usb2-port1: attempt power cycle
[  644.912522][ T5918] usb 2-1: new full-speed USB device number 127 using dummy_hcd
[  644.932935][ T5918] usb 2-1: device descriptor read/8, error -71
[  645.192252][ T5918] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[  645.213133][ T5918] usb 2-1: device descriptor read/8, error -71
[  645.255675][   T30] audit: type=1800 audit(1775123965.390:2785): pid=15234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2337" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0
[  645.322418][ T5918] usb usb2-port1: unable to enumerate USB device
[  645.441093][ T9691] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  645.611554][T15239] netdevsim netdevsim6 netdevsim0: IPsec offload requires 128 bit authentication
[  645.737377][ T5956] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2)
[  645.879610][T15243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2338'.
[  645.920020][T15245] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2339'.
[  645.933410][T15241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  645.979385][T15241] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  646.096840][ T9691] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0002: -71
[  646.150308][ T9691] asix 4-1:0.251 (unnamed net_device) (uninitialized): Could not register MDIO bus
[  646.167705][ T5956] usb 6-1: USB disconnect, device number 121
[  646.206746][ T9691] asix 4-1:0.251: probe with driver asix failed with error -5
[  646.253200][ T9691] usb 4-1: USB disconnect, device number 119
[  647.209770][T15264] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  647.272529][ T5956] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  647.412165][ T5956] usb 2-1: device descriptor read/64, error -71
[  647.580729][T15264] FAULT_FLAG_ALLOW_RETRY missing 801
[  647.655011][T15264] CPU: 1 UID: 0 PID: 15264 Comm: syz.5.2342 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  647.655046][T15264] Tainted: [L]=SOFTLOCKUP
[  647.655054][T15264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  647.655065][T15264] Call Trace:
[  647.655073][T15264]  <TASK>
[  647.655083][T15264]  dump_stack_lvl+0xe8/0x150
[  647.655114][T15264]  handle_userfault+0x1532/0x17f0
[  647.655157][T15264]  ? __pfx___folio_put+0x10/0x10
[  647.655187][T15264]  ? __pfx_handle_userfault+0x10/0x10
[  647.655218][T15264]  handle_mm_fault+0x1bec/0x3310
[  647.655245][T15264]  ? handle_mm_fault+0xee/0x3310
[  647.655266][T15264]  ? __pfx_handle_mm_fault+0x10/0x10
[  647.655284][T15264]  ? follow_page_pte+0x841/0x1450
[  647.655301][T15264]  ? __pfx_follow_page_pte+0x10/0x10
[  647.655318][T15264]  __get_user_pages+0x165b/0x29d0
[  647.655353][T15264]  populate_vma_page_range+0x2be/0x3c0
[  647.655372][T15264]  ? __pfx_populate_vma_page_range+0x10/0x10
[  647.655388][T15264]  ? vma_wants_writenotify+0xb3/0x2a0
[  647.655408][T15264]  ? vma_set_page_prot+0xc3/0x100
[  647.655426][T15264]  mprotect_fixup+0x893/0xa80
[  647.655446][T15264]  ? __pfx_mprotect_fixup+0x10/0x10
[  647.655462][T15264]  ? apparmor_file_mprotect+0x1d0/0x400
[  647.655477][T15264]  ? security_file_mprotect+0x1a/0x290
[  647.655496][T15264]  do_mprotect_pkey+0x8ab/0xcd0
[  647.655518][T15264]  ? __pfx_do_mprotect_pkey+0x10/0x10
[  647.655540][T15264]  ? __se_sys_futex+0x3a8/0x450
[  647.655561][T15264]  ? rcu_is_watching+0x15/0xb0
[  647.655582][T15264]  __x64_sys_mprotect+0x80/0x90
[  647.655597][T15264]  do_syscall_64+0x14d/0xf80
[  647.655613][T15264]  ? trace_irq_disable+0x3b/0x150
[  647.655623][T15264]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  647.655635][T15264]  ? clear_bhb_loop+0x40/0x90
[  647.655650][T15264]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  647.655662][T15264] RIP: 0033:0x7fa37cf9c819
[  647.655675][T15264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  647.655685][T15264] RSP: 002b:00007fa37dd84028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a
[  647.655700][T15264] RAX: ffffffffffffffda RBX: 00007fa37d216180 RCX: 00007fa37cf9c819
[  647.655709][T15264] RDX: 000000000000000f RSI: 0000000000004000 RDI: 0000200000ffc000
[  647.655716][T15264] RBP: 00007fa37d032c91 R08: 0000000000000000 R09: 0000000000000000
[  647.655724][T15264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  647.655731][T15264] R13: 00007fa37d216218 R14: 00007fa37d216180 R15: 00007fa37d33fa48
[  647.655749][T15264]  </TASK>
[  647.732655][ T5956] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  647.733880][ T5918] usb 4-1: new high-speed USB device number 120 using dummy_hcd
[  648.017270][ T5956] usb 2-1: device descriptor read/64, error -71
[  648.142393][ T5956] usb usb2-port1: attempt power cycle
[  648.163446][ T5918] usb 4-1: Using ep0 maxpacket: 8
[  648.180300][ T5918] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  648.190608][ T5918] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  648.236117][ T5918] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  648.297305][ T5918] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  648.342830][ T5918] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  648.366482][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  648.427339][T15293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  648.453468][T15293] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  648.470390][T15293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2352'.
[  648.492289][ T5956] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  648.513361][ T5956] usb 2-1: device descriptor read/8, error -71
[  648.602199][ T5918] usb 4-1: GET_CAPABILITIES returned 0
[  648.607812][ T5918] usbtmc 4-1:16.0: can't read capabilities
[  648.752815][ T5956] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  648.781409][T15303] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  648.788812][ T5956] usb 2-1: device descriptor read/8, error -71
[  648.793361][T15303] tipc: Resetting bearer <eth:syzkaller0>
[  648.822906][T15302] tipc: Disabling bearer <eth:syzkaller0>
[  648.902545][ T5956] usb usb2-port1: unable to enumerate USB device
[  649.119712][   T30] audit: type=1326 audit(1775123969.250:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15311 comm="syz.4.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f06f9c819 code=0x7ffc0000
[  649.155336][T15312] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2359'.
[  649.155864][   T30] audit: type=1326 audit(1775123969.250:2787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15311 comm="syz.4.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f06f9c819 code=0x7ffc0000
[  649.240017][   T30] audit: type=1326 audit(1775123969.280:2788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15311 comm="syz.4.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1f06f9c819 code=0x7ffc0000
[  649.327895][   T30] audit: type=1326 audit(1775123969.280:2789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15311 comm="syz.4.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f06f9c819 code=0x7ffc0000
[  649.364776][   T30] audit: type=1326 audit(1775123969.280:2790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15311 comm="syz.4.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f06f9c819 code=0x7ffc0000
[  649.399578][   T30] audit: type=1326 audit(1775123969.280:2791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15311 comm="syz.4.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1f06f9c819 code=0x7ffc0000
[  649.487086][   T30] audit: type=1326 audit(1775123969.280:2792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15311 comm="syz.4.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f06f9c819 code=0x7ffc0000
[  649.494217][T15324] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2360'.
[  649.516605][   T30] audit: type=1326 audit(1775123969.280:2793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15311 comm="syz.4.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f06f9c819 code=0x7ffc0000
[  649.623028][   T30] audit: type=1326 audit(1775123969.280:2794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15311 comm="syz.4.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f1f06f9c819 code=0x7ffc0000
[  649.655768][T15324] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  649.666618][T15324] macsec1: entered promiscuous mode
[  649.666937][T15327] Cannot find del_set index 0 as target
[  649.681727][T15324] macsec1: entered allmulticast mode
[  649.687240][T15324] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  649.976587][T15327] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2360'.
[  650.116199][T15320] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  650.773687][T15338] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=6 (12 ns) > initial count (2 ns). Using initial count to start timer.
[  650.835538][ T9700] usb 4-1: USB disconnect, device number 120
[  651.025943][T15347] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  651.034970][T15347] syzkaller0: entered promiscuous mode
[  651.040809][T15347] syzkaller0: entered allmulticast mode
[  651.064485][T15346] tipc: Resetting bearer <eth:syzkaller0>
[  651.130988][T15346] tipc: Disabling bearer <eth:syzkaller0>
[  651.371606][T15351] syzkaller0: entered promiscuous mode
[  651.380971][T15351] syzkaller0: entered allmulticast mode
[  651.390172][T15351] TC_ACT_REPEAT abuse ?
[  651.542374][ T9691] usb 6-1: new high-speed USB device number 122 using dummy_hcd
[  651.565736][T15373] loop4: detected capacity change from 0 to 1
[  651.579590][T15373] Dev loop4: unable to read RDB block 1
[  651.593431][T15373]  loop4: unable to read partition table
[  651.608870][T15373] loop4: partition table beyond EOD, truncated
[  651.617315][T15373] loop_reread_partitions: partition scan of loop4 (�被x�^>��� ) failed (rc=-5)
[  651.682429][ T5144] Bluetooth: hci1: command 0x0c1a tx timeout
[  651.702308][ T9691] usb 6-1: Using ep0 maxpacket: 16
[  651.721429][ T9691] usb 6-1: unable to get BOS descriptor or descriptor too short
[  651.740730][ T9691] usb 6-1: config 7 has an invalid interface number: 106 but max is 3
[  651.759534][ T9691] usb 6-1: config 7 has an invalid interface number: 182 but max is 3
[  651.774899][ T9691] usb 6-1: config 7 has an invalid interface number: 148 but max is 3
[  651.793996][ T9691] usb 6-1: config 7 has an invalid interface number: 227 but max is 3
[  651.824910][ T9691] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  651.864748][ T9691] usb 6-1: config 7 has no interface number 0
[  651.889092][ T9691] usb 6-1: config 7 has no interface number 1
[  651.913934][ T9691] usb 6-1: config 7 has no interface number 2
[  651.936724][ T9691] usb 6-1: config 7 has no interface number 3
[  651.946914][T15384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  651.957074][ T9691] usb 6-1: config 7 interface 106 altsetting 89 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  651.971901][ T9691] usb 6-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping
[  651.984394][ T9691] usb 6-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping
[  651.998232][ T9691] usb 6-1: config 7 interface 106 altsetting 89 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  652.016785][ T9691] usb 6-1: config 7 interface 106 altsetting 89 has 6 endpoint descriptors, different from the interface descriptor's value: 13
[  652.030884][ T9691] usb 6-1: config 7 interface 182 altsetting 248 endpoint 0xD has invalid maxpacket 1023, setting to 64
[  652.033131][T15388] fuse: Unknown parameter '��+l�ޏ�G3�U���2R���Ȗcv�+�]V���ۗ�X�g01777777777777777777777'
[  652.055894][ T9691] usb 6-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping
[  652.067454][ T9691] usb 6-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping
[  652.079030][ T9691] usb 6-1: config 7 interface 182 altsetting 248 has an invalid descriptor for endpoint zero, skipping
[  652.093703][ T9691] usb 6-1: config 7 interface 148 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  652.094121][T15388] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  652.105763][ T9691] usb 6-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  652.126481][ T9691] usb 6-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping
[  652.137746][ T9691] usb 6-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping
[  652.150867][ T9691] usb 6-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping
[  652.166745][ T9691] usb 6-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  652.178310][ T9691] usb 6-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x2, skipping
[  652.192187][ T9699] usb 4-1: new high-speed USB device number 121 using dummy_hcd
[  652.207247][ T9691] usb 6-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping
[  652.243515][ T9691] usb 6-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xE, skipping
[  652.262561][ T9691] usb 6-1: config 7 interface 148 altsetting 5 has an endpoint descriptor with address 0x52, changing to 0x2
[  652.275301][ T9691] usb 6-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x2, skipping
[  652.286677][ T9691] usb 6-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x6, skipping
[  652.298129][ T9691] usb 6-1: config 7 interface 148 altsetting 5 has 13 endpoint descriptors, different from the interface descriptor's value: 12
[  652.313550][T15391] FAULT_INJECTION: forcing a failure.
[  652.313550][T15391] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  652.332342][T15391] CPU: 0 UID: 0 PID: 15391 Comm: syz.1.2381 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  652.332379][T15391] Tainted: [L]=SOFTLOCKUP
[  652.332386][T15391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  652.332398][T15391] Call Trace:
[  652.332407][T15391]  <TASK>
[  652.332416][T15391]  dump_stack_lvl+0xe8/0x150
[  652.332449][T15391]  should_fail_ex+0x412/0x560
[  652.332484][T15391]  _copy_from_user+0x2d/0xb0
[  652.332510][T15391]  kstrtouint_from_user+0xd6/0x180
[  652.332543][T15391]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  652.332592][T15391]  proc_fail_nth_write+0x8e/0x210
[  652.332623][T15391]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  652.332656][T15391]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  652.332687][T15391]  vfs_write+0x29a/0xb90
[  652.332719][T15391]  ? __pfx_vfs_write+0x10/0x10
[  652.332744][T15391]  ? __fget_files+0x2a/0x420
[  652.332769][T15391]  ? __fget_files+0x3a0/0x420
[  652.332787][T15391]  ? __fget_files+0x2a/0x420
[  652.332824][T15391]  ksys_write+0x150/0x270
[  652.332850][T15391]  ? __pfx_ksys_write+0x10/0x10
[  652.332886][T15391]  do_syscall_64+0x14d/0xf80
[  652.332910][T15391]  ? trace_irq_disable+0x3b/0x150
[  652.332927][T15391]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  652.332948][T15391]  ? clear_bhb_loop+0x40/0x90
[  652.332973][T15391]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  652.332994][T15391] RIP: 0033:0x7fb43eb5d04e
[  652.333014][T15391] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  652.333031][T15391] RSP: 002b:00007fb43f9d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  652.333053][T15391] RAX: ffffffffffffffda RBX: 00007fb43f9d56c0 RCX: 00007fb43eb5d04e
[  652.333068][T15391] RDX: 0000000000000001 RSI: 00007fb43f9d50a0 RDI: 0000000000000004
[  652.333080][T15391] RBP: 00007fb43f9d5090 R08: 0000000000000000 R09: 0000000000000000
[  652.333093][T15391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  652.333104][T15391] R13: 00007fb43ee16038 R14: 00007fb43ee15fa0 R15: 00007fb43ef3fa48
[  652.333137][T15391]  </TASK>
[  652.333859][ T9691] usb 6-1: config 7 interface 227 altsetting 187 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  652.362207][ T9699] usb 4-1: Using ep0 maxpacket: 8
[  652.385477][ T9691] usb 6-1: config 7 interface 106 has no altsetting 0
[  652.418817][ T9699] usb 4-1: config 129 has an invalid interface number: 164 but max is 0
[  652.453467][ T9691] usb 6-1: config 7 interface 182 has no altsetting 0
[  652.474855][ T9699] usb 4-1: config 129 has no interface number 0
[  652.480304][T15393] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  652.499745][ T9699] usb 4-1: config 129 interface 164 has no altsetting 0
[  652.519025][T15393] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode
[  652.526745][ T9699] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=8b.16
[  652.564692][T15393] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode
[  652.637030][ T9691] usb 6-1: config 7 interface 148 has no altsetting 0
[  652.639395][ T9699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  652.672190][ T9691] usb 6-1: config 7 interface 227 has no altsetting 0
[  652.694557][ T9691] usb 6-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a
[  652.696061][ T9699] usb 4-1: Product: syz
[  652.709002][ T9699] usb 4-1: Manufacturer: syz
[  652.717997][ T9699] usb 4-1: SerialNumber: syz
[  652.726975][ T9691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  652.749372][ T9691] usb 6-1: Product: syz
[  652.764814][ T9691] usb 6-1: Manufacturer: syz
[  652.799292][ T9691] usb 6-1: SerialNumber: syz
[  652.879075][   T30] kauditd_printk_skb: 69 callbacks suppressed
[  652.879096][   T30] audit: type=1326 audit(1775123973.010:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15401 comm="syz.6.2384" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f745599c819 code=0x0
[  652.947372][ T9699] ums_eneub6250 4-1:129.164: USB Mass Storage device detected
[  653.035162][T15356] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  653.047634][ T9699] usb 4-1: USB disconnect, device number 121
[  653.261117][T15414] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2386'.
[  653.277685][ T9691] usb 6-1: USB disconnect, device number 122
[  653.391402][T15416] loop4: detected capacity change from 0 to 1
[  653.399636][ T5822] Dev loop4: unable to read RDB block 1
[  653.409590][ T5822]  loop4: unable to read partition table
[  653.416438][ T5822] loop4: partition table beyond EOD, truncated
[  653.433202][T15416] Dev loop4: unable to read RDB block 1
[  653.441172][T15416]  loop4: unable to read partition table
[  653.449820][T15416] loop4: partition table beyond EOD, truncated
[  653.464107][T15416] loop_reread_partitions: partition scan of loop4 (�被x�^>��� ) failed (rc=-5)
[  653.754135][T15424] netlink: 'syz.3.2391': attribute type 21 has an invalid length.
[  653.770261][T15424] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2391'.
[  653.786075][T15426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2392'.
[  653.901116][T15431] netlink: 'syz.4.2394': attribute type 1 has an invalid length.
[  653.928346][T15431] 8021q: adding VLAN 0 to HW filter on device bond7
[  653.979768][T15431] 8021q: adding VLAN 0 to HW filter on device bond7
[  654.018083][T15431] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address
[  654.049919][T15431] bond7: (slave vxcan1): Error -95 calling set_mac_address
[  654.083209][T15435] bond7: (slave wlan0): Opening slave failed
[  654.103477][T15438] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2393'.
[  654.120550][T15437] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  654.132937][T15437] syzkaller0: entered promiscuous mode
[  654.144723][T15437] syzkaller0: entered allmulticast mode
[  654.194422][T15434] input: syz0 as /devices/virtual/input/input68
[  654.226162][T15436] tipc: Resetting bearer <eth:syzkaller0>
[  654.296860][T15436] tipc: Disabling bearer <eth:syzkaller0>
[  655.002140][ T5956] usb 4-1: new high-speed USB device number 122 using dummy_hcd
[  655.164560][ T5956] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  655.231148][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  655.292661][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  655.322497][ T5956] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  655.383121][ T5956] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  655.423498][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  655.496445][ T5956] usb 4-1: config 0 descriptor??
[  655.993872][T15468] pimreg: tun_chr_ioctl cmd 1074025677
[  656.010503][T15468] pimreg: linktype set to 805
[  656.028260][ T5956] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  656.875549][T15481] netlink: 'syz.6.2407': attribute type 1 has an invalid length.
[  656.959834][T15481] 8021q: adding VLAN 0 to HW filter on device bond1
[  657.002153][ T5956] usb 6-1: new high-speed USB device number 123 using dummy_hcd
[  657.016224][T15483] 8021q: adding VLAN 0 to HW filter on device bond1
[  657.032933][T15483] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  657.048991][ T9700] usb 4-1: USB disconnect, device number 122
[  657.077492][T15483] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  657.165777][T15481] bond1: (slave wlan0): Opening slave failed
[  657.184082][ T5956] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  657.195031][ T5956] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  657.206265][ T5956] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  657.207675][T15489] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  657.215738][ T5956] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  657.225621][T15489] syzkaller0: entered promiscuous mode
[  657.234582][ T5956] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  657.239686][T15489] syzkaller0: entered allmulticast mode
[  657.251784][ T5956] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  657.270853][T15489] tipc: Resetting bearer <eth:syzkaller0>
[  657.270941][ T5956] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  657.286547][ T5956] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  657.296282][ T5956] usb 6-1: Product: syz
[  657.300753][ T5956] usb 6-1: Manufacturer: syz
[  657.311892][T15488] tipc: Resetting bearer <eth:syzkaller0>
[  657.325670][T15477] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[  657.342934][ T5956] cdc_wdm 6-1:1.0: skipping garbage
[  657.348173][ T5956] cdc_wdm 6-1:1.0: skipping garbage
[  657.366916][T15488] tipc: Disabling bearer <eth:syzkaller0>
[  657.373656][ T5956] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  657.383493][ T5956] cdc_wdm 6-1:1.0: Unknown control protocol
[  657.545811][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  657.552476][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  657.559115][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  657.565924][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  657.572364][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  657.579012][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  657.585363][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  657.592001][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  657.598317][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  657.605042][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  657.611947][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  657.618719][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  657.625446][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  657.632165][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  657.638920][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  657.645817][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  657.652313][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  657.659322][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  657.665652][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  657.672339][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  657.796484][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1
[  657.814947][ T5956] usb 6-1: USB disconnect, device number 123
[  657.942937][ T9691] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  658.112699][ T9691] usb 2-1: Using ep0 maxpacket: 8
[  658.130547][T15527] netlink: 'syz.3.2420': attribute type 1 has an invalid length.
[  658.145898][ T9691] usb 2-1: config 6 has an invalid interface number: 2 but max is 0
[  658.155189][ T9691] usb 2-1: config 6 has no interface number 0
[  658.165698][ T9691] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  658.177092][ T9691] usb 2-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  658.198057][ T9691] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  658.210633][ T9691] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  658.225635][ T9691] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  658.236032][ T9691] usb 2-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[  658.245565][T15527] 8021q: adding VLAN 0 to HW filter on device bond8
[  658.249161][ T9691] usb 2-1: Product: syz
[  658.269197][ T9691] usb 2-1: Manufacturer: syz
[  658.275751][T15530] 8021q: adding VLAN 0 to HW filter on device bond8
[  658.283550][ T9691] usb 2-1: SerialNumber: syz
[  658.289224][T15530] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address
[  658.312463][T15530] bond8: (slave vxcan3): Error -95 calling set_mac_address
[  658.320653][ T9691] hso 2-1:6.2: Failed to find BULK IN ep
[  658.426713][T15534] bond6: (slave wlan0): Releasing active interface
[  658.446915][T15534] bond8: (slave wlan0): Opening slave failed
[  658.544914][T15497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  658.554775][T15497] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  658.572268][T15497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  658.582525][T15497] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  658.596886][ T9691] usb 2-1: USB disconnect, device number 7
[  658.892353][ T9700] usb 4-1: new high-speed USB device number 123 using dummy_hcd
[  658.956468][T15549] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2425'.
[  659.092216][ T9700] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  659.139047][ T9700] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  659.162133][ T9700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  659.190862][ T9700] usb 4-1: Product: syz
[  659.210999][ T9700] usb 4-1: Manufacturer: syz
[  659.231028][ T9700] usb 4-1: SerialNumber: syz
[  659.458135][ T9700] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 123 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  659.662283][ T9691] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  659.733218][ T9700] usb 4-1: USB disconnect, device number 123
[  659.767439][ T9700] usblp0: removed
[  659.835578][ T9691] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  659.877643][ T9691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  659.912555][ T9691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  659.944556][ T9691] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  659.974171][ T9699] usb 6-1: new high-speed USB device number 124 using dummy_hcd
[  659.995824][ T9691] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  660.005616][ T9691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  660.022575][ T9691] usb 2-1: config 0 descriptor??
[  660.164965][ T9699] usb 6-1: Using ep0 maxpacket: 16
[  660.172971][ T9699] usb 6-1: too many configurations: 188, using maximum allowed: 8
[  660.202780][ T9699] usb 6-1: unable to read config index 0 descriptor/start: -61
[  660.210430][ T9699] usb 6-1: can't read configurations, error -61
[  660.398895][T15570] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  660.402164][ T9699] usb 6-1: new high-speed USB device number 125 using dummy_hcd
[  660.472728][ T5918] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  660.512454][T10598] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  660.612135][ T9699] usb 6-1: Using ep0 maxpacket: 16
[  660.635758][ T9699] usb 6-1: too many configurations: 188, using maximum allowed: 8
[  660.666725][ T9691] usbhid 2-1:0.0: can't add hid device: -71
[  660.686259][ T9691] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  660.702679][ T9699] usb 6-1: unable to read config index 0 descriptor/start: -61
[  660.719732][ T9691] usb 2-1: USB disconnect, device number 8
[  660.742195][ T9699] usb 6-1: can't read configurations, error -61
[  660.779776][ T9699] usb usb6-port1: attempt power cycle
[  660.790221][T15579] fuse: Bad value for 'fd'
[  660.832291][ T9700] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  660.836188][T15581] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2435'.
[  661.019265][T15585] vcan0: tx address claim with different name
[  661.054234][T15579] ipip0: entered promiscuous mode
[  661.059675][T15579] ipip0: entered allmulticast mode
[  661.182406][ T9699] usb 6-1: new high-speed USB device number 126 using dummy_hcd
[  661.222907][ T9699] usb 6-1: Using ep0 maxpacket: 16
[  661.239241][ T9699] usb 6-1: too many configurations: 188, using maximum allowed: 8
[  661.271271][ T9699] usb 6-1: unable to read config index 0 descriptor/start: -61
[  661.282609][ T9699] usb 6-1: can't read configurations, error -61
[  661.422148][ T9699] usb 6-1: new high-speed USB device number 127 using dummy_hcd
[  661.456599][ T9699] usb 6-1: Using ep0 maxpacket: 16
[  661.481812][ T9699] usb 6-1: too many configurations: 188, using maximum allowed: 8
[  661.519300][ T9699] usb 6-1: unable to read config index 0 descriptor/start: -61
[  661.535019][T10601] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  661.550876][ T9699] usb 6-1: can't read configurations, error -61
[  661.565889][ T9699] usb usb6-port1: unable to enumerate USB device
[  661.579204][T10601] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  661.992508][ T1210] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  662.157418][T15601] netlink: 'syz.3.2440': attribute type 1 has an invalid length.
[  662.169092][T15603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2441'.
[  662.213213][T15601] 8021q: adding VLAN 0 to HW filter on device bond9
[  662.257350][T15605] bond9: (slave geneve3): making interface the new active one
[  662.294615][T15605] bond9: (slave geneve3): Enslaving as an active interface with an up link
[  663.600545][T15642] FAULT_INJECTION: forcing a failure.
[  663.600545][T15642] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  663.615367][T15642] CPU: 1 UID: 0 PID: 15642 Comm: syz.1.2455 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  663.615401][T15642] Tainted: [L]=SOFTLOCKUP
[  663.615409][T15642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  663.615421][T15642] Call Trace:
[  663.615431][T15642]  <TASK>
[  663.615440][T15642]  dump_stack_lvl+0xe8/0x150
[  663.615471][T15642]  should_fail_ex+0x412/0x560
[  663.615506][T15642]  _copy_from_user+0x2d/0xb0
[  663.615537][T15642]  do_arpt_set_ctl+0x6cd/0x1050
[  663.615558][T15642]  ? __mutex_trylock_common+0x158/0x260
[  663.615578][T15642]  ? __pfx___mutex_trylock_common+0x10/0x10
[  663.615596][T15642]  ? __pfx_do_arpt_set_ctl+0x10/0x10
[  663.615609][T15642]  ? rcu_is_watching+0x15/0xb0
[  663.615625][T15642]  ? trace_contention_end+0x3d/0x150
[  663.615652][T15642]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  663.615669][T15642]  ? __pfx___mutex_lock+0x10/0x10
[  663.615684][T15642]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  663.615762][T15642]  ? __pfx_aa_sk_perm+0x10/0x10
[  663.615783][T15642]  nf_setsockopt+0x26f/0x290
[  663.615800][T15642]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  663.615814][T15642]  do_sock_setsockopt+0x17c/0x1b0
[  663.615831][T15642]  __x64_sys_setsockopt+0x13d/0x1b0
[  663.615848][T15642]  do_syscall_64+0x14d/0xf80
[  663.615862][T15642]  ? trace_irq_disable+0x3b/0x150
[  663.615872][T15642]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.615885][T15642]  ? clear_bhb_loop+0x40/0x90
[  663.615899][T15642]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.615910][T15642] RIP: 0033:0x7fb43eb9c819
[  663.615923][T15642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  663.615934][T15642] RSP: 002b:00007fb43f9d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  663.615949][T15642] RAX: ffffffffffffffda RBX: 00007fb43ee15fa0 RCX: 00007fb43eb9c819
[  663.615961][T15642] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003
[  663.615968][T15642] RBP: 00007fb43f9d5090 R08: 000000000000047f R09: 0000000000000000
[  663.615976][T15642] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001
[  663.615983][T15642] R13: 00007fb43ee16038 R14: 00007fb43ee15fa0 R15: 00007fb43ef3fa48
[  663.616001][T15642]  </TASK>
[  664.462095][ T9699] usb 4-1: new high-speed USB device number 124 using dummy_hcd
[  664.624815][ T9700] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  664.636513][ T9699] usb 4-1: Using ep0 maxpacket: 32
[  664.645942][ T9699] usb 4-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f
[  664.669269][ T9699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  664.678811][ T9699] usb 4-1: Product: syz
[  664.683189][ T9699] usb 4-1: Manufacturer: syz
[  664.687800][ T9699] usb 4-1: SerialNumber: syz
[  664.728175][ T9699] usb 4-1: config 0 descriptor??
[  664.753871][ T9699] ums-onetouch 4-1:0.0: USB Mass Storage device detected
[  664.796546][T15672] geneve3: entered promiscuous mode
[  664.812344][ T9700] usb 6-1: Using ep0 maxpacket: 16
[  664.850789][ T9700] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  664.872456][ T9700] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  664.902780][ T9700] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  664.939051][ T9700] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  664.979734][ T9700] usb 6-1: config 0 descriptor??
[  665.340001][T15685] loop4: detected capacity change from 0 to 1
[  665.357029][T13758] Dev loop4: unable to read RDB block 1
[  665.370915][T13758]  loop4: unable to read partition table
[  665.382949][T13758] loop4: partition table beyond EOD, truncated
[  665.407515][T15685] Dev loop4: unable to read RDB block 1
[  665.425861][T15685]  loop4: unable to read partition table
[  665.433148][ T9700] usbhid 6-1:0.0: can't add hid device: -71
[  665.440990][T15685] loop4: partition table beyond EOD, truncated
[  665.451183][ T9700] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  665.464529][T15685] loop_reread_partitions: partition scan of loop4 (�被x�^>��� ) failed (rc=-5)
[  665.496967][ T9700] usb 6-1: USB disconnect, device number 2
[  665.683392][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  665.748366][T15690] FAULT_INJECTION: forcing a failure.
[  665.748366][T15690] name failslab, interval 1, probability 0, space 0, times 0
[  665.813113][T15690] CPU: 1 UID: 0 PID: 15690 Comm: syz.1.2467 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  665.813146][T15690] Tainted: [L]=SOFTLOCKUP
[  665.813155][T15690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  665.813166][T15690] Call Trace:
[  665.813174][T15690]  <TASK>
[  665.813183][T15690]  dump_stack_lvl+0xe8/0x150
[  665.813217][T15690]  should_fail_ex+0x412/0x560
[  665.813253][T15690]  should_failslab+0xa8/0x100
[  665.813282][T15690]  __kvmalloc_node_noprof+0x178/0x8a0
[  665.813307][T15690]  ? xt_alloc_table_info+0x40/0xb0
[  665.813343][T15690]  xt_alloc_table_info+0x40/0xb0
[  665.813369][T15690]  do_arpt_set_ctl+0x90a/0x1050
[  665.813397][T15690]  ? __mutex_trylock_common+0x158/0x260
[  665.813431][T15690]  ? __pfx___mutex_trylock_common+0x10/0x10
[  665.813462][T15690]  ? __pfx_do_arpt_set_ctl+0x10/0x10
[  665.813484][T15690]  ? rcu_is_watching+0x15/0xb0
[  665.813513][T15690]  ? trace_contention_end+0x3d/0x150
[  665.813560][T15690]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  665.813590][T15690]  ? __pfx___mutex_lock+0x10/0x10
[  665.813617][T15690]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  665.813650][T15690]  ? __pfx_aa_sk_perm+0x10/0x10
[  665.813685][T15690]  nf_setsockopt+0x26f/0x290
[  665.813713][T15690]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  665.813736][T15690]  do_sock_setsockopt+0x17c/0x1b0
[  665.813766][T15690]  __x64_sys_setsockopt+0x13d/0x1b0
[  665.813796][T15690]  do_syscall_64+0x14d/0xf80
[  665.813820][T15690]  ? trace_irq_disable+0x3b/0x150
[  665.813838][T15690]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  665.813859][T15690]  ? clear_bhb_loop+0x40/0x90
[  665.813884][T15690]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  665.813904][T15690] RIP: 0033:0x7fb43eb9c819
[  665.813923][T15690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  665.813949][T15690] RSP: 002b:00007fb43f9d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  665.813982][T15690] RAX: ffffffffffffffda RBX: 00007fb43ee15fa0 RCX: 00007fb43eb9c819
[  665.813997][T15690] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003
[  665.814009][T15690] RBP: 00007fb43f9d5090 R08: 000000000000047f R09: 0000000000000000
[  665.814022][T15690] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001
[  665.814035][T15690] R13: 00007fb43ee16038 R14: 00007fb43ee15fa0 R15: 00007fb43ef3fa48
[  665.814073][T15690]  </TASK>
[  666.822119][ T9691] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  666.946536][T15714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  666.967682][T15714] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  666.975858][ T9691] usb 6-1: Using ep0 maxpacket: 32
[  666.988287][ T9691] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  667.004280][ T9691] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  667.015421][T15714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  667.026104][T15714] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  667.034620][ T9691] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  667.046409][ T9691] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  667.057654][T15714] netlink: 71 bytes leftover after parsing attributes in process `syz.4.2476'.
[  667.076230][ T9691] usb 6-1: config 0 descriptor??
[  667.083063][T15714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  667.094807][ T9691] hub 6-1:0.0: USB hub found
[  667.100120][T15714] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  667.305240][T15709] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2474'.
[  667.330056][ T1210] usb 4-1: USB disconnect, device number 124
[  667.343379][T15709] .30�X��D: renamed from gretap0 (while UP)
[  667.371608][ T9691] hub 6-1:0.0: config failed, can't read hub descriptor (err -90)
[  667.407833][T15709] .30�X��D: entered allmulticast mode
[  667.416658][T15709] A link change request failed with some changes committed already. Interface .30�X��D may have been left with an inconsistent configuration, please check.
[  667.444375][T15717] loop4: detected capacity change from 0 to 1
[  667.472323][T15717] Dev loop4: unable to read RDB block 1
[  667.488621][T15717]  loop4: unable to read partition table
[  667.498816][T15717] loop4: partition table beyond EOD, truncated
[  667.506758][T15717] loop_reread_partitions: partition scan of loop4 (�被x�^>��� ) failed (rc=-5)
[  667.579397][T15709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  667.603106][T15709] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  667.861575][T15728] ipvlan2: entered promiscuous mode
[  668.272304][    T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  668.392323][ T9699] usb 4-1: new high-speed USB device number 125 using dummy_hcd
[  668.422185][    T9] usb 2-1: Using ep0 maxpacket: 32
[  668.429570][    T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  668.438419][    T9] usb 2-1: config 0 has no interface number 0
[  668.448832][    T9] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  668.459937][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  668.468608][    T9] usb 2-1: Product: syz
[  668.473319][    T9] usb 2-1: Manufacturer: syz
[  668.478245][    T9] usb 2-1: SerialNumber: syz
[  668.487790][    T9] usb 2-1: config 0 descriptor??
[  668.499654][    T9] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  668.509209][    T9] usb 2-1: selecting invalid altsetting 1
[  668.515452][    T9] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  668.526905][    T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  668.538469][    T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  668.547387][    T9] usb 2-1: media controller created
[  668.562203][ T9699] usb 4-1: Using ep0 maxpacket: 32
[  668.565569][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  668.579575][ T5194] Dev loop2: unable to read RDB block 7
[  668.586133][ T9699] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  668.586217][ T5194]  loop2: unable to read partition table
[  668.615213][ T5194] loop2: partition table beyond EOD, truncated
[  668.616625][ T9699] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  668.648022][ T9699] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  668.674230][ T9699] usb 4-1: config 1 has no interface number 0
[  668.688367][ T9699] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  668.701479][    T9] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  668.718842][ T9699] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 17412, setting to 1024
[  668.738108][    T9] zl10353_read_register: readreg error (reg=127, ret==-71)
[  668.745557][ T9699] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  668.767044][    T9] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  668.779201][ T9699] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  668.799478][ T9699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  668.840630][T15741] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22
[  668.867092][ T9699] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  668.898842][    T9] usb 2-1: USB disconnect, device number 9
[  669.066443][T15741] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22
[  669.080274][ T9699] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached
[  669.199901][T15752] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2490'.
[  669.211491][T15753] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2490'.
[  669.347242][    T9] usb 4-1: USB disconnect, device number 125
[  669.376015][    T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  669.401127][T15756] netlink: 'syz.4.2491': attribute type 10 has an invalid length.
[  669.551635][T15763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2492'.
[  669.732394][T15767] random: crng reseeded on system resumption
[  670.040409][T15773] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2496'.
[  670.156718][T15777] kvm: apic: phys broadcast and lowest prio
[  670.163202][T15777] kvm: Disabled LAPIC found during irq injection
[  670.241353][ T9691] usbhid 6-1:0.0: can't add hid device: -71
[  670.297707][T15778] bond0: (slave bond_slave_1): Releasing backup interface
[  670.309199][ T9691] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  670.399083][ T9691] usb 6-1: USB disconnect, device number 3
[  670.603861][T15778] bridge0: port 2(bridge_slave_1) entered disabled state
[  670.611743][T15778] bridge0: port 1(bridge_slave_0) entered disabled state
[  670.721978][T15778] team_slave_0: left promiscuous mode
[  670.729745][T15778] team_slave_1: left promiscuous mode
[  671.061114][T15778] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  671.356210][T15778] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  671.445229][T15778] veth1_to_hsr: left allmulticast mode
[  671.520723][T15784] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  671.620965][T10601] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  671.655857][T10601] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  671.701373][T10601] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[  671.746712][T10601] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  671.796305][T10601] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  671.832713][T10601] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  671.914670][T10601] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  671.933006][ T5194] Dev loop2: unable to read RDB block 7
[  671.964188][ T5194]  loop2: unable to read partition table
[  671.978635][T10601] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  671.999879][ T5194] loop2: partition table beyond EOD, truncated
[  672.021442][T10601] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  672.054429][T10601] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  672.101589][T10601] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  672.126876][T10601] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[  672.565052][T15813] input: syz1 as /devices/virtual/input/input70
[  672.750773][T15820] netlink: 'syz.3.2509': attribute type 1 has an invalid length.
[  672.835528][T15820] 8021q: adding VLAN 0 to HW filter on device bond10
[  672.933325][T15823] 8021q: adding VLAN 0 to HW filter on device bond10
[  672.941239][T15823] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address
[  672.963028][T15823] bond10: (slave vxcan3): Error -95 calling set_mac_address
[  672.993602][T15829] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  673.006645][T15824] bond10: (slave wlan0): Opening slave failed
[  673.029015][T15828] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  673.122611][   T31] INFO: task kworker/0:6:5916 blocked for more than 143 seconds.
[  673.137239][   T31]       Tainted: G             L      syzkaller #0
[  673.144746][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  673.155271][   T31] task:kworker/0:6     state:D stack:21032 pid:5916  tgid:5916  ppid:2      task_flags:0x4208060 flags:0x00080000
[  673.180732][   T31] Workqueue: usb_hub_wq hub_event
[  673.188441][   T31] Call Trace:
[  673.197519][   T31]  <TASK>
[  673.200805][   T31]  __schedule+0x15dd/0x52d0
[  673.208053][   T31]  ? usb_new_device+0xa08/0x16f0
[  673.213361][   T31]  ? hub_event+0x2a1c/0x4f30
[  673.218381][   T31]  ? process_scheduled_works+0xb6e/0x18c0
[  673.226248][   T31]  ? worker_thread+0xa53/0xfc0
[  673.231226][   T31]  ? __pfx___schedule+0x10/0x10
[  673.236643][   T31]  ? schedule+0x90/0x360
[  673.241430][   T31]  schedule+0x164/0x360
[  673.246716][   T31]  schedule_timeout+0xc3/0x2c0
[  673.251628][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[  673.257622][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  673.263952][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[  673.269247][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  673.274946][   T31]  ? wait_for_completion+0x274/0x5e0
[  673.280315][   T31]  wait_for_completion+0x2cc/0x5e0
[  673.286430][   T31]  ? __pfx_wait_for_completion+0x10/0x10
[  673.292506][   T31]  i2c_del_adapter+0x5c0/0x790
[  673.297699][   T31]  ? __pfx_i2c_del_adapter+0x10/0x10
[  673.303477][   T31]  ? kfree+0x4d/0x630
[  673.307733][   T31]  dvb_usb_i2c_exit+0x64/0xb0
[  673.314461][   T31]  dvb_usb_device_exit+0x1cb/0x360
[  673.319751][   T31]  ? __pfx_dvb_usb_device_exit+0x10/0x10
[  673.325945][   T31]  cxusb_probe+0x60f/0x710
[  673.330689][   T31]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  673.337252][   T31]  ? __pfx_cxusb_probe+0x10/0x10
[  673.343187][   T31]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  673.349264][   T31]  ? __pm_runtime_set_status+0x9d4/0xcd0
[  673.355376][   T31]  usb_probe_interface+0x668/0xc90
[  673.360766][   T31]  ? __pfx_usb_probe_interface+0x10/0x10
[  673.367035][   T31]  really_probe+0x267/0xaf0
[  673.371698][   T31]  __driver_probe_device+0x18c/0x320
[  673.377134][ T9699] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  673.385430][   T31]  driver_probe_device+0x4f/0x240
[  673.390853][   T31]  __device_attach_driver+0x279/0x430
[  673.397312][   T31]  bus_for_each_drv+0x258/0x2f0
[  673.402947][   T31]  ? __pfx___device_attach_driver+0x10/0x10
[  673.409187][   T31]  ? __pfx_bus_for_each_drv+0x10/0x10
[  673.415497][   T31]  ? lockdep_hardirqs_on+0x7a/0x110
[  673.421943][   T31]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  673.429112][   T31]  __device_attach+0x2c5/0x450
[  673.434875][   T31]  ? __pfx___device_attach+0x10/0x10
[  673.441779][   T31]  ? _raw_spin_unlock+0x28/0x50
[  673.448547][   T31]  device_initial_probe+0xa1/0xd0
[  673.455621][   T31]  bus_probe_device+0x12a/0x220
[  673.462313][   T31]  ? device_add+0x726/0xb70
[  673.467054][   T31]  device_add+0x7b6/0xb70
[  673.473213][   T31]  usb_set_configuration+0x1a87/0x2110
[  673.480030][   T31]  usb_generic_driver_probe+0x8d/0x150
[  673.486265][   T31]  usb_probe_device+0x1c4/0x3b0
[  673.491325][   T31]  ? __pfx_usb_probe_device+0x10/0x10
[  673.497458][   T31]  really_probe+0x267/0xaf0
[  673.502628][   T31]  __driver_probe_device+0x18c/0x320
[  673.509281][   T31]  driver_probe_device+0x4f/0x240
[  673.515009][   T31]  __device_attach_driver+0x279/0x430
[  673.520908][   T31]  bus_for_each_drv+0x258/0x2f0
[  673.526876][   T31]  ? __pfx___device_attach_driver+0x10/0x10
[  673.534315][   T31]  ? __pfx_bus_for_each_drv+0x10/0x10
[  673.539843][   T31]  ? lockdep_hardirqs_on+0x7a/0x110
[  673.545456][   T31]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  673.551425][   T31]  __device_attach+0x2c5/0x450
[  673.558903][   T31]  ? __pfx___device_attach+0x10/0x10
[  673.564810][ T9699] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  673.576266][ T9699] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  673.587477][   T31]  ? _raw_spin_unlock+0x28/0x50
[  673.592787][   T31]  device_initial_probe+0xa1/0xd0
[  673.597979][ T9699] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  673.608629][   T31]  bus_probe_device+0x12a/0x220
[  673.613771][   T31]  ? device_add+0x726/0xb70
[  673.618530][   T31]  device_add+0x7b6/0xb70
[  673.623337][ T9699] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  673.636755][   T31]  usb_new_device+0xa08/0x16f0
[  673.641555][   T31]  ? __pfx_usb_new_device+0x10/0x10
[  673.647574][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  673.654078][   T31]  hub_event+0x2a1c/0x4f30
[  673.659301][ T9699] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  673.669466][ T9699] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  673.678308][   T31]  ? __pfx_hub_event+0x10/0x10
[  673.684172][   T31]  ? process_scheduled_works+0xa8d/0x18c0
[  673.690226][ T9699] usb 2-1: Manufacturer: syz
[  673.695778][   T31]  ? process_scheduled_works+0xa8d/0x18c0
[  673.703697][   T31]  process_scheduled_works+0xb6e/0x18c0
[  673.710470][ T9699] usb 2-1: config 0 descriptor??
[  673.716255][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  673.727197][   T31]  ? assign_work+0x3d5/0x5e0
[  673.733003][   T31]  worker_thread+0xa53/0xfc0
[  673.737999][   T31]  kthread+0x388/0x470
[  673.743521][   T31]  ? __pfx_worker_thread+0x10/0x10
[  673.749337][   T31]  ? __pfx_kthread+0x10/0x10
[  673.755035][   T31]  ret_from_fork+0x51e/0xb90
[  673.760152][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  673.766811][   T31]  ? __switch_to+0xc7d/0x1450
[  673.771916][   T31]  ? __pfx_kthread+0x10/0x10
[  673.777268][   T31]  ret_from_fork_asm+0x1a/0x30
[  673.782701][   T31]  </TASK>
[  673.785894][   T31] 
[  673.785894][   T31] Showing all locks held in the system:
[  673.794489][   T31] 1 lock held by khungtaskd/31:
[  673.799935][   T31]  #0: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  673.811738][   T31] 2 locks held by getty/5582:
[  673.817153][   T31]  #0: ffff8880376300a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  673.827576][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  673.845206][   T31] 4 locks held by udevd/5829:
[  673.850334][   T31]  #0: ffff888051928e80 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10
[  673.860424][   T31]  #1: ffff888026bcb488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420
[  673.871390][   T31]  #2: ffff88804f1cbb48 (kn->active#34){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420
[  673.881359][   T31]  #3: ffff8880289561e0 (&dev->mutex){....}-{4:4}, at: serial_show+0x26/0xa0
[  673.891342][   T31] 5 locks held by kworker/0:6/5916:
[  673.897965][   T31]  #0: ffff8880216cd948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0
[  673.911187][   T31]  #1: ffffc90004457c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
[  673.924685][   T31]  #2: ffff88802a3901e0 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30
[  673.934665][   T31]  #3: ffff8880289561e0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  673.945080][   T31]  #4: ffff8880548c61a8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  673.955263][   T31] 5 locks held by kworker/1:9/9699:
[  673.960948][   T31]  #0: ffff8880216cd948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0
[  673.973536][   T31]  #1: ffffc90002747c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
[  673.986471][   T31]  #2: ffff88802a2cc1e0 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30
[  673.995976][   T31]  #3: ffff8880402011e0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  674.006436][   T31]  #4: ffff88802912d1a8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  674.016473][   T31] 1 lock held by syz.6.2508/15806:
[  674.021716][   T31]  #0: ffff88807f37e540 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x234/0x4f0
[  674.031917][   T31] 1 lock held by syz.6.2508/15814:
[  674.037598][   T31]  #0: ffff88807f37e540 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock_killable+0x1d/0x70
[  674.048167][   T31] 4 locks held by syz.6.2508/15815:
[  674.053961][   T31] 2 locks held by syz.6.2508/15821:
[  674.059364][   T31]  #0: ffff8880499cf968 (&ctx->ring_lock){+.+.}-{4:4}, at: ioctx_alloc+0x18e/0x840
[  674.069239][   T31]  #1: ffff88807f37e540 (&mm->mmap_lock){++++}-{4:4}, at: aio_setup_ring+0x60a/0xe40
[  674.079242][   T31] 1 lock held by syz.4.2510/15825:
[  674.085407][   T31]  #0: ffffffff8e7647c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  674.096111][   T31] 
[  674.098783][   T31] =============================================
[  674.098783][   T31] 
[  674.108096][   T31] NMI backtrace for cpu 1
[  674.108114][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  674.108131][   T31] Tainted: [L]=SOFTLOCKUP
[  674.108135][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  674.108142][   T31] Call Trace:
[  674.108148][   T31]  <TASK>
[  674.108153][   T31]  dump_stack_lvl+0xe8/0x150
[  674.108175][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  674.108194][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  674.108210][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  674.108224][   T31]  sys_info+0x135/0x170
[  674.108240][   T31]  watchdog+0xfd9/0x1030
[  674.108254][   T31]  ? watchdog+0x21a/0x1030
[  674.108268][   T31]  kthread+0x388/0x470
[  674.108280][   T31]  ? __pfx_watchdog+0x10/0x10
[  674.108290][   T31]  ? __pfx_kthread+0x10/0x10
[  674.108303][   T31]  ret_from_fork+0x51e/0xb90
[  674.108327][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  674.108352][   T31]  ? __switch_to+0xc7d/0x1450
[  674.108377][   T31]  ? __pfx_kthread+0x10/0x10
[  674.108396][   T31]  ret_from_fork_asm+0x1a/0x30
[  674.108435][   T31]  </TASK>
[  674.108468][   T31] Sending NMI from CPU 1 to CPUs 0:
[  674.231146][    C0] NMI backtrace for cpu 0
[  674.231170][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  674.231192][    C0] Tainted: [L]=SOFTLOCKUP
[  674.231199][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  674.231217][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  674.231249][    C0] Code: 0e 6c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 32 1a 00 fb f4 <e9> fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  674.231263][    C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000246
[  674.231280][    C0] RAX: 0000000000b004bb RBX: ffffffff819a91fa RCX: 0000000080000001
[  674.231292][    C0] RDX: 0000000000000001 RSI: ffffffff8defa72d RDI: ffffffff8c27d100
[  674.231304][    C0] RBP: ffffffff8e407eb0 R08: ffff8880b863399b R09: 1ffff110170c6733
[  674.231316][    C0] R10: dffffc0000000000 R11: ffffed10170c6734 R12: 0000000000000000
[  674.231328][    C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 1ffffffff1c929d8
[  674.231339][    C0] FS:  0000000000000000(0000) GS:ffff888125457000(0000) knlGS:0000000000000000
[  674.231352][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  674.231363][    C0] CR2: 000000110c32e6e8 CR3: 000000007a7ca000 CR4: 00000000003526f0
[  674.231379][    C0] DR0: 0000000000000004 DR1: 0000000000000002 DR2: 0000000000000006
[  674.231389][    C0] DR3: 0000000000009a47 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  674.231400][    C0] Call Trace:
[  674.231409][    C0]  <TASK>
[  674.231415][    C0]  default_idle+0x9/0x20
[  674.231435][    C0]  default_idle_call+0x72/0xb0
[  674.231457][    C0]  do_idle+0x36a/0x5f0
[  674.231481][    C0]  ? __pfx_do_idle+0x10/0x10
[  674.231501][    C0]  ? do_idle+0x11/0x5f0
[  674.231522][    C0]  cpu_startup_entry+0x43/0x60
[  674.231543][    C0]  rest_init+0x2de/0x300
[  674.231558][    C0]  start_kernel+0x385/0x3d0
[  674.231582][    C0]  x86_64_start_reservations+0x24/0x30
[  674.231601][    C0]  x86_64_start_kernel+0x143/0x1c0
[  674.231618][    C0]  common_startup_64+0x13e/0x147
[  674.231642][    C0]  </TASK>
[  674.235485][ T9699] hid_parser_main: 437 callbacks suppressed
[  674.235507][ T9699] appleir 0003:05AC:8243.002C: unknown main item tag 0x0
[  674.340264][T15836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  674.347030][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  674.347057][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  674.347084][   T31] Tainted: [L]=SOFTLOCKUP
[  674.347092][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  674.347103][   T31] Call Trace:
[  674.347112][   T31]  <TASK>
[  674.347122][   T31]  vpanic+0x56c/0xa60
[  674.347152][   T31]  ? __pfx___schedule+0x10/0x10
[  674.347175][   T31]  ? __pfx_vpanic+0x10/0x10
[  674.347206][   T31]  panic+0xc5/0xd0
[  674.347228][   T31]  ? __pfx_panic+0x10/0x10
[  674.347254][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  674.347279][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  674.347302][   T31]  watchdog+0x1023/0x1030
[  674.347324][   T31]  ? watchdog+0x21a/0x1030
[  674.347348][   T31]  kthread+0x388/0x470
[  674.347367][   T31]  ? __pfx_watchdog+0x10/0x10
[  674.347383][   T31]  ? __pfx_kthread+0x10/0x10
[  674.347401][   T31]  ret_from_fork+0x51e/0xb90
[  674.347427][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  674.347448][   T31]  ? __switch_to+0xc7d/0x1450
[  674.347471][   T31]  ? __pfx_kthread+0x10/0x10
[  674.347490][   T31]  ret_from_fork_asm+0x1a/0x30
[  674.347529][   T31]  </TASK>
[  674.350412][   T31] Kernel Offset: disabled