last executing test programs:

16m8.412703138s ago: executing program 1 (id=1513):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={0x20, 0x1, 0x34, "712bab"}, 0x0})

16m4.531494021s ago: executing program 1 (id=1521):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000)={0xffffffff}, 0xf1, 0x10, &(0x7f0000000000)={0x0, 0x7}, 0x7}, 0x48)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000004b0000004b000000060000000d0000000100040f03000000040000000000000005000000ff7da50000000000000003000000000200000005000000060000"], &(0x7f0000000a40)=""/4096, 0x6a, 0x1000, 0x1, 0x6, 0x10000}, 0x28)
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
r5 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, 0x0)
ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000000)=r5)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5})
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x1, r5})
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000980)=0x1)
sendto$inet(0xffffffffffffffff, &(0x7f0000000440)="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", 0x8ee, 0x1, &(0x7f0000000300)={0x2, 0x4e21, @broadcast}, 0x10)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r3, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0xff7c, @local}, @ib={0x1b, 0x7fff, 0x0, {"0000000000000000020500"}, 0x0, 0x1, 0x4}}}, 0x118)
sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000001a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELOBJ={0xe4, 0x14, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xaf, 0x8, "d869d5d882a2a02a9eca75ac30a308fed902c9589c7a85ad6677959f309803a31e83e4e184db474108bd0daa13078552d085eb9cd06314294b33713066cf709de3739e821634a344a162a0a81a0208480187745563b2a7248c7d405d5c646ca788b7b7d4e55c9d2068af65065ad733e792ff2fa741188c3463b8542b8a650b0d3c1ed0f0fb1e6d8fa556fe8b64d0b7374399d55b39355130c8004a474977e80a51351b896cce6ed6df4945"}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWSETELEM={0x2a8, 0xc, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x250, 0x3, 0x0, 0x1, [{0x24c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x103, 0x6, 0x1, 0x0, "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"}, @NFTA_SET_ELEM_EXPRESSIONS={0xa4, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0xa0, 0x6, 0x1, 0x0, "79a0042825dec66327c62351fb3ce28ab09130b9ca0037eb558fcdebd0801039a5c78338b9bc85635a6502ac6ccf948bd7dd372c71f9f06a6cb4389e32939f1e73b472be17456f8ff336865068e16992deeb59caed4874b715b3c20f45fe1cb8a8102b4ce580068558430e65d4f7dd72feaeb3d198180b58b87322adef16a08d6292ff95a2a84ea30ad2e59cb2eb705288408e54176a2418e491696d"}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_NEWSET={0x17c, 0x9, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0x130, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2000}, @NFTA_SET_DESC_CONCAT={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}]}]}, @NFTA_SET_DESC_CONCAT={0x7c, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20000}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6d8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1b7}]}]}, @NFTA_SET_DESC_CONCAT={0x88, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbf00}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa4}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6e85}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}]}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xb}]}, @NFT_MSG_NEWOBJ={0x30, 0x12, 0xa, 0x881, 0x0, 0x0, {0x3, 0x0, 0x8}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_DATA={0x1c, 0x4, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x81}]}}, @NFT_MSG_DELCHAIN={0x24, 0x5, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}]}, @NFT_MSG_DELRULE={0x50, 0x8, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8848}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2b}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x44}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x809b}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2c}]}]}, @NFT_MSG_NEWTABLE={0x78, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x50, 0x6, "8c96da1e4e588913a8adaaf28f92974cf1fa4ca3e44856ac983e975781d953314830d4964ecb046c9e461ce243f56b9d52244578beea968ed4470852047f00c34b24850ad5efdd741e9afffd"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x668}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5, 0x901, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}}, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="06000000000400000000008000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000a464357177730772"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x801)
open(&(0x7f00000001c0)='./file0\x00', 0x80880, 0x1)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x0, 0x0, 0x7ff}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2, 0xc081, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r0}, 0x50)
getpid()

16m4.194195993s ago: executing program 1 (id=1524):
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0)
syz_usb_connect(0x0, 0xdd, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc4, 0xb8, 0x68, 0x8, 0x2357, 0x109, 0xbdda, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0xff, 0xff, 0xff}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f00000000c0)="cc")
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000002c0)=ANY=[@ANYBLOB="000801"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)

16m1.064793463s ago: executing program 1 (id=1530):
socket$packet(0x11, 0x2, 0x300)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040), 0x0)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043)
r2 = dup(r0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x81, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
pipe2$9p(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a)
splice(r3, 0x0, r0, 0x0, 0xffff, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c)

15m59.796845293s ago: executing program 1 (id=1535):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000)={0xffffffff}, 0xf1, 0x10, &(0x7f0000000000)={0x0, 0x7}, 0x7}, 0x48)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000004b0000004b000000060000000d0000000100040f03000000040000000000000005000000ff7da50000000000000003000000000200000005000000060000"], &(0x7f0000000a40)=""/4096, 0x6a, 0x1000, 0x1, 0x6, 0x10000}, 0x28)
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
r5 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, 0x0)
ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000000)=r5)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5})
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x1, r5})
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000980)=0x1)
sendto$inet(0xffffffffffffffff, &(0x7f0000000440)="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", 0x900, 0x1, &(0x7f0000000300)={0x2, 0x4e21, @broadcast}, 0x10)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r3, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0xff7c, @local}, @ib={0x1b, 0x7fff, 0x0, {"0000000000000000020500"}, 0x0, 0x1, 0x4}}}, 0x118)
sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000001a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELOBJ={0xe4, 0x14, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xaf, 0x8, "d869d5d882a2a02a9eca75ac30a308fed902c9589c7a85ad6677959f309803a31e83e4e184db474108bd0daa13078552d085eb9cd06314294b33713066cf709de3739e821634a344a162a0a81a0208480187745563b2a7248c7d405d5c646ca788b7b7d4e55c9d2068af65065ad733e792ff2fa741188c3463b8542b8a650b0d3c1ed0f0fb1e6d8fa556fe8b64d0b7374399d55b39355130c8004a474977e80a51351b896cce6ed6df4945"}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWSETELEM={0x2a8, 0xc, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x250, 0x3, 0x0, 0x1, [{0x24c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x103, 0x6, 0x1, 0x0, "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"}, @NFTA_SET_ELEM_EXPRESSIONS={0xa4, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0xa0, 0x6, 0x1, 0x0, "79a0042825dec66327c62351fb3ce28ab09130b9ca0037eb558fcdebd0801039a5c78338b9bc85635a6502ac6ccf948bd7dd372c71f9f06a6cb4389e32939f1e73b472be17456f8ff336865068e16992deeb59caed4874b715b3c20f45fe1cb8a8102b4ce580068558430e65d4f7dd72feaeb3d198180b58b87322adef16a08d6292ff95a2a84ea30ad2e59cb2eb705288408e54176a2418e491696d"}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_NEWSET={0x17c, 0x9, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0x130, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2000}, @NFTA_SET_DESC_CONCAT={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}]}]}, @NFTA_SET_DESC_CONCAT={0x7c, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20000}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6d8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1b7}]}]}, @NFTA_SET_DESC_CONCAT={0x88, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbf00}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa4}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6e85}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}]}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xb}]}, @NFT_MSG_NEWOBJ={0x30, 0x12, 0xa, 0x881, 0x0, 0x0, {0x3, 0x0, 0x8}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_DATA={0x1c, 0x4, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x81}]}}, @NFT_MSG_DELCHAIN={0x24, 0x5, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}]}, @NFT_MSG_DELRULE={0x50, 0x8, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8848}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2b}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x44}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x809b}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2c}]}]}, @NFT_MSG_NEWTABLE={0x78, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x50, 0x6, "8c96da1e4e588913a8adaaf28f92974cf1fa4ca3e44856ac983e975781d953314830d4964ecb046c9e461ce243f56b9d52244578beea968ed4470852047f00c34b24850ad5efdd741e9afffd"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x668}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5, 0x901, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}}, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="06000000000400000000008000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000a464357177730772"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x801)
open(&(0x7f00000001c0)='./file0\x00', 0x80880, 0x1)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x0, 0x0, 0x7ff}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2, 0xc081, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r0}, 0x50)
getpid()

15m59.635103338s ago: executing program 1 (id=1538):
creat(&(0x7f0000000080)='./bus\x00', 0x0)
socket$igmp6(0xa, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
request_key(0x0, 0x0, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x802, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31)
preadv(r1, &(0x7f0000000bc0)=[{&(0x7f0000000780)=""/225, 0xe1}, {&(0x7f0000000880)=""/216, 0xd8}, {&(0x7f0000000980)=""/17, 0x11}, {&(0x7f00000009c0)=""/144, 0x90}, {&(0x7f0000000a80)=""/216, 0xd8}], 0x5, 0x8001, 0x0)
sendmmsg$inet6(r2, &(0x7f0000002940), 0x40000000000017d, 0x811)
openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b80)=ANY=[@ANYBLOB="120100000000000853084801000000000001090224000100009000090400000103000000092107000b0122070009058103"], 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x77, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x1, 0x1, 0x3, 0xd0, 0x1, [{{0x9, 0x4, 0x0, 0x1d, 0x3, 0x2, 0x6, 0x0, 0xb, {{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x7, 0x3, 0x2}, [@network_terminal={0x7, 0x24, 0xa, 0x4, 0x1, 0x17}, @mdlm={0x15, 0x24, 0x12, 0x8}, @obex={0x5, 0x24, 0x15, 0xa898}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x4d, 0x3, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x7, 0x3, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x420, 0x3, 0x6e}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x44630892fc868b0b, 0xf, 0x3, 0x2, 0x10, 0x91}, 0x43, &(0x7f0000000300)={0x5, 0xf, 0x43, 0x3, [@generic={0x31, 0x10, 0xb, "baa659a373a92c65c814c19fa9f080c53ad4c5a8a6cd1551dacd25440159df6db92cc33ee5dcdf0952a22d0b728e"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x0, 0x1, 0x9}]}, 0x6, [{0xf4, &(0x7f0000000380)=@string={0xf4, 0x3, "921e5ac22c0173c98a48c172ddebf9815b2fddb5fa1a97df2c54b2da524a42e8384f2950d0b3699fe5b927c76e49cd7716606bd6b5d8099e959129e6d7cef1b506248be7f71952c94942f26bded14aae742016e22ba74031f882748d8e420718bba5b6420865d7bd8cd94bbb3cb46752cf66540333cbf6d9e07bbc13d34b0da24962cfee948864c10d7068dbfb1d009d5d1f69e14fab00f8d4c4c4aece10a37b63bea711d2f216ba0b4d2ab705ad26b6fb36bdc53f2aca4ffa3b08bb09c3135af7703053c4f0e204dc5c2033960f08de0cac7511f38cfb730d543eeb63db6e07daa701a500ab218236c3dffe8df8fa4c4433"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x457}}, {0x100, &(0x7f00000004c0)=@string={0x100, 0x3, "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"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x1009}}, {0x88, &(0x7f0000000600)=@string={0x88, 0x3, "2525b5de822e4f9a633e4eaf65da627f3c61d2342cdd0de4798ac7fae65b3164f508b9d5357a36bf3a37a186ca2fa4fa30a8da4d751a3aceb2baae9fb967cfa4e014231e3c97665196658e50dff1f870e73d9ca8c9761e39caab760df730760b309d5fc76dd30c2c8b6e2026f92d90d46cd135cdc29781b2c4ce5518ca08468c3eab3e86ff44"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x82c}}]})
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0xa1, {{}, {0x0}, 0x0}}], 0x48}, 0x0)
syz_usb_control_io(r3, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x20, 0x6, 0xf1, {0xf1, 0xd, "c2847d0e8fcc4a59f5544a7c5a6066ce8bb8de592a883e7488de04811dbcb0d88115123ede583e3aab4edc7960f4c68ff0937f84d714c97b12d42909d179b395d79525cbd760b781b54893029a14ad81782b1b66d731e4bbcb8fba62a83a8e91df269d896d8f68d3c84e09f313acef5a87f2038bbf915927256c076c7c38e0aac16019621a7ce2b64ed80dba312d8628f4297ec48dd2be22aca9ec771b391b9647a7e1716044ce92947e1681577ff3cd9928dccfb4aa5b7fec53d13cd0d99197d4b675c4a6acf31c5bf562b7b5e496a38f54a83e4a2e37dccbd2655ccbf9df9448ce354c99f21786193d73223be63a"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc1a}}, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x1, 0x40, 0x6, 0x4, 0xb154, 0x1ff}}}, 0x0)

15m43.96778426s ago: executing program 32 (id=1538):
creat(&(0x7f0000000080)='./bus\x00', 0x0)
socket$igmp6(0xa, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
request_key(0x0, 0x0, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x802, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31)
preadv(r1, &(0x7f0000000bc0)=[{&(0x7f0000000780)=""/225, 0xe1}, {&(0x7f0000000880)=""/216, 0xd8}, {&(0x7f0000000980)=""/17, 0x11}, {&(0x7f00000009c0)=""/144, 0x90}, {&(0x7f0000000a80)=""/216, 0xd8}], 0x5, 0x8001, 0x0)
sendmmsg$inet6(r2, &(0x7f0000002940), 0x40000000000017d, 0x811)
openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b80)=ANY=[@ANYBLOB="120100000000000853084801000000000001090224000100009000090400000103000000092107000b0122070009058103"], 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x77, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x1, 0x1, 0x3, 0xd0, 0x1, [{{0x9, 0x4, 0x0, 0x1d, 0x3, 0x2, 0x6, 0x0, 0xb, {{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x7, 0x3, 0x2}, [@network_terminal={0x7, 0x24, 0xa, 0x4, 0x1, 0x17}, @mdlm={0x15, 0x24, 0x12, 0x8}, @obex={0x5, 0x24, 0x15, 0xa898}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x4d, 0x3, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x7, 0x3, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x420, 0x3, 0x6e}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x44630892fc868b0b, 0xf, 0x3, 0x2, 0x10, 0x91}, 0x43, &(0x7f0000000300)={0x5, 0xf, 0x43, 0x3, [@generic={0x31, 0x10, 0xb, "baa659a373a92c65c814c19fa9f080c53ad4c5a8a6cd1551dacd25440159df6db92cc33ee5dcdf0952a22d0b728e"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x0, 0x1, 0x9}]}, 0x6, [{0xf4, &(0x7f0000000380)=@string={0xf4, 0x3, "921e5ac22c0173c98a48c172ddebf9815b2fddb5fa1a97df2c54b2da524a42e8384f2950d0b3699fe5b927c76e49cd7716606bd6b5d8099e959129e6d7cef1b506248be7f71952c94942f26bded14aae742016e22ba74031f882748d8e420718bba5b6420865d7bd8cd94bbb3cb46752cf66540333cbf6d9e07bbc13d34b0da24962cfee948864c10d7068dbfb1d009d5d1f69e14fab00f8d4c4c4aece10a37b63bea711d2f216ba0b4d2ab705ad26b6fb36bdc53f2aca4ffa3b08bb09c3135af7703053c4f0e204dc5c2033960f08de0cac7511f38cfb730d543eeb63db6e07daa701a500ab218236c3dffe8df8fa4c4433"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x457}}, {0x100, &(0x7f00000004c0)=@string={0x100, 0x3, "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"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x1009}}, {0x88, &(0x7f0000000600)=@string={0x88, 0x3, "2525b5de822e4f9a633e4eaf65da627f3c61d2342cdd0de4798ac7fae65b3164f508b9d5357a36bf3a37a186ca2fa4fa30a8da4d751a3aceb2baae9fb967cfa4e014231e3c97665196658e50dff1f870e73d9ca8c9761e39caab760df730760b309d5fc76dd30c2c8b6e2026f92d90d46cd135cdc29781b2c4ce5518ca08468c3eab3e86ff44"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x82c}}]})
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0xa1, {{}, {0x0}, 0x0}}], 0x48}, 0x0)
syz_usb_control_io(r3, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x20, 0x6, 0xf1, {0xf1, 0xd, "c2847d0e8fcc4a59f5544a7c5a6066ce8bb8de592a883e7488de04811dbcb0d88115123ede583e3aab4edc7960f4c68ff0937f84d714c97b12d42909d179b395d79525cbd760b781b54893029a14ad81782b1b66d731e4bbcb8fba62a83a8e91df269d896d8f68d3c84e09f313acef5a87f2038bbf915927256c076c7c38e0aac16019621a7ce2b64ed80dba312d8628f4297ec48dd2be22aca9ec771b391b9647a7e1716044ce92947e1681577ff3cd9928dccfb4aa5b7fec53d13cd0d99197d4b675c4a6acf31c5bf562b7b5e496a38f54a83e4a2e37dccbd2655ccbf9df9448ce354c99f21786193d73223be63a"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc1a}}, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x1, 0x40, 0x6, 0x4, 0xb154, 0x1ff}}}, 0x0)

7m10.437214945s ago: executing program 2 (id=2946):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_io_uring_setup(0x495, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x7, 0x288}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x4, 0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
write$FUSE_LK(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0x65, 0x7eb, 0x1}}}, 0x28)
ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"})
write$UHID_INPUT(r5, 0x0, 0x0)
mq_timedsend(0xffffffffffffffff, &(0x7f00000000c0)="98e9dd9ad4b5d2b3b2be9e6a09fd03c10684f48b159c8eb79c04298f4582fa61b8597acaee55ee9d73b237af7aea156f4bd8c11c168b49b68f954385543850551f9203d3dc16a23a330e3406", 0x4c, 0x0, &(0x7f0000000180))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind(0xffffffffffffffff, &(0x7f0000000140)=@rc={0x1f, @any, 0x4}, 0x80)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x58, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_MAC_HINT={0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}, @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, {0x18, 0x0, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x6}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x2, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0x74}}, 0x1)

7m5.218114548s ago: executing program 2 (id=2952):
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a00)=@newqdisc={0x70, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x3, 0x1, 0x3, 0x200400, 0x8}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x8, 0x6, 0xa9, 0x0, 0x10, 0x9}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840)
r2 = gettid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18000000}, 0x48)
r3 = getpgrp(0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x94c, 0x200, {<r4=>r2}, {}, 0x401, 0x5})
syz_pidfd_open(r4, 0x0)
prlimit64(r3, 0xe, &(0x7f0000000080)={0x2, 0x2}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020601020060000000000000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400020000008001240fffffffa0d000300686173683a6e657400000000050004"], 0x5c}}, 0x0)
r6 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, <r8=>0x0}, &(0x7f0000000280)=0x5)
setuid(r8)
read$msr(r6, &(0x7f0000048040)=""/102392, 0x18ff8)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000002180)={@loopback={0xfec0ffff00000000}, @empty, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2020013})
r10 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20)
preadv(r10, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0)

6m53.343790019s ago: executing program 2 (id=2963):
r0 = fsopen(&(0x7f0000000040)='zonefs\x00', 0x1)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="5e6ac77702883b3fe5a9e9b28cb7f93b5a8a27c4041e729f05c2c1c81d5785e265c68a96d19e9177b9eaa01d7b02e22112c2d46d18f9a32eef1f3759972d11e670296c9ff1f0726900a3c8eecc3bde2226e076f54a310f", @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESHEX=r0, @ANYRES16=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, 0x0)
write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", <r5=>0xffffffffffffffff})
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x13)
ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000240)={0x800, 0x8001, 0xbb9, 0x7, 0xb7})
ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000000c0)={"000000149c0286e08ffad4ad1381b3aff5eb000022a70c2900", r5, <r7=>0xffffffffffffffff})
close(r7)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r8, 0x0, 0x485, 0x0, 0x0)
r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair(0xa, 0x800, 0xe0000000, &(0x7f0000000000))
ptrace(0x4206, r9)

6m48.703969427s ago: executing program 2 (id=2969):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0})
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000440)={0x0, 0x3, 0x83, "f3834a1af48d0bf9f2baa537183cdcc065dadbda5fbb009f22489616d45c139926483cd690273eae97291d4eb84d4d412ccd2473a0b43d01f931c2c73c139f86554ad5831650156e9b830441c55bc18b37f98d64aa4c35e4888703112bab692560ecdc3d0cf59b5469a5651616e4daf765a417faf6d6e993970df44303c8b324d491c1"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xe}, &(0x7f00000002c0)={0xc0, 0xa1, 0x4, 0xbb}, &(0x7f0000000300)={0x40, 0xa0, 0x4}, &(0x7f0000000340)={0xc0, 0xa2, 0x2f, "b4cd5164db793cf927cf6af8afd1a34c6813be619db2aef4cebe11257cdd4c7166440ce7a7a7ea11d746f81a8c986b"}})
syz_usb_control_io$rtl8150(r2, 0x0, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x7, &(0x7f0000000000)=0x2, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)
syz_emit_ethernet(0x66, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0xff, @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x1, "9595f429ae08"}]}}}}}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r5, @ANYBLOB="40005200060010"], 0x24}, 0x1, 0x0, 0x0, 0x4004810}, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r6 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c)
setsockopt$inet6_tcp_int(r6, 0x6, 0x8, &(0x7f0000000180)=0x1ff, 0x4)

6m38.245723506s ago: executing program 2 (id=2983):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002940)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002b40)="fb1add96eb5c4cee3df251747b4c22fa53f4688d7e1de775eb384e67c6582a1c81de03b4a72c33625ef534c5ca4d2efe7943bb3192c53781854a9d34a1bf7e0d6284f0e66080d445b540a2f7e462a8338abd11bf2789063bf6f3064a921853c52bdf68e827858e06ccf3ed47c27b11f2bf39d587a2912ef9643a51e3bf0e366ffac35589fa3784872a51aac3c75257fd292fe52d6b896d0c41961cb60e797fa328f5b86561291635c839bff7e1c824bce99130465d4753b7696b7cd22cfaf8cc647a8852f3ee63fcc4e04f581b45f8a7cbd6fa55ed355666311f6250845b", 0xde}], 0x1, &(0x7f0000000300), 0x0, 0x20000800}], 0x1, 0x91)
recvmsg(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000003f80)=""/4109, 0x100d}], 0x1}, 0x20f2)

6m38.137690397s ago: executing program 2 (id=2985):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000040)=""/5, 0x200000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f000000cdc0)=0x111020, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', <r3=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x12, r3, 0x35}, 0x10)
bind$xdp(r1, &(0x7f0000000200)={0x2c, 0xb, r3, 0x3e, r1}, 0x10)

6m23.036061555s ago: executing program 33 (id=2985):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000040)=""/5, 0x200000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f000000cdc0)=0x111020, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', <r3=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x12, r3, 0x35}, 0x10)
bind$xdp(r1, &(0x7f0000000200)={0x2c, 0xb, r3, 0x3e, r1}, 0x10)

5m54.128024123s ago: executing program 5 (id=3042):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="8522ffe09374bdf243b84b02ad4dc414c32ee2211aad18e59bc8a8c8a634f13a3c31e6bc96000493564963fa2ba858a9b0f087c6dd605b18f44f2621183bdeff9ae7092800000000000b9e29"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf2501000000000000000b000000000600147379"], 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7cef000000ff288a300600000006000d00000000007010c0", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYRES8], 0x66)
r3 = socket$phonet(0x23, 0x2, 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
socket(0x10, 0x803, 0x0)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000002340)={'netdevsim0\x00', &(0x7f00000022c0)=@ethtool_gstrings={0x1b, 0x3}})

5m52.993879994s ago: executing program 5 (id=3045):
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000380)=0x9, 0x4)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x2006}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10)
r1 = fcntl$dupfd(r0, 0x0, r0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
ioprio_set$uid(0x3, 0x0, 0x0)
readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001840)=ANY=[], 0x1208}}, 0x8084)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x100})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x4200031, 0xffffffffffffffff, 0xffffd000)
mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000440)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}})

5m52.465648506s ago: executing program 5 (id=3047):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800010400000000000000008594233c2d76add12defac00ad0000009500000000000000", @ANYRES8=r0, @ANYRESOCT=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x4e, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000240)={0x1ff, 0xfffffff7, 0xb, 0x4, 0xd1, 0xfffffff9})
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000680)=""/241)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000007c0)={{0x2, 0x4, 0x6, 0x6, '\x00', 0x5}, 0x0, [0xa9, 0x7, 0x8, 0x9, 0x2, 0x0, 0x2c, 0x5, 0x7, 0x100, 0x6, 0x7, 0x4, 0x2, 0xfff, 0x8001, 0xd0, 0x5, 0x101, 0x5, 0x1, 0x7fffffffffffffff, 0x2, 0x8001, 0x3, 0x10, 0x7, 0xebd3, 0x7, 0x1ff, 0x5, 0x9, 0x2, 0x2, 0x4, 0x7fffffff, 0x6, 0x4, 0x77c2, 0x3, 0x401, 0xc, 0x8, 0x4, 0x5, 0x10000, 0x0, 0x4dc4, 0x2000000000000000, 0x4, 0xfffffffffffffff9, 0x3, 0x4c4a, 0xfff, 0x8, 0xa, 0x5, 0xff, 0x2, 0x3, 0x6, 0xc, 0x37b0, 0x9, 0x5, 0x3, 0x5, 0x9, 0x80000, 0x3, 0x8000000000000000, 0xc, 0x8179, 0x9, 0x7, 0xb2bf, 0x0, 0x3, 0x3, 0xffffffffffffff76, 0xb12, 0x5c, 0x6, 0x10000, 0xd, 0xdff6, 0x9, 0x0, 0x0, 0x9, 0xfffffffffffffffe, 0x800, 0x10, 0xfffffffffffffff8, 0x8000000, 0x8, 0x9, 0xfff, 0x8000, 0x6b0a, 0x0, 0x4, 0xba, 0xfffffffffffffffa, 0x9, 0x9, 0x6, 0x4, 0xcd, 0x7, 0x8, 0x8, 0x7, 0x8, 0x5a, 0xa, 0xffff, 0x7ff, 0x2, 0xfffffffffffffffc, 0xfffffffffffffff5, 0xff2, 0xfff, 0x8, 0x6, 0x2, 0x100000001, 0x303e]})
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f00000002c0)={0x2, 0x3, 0x8, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[<r4=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
io_setup(0x3, &(0x7f0000000580)=<r6=>0x0)
r7 = eventfd2(0x8000000, 0x80001)
io_cancel(r6, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x9272, r2, &(0x7f00000005c0)="29391648a314b5ed8da14b231782f092df072922af9a7ac3148fab7d071d35dd2f81d83f7d18428651", 0x29, 0x81, 0x0, 0x1, r7}, &(0x7f0000000640))
read$FUSE(r5, &(0x7f000000e280)={0x2020, 0x0, <r8=>0x0}, 0x2020)
write$FUSE_INIT(r5, &(0x7f0000000380)={0x50, 0x0, r8, {0x7, 0x2b, 0x0, 0xffffffff82809815, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}}, 0x50)

5m51.237953279s ago: executing program 5 (id=3048):
ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000480))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ac0)=@newtfilter={0x459c, 0x2c, 0xd27, 0x70bd25, 0x7ffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xe, 0x8}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x456c, 0x2, [@TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffa}]}, @TCA_CGROUP_POLICE={0x54, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x64, 0x5, 0x97f, 0x8, 0x80000001, {0x1, 0x1, 0x9, 0x5, 0x100, 0xa49a}, {0xf, 0x0, 0x3, 0x0, 0x36c3, 0x5}, 0x9, 0x5, 0xf95}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}]}, @TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb, 0x1b25, 0x6, 0x7, 0x1, 0x401, 0x1, 0x0, 0x1, 0x3ff, 0x10000, 0xfffffffb, 0xd61, 0x0, 0x2, 0x1, 0x2c4ce953, 0xfffffff2, 0x2, 0x28, 0xffffffff, 0x4, 0xa91, 0xd, 0x5, 0x80000001, 0x8, 0x6, 0x800, 0xa, 0x9, 0x9, 0xfffffff7, 0x2, 0x4, 0x432f, 0x401, 0x95a5, 0x1, 0x3, 0x1, 0x1, 0x4, 0x0, 0x92d, 0xa8e, 0x0, 0xfffffffa, 0x5, 0x8, 0xd9, 0x6, 0x5, 0xe, 0x2, 0x4, 0x4, 0x1, 0x6, 0x1, 0x8, 0x5, 0x6, 0x9252, 0x2, 0x5, 0x80000001, 0x2, 0x6, 0x7fffffff, 0xb12f, 0x152, 0xce, 0x0, 0xfff, 0x7, 0x1ff, 0xfffffffa, 0x2, 0xfffffffa, 0x6f, 0x3, 0xf8c, 0xa, 0x1, 0xfffffffa, 0x7fffffff, 0x2a, 0x80, 0x9, 0x8, 0x9, 0x4, 0x8000, 0x3, 0x12000000, 0x4, 0xf, 0x6, 0x9, 0x800, 0x80000000, 0x4, 0x7, 0x1, 0x6, 0xfffffff9, 0x5, 0x100000, 0x2, 0xffff, 0xa352, 0xffff, 0x9, 0xa, 0x5, 0x6, 0x0, 0x1, 0x946c, 0x4, 0xfffffffa, 0xfffffff5, 0x400, 0x0, 0x6, 0x9, 0x7, 0x3, 0x4, 0x1, 0x5, 0x80000, 0x2, 0xffffffff, 0x1ff, 0x8, 0x2, 0x1, 0x3, 0x4, 0x7f2, 0x400, 0x900, 0x7, 0x6, 0xd521, 0xf, 0x2, 0x4, 0x9, 0x6, 0x5, 0x4, 0x7fffffff, 0x0, 0x9, 0x4, 0xfffffff1, 0x8, 0xae, 0x3, 0x9, 0x800, 0xc6, 0x7, 0x5, 0x8, 0x5, 0x2, 0x60, 0x2, 0x9, 0x1, 0x1, 0x9, 0x0, 0x2, 0xf63, 0x8, 0xe, 0x9, 0x2, 0x1ff, 0x800, 0x422e, 0x7, 0x5, 0x0, 0x3, 0x117c, 0x80, 0x6, 0x0, 0x6, 0xf, 0x50, 0x4, 0x9, 0x3, 0x8, 0x99, 0x3de, 0x4, 0x2, 0x5, 0xf, 0x0, 0xbc, 0x6, 0x7, 0x8000, 0x5, 0x6c62, 0x5, 0x1, 0xf3, 0xc, 0x0, 0xece, 0x1, 0xfffff801, 0xffff, 0x0, 0x1, 0x1503, 0x9, 0xfffffc01, 0x5a, 0x80, 0x30, 0x7ff, 0x3, 0x18e7db17, 0x7, 0xffffffff, 0xd03, 0x6, 0x7, 0x0, 0xd62, 0x7fff, 0x2, 0x2, 0x7, 0x2, 0x9, 0x3, 0x5, 0x3, 0x2a70c299, 0x0, 0xb48, 0x7, 0xffffffff, 0x7]}]}, @TCA_CGROUP_ACT={0x27fc, 0x1, [@m_ctinfo={0x10c, 0x9, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x334d}]}, {0xd7, 0x6, "d162db62be74d9168838b57f0f302f827446fb422ebb02d104ded5d586560d9e29509c54d03b7b918e94cd09ef75f5e9005b0e12646df28c6b8092d04dabcd6973489202b5833734409b13e045d832cb8023e306230749186b1a5e186ff6feedb3962b9e8bcafa29ddeaa8ced6bf635a545668f9e9d800aaf36eda038e112ec9d27c2a9381cb395c3942a1818cab4e3beab0a652eb14e3acd4852c4752c8f30b5f595c5e5336ace6416ff490ae86afe0d4e0737c16e7b3e2beaf43d1f4b520c4b672bbf3c0ae37a899eea0e40539f07af93bd1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x25d8, 0x14, 0x0, 0x0, {{0xb}, {0x15ac, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x425f}, @TCA_POLICE_TBF={0x3c, 0x1, {0xeed, 0x8, 0x2e, 0x9, 0x1, {0x0, 0x2, 0x8, 0x7, 0xcd, 0x7ff}, {0x7, 0x2, 0x9, 0x0, 0x7, 0x9}, 0xa91a, 0x6b, 0x5}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0xf41, 0x7ff, 0x2, {0x6, 0x0, 0x7, 0x10, 0x240, 0xf}, {0xb, 0x0, 0x7, 0x8000, 0xff81, 0x2}, 0x80, 0xf7, 0xa2}}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0xb}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffbf}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffce4c1766}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xc2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0xde, 0x81, 0x9, 0x3, 0x430, 0x856, 0x4, 0x10001, 0x7fff, 0x2, 0x9, 0x7fe, 0x200, 0x0, 0x10001, 0x400, 0x0, 0x2, 0x80000001, 0x2, 0x524, 0x6, 0x1, 0x0, 0xf97, 0x7, 0x2, 0x4, 0x2bd711e, 0x8, 0x9, 0x81, 0x0, 0x1, 0x5, 0x7, 0x401, 0x3, 0x3ff, 0xc0ca9947, 0xfffffff7, 0x40, 0x8, 0x7f, 0x10001, 0x0, 0x1, 0x4, 0x4, 0x8001, 0x3, 0xfffffffb, 0x4, 0x23, 0x7, 0xffff, 0x1, 0xbd7c, 0x401, 0xc, 0x7, 0x2, 0x9, 0x7, 0x9, 0x7, 0xc0d7, 0xf, 0x9, 0x5d, 0x9, 0x14, 0x6, 0xa, 0x4, 0x749, 0x80000000, 0xffffff0a, 0xffffff08, 0xe, 0x8, 0x9, 0x9, 0x0, 0x2, 0x2, 0x80000000, 0x4788, 0x8, 0x3, 0x9, 0xcf, 0x0, 0x6, 0x3, 0x1, 0x1, 0x4, 0xe17, 0x7fff, 0x1, 0x1, 0x0, 0x9, 0xfffffffa, 0x7, 0x6bda, 0x2, 0x7, 0x7, 0x6, 0x100, 0xedb0, 0x3d, 0xffffffff, 0x0, 0xe, 0x88, 0xa, 0x66a, 0x7, 0x5, 0x4, 0x8, 0x7, 0x9, 0x7, 0x9, 0x4, 0x2, 0x8000, 0x2, 0x3, 0x6, 0xc6, 0x8000000, 0xa, 0x6, 0x7, 0x80000001, 0x7, 0x3, 0x0, 0x93, 0x2, 0x100, 0x1, 0x6, 0x6, 0x8, 0x800000, 0x2, 0x400, 0x3e1, 0x3, 0x100, 0x7, 0x10000, 0x0, 0x6, 0xfffffffc, 0x7, 0x2, 0xcce, 0x9248, 0x6, 0xfffff8de, 0x7, 0x2, 0x6, 0x26ec2914, 0x3, 0x100, 0x1000, 0x9, 0x4d52, 0x2, 0x1, 0x6, 0x5, 0x6, 0x10, 0x861, 0x7fff, 0x8, 0x81, 0xffffffff, 0x7, 0x651d9e7, 0x6, 0x47cc7087, 0x4, 0x5, 0x4, 0x80, 0x0, 0x80000000, 0x2, 0xd0, 0x1, 0x69, 0x5, 0x8, 0x2, 0x5, 0x6, 0x81, 0x80000001, 0x5, 0x1, 0x2, 0xfff, 0xa, 0x3, 0x1680476a, 0x8ac, 0x2, 0x2, 0x6, 0xf, 0x1000, 0x80, 0x7, 0x1, 0x3, 0x321, 0xa84, 0x6, 0x2, 0x0, 0x5, 0xfffffeff, 0x0, 0x2, 0x2, 0x40, 0x8, 0xffffffff, 0xfffffffb, 0xd, 0x3, 0x6, 0x6, 0x1, 0x10000, 0xffffffff, 0x7, 0x100, 0x100, 0x1, 0x3, 0x7f, 0x985, 0x6, 0x7faba8e9, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x10000000, 0x9, 0x6, 0xf, {0x47, 0x2, 0x518, 0x2, 0x7f, 0x4}, {0xb, 0x2, 0x8, 0xff03, 0x3, 0xb}, 0x800, 0x3, 0x63}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x7, 0x0, 0x2e52, 0x6, 0x8, 0x9, 0x6, 0xe, 0x1, 0x7, 0x0, 0x7b13d994, 0x1d87, 0x1, 0x7f, 0x2, 0x80, 0x40, 0xa, 0x4, 0x9, 0x2, 0x3, 0x3, 0xfffffffd, 0xcd, 0x9fc, 0x6, 0x8, 0x5, 0x6, 0x5, 0x6, 0x9, 0xcd3, 0x7, 0x5, 0x8, 0x9, 0x1fa5, 0xaf, 0x7, 0x0, 0xd86, 0x800, 0x5, 0x1, 0x8, 0x401, 0x7, 0xad, 0x2, 0xffffff80, 0xfffffffe, 0x94e, 0x81, 0xfffffffb, 0x1, 0x5, 0x1, 0x1f, 0x10, 0x1, 0x0, 0x2, 0xa456, 0xfb, 0x2, 0xb, 0x8, 0xffff, 0x4, 0x5, 0x8, 0xfae5, 0x100, 0x2, 0xbe, 0x669, 0x9, 0x8, 0x4, 0x9f, 0x8001, 0x2, 0xb86, 0x5, 0x8, 0x9, 0x1, 0xa6, 0x0, 0x6, 0x4, 0x2, 0x3, 0x3, 0x100, 0x1, 0x0, 0x1, 0x6, 0xfffff3a3, 0x401, 0x9, 0x80, 0x3, 0xe, 0xfa2, 0x9, 0x1, 0xa11f, 0x3, 0x3, 0x7, 0x5, 0x2fbc, 0xffff, 0x0, 0x7fffffff, 0x9, 0x1000, 0x8, 0x7fffffff, 0x1000, 0x2, 0x1, 0x80000000, 0x1, 0x4, 0x9, 0x8, 0x0, 0x0, 0x5, 0x5, 0x9, 0xc0000, 0x9a9, 0x6, 0x48, 0x20000000, 0x2, 0x8, 0x80000000, 0x2c9b, 0xc51e, 0x1, 0x9, 0x7fffffff, 0x10, 0x5064, 0x989, 0x40000003, 0x0, 0x2, 0x800, 0xff, 0x5, 0x4, 0x9, 0x6, 0x7, 0xb, 0x8, 0x8, 0x3b, 0x3, 0x4, 0x4, 0x2, 0x2, 0x2, 0x800, 0x9, 0x84, 0x8001, 0x8000, 0x9, 0xffff0000, 0x4, 0x18, 0x8, 0x8, 0x40, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0x6, 0xfff, 0x8, 0xb0a, 0xf, 0x9, 0xf81a, 0x5, 0x9, 0x0, 0x2, 0x9, 0x20, 0x0, 0x1, 0x3ff, 0xffffffff, 0x6635, 0x5, 0x7, 0x1, 0x3, 0x8, 0x0, 0x7aa7771e, 0x3800000, 0xae6f, 0x2, 0x3ff, 0x952, 0x1, 0x10, 0x9, 0x7, 0x3, 0xa, 0xb, 0x28134187, 0x0, 0xe2, 0x1, 0x2, 0x6, 0xbf2, 0x5, 0x1, 0x10001, 0x1ff, 0x80, 0x10, 0x200, 0x3, 0x5, 0x5, 0x26a, 0xfffffff7, 0x2, 0xf, 0x3, 0x2, 0x1ff, 0x10, 0x3, 0x1000]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x39}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x2, 0xb, 0x1, 0x8, {0x3, 0x2, 0xfff, 0x0, 0x8, 0x2}, {0x8, 0x1, 0xf260, 0xf42, 0x100, 0xb9}, 0x7fffffff, 0x3, 0xec7}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xb80}, @TCA_POLICE_RATE={0x404, 0x2, [0xcc, 0x10000, 0x1, 0x6, 0x1, 0x4a53f9d7, 0x9, 0x6, 0xf5b, 0x4, 0x4c, 0x33f, 0x7, 0xffffffff, 0x18000000, 0x6, 0x8000, 0x100, 0x40, 0xf, 0x2, 0xec, 0x1, 0xbc0, 0x3, 0x33, 0x13, 0x7, 0x3, 0x400, 0x9, 0x9, 0xfffffff9, 0x8, 0x0, 0x3c, 0xd, 0x5f, 0x1ff, 0x5, 0x2, 0x3, 0xd, 0x6, 0x5, 0x2, 0x3, 0x5d, 0x6, 0xffff8001, 0x6, 0x10, 0x4, 0x7fffffff, 0x9, 0x1, 0x3, 0x3, 0x80000000, 0x0, 0x117, 0x6, 0xb, 0x8000, 0xfff, 0xc2131fc, 0x7f, 0x71000000, 0x8001, 0x80000000, 0x7, 0x7, 0xfffffffe, 0x200, 0x4, 0x6, 0x101, 0x82, 0x400, 0xd86f, 0x4, 0x10000, 0xfffffff9, 0x8, 0x1, 0x4, 0x4, 0x35fb, 0x7, 0xb, 0x3, 0x7f0000, 0x7099, 0x8001, 0xc7e6, 0x6, 0x0, 0x9373, 0x5, 0xff, 0x3, 0x9, 0x5, 0x2, 0x5, 0x7, 0x3ff, 0xdb2, 0xffffffc1, 0x4, 0x80, 0xff, 0x4, 0xe, 0x36b, 0x8, 0x832f, 0xffff, 0x8, 0x1, 0x5, 0x2, 0x9, 0x1, 0xff4f627, 0x1, 0x10, 0xa9, 0x9, 0x3, 0x0, 0xa, 0x1ff, 0x9, 0x9, 0x4, 0x81, 0xfffffffc, 0x1000, 0x503, 0x5, 0xc90, 0x4, 0xfffffffa, 0x0, 0x36, 0x8, 0x5d, 0x1, 0x8, 0xfffffff9, 0x1, 0x0, 0x7, 0x401, 0x3, 0x1, 0xf7e, 0xc, 0x0, 0x40, 0x0, 0x1000, 0x2, 0xffffffff, 0x100, 0x3ff, 0x6, 0x80, 0x6, 0xd, 0x1, 0x0, 0x6, 0xffffffff, 0xb06, 0x7e5d, 0x500000, 0x7, 0x1, 0x4, 0x2, 0x7b570b22, 0x9, 0x4, 0x0, 0x4, 0xc42, 0x5940, 0x81, 0x2, 0x6, 0x0, 0x100, 0x10001, 0x40, 0x4, 0x10, 0x8, 0x7, 0x2, 0x0, 0x10001, 0x8, 0x22d, 0x4, 0xfffff16c, 0xb38, 0x1, 0x1e7, 0x100000, 0x3492, 0x42b9, 0x39, 0x7, 0x2, 0xffff, 0x8, 0xe1a, 0x4, 0x7, 0x5, 0x7bbe, 0x7, 0x10, 0xd, 0x5, 0x2, 0xc, 0x1000, 0x7, 0x0, 0x5, 0xa56, 0x1, 0x4, 0x4, 0xfffffff0, 0xf6, 0x2, 0x401, 0x164520f4, 0x100, 0x6316, 0x6, 0x81, 0xfffffffc, 0xb17, 0x3, 0x380000, 0xfffffff7, 0x63b5, 0x8, 0x7f, 0x4, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x426, 0x0, 0x3, 0x2a9f, 0x7, 0xfe000000, 0x7fffffff, 0x2, 0x7fff, 0xd, 0x6, 0x4, 0x4, 0x1, 0x20c, 0xffff, 0x7, 0x1, 0x7, 0x0, 0x6, 0x400, 0xe7d, 0xfffffff8, 0xe, 0x9, 0x9, 0x7fffffff, 0x1, 0x68ad, 0x4, 0x9, 0xe0fa, 0x4, 0x10001, 0xec, 0x7, 0x9, 0x100, 0x8, 0x3, 0x8, 0xc, 0x0, 0x6a2, 0x0, 0x300, 0x80000001, 0x0, 0x8000000, 0x0, 0xb, 0x80000000, 0xffff, 0x7, 0x3, 0xfa, 0x9, 0xfffffffe, 0x2, 0x0, 0xff, 0xa68f, 0x368, 0x9, 0x3, 0x40, 0x1, 0x8, 0xfffffff8, 0x3, 0x9, 0x7fff, 0xc, 0x6, 0x8000, 0xe, 0xf32, 0x37fd, 0x2, 0x100, 0x4, 0x5, 0xf117, 0xffff0001, 0x1, 0x0, 0x6, 0xb31, 0x7ee0, 0x7fff, 0x782, 0x3, 0x3, 0x4, 0x2, 0x0, 0x3, 0x8, 0x9, 0x5, 0x6, 0xf0, 0xd, 0x8, 0xc, 0xee4d, 0xfffffffd, 0xa, 0x8, 0x8, 0xc26, 0x8, 0x9, 0x10001, 0x8, 0xbb2d, 0xd, 0x4, 0x9, 0x8, 0x2, 0x80000000, 0xffffff00, 0x8, 0x49cd, 0x7f, 0x6924800, 0x2, 0x0, 0x4, 0xc61c, 0x9f, 0x3, 0x23cd4839, 0x1ff, 0x9, 0xff, 0x1, 0x0, 0x9, 0x9, 0x5, 0x1, 0x80000000, 0x4, 0x7, 0xfffffffe, 0x6, 0x7, 0x2, 0x5, 0x8, 0xa, 0x5, 0x5, 0x2, 0xffffffe5, 0x5, 0x2, 0x7f, 0x81, 0x6, 0x200, 0x1, 0x6, 0x5, 0xdaf, 0x37, 0x101, 0x9, 0x0, 0x8, 0x1, 0x1, 0x4, 0x9, 0x9, 0x7fff, 0x10, 0x8, 0x37f1, 0x9, 0x5, 0xfff, 0x2, 0x7fff, 0xe27e, 0x81, 0x199f, 0x9dd, 0xfffff801, 0x0, 0x2977, 0x7, 0x2, 0xec, 0x4, 0x800, 0x7fffffff, 0x3, 0x6, 0x6, 0xa51, 0x78, 0x4, 0x8, 0x7, 0x2548fd6f, 0x534, 0x8, 0x4, 0x10, 0x4, 0x7, 0x7, 0x5, 0x0, 0x0, 0x3, 0x10, 0x10, 0x2, 0x6, 0x7, 0x3, 0x3, 0x79, 0x5, 0x0, 0x6, 0x401, 0x3, 0x8, 0xdf8, 0x5, 0x5, 0x1, 0x5, 0xffff, 0xfffffff9, 0x7fff, 0x6, 0x1, 0x9, 0x0, 0x2, 0xe60, 0x1e000, 0x2, 0x1000, 0x6b, 0x8, 0x8, 0x8, 0x97]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffc0, 0x0, 0x10001, 0x12, 0x3, 0x6, 0x5, 0xd, 0x5, 0xfffff000, 0x0, 0x3, 0x7ff, 0xa6a6, 0x5, 0xc4d, 0xf, 0xffff, 0xfa, 0x4, 0x6ed9, 0x3ff, 0x1, 0x4, 0x9, 0x1916, 0x9, 0x1, 0xfffff801, 0x1, 0x6dce, 0x85, 0x800, 0x4, 0x86fd, 0xb, 0x6, 0x7, 0xffffdf6e, 0x6, 0x2, 0x6c25, 0x28, 0x2, 0x4, 0x1ff, 0xc61, 0x9, 0x678, 0x7, 0x6a7, 0x3, 0x3, 0xe, 0x0, 0x8, 0xd9a3, 0xb794, 0x9, 0x101, 0x4981, 0x0, 0x8, 0x7, 0x1, 0x1bc, 0x0, 0x198, 0x9, 0xcd1d, 0x7, 0x6, 0x6, 0x400, 0xdf1, 0xbb, 0x4700, 0xf, 0x81, 0x3ff, 0x4, 0x2, 0x6, 0xfffff801, 0x10, 0x7fff, 0x7, 0xffffffff, 0x5, 0x5, 0x7fffffff, 0x80000000, 0x1000, 0x80, 0x5, 0x7, 0x5, 0x4, 0x7, 0x9, 0x4, 0xf4, 0xcdf, 0x2, 0x2, 0x5, 0x1, 0x9, 0x8001, 0x6, 0x80000001, 0x6, 0xffffff6c, 0x0, 0x0, 0x2, 0x8, 0x8, 0x8, 0x46, 0x10001, 0x1, 0x2, 0x0, 0x9, 0xba3, 0x1, 0x7, 0x9623, 0x4, 0x8, 0x9, 0x9, 0x4, 0x0, 0x80, 0x10001, 0x2, 0x4, 0x2, 0x6, 0x6, 0xfff, 0x1ff, 0x400, 0x0, 0x6, 0x7, 0xbb0, 0x4, 0x5, 0x200, 0x2, 0x7fff, 0x20, 0x5, 0x7, 0x4, 0xf, 0x6, 0x8, 0xa, 0x3, 0x0, 0x9, 0x8001, 0x800, 0xd, 0xf, 0x2, 0xb, 0x90e, 0xf1d, 0xfffffffa, 0x18000000, 0xb230, 0x2, 0x1c, 0x8, 0x4, 0x6, 0x1, 0x7ff, 0x1, 0x0, 0x2, 0x6, 0x9, 0xffffff7a, 0x0, 0x1, 0xb, 0xed6, 0x14c, 0x2, 0x0, 0x8, 0x2ab, 0xb2fb, 0x8, 0x8000, 0xe0, 0xfffffffa, 0x8, 0x1, 0x7, 0xffffffff, 0x0, 0x21d4, 0xa, 0xec, 0x1, 0x1, 0x9, 0x89b2, 0x2221, 0xba8c, 0x0, 0x4, 0x9, 0x6, 0xa6a5, 0x5, 0x9, 0x5052, 0x2, 0x101, 0x4, 0x7f, 0x3, 0x1, 0x2, 0x2, 0x8, 0xfff, 0xfff, 0x0, 0x5, 0x0, 0xffffffff, 0x3, 0x3, 0x1, 0x8, 0x8, 0x7fffffff, 0x4, 0x4, 0x10, 0x400, 0x2b, 0x3, 0xb, 0x800, 0x6, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fff}]]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0x114, 0xe, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0xbee1}, @TCA_CT_MARK={0x8, 0x5, 0x5}, @TCA_CT_LABELS={0x14, 0x7, "701f2bf132f83fdfe7e72f73c207016f"}, @TCA_CT_ACTION={0x6, 0x3, 0x13}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0x3}]}, {0xa6, 0x6, "966df8ab8e77b029728e9b7fc4505330d3e97bfd4da943250f7bb34624530d9a651894b2ea1f39fcbb291e1b746f94abcfe541c6225b8b2ed909c597ec85a43745b5ae14219a4e476bda14e586c58f7b1297adfa4e8f41e45ca922b5c46c139621a68200b0b5e3355314903bfa8d2f6cc4ec2f79d299f34109c716f7ae34c0aa62002884528a9eeebf23df23bf13a3d9e2fe79421775572a78a1cfd68d0b8d8ce228"}, {0xc}, {0xc, 0x8, {0x1, 0x7}}}}]}, @TCA_CGROUP_EMATCHES={0x1cc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x80}}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x7, 0x2, 0x7ff}, {0x4, 0x3, 0x0, "d32bff"}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x6}, {{0x1, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0xc, 0x2, 0x8}, {0x5, 0x6, 0x1, "5cb02cd5b768"}}}]}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x3, 0x1, 0x6}, {0x9, 0x7, 0x3, 0x3, 0x7, 0x2, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0xdc, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x1ff, 0x7, 0x3ff}, {{0x1, 0x1}, {0x1, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x1}, {{0x4, 0x0, 0x1}, {0x2, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x3, 0x8, 0xf669}, {0x4, 0x3, 0x4}}}, @TCF_EM_CONTAINER={0x68, 0x3, 0x0, 0x0, {{0x4, 0x0, 0x3}, "f2cfe6f8c069cbb0a368fd4771ebfb3f7781c0a889fe8c3140213f75bc3bf688345a96b37e7e3cdaefd363c0f55e9e9523621314066e1c09c04fb8818e88857de117e0331a6f9dd1cc14efdfc10e5ac73aadc5771c405a16d7"}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x4, 0x8, 0x9}, {0x3, 0x4, 0x3}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x2, 0x1, 0x2}, {0x4, 0x8, 0x9, 0x1, 0x1, 0x2, 0x2}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7, 0x8, 0xfffd}, {0x0, 0x4, 0x7}}}]}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x94, 0x2, 0x2}, {0xa6, 0x4, 0x2, "cd71849c"}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xce, 0x1, 0x70}, {0x2171, 0x11e, 0x2, 0x7, 0x4, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x54, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x50, 0x1, 0x0, 0x0, {{0x3, 0x9, 0xfffb}, [@TCA_EM_IPT_MATCH_DATA={0x42, 0x5, "3ba0e0d7033cf279b09d21125150c844c22805c70df9825041859b4638e19516b13d07f924a0d7023369a877bda01c88dc90b748575f7c400c9c8cadc8bb"}]}}]}]}, @TCA_CGROUP_EMATCHES={0x1734, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x11d0, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x100c, 0x1, 0x0, 0x0, {{0x7e, 0x0, 0x7}, "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"}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7, 0x3, 0x9e66}, {0xe8a, 0x4, 0xfffffff4, 0x5}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7, 0x7, 0xffff}, {{0x1, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xfa19, 0x8, 0x61}, {0x3, 0x2, 0x6}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7}, {0xa6, 0x81, 0xff9c4409, 0x2}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x8, 0x8, 0x7ff}, {0xffffffffffffffff, 0x5, 0x3}}}, @TCF_EM_CONTAINER={0x44, 0x3, 0x0, 0x0, {{0x1ff, 0x0, 0x1}, "399ccbce1c6ef36b5b37fcdf3a4b4b71ffb4666680f74c38658c670f8803cf2db64f57e8e47a89b4ad51eaf19135c104d2f5eece9c38"}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x0, 0x8, 0x2ce}, {0x0, 0x0, 0x2}}}, @TCF_EM_IPT={0x100, 0x2, 0x0, 0x0, {{0x80, 0x9, 0x5}, [@TCA_EM_IPT_MATCH_DATA={0xea, 0x5, "29cda0c97d62f71dde7b34a80d6d3bb6228bb1de9d784f00451bf2428a1f21d821a29f63ce1949d069c699434117187cd3deeb6870fe129a51c8f6ca95be1ce6f50dc80932246028c5959e1f131a511ff3c8741cbb1d2777358b6698a5b6f770022b93e78061add6e96a24a418c495487e743ab4eca5d0a0edf983c75ee092ebf2458058edd448cf05ed3fea9e8059c030ba2ad5a8a44c4a533dee7269fbf23a7b7a24cdeef68e713af3d2388ac93e99834900c42bd335fd2715da60efe9cf22c27ad7021ee60724e8400321c87c4624f1a78b6c9eff155ec3cedcd94fe47ec3b2182a592793"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}]}}]}, @TCA_EMATCH_TREE_LIST={0xa4, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xa0, 0x1, 0x0, 0x0, {{0xfff, 0x9, 0x1}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x30, 0x5, "0ce9aa2d92fc71bfcb37524477048d2f12d2a8bcd3aef1c898375d0366869302a7bd30f3e21e8455888b3990"}, @TCA_EM_IPT_MATCH_DATA={0x24, 0x5, "20a1e6d364e06696f9d961765c65ba9d4318de7e9b8863f3a183e5e0f3757d99"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1ff}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0xd0, 0x2, 0x0, 0x1, [@TCF_EM_META={0x80, 0x3, 0x0, 0x0, {{0x5, 0x4, 0x8000}, [@TCA_EM_META_LVALUE={0x7, 0x2, [@TCF_META_TYPE_VAR="4130eb"]}, @TCA_EM_META_RVALUE={0x1a, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="ff60091b66c7e425f563"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xffff, 0x10, 0x1}, {0x3, 0x6, 0x1}}}, @TCA_EM_META_LVALUE={0x24, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="2e846fcb68eadef2df38", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="47473e7c0ca0", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_RVALUE={0x1f, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="ee5622f0b61a", @TCF_META_TYPE_VAR="c989b68ce9474434", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR='B']}]}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x7fff}, {0x8, 0x2, 0x2, "8c42"}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x1, 0x3, 0xc}, {0x8001, 0x1, 0x88000000, 0xf09d}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x1, 0x3, 0x3ff}, {0x401, 0x400, 0x9, 0x681}}}]}, @TCA_EMATCH_TREE_LIST={0x2e4, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x5}, {0x1, 0x8, 0x0, "227303f2fc6db765"}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x7f, 0x7, 0x5}, {{0x3, 0x0, 0x0, 0x1}, {0x3, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x7f, 0x1, 0x2}, {0x4, 0x1, 0x6a, 0x4, 0x1, 0x2, 0x2}}}, @TCF_EM_META={0x68, 0x1, 0x0, 0x0, {{0x3, 0x4, 0xc2e5}, [@TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_LVALUE={0xa, 0x2, [@TCF_META_TYPE_VAR="e459f616574c"]}, @TCA_EM_META_RVALUE={0x26, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="cd93b351", @TCF_META_TYPE_VAR="a570649f85bdda41871c", @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="d58367dc", @TCF_META_TYPE_INT=0x6]}]}}, @TCF_EM_CONTAINER={0xec, 0x2, 0x0, 0x0, {{0x200, 0x0, 0x4fb}, "80ca0e3108aa9e92b5170663da889457b35d678f5edfb812603d9ee1d8a9a34716bdccd04314ad297fb45a44ef0aa544b2794e7739f7ab9bc542d89ccb0b62e290ec206f0abb9142ba0f0dd76d8b16af4bcbacbe880b1aa735ad0ea8bb93d0e5667567155c7ed2b1b7e18af52f771f5b2ae4fd838dde90988ed8b1f2e0d238f6182afbf4d3bdd6cb337318b97b7471d1207713e25cce0b07a771943b720bbfff4d7c98d788b597dbfb1f2b0c1f28172a605a59edc4ea05cea6c9d6f5beaac1245434d50310b5cdf5461644944ce317f9efd0cfb44d61b46133cea54e992c19"}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x4, 0x2, 0x5}, {0x5, 0x6, 0x1, "1fda4ca2dafb"}}}, @TCF_EM_CONTAINER={0x104, 0x2, 0x0, 0x0, {{0x5, 0x0, 0x3}, "1e5415f41638833294fd064198e95a5a30143263bb6e52f1c1889646482c201a136921e65ae9ed34d568791e18b0317acbcec0ad3a118a58281f2fa004f8039968de7df73499ce893aa659bda051a09fe264f4279bc8a76548f661dc5efb3b38dc9cdd312463bdb1137f2c0964ceffb56732d2ac0a66041cbabb8cc058f0c29b6f0285b4827e26413f1e156d75325c8ccc9f7797cb1a847b754ee3cc40999e29756104820e41b8a62dcbc8eed42f3a1d66561f3970bbe60a2d9ad03895533eec6c94f5e4a4d40bf1998571f5e122ad86404fe32ce78c08af7d7e3c26bacba8128346e59f12c7a3621651b2d6d7af33a36f99de7c50280f7e"}}, @TCF_EM_IPT={0x2c, 0x2, 0x0, 0x0, {{0x7f, 0x9, 0x1}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x10}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0xe8, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xe4, 0x1, 0x0, 0x0, {{0x6, 0x0, 0x9}, "ab92005de71a5e6b1dddf081778c083b3d589477a95ca48b5b13567f27e64122e39db234ea0b2bc8cea7a69c817294b53df6877427764cce7a68fd9909fa1834004e2ae4ca4b38bca223400548606f5cfe408299d8f321958421249359ed815facf23e3b340b5c617dade02cfe398f16529ab6daddeb719c6c086cf768e005c7051ce7ed4e6890799d52b7e9f94c0ee27a6324e03733151721d9f7b532ac5d10006d2190270057817ca0862962195b02d084fe138f12ca7bf69ac26c228b1ba5c8619f9f267ac1d48167818ebfbea0ca3e4fd95ce7"}}]}]}]}}]}, 0x459c}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="091c002800e903000e0000000000000000000000000000000097e73bfb593b90d20e9c4956b6a4071ab67f7bf306", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x15, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bf080400090000017b8af8ff00000000bfa20000000000000702ffff00b70400000000000085000000030000009521e8e232000000bad4141dbb89e4890d2ec4955bee5bf75578382096a9f0c3a9904a56003fa2edb77b2d69e948cc9c0cd1d2879d642943780021716b4220cec6c74eaf93561651c77e016577"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100))
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265)
chdir(&(0x7f0000000040)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, <r6=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r6, r5, <r7=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_HWPT_INVALIDATE$TEST(r4, 0x3b8d, &(0x7f00000001c0)={0x20, r7, 0x0})
r8 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r9=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r9, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r11=>0x0})
sendmsg$nl_route(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000d0425bd7000fcdbdf2500000000", @ANYRES32=r11, @ANYBLOB="01006d0000ffff001c0012800b00010062726964676500000c0002800600270005"], 0x3c}}, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
keyctl$clear(0x3, 0xfffffffffffffffc)
request_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='+@@:!!\x00', 0x0)

5m50.956176074s ago: executing program 5 (id=3049):
r0 = fsopen(&(0x7f0000000040)='zonefs\x00', 0x1)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="5e6ac77702883b3fe5a9e9b28cb7f93b5a8a27c4041e729f05c2c1c81d5785e265c68a96d19e9177b9eaa01d7b02e22112c2d46d18f9a32eef1f3759972d11e670296c9ff1f0726900a3c8eecc3bde2226e076f54a310f", @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESHEX=r0, @ANYRES16=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340))
ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, 0x0)
write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", <r5=>0xffffffffffffffff})
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x13)
ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000240)={0x800, 0x8001, 0xbb9, 0x7, 0xb7})
ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000000c0)={"000000149c0286e08ffad4ad1381b3aff5eb000022a70c2900", r5, <r7=>0xffffffffffffffff})
close(r7)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r8, 0x0, 0x485, 0x0, 0x0)
r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair(0xa, 0x800, 0xe0000000, &(0x7f0000000000))
ptrace(0x4206, r9)

5m45.799654429s ago: executing program 5 (id=3052):
openat$rfkill(0xffffffffffffff9c, 0x0, 0x101800, 0x0)
openat$ttynull(0xffffffffffffff9c, 0x0, 0x28a02, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0x1, 0x200000000002, 0x7, 0x8, 0x5}, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000100)={'\x00', 0xfff9, 0x8000, 0x100, 0x40, 0xab, 0xffffffffffffffff})
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000400)={0x20, r3})
ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r2, 0x3b71, &(0x7f00000003c0)={0x20, 0x2, 0x0, 0x8001, 0x7fffffffffffffff})
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000d80)={0x1, &(0x7f0000000d40)=[{0x6, 0x6, 0x38, 0x7fffffff}]})
getsockname$netrom(r5, 0x0, &(0x7f0000000040))
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080)=0x5, 0x4)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket$inet6_mptcp(0xa, 0x1, 0x106)
recvmmsg(r4, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xa1}], 0x2, 0x0, 0x0)

5m30.097082706s ago: executing program 34 (id=3052):
openat$rfkill(0xffffffffffffff9c, 0x0, 0x101800, 0x0)
openat$ttynull(0xffffffffffffff9c, 0x0, 0x28a02, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0x1, 0x200000000002, 0x7, 0x8, 0x5}, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000100)={'\x00', 0xfff9, 0x8000, 0x100, 0x40, 0xab, 0xffffffffffffffff})
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000400)={0x20, r3})
ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r2, 0x3b71, &(0x7f00000003c0)={0x20, 0x2, 0x0, 0x8001, 0x7fffffffffffffff})
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000d80)={0x1, &(0x7f0000000d40)=[{0x6, 0x6, 0x38, 0x7fffffff}]})
getsockname$netrom(r5, 0x0, &(0x7f0000000040))
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080)=0x5, 0x4)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket$inet6_mptcp(0xa, 0x1, 0x106)
recvmmsg(r4, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xa1}], 0x2, 0x0, 0x0)

1m25.808892457s ago: executing program 6 (id=3445):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4048aecb, &(0x7f00000034c0)={{0x0, 0x0, 0x80, {0x2, 0x8000000, 0x2}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806cfcd6d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156fb4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c4ad8c81d77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728f4ffe87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d475bd5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95f3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4d04824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03f090fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea760300000000000000627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89ce903c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc6b4b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641f9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c12c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33201f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a41c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49d2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a34313315836bb7291764b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc245e748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940ae88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b89abae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33dff5ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0894a5ec3ac4343e0d808f5aee8f1869923aab6dfc1016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66393f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e02000000be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08510f9c6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e400000f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"})

1m25.286598224s ago: executing program 6 (id=3450):
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'})
sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840)
r1 = gettid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18000000}, 0x48)
r2 = getpgrp(0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x94c, 0x200, {<r3=>r1}, {}, 0x401, 0x5})
syz_pidfd_open(r3, 0x0)
prlimit64(r2, 0xe, &(0x7f0000000080)={0x2, 0x2}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020601020060000000000000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400020000008001240fffffffa0d000300686173683a6e657400000000050004"], 0x5c}}, 0x0)
r5 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, <r7=>0x0}, &(0x7f0000000280)=0x5)
setuid(r7)
setpriority(0x2, 0xff, 0x0)
read$msr(r5, &(0x7f0000048040)=""/102392, 0x18ff8)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000002180)={@loopback={0xfec0ffff00000000}, @empty, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2020013})
r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20)
preadv(r9, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0)

1m17.322390874s ago: executing program 6 (id=3451):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f000000000000000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000000)={{0x8, 0x3, 0x81, 0x3, 'syz0\x00', 0x5}, 0x3, 0x20, 0x8, r2, 0x4, 0x8, 'syz1\x00', &(0x7f0000000180)=[':#,\x00', ',[\a\x00\x00\x00\x00\x00\x00\x00&]]\x00', '\x00', ':#,\x00'], 0x17})
syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x1000, 0x0, 0x4100, 0x0, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000080001003f0000000c000200700f00000000ffff0c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)

1m16.139718697s ago: executing program 6 (id=3456):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_io_uring_setup(0x495, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x7, 0x288}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x4, 0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"})
mq_timedsend(0xffffffffffffffff, &(0x7f00000000c0)="98e9dd9ad4b5d2b3b2be9e6a09fd03c10684f48b159c8eb79c04298f4582fa61b8597acaee55ee9d73b237af7aea156f4bd8c11c168b49b68f954385543850551f9203d3dc16a23a330e3406", 0x4c, 0x0, &(0x7f0000000180))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$l2tp(0x2, 0x2, 0x73)
bind(r7, &(0x7f0000000140)=@rc={0x1f, @any, 0x4}, 0x80)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x58, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_MAC_HINT={0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}, @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, {0x18, 0x0, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x6}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x2, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0x74}}, 0x1)

1m11.646946979s ago: executing program 6 (id=3465):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280), 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000600)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x1}], 0x1, 0x20040801)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000300)=""/98, 0x62}], 0x2}, 0x0)

1m10.861827803s ago: executing program 6 (id=3467):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f000000000000000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000000)={{0x8, 0x3, 0x81, 0x3, 'syz0\x00', 0x5}, 0x3, 0x20, 0x8, r2, 0x4, 0x8, 'syz1\x00', &(0x7f0000000180)=[':#,\x00', ',[\a\x00\x00\x00\x00\x00\x00\x00&]]\x00', '\x00', ':#,\x00'], 0x17})
syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x1000, 0x0, 0x4100, 0x0, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000080001003f0000000c000200700f00000000ffff0c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)

1m10.268874891s ago: executing program 3 (id=3469):
r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file1', [], 0xa, "c974ca285b6715010000806c3b7547132df1dc4c120e527f565595478faec00032d66db9da55247d776b4daf290f691746ba0aac762229ae39488a3a7688cf683450903831478c5ace1a89ba6407cdebfcab7e37a3cc86eee6c01a181b8263ae79dffbb00e67ca7e4b80dab972676dcc5863aff918e2ef009133950849"}, 0x88)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="200000000a0a050000000000000000a1ed000000000000000100000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x24049116}, 0x4000)
accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x1c, 0x100400)
pipe(0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30)
r7 = accept$alg(r6, 0x0, 0x0)
sendmmsg$alg(r7, &(0x7f0000002940)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002b40)="fb1add96eb5c4cee3df251747b4c22fa53f4688d7e1de775eb384e67c6582a1c81de03b4a72c33625ef534c5ca4d2efe7943bb3192c53781854a9d34a1bf7e0d6284f0e66080d445b540a2f7e462a8338abd11bf2789063bf6f3064a921853c52bdf68e827858e06ccf3ed47c27b11f2bf39d587a2912ef9643a51e3bf0e366ffac35589fa3784872a51aac3c75257fd292fe52d6b896d0c41961cb60e797fa328f5b86561291635c839bff7e1c824bce99130465d4753b7696b7cd22cfaf8cc647a8852f3ee63fcc4e04f581b45f8a7cbd6fa55ed355666311f6250845b", 0xde}], 0x1, &(0x7f0000000300), 0x0, 0x20000800}], 0x1, 0x91)
recvmsg(r7, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000003f80)=""/4109, 0x100d}], 0x1}, 0x20f2)
pwrite64(r0, &(0x7f0000000040)='\n', 0x1, 0x2)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0xa, 0x5, 0x5, 0x6, 'syz0\x00', 0xc8}, 0x0, 0x2, 0x4, r3, 0x1, 0x6, 'syz0\x00', &(0x7f00000002c0)=['xts(aes)\x00'], 0x9})

1m8.01072024s ago: executing program 3 (id=3470):
syz_emit_ethernet(0x72, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "f7d8ff", 0x3c, 0x3c, 0x0, @local, @mcast2, {[@hopopts={0x0, 0x4, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x0, 0x0, @void}}}}}}}}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
listen(0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008f}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94)

1m5.531216588s ago: executing program 3 (id=3473):
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0x4, 0xc9}}}, 0x6)
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x18)
sched_getparam(0x0, &(0x7f0000000080))
bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})

1m5.329108526s ago: executing program 3 (id=3475):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88e00, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
nanosleep(&(0x7f0000000280)={0x0, 0x3938700}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x6, 0x0, 0x0)
r2 = openat$smackfs_relabel_self(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)="25bfb684659f17e3cac4ccb2706af0b860a018750fb816bdae5591c3905ddd247dec4781857117da4d5227f4c75f7574634f9707e712b4d75cb35a4359e2122b60cfc1a7208bb34f522cc91283646a7ca1", 0x51}], 0x1)
getsockopt$inet6_tcp_int(r1, 0x6, 0x17, 0x0, 0x0)
sched_setscheduler(0x0, 0x6, &(0x7f00000000c0)=0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d00000014000000110001"], 0xf0}, 0x1, 0x0, 0x0, 0x40}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x5, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="cc45d9ebf878020f843d4c568130811e9d384ae53e1b438cba67bce508b101ed70d26a807813897483a9a12feb29c7afa97bfdd32fe126ad315a412c92c3da8fb64f740f461aaeb6147eaf1299ffbf96db676f517f2e71b05297cfbdd80ac697ad9763d74c4b0eb965574f4f74f26d204990b8860aa4fd3a28f31045dd781794b4e4e1ed5f2994a83644f1e95f730aaf927cb3b1efdebc8d2a3781d24b105c1c9861436b085d3b715bd4c59695f2c7c46de764aebcfc"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94)
r5 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
r6 = socket$kcm(0x29, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, 0x0, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff1f}, 0x94)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r5, r4})

1m3.62238476s ago: executing program 3 (id=3478):
r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file1', [], 0xa, "c974ca285b6715010000806c3b7547132df1dc4c120e527f565595478faec00032d66db9da55247d776b4daf290f691746ba0aac762229ae39488a3a7688cf683450903831478c5ace1a89ba6407cdebfcab7e37a3cc86eee6c01a181b8263ae79dffbb00e67ca7e4b80dab972676dcc5863aff918e2ef009133950849"}, 0x88)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="200000000a0a050000000000000000a1ed000000000000000100000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x24049116}, 0x4000)
r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x1c, 0x100400)
pipe(0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30)
r8 = accept$alg(r7, 0x0, 0x0)
recvmsg(r8, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000003f80)=""/4109, 0x100d}], 0x1}, 0x20f2)
setsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f00000001c0)=0x8, 0x4)
pwrite64(r0, &(0x7f0000000040)='\n', 0x1, 0x2)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0xa, 0x5, 0x5, 0x6, 'syz0\x00', 0xc8}, 0x0, 0x2, 0x4, r4, 0x1, 0x6, 'syz0\x00', &(0x7f00000002c0)=['xts(aes)\x00'], 0x9})

1m1.497490649s ago: executing program 3 (id=3481):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
sched_getparam(0xffffffffffffffff, &(0x7f0000000000))
read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
splice(r3, 0x0, r2, 0x0, 0x1, 0x0)

54.467378793s ago: executing program 35 (id=3467):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f000000000000000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000000)={{0x8, 0x3, 0x81, 0x3, 'syz0\x00', 0x5}, 0x3, 0x20, 0x8, r2, 0x4, 0x8, 'syz1\x00', &(0x7f0000000180)=[':#,\x00', ',[\a\x00\x00\x00\x00\x00\x00\x00&]]\x00', '\x00', ':#,\x00'], 0x17})
syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x1000, 0x0, 0x4100, 0x0, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000080001003f0000000c000200700f00000000ffff0c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)

45.947169247s ago: executing program 36 (id=3481):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
sched_getparam(0xffffffffffffffff, &(0x7f0000000000))
read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
splice(r3, 0x0, r2, 0x0, 0x1, 0x0)

29.039529246s ago: executing program 0 (id=3526):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000400)={0x0, 0xe, 0x4, "106d2052"}, 0x0, 0x0, 0x0, 0x0})

25.973067072s ago: executing program 7 (id=3534):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1, 0x0, 0xd66}, 0x0)

24.902933687s ago: executing program 7 (id=3535):
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000600)=0x14)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0)
r5 = syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
io_uring_enter(r5, 0x7a38, 0xfd49, 0x40, &(0x7f00000000c0)={[0x1000]}, 0x8)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18)
r6 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f0000000100)={0x2c}, 0x8)

24.719890975s ago: executing program 7 (id=3536):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800010400000000000000008594233c2d76add12defac00ad0000009500000000000000", @ANYRES8=r0, @ANYRESOCT=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x4e, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000240)={0x1ff, 0xfffffff7, 0xb, 0x4, 0xd1, 0xfffffff9})
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000680)=""/241)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000007c0)={{0x2, 0x4, 0x6, 0x6, '\x00', 0x5}, 0x0, [0xa9, 0x7, 0x8, 0x9, 0x2, 0x0, 0x2c, 0x5, 0x7, 0x100, 0x6, 0x7, 0x4, 0x2, 0xfff, 0x8001, 0xd0, 0x5, 0x101, 0x5, 0x1, 0x7fffffffffffffff, 0x2, 0x8001, 0x3, 0x10, 0x7, 0xebd3, 0x7, 0x1ff, 0x5, 0x9, 0x2, 0x2, 0x4, 0x7fffffff, 0x6, 0x4, 0x77c2, 0x3, 0x401, 0xc, 0x8, 0x4, 0x5, 0x10000, 0x0, 0x4dc4, 0x2000000000000000, 0x4, 0xfffffffffffffff9, 0x3, 0x4c4a, 0xfff, 0x8, 0xa, 0x5, 0xff, 0x2, 0x3, 0x6, 0xc, 0x37b0, 0x9, 0x5, 0x3, 0x5, 0x9, 0x80000, 0x3, 0x8000000000000000, 0xc, 0x8179, 0x9, 0x7, 0xb2bf, 0x0, 0x3, 0x3, 0xffffffffffffff76, 0xb12, 0x5c, 0x6, 0x10000, 0xd, 0xdff6, 0x9, 0x0, 0x0, 0x9, 0xfffffffffffffffe, 0x800, 0x10, 0xfffffffffffffff8, 0x8000000, 0x8, 0x9, 0xfff, 0x8000, 0x6b0a, 0x0, 0x4, 0xba, 0xfffffffffffffffa, 0x9, 0x9, 0x6, 0x4, 0xcd, 0x7, 0x8, 0x8, 0x7, 0x8, 0x5a, 0xa, 0xffff, 0x7ff, 0x2, 0xfffffffffffffffc, 0xfffffffffffffff5, 0xff2, 0xfff, 0x8, 0x6, 0x2, 0x100000001, 0x303e]})
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f00000002c0)={0x2, 0x3, 0x8, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[<r4=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000440)=[r5], 0x0, 0x0, 0x0})
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
io_setup(0x3, &(0x7f0000000580)=<r7=>0x0)
r8 = eventfd2(0x8000000, 0x80001)
io_cancel(r7, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x9272, r2, &(0x7f00000005c0)="29391648a314b5ed8da14b231782f092df072922af9a7ac3148fab7d071d35dd2f81d83f7d18428651", 0x29, 0x81, 0x0, 0x1, r8}, &(0x7f0000000640))
read$FUSE(r6, &(0x7f000000e280)={0x2020, 0x0, <r9=>0x0}, 0x2020)
write$FUSE_INIT(r6, &(0x7f0000000380)={0x50, 0x0, r9, {0x7, 0x2b, 0x0, 0xffffffff82809815, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}}, 0x50)

24.000099291s ago: executing program 0 (id=3537):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = memfd_create(0x0, 0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x101102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$SNDCTL_SYNTH_INFO(r2, 0xc08c5102, &(0x7f00000001c0)={"2e77ebb92575993c79c88e9db1118ddeaeee1a09c23b028803298a038530", 0x0, 0x2, 0x0, 0xff, 0x3, 0x1, 0xfffffff9, 0x1, [0x0, 0xf, 0x10000, 0x4, 0x1, 0x8001, 0x8001, 0x101, 0x6, 0x8, 0x9, 0x99, 0x401, 0xc72b, 0x8, 0x8001, 0x275b, 0x7, 0x3]})
ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000001300)={{r4}, "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"})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0], 0x48)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xfffffff8, 0x3, 0xfffbfffd, 0x3, 0x4f, "1c419208876b000000820b0000000000000d00", 0x6, 0x200})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, 0x0)
ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000400)=0x1)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r8, 0x0)
r9 = syz_usb_connect(0x5, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_control_io$uac1(r9, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0)
syz_usb_connect$cdc_ncm(0x5, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x43f}}]})
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000040)={0x8, 0xa87, 0xfffffffe, 0x9, 0x0, "4824d3c3011057bc67e335673b63d3112efac1"})
syz_usb_control_io$hid(r9, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={0xffffffffffffffff, &(0x7f0000000400), 0x0}, 0x20)

13.930680639s ago: executing program 7 (id=3538):
ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000480))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB="0300"/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x15, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='romfs\x00', 0x200000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100))
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265)
chdir(&(0x7f0000000040)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, 0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_HWPT_INVALIDATE$TEST(r4, 0x3b8d, &(0x7f00000001c0)={0x20, r5, 0x0})
r6 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000d0425bd7000fcdbdf2500000000", @ANYRES32=r7, @ANYBLOB="01006d0000ffff001c0012800b00010062726964676500000c0002800600270005"], 0x3c}}, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
keyctl$clear(0x3, 0xfffffffffffffffc)
request_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='+@@:!!\x00', 0x0)

13.572971537s ago: executing program 4 (id=3539):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x85}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, 0x0, 0x20042, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@local, @private, <r0=>0x0}, &(0x7f00000000c0)=0xc)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe4, 0xe4, 0x4, [@type_tag={0xe, 0x0, 0x0, 0x12, 0x1}, @restrict={0x3, 0x0, 0x0, 0xb, 0x3}, @func={0x5, 0x0, 0x0, 0xc, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x6, 0x4f}}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x5, 0x7}, @fwd={0xa}, @typedef={0x1}, @struct={0x3, 0x2, 0x0, 0x4, 0x0, 0xa, [{0x2, 0x4, 0x1}, {0xc, 0x4, 0x5}]}, @enum={0x3, 0xa, 0x0, 0x6, 0x4, [{0x0, 0x3}, {0xe}, {0x9, 0x8}, {0x5, 0x4}, {0xa, 0x1ff}, {0x0, 0x2}, {0x2, 0xffffcb6a}, {0xf, 0x4}, {0x8, 0x6}, {0x5, 0x101}]}]}, {0x0, [0x5f, 0x5f]}}, &(0x7f0000000100)=""/50, 0x100, 0x32, 0x0, 0x9}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xf, 0x4, 0x0, 0x3, 0x0, 0x1, 0x6, '\x00', r0, r1, 0x5, 0x1, 0x2}, 0x50)
sched_setscheduler(0x0, 0x2, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)

13.084298062s ago: executing program 0 (id=3540):
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0x4, 0xc9}}}, 0x6)
r0 = socket(0x10, 0x3, 0x0)
sched_getparam(0x0, &(0x7f0000000080))
bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})

12.985158272s ago: executing program 4 (id=3541):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x85}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, 0x0, 0x20042, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@local, @private, <r0=>0x0}, &(0x7f00000000c0)=0xc)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe4, 0xe4, 0x4, [@type_tag={0xe, 0x0, 0x0, 0x12, 0x1}, @restrict={0x3, 0x0, 0x0, 0xb, 0x3}, @func={0x5, 0x0, 0x0, 0xc, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x6, 0x4f}}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x5, 0x7}, @fwd={0xa}, @typedef={0x1}, @struct={0x3, 0x2, 0x0, 0x4, 0x0, 0xa, [{0x2, 0x4, 0x1}, {0xc, 0x4, 0x5}]}, @enum={0x3, 0xa, 0x0, 0x6, 0x4, [{0x0, 0x3}, {0xe}, {0x9, 0x8}, {0x5, 0x4}, {0xa, 0x1ff}, {0x0, 0x2}, {0x2, 0xffffcb6a}, {0xf, 0x4}, {0x8, 0x6}, {0x5, 0x101}]}]}, {0x0, [0x5f, 0x5f]}}, &(0x7f0000000100)=""/50, 0x100, 0x32, 0x0, 0x9}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xf, 0x4, 0x0, 0x3, 0x0, 0x1, 0x6, '\x00', r0, r1, 0x5, 0x1, 0x2}, 0x50)
sched_setscheduler(0x0, 0x2, &(0x7f0000002200)=0x1)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0xfdff]}}], 0xffc8)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00')
preadv(r3, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4112, 0x1010}], 0x1, 0x800, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)

12.879602198s ago: executing program 0 (id=3542):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000600)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x1}], 0x1, 0x20040801)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000300)=""/98, 0x62}], 0x2}, 0x0)

12.878284007s ago: executing program 4 (id=3543):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x42, 0x0, 0x0)
syz_open_dev$vbi(0x0, 0x2, 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000140)={{0x8, 0xbe}, 'port1\x00', 0x8, 0x80420, 0x7f, 0xffffffab, 0x4cfd, 0xe0000, 0x1, 0x0, 0x3, 0xf8})
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
waitid(0x1, 0x0, 0x0, 0x2, &(0x7f00000006c0))
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r2=>0xffffffffffffffff}, 0x0)
r3 = dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',privport,access=', @ANYRESDEC])
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3)
syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2)

12.793703489s ago: executing program 7 (id=3544):
r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file1', [], 0xa, "c974ca285b6715010000806c3b7547132df1dc4c120e527f565595478faec00032d66db9da55247d776b4daf290f691746ba0aac762229ae39488a3a7688cf683450903831478c5ace1a89ba6407cdebfcab7e37a3cc86eee6c01a181b8263ae79dffbb00e67ca7e4b80dab972676dcc5863aff918e2ef009133950849"}, 0x88)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="200000000a0a050000000000000000a1ed000000000000000100000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x24049116}, 0x4000)
accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x1c, 0x100400)
pipe(0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30)
r7 = accept$alg(r6, 0x0, 0x0)
sendmmsg$alg(r7, &(0x7f0000002940)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002b40)="fb1add96eb5c4cee3df251747b4c22fa53f4688d7e1de775eb384e67c6582a1c81de03b4a72c33625ef534c5ca4d2efe7943bb3192c53781854a9d34a1bf7e0d6284f0e66080d445b540a2f7e462a8338abd11bf2789063bf6f3064a921853c52bdf68e827858e06ccf3ed47c27b11f2bf39d587a2912ef9643a51e3bf0e366ffac35589fa3784872a51aac3c75257fd292fe52d6b896d0c41961cb60e797fa328f5b86561291635c839bff7e1c824bce99130465d4753b7696b7cd22cfaf8cc647a8852f3ee63fcc4e04f581b45f8a7cbd6fa55ed355666311f6250845b", 0xde}], 0x1, &(0x7f0000000300), 0x0, 0x20000800}], 0x1, 0x91)
recvmsg(r7, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000003f80)=""/4109, 0x100d}], 0x1}, 0x20f2)
pwrite64(r0, &(0x7f0000000040)='\n', 0x1, 0x2)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0xa, 0x5, 0x5, 0x6, 'syz0\x00', 0xc8}, 0x0, 0x2, 0x4, r3, 0x1, 0x6, 'syz0\x00', &(0x7f00000002c0)=['xts(aes)\x00'], 0x9})

12.684941161s ago: executing program 0 (id=3545):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"})
r1 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x9c0, 0x100)
ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, '\x00', @raw_data=[0x2, 0x7, 0x5e04ddae, 0x1, 0x0, 0x6, 0x200, 0x133, 0x0, 0x6, 0x3, 0x10, 0x9853, 0x8, 0x3, 0x4, 0x9, 0xa3aa000, 0x2, 0x6, 0x1, 0x7, 0x6, 0x5, 0x8, 0x4, 0x0, 0x2, 0x5, 0x0, 0x6, 0x1]})
socket$nl_route(0x10, 0x3, 0x0)
gettid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioperm(0x4, 0x2, 0xf40c)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000340))
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="200006000000a0000200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6})
mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00')
chmod(&(0x7f0000000180)='./file0\x00', 0x23f)
setuid(0xee01)
setxattr$incfs_id(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x2)
sendfile(r5, r5, &(0x7f0000000000)=0x7, 0x4)
mq_timedsend(r5, 0x0, 0x0, 0xff7f000000000000, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)

11.59590871s ago: executing program 4 (id=3546):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800010400000000000000008594233c2d76add12defac00ad0000009500000000000000", @ANYRES8=r0, @ANYRESOCT=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x4e, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000240)={0x1ff, 0xfffffff7, 0xb, 0x4, 0xd1, 0xfffffff9})
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000007c0)={{0x2, 0x4, 0x6, 0x6, '\x00', 0x5}, 0x0, [0xa9, 0x7, 0x8, 0x9, 0x2, 0x0, 0x2c, 0x5, 0x7, 0x100, 0x6, 0x7, 0x4, 0x2, 0xfff, 0x8001, 0xd0, 0x5, 0x101, 0x5, 0x1, 0x7fffffffffffffff, 0x2, 0x8001, 0x3, 0x10, 0x7, 0xebd3, 0x7, 0x1ff, 0x5, 0x9, 0x2, 0x2, 0x4, 0x7fffffff, 0x6, 0x4, 0x77c2, 0x3, 0x401, 0xc, 0x8, 0x4, 0x5, 0x10000, 0x0, 0x4dc4, 0x2000000000000000, 0x4, 0xfffffffffffffff9, 0x3, 0x4c4a, 0xfff, 0x8, 0xa, 0x5, 0xff, 0x2, 0x3, 0x6, 0xc, 0x37b0, 0x9, 0x5, 0x3, 0x5, 0x9, 0x80000, 0x3, 0x8000000000000000, 0xc, 0x8179, 0x9, 0x7, 0xb2bf, 0x0, 0x3, 0x3, 0xffffffffffffff76, 0xb12, 0x5c, 0x6, 0x10000, 0xd, 0xdff6, 0x9, 0x0, 0x0, 0x9, 0xfffffffffffffffe, 0x800, 0x10, 0xfffffffffffffff8, 0x8000000, 0x8, 0x9, 0xfff, 0x8000, 0x6b0a, 0x0, 0x4, 0xba, 0xfffffffffffffffa, 0x9, 0x9, 0x6, 0x4, 0xcd, 0x7, 0x8, 0x8, 0x7, 0x8, 0x5a, 0xa, 0xffff, 0x7ff, 0x2, 0xfffffffffffffffc, 0xfffffffffffffff5, 0xff2, 0xfff, 0x8, 0x6, 0x2, 0x100000001, 0x303e]})
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f00000002c0)={0x2, 0x3, 0x8, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[<r4=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000440)=[r5], 0x0, 0x0, 0x0})
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
io_setup(0x3, &(0x7f0000000580)=<r7=>0x0)
io_cancel(r7, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x9272, r2, &(0x7f00000005c0)="29391648a314b5ed8da14b231782f092df072922af9a7ac3148fab7d071d35dd2f81d83f7d18428651", 0x29, 0x81, 0x0, 0x1}, &(0x7f0000000640))
read$FUSE(r6, &(0x7f000000e280)={0x2020, 0x0, <r8=>0x0}, 0x2020)
write$FUSE_INIT(r6, &(0x7f0000000380)={0x50, 0x0, r8, {0x7, 0x2b, 0x0, 0xffffffff82809815, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}}, 0x50)
setxattr$security_ima(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x2)

11.589176978s ago: executing program 7 (id=3547):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"})
r1 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x9c0, 0x100)
ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, '\x00', @raw_data=[0x2, 0x7, 0x5e04ddae, 0x1, 0x0, 0x6, 0x200, 0x133, 0x0, 0x6, 0x3, 0x10, 0x9853, 0x8, 0x3, 0x4, 0x9, 0xa3aa000, 0x2, 0x6, 0x1, 0x7, 0x6, 0x5, 0x8, 0x4, 0x0, 0x2, 0x5, 0x0, 0x6, 0x1]})
socket$nl_route(0x10, 0x3, 0x0)
syz_io_uring_setup(0x50d0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioperm(0x4, 0x2, 0xf40c)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000340))
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="200006000000a0000200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6})
mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00')
chmod(&(0x7f0000000180)='./file0\x00', 0x23f)
setuid(0xee01)
setxattr$incfs_id(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x2)
sendfile(r5, r5, &(0x7f0000000000)=0x7, 0x4)
mq_timedsend(r5, 0x0, 0x0, 0xff7f000000000000, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)

10.651105589s ago: executing program 4 (id=3548):
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xcc657405ba8b63ff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x25)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, &(0x7f0000000100)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffd000/0x3000)=nil)
r5 = shmat(r4, &(0x7f0000fec000/0x4000)=nil, 0x600c)
mremap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ff9000/0x3000)=nil)
shmdt(r5)

9.49431878s ago: executing program 4 (id=3549):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = memfd_create(0x0, 0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x101102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$SNDCTL_SYNTH_INFO(r2, 0xc08c5102, &(0x7f00000001c0)={"2e77ebb92575993c79c88e9db1118ddeaeee1a09c23b028803298a038530", 0x0, 0x2, 0x0, 0xff, 0x3, 0x1, 0xfffffff9, 0x1, [0x0, 0xf, 0x10000, 0x4, 0x1, 0x8001, 0x8001, 0x101, 0x6, 0x8, 0x9, 0x99, 0x401, 0xc72b, 0x8, 0x8001, 0x275b, 0x7, 0x3]})
ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000001300)={{r4}, "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"})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0], 0x48)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xfffffff8, 0x3, 0xfffbfffd, 0x3, 0x4f, "1c419208876b000000820b0000000000000d00", 0x6, 0x200})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, 0x0)
ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000400)=0x1)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r8, 0x0)
r9 = syz_usb_connect(0x5, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_control_io$uac1(r9, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0)
syz_usb_connect$cdc_ncm(0x5, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x43f}}]})
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000040)={0x8, 0xa87, 0xfffffffe, 0x9, 0x0, "4824d3c3011057bc67e335673b63d3112efac1"})
syz_usb_control_io$hid(r9, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={0xffffffffffffffff, &(0x7f0000000400), 0x0}, 0x20)

0s ago: executing program 0 (id=3550):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_io_uring_setup(0x495, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x7, 0x288}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x4, 0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"})
mq_timedsend(0xffffffffffffffff, &(0x7f00000000c0)="98e9dd9ad4b5d2b3b2be9e6a09fd03c10684f48b159c8eb79c04298f4582fa61b8597acaee55ee9d73b237af7aea156f4bd8c11c168b49b68f954385543850551f9203d3dc16a23a330e3406", 0x4c, 0x0, &(0x7f0000000180))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$l2tp(0x2, 0x2, 0x73)
bind(r7, &(0x7f0000000140)=@rc={0x1f, @any, 0x4}, 0x80)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x58, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_MAC_HINT={0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}, @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, {0x18, 0x0, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x6}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x2, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0x74}}, 0x1)

kernel console output (not intermixed with test programs):

35.558910][T10627] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=54.94
[ 1235.558944][T10627] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1235.558966][T10627] usb 4-1: Product: syz
[ 1235.558982][T10627] usb 4-1: Manufacturer: syz
[ 1235.558998][T10627] usb 4-1: SerialNumber: syz
[ 1236.594895][T10627] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.229/input/input114
[ 1236.658184][T10627] usb 4-1: USB disconnect, device number 42
[ 1237.062216][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1237.312873][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1238.104719][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1238.597494][T15306] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1238.650529][T15306] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1238.765380][T15643] 9pnet_fd: Insufficient options for proto=fd
[ 1239.054349][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1239.055497][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[ 1239.055569][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[ 1239.091158][ T5805] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1239.095113][ T5805] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1239.921870][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1239.970316][ T5805] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1240.003450][ T5805] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1240.010536][ T5805] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1240.024689][T15306] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1240.518071][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1240.695858][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1240.878661][T15653] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3149'.
[ 1241.017059][ T5806] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[ 1241.215599][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1241.226097][ T5806] usb 1-1: Using ep0 maxpacket: 32
[ 1241.231319][ T5806] usb 1-1: config 8 has an invalid interface number: 229 but max is 0
[ 1241.231350][ T5806] usb 1-1: config 8 has no interface number 0
[ 1241.231388][ T5806] usb 1-1: config 8 interface 229 has no altsetting 0
[ 1241.234672][ T5806] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=54.94
[ 1241.234711][ T5806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1241.234729][ T5806] usb 1-1: Product: syz
[ 1241.234742][ T5806] usb 1-1: Manufacturer: syz
[ 1241.234755][ T5806] usb 1-1: SerialNumber: syz
[ 1241.368879][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1241.455984][ T5805] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1241.481677][ T5805] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1241.495182][ T5805] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1241.508470][ T5805] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1241.510152][ T5805] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1241.655307][ T5806] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:8.229/input/input115
[ 1241.662742][ T5806] usb 1-1: USB disconnect, device number 51
[ 1241.878079][T15659] 9pnet_fd: Insufficient options for proto=fd
[ 1242.142024][T13736] Bluetooth: hci4: command tx timeout
[ 1243.741043][T13736] Bluetooth: hci6: command tx timeout
[ 1244.551657][T13736] Bluetooth: hci4: command tx timeout
[ 1245.253529][T15672] erofs (device nullb0): cannot find valid erofs superblock
[ 1245.807872][T15676] netlink: 'syz.3.3154': attribute type 11 has an invalid length.
[ 1245.823244][T13736] Bluetooth: hci6: command tx timeout
[ 1245.826100][T15676] trusted_key: syz.3.3154 sent an empty control message without MSG_MORE.
[ 1246.326347][ T5805] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1246.370329][ T5805] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1246.398287][ T5805] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1246.620508][ T5805] Bluetooth: hci4: command tx timeout
[ 1246.640155][ T5805] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1246.921988][ T5805] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1247.411833][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1247.576479][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1247.845308][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1247.896669][ T5805] Bluetooth: hci6: command tx timeout
[ 1248.083298][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1248.432080][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1248.501108][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1248.609887][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1248.697399][ T5805] Bluetooth: hci4: command tx timeout
[ 1249.442646][ T5805] Bluetooth: hci0: command tx timeout
[ 1249.622298][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1250.127547][ T5805] Bluetooth: hci6: command tx timeout
[ 1250.279475][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1250.317478][T15645] chnl_net:caif_netlink_parms(): no params data found
[ 1250.574501][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1250.793951][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1250.841556][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1251.500677][ T5805] Bluetooth: hci0: command tx timeout
[ 1252.508728][T15724] delete_channel: no stack
[ 1252.509515][T15724] delete_channel: no stack
[ 1252.535297][T15724] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false
[ 1252.601137][T15655] chnl_net:caif_netlink_parms(): no params data found
[ 1252.610290][T15724] binder: 15723:15724 ioctl c0306201 2000000001c0 returned -22
[ 1252.610628][T15724] binder: 15723:15724 ioctl c0c85666 200000000240 returned -22
[ 1252.610905][T15724] binder: 15723:15724 ioctl 8010743f 200000000340 returned -22
[ 1253.236248][T15733] random: crng reseeded on system resumption
[ 1253.829270][ T5805] Bluetooth: hci0: command tx timeout
[ 1254.069207][T15738] Bluetooth: MGMT ver 1.23
[ 1254.258447][ T7231] bridge_slave_1: left allmulticast mode
[ 1254.258476][ T7231] bridge_slave_1: left promiscuous mode
[ 1254.258773][ T7231] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1254.359211][ T7231] bridge_slave_0: left allmulticast mode
[ 1254.359242][ T7231] bridge_slave_0: left promiscuous mode
[ 1254.359519][ T7231] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1255.587171][T10627] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[ 1255.776711][T10627] usb 4-1: Using ep0 maxpacket: 32
[ 1255.779165][T10627] usb 4-1: config 8 has an invalid interface number: 229 but max is 0
[ 1255.779184][T10627] usb 4-1: config 8 has no interface number 0
[ 1255.779204][T10627] usb 4-1: config 8 interface 229 has no altsetting 0
[ 1255.781492][T10627] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=54.94
[ 1255.781511][T10627] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1255.781524][T10627] usb 4-1: Product: syz
[ 1255.781533][T10627] usb 4-1: Manufacturer: syz
[ 1255.781541][T10627] usb 4-1: SerialNumber: syz
[ 1255.937184][ T5805] Bluetooth: hci0: command tx timeout
[ 1256.003125][T10627] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.229/input/input116
[ 1256.017361][T10627] usb 4-1: USB disconnect, device number 43
[ 1257.066763][T10627] usb 4-1: new full-speed USB device number 44 using dummy_hcd
[ 1257.117689][ T7231] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1257.180553][ T7231] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1257.203051][ T7231] bond0 (unregistering): Released all slaves
[ 1257.219285][T10627] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1257.219322][T10627] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1257.219357][T10627] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00
[ 1257.219370][T10627] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1257.222541][T10627] usb 4-1: config 0 descriptor??
[ 1257.300798][T15645] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1257.300901][T15645] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1257.301217][T15645] bridge_slave_0: entered allmulticast mode
[ 1257.303554][T15645] bridge_slave_0: entered promiscuous mode
[ 1257.474151][T15645] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1257.474288][T15645] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1257.474513][T15645] bridge_slave_1: entered allmulticast mode
[ 1257.480555][T15645] bridge_slave_1: entered promiscuous mode
[ 1257.690815][T15762] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3178'.
[ 1257.690845][T15762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3178'.
[ 1257.690859][T15762] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3178'.
[ 1257.691696][T15763] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3178'.
[ 1257.691713][T15763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3178'.
[ 1257.691721][T15763] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3178'.
[ 1257.801647][T15681] chnl_net:caif_netlink_parms(): no params data found
[ 1257.880712][T15755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1257.881199][T15755] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1258.673654][T15645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1258.701884][T10627] usbhid 4-1:0.0: can't add hid device: -71
[ 1258.702003][T10627] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1258.724179][T10627] usb 4-1: USB disconnect, device number 44
[ 1259.337655][ T7231] hsr_slave_0: left promiscuous mode
[ 1259.378093][ T7231] hsr_slave_1: left promiscuous mode
[ 1259.378781][ T7231] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1259.403999][ T7231] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1260.117209][T10988] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[ 1260.186963][ T5869] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[ 1260.268108][T10988] usb 1-1: Using ep0 maxpacket: 32
[ 1260.269990][T10988] usb 1-1: config 8 has an invalid interface number: 229 but max is 0
[ 1260.270008][T10988] usb 1-1: config 8 has no interface number 0
[ 1260.270029][T10988] usb 1-1: config 8 interface 229 has no altsetting 0
[ 1260.272283][T10988] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=54.94
[ 1260.272301][T10988] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1260.272313][T10988] usb 1-1: Product: syz
[ 1260.272322][T10988] usb 1-1: Manufacturer: syz
[ 1260.272330][T10988] usb 1-1: SerialNumber: syz
[ 1260.387043][ T5869] usb 4-1: Using ep0 maxpacket: 32
[ 1260.447499][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1260.447527][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1260.447570][ T5869] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1260.447595][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1260.453186][ T5869] usb 4-1: config 0 descriptor??
[ 1260.543545][ T5869] hub 4-1:0.0: USB hub found
[ 1260.549449][T10988] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:8.229/input/input117
[ 1260.564059][T10988] usb 1-1: USB disconnect, device number 52
[ 1260.683305][ T5869] hub 4-1:0.0: 1 port detected
[ 1261.188413][ T7231] team0 (unregistering): Port device team_slave_1 removed
[ 1261.188429][T15784] FAULT_INJECTION: forcing a failure.
[ 1261.188429][T15784] name failslab, interval 1, probability 0, space 0, times 0
[ 1261.188458][T15784] CPU: 0 UID: 0 PID: 15784 Comm: syz.0.3185 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1261.188481][T15784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1261.188493][T15784] Call Trace:
[ 1261.188501][T15784]  <TASK>
[ 1261.188511][T15784]  dump_stack_lvl+0x189/0x250
[ 1261.188542][T15784]  ? __pfx____ratelimit+0x10/0x10
[ 1261.188566][T15784]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1261.188593][T15784]  ? __pfx__printk+0x10/0x10
[ 1261.188622][T15784]  ? __pfx___might_resched+0x10/0x10
[ 1261.188648][T15784]  should_fail_ex+0x46c/0x600
[ 1261.188676][T15784]  should_failslab+0xa8/0x100
[ 1261.188713][T15784]  __kmalloc_noprof+0xcc/0x7d0
[ 1261.188736][T15784]  ? kfree+0x51/0x950
[ 1261.188753][T15784]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1261.188782][T15784]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 1261.188805][T15784]  ? tomoyo_domain+0xda/0x130
[ 1261.188831][T15784]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1261.188858][T15784]  tomoyo_path_number_perm+0x1e8/0x5a0
[ 1261.188890][T15784]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1261.188922][T15784]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 1261.188948][T15784]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1261.189003][T15784]  ? __fget_files+0x2a/0x420
[ 1261.189033][T15784]  ? __fget_files+0x3a6/0x420
[ 1261.189057][T15784]  ? __fget_files+0x2a/0x420
[ 1261.189085][T15784]  security_file_ioctl+0xcb/0x2d0
[ 1261.189109][T15784]  __se_sys_ioctl+0x47/0x170
[ 1261.189134][T15784]  do_syscall_64+0xfa/0xfa0
[ 1261.189156][T15784]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1261.189181][T15784]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1261.189201][T15784]  ? clear_bhb_loop+0x60/0xb0
[ 1261.189225][T15784]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1261.189244][T15784] RIP: 0033:0x7f23735df6c9
[ 1261.189263][T15784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1261.189281][T15784] RSP: 002b:00007f237183e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1261.189302][T15784] RAX: ffffffffffffffda RBX: 00007f2373835fa0 RCX: 00007f23735df6c9
[ 1261.189317][T15784] RDX: 00002000000007c0 RSI: 000000000000891b RDI: 0000000000000003
[ 1261.189331][T15784] RBP: 00007f237183e090 R08: 0000000000000000 R09: 0000000000000000
[ 1261.189344][T15784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1261.189356][T15784] R13: 00007f2373836038 R14: 00007f2373835fa0 R15: 00007ffde24f2ca8
[ 1261.189391][T15784]  </TASK>
[ 1261.189400][T15784] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1261.551665][ T5869] hub 4-1:0.0: hub_ext_port_status failed (err = -71)
[ 1261.561419][T10988] usb 4-1: USB disconnect, device number 45
[ 1261.578930][ T5869] usb 4-1: Failed to suspend device, error -71
[ 1261.767890][ T7231] team0 (unregistering): Port device team_slave_0 removed
[ 1264.568657][T15645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1264.568994][T15655] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1264.569190][T15655] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1264.569397][T15655] bridge_slave_0: entered allmulticast mode
[ 1264.574099][T15655] bridge_slave_0: entered promiscuous mode
[ 1265.019578][T15655] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1265.021270][T15655] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1265.025025][T15655] bridge_slave_1: entered allmulticast mode
[ 1265.204581][T15655] bridge_slave_1: entered promiscuous mode
[ 1266.963961][T15645] team0: Port device team_slave_0 added
[ 1267.926359][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1267.933323][T15645] team0: Port device team_slave_1 added
[ 1268.048363][T15815] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3193'.
[ 1268.062143][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1268.719600][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1268.727315][T15655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1268.860988][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1269.207690][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1269.802539][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1269.958450][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1270.090494][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1270.093037][T15655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1270.409308][T15645] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1270.409324][T15645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1270.409352][T15645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1270.410120][T15681] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1270.410324][T15681] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1270.410540][T15681] bridge_slave_0: entered allmulticast mode
[ 1270.421597][T15681] bridge_slave_0: entered promiscuous mode
[ 1270.608526][T15645] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1270.608539][T15645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1270.608556][T15645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1270.609127][T15681] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1270.609240][T15681] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1270.609398][T15681] bridge_slave_1: entered allmulticast mode
[ 1270.611158][T15681] bridge_slave_1: entered promiscuous mode
[ 1270.614659][T15655] team0: Port device team_slave_0 added
[ 1270.617136][ T5889] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[ 1270.767183][ T5889] usb 1-1: Using ep0 maxpacket: 32
[ 1270.792345][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1270.792446][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1270.792722][ T5889] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1270.792813][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1270.986375][ T5889] usb 1-1: config 0 descriptor??
[ 1271.200128][ T5889] hub 1-1:0.0: USB hub found
[ 1271.268362][T15655] team0: Port device team_slave_1 added
[ 1271.280883][ T5889] hub 1-1:0.0: 1 port detected
[ 1271.660749][T15681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1271.854576][T15681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1271.858592][T15655] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1271.858610][T15655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1271.858635][T15655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1271.870613][T15841] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3199'.
[ 1271.876333][T15645] hsr_slave_0: entered promiscuous mode
[ 1271.878205][T15645] hsr_slave_1: entered promiscuous mode
[ 1271.879239][T15645] debugfs: 'hsr0' already exists in 'hsr'
[ 1271.879263][T15645] Cannot create hsr debugfs directory
[ 1271.902052][ T5889] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 1271.902747][ T5950] usb 1-1: USB disconnect, device number 53
[ 1271.902921][ T5889] usb 1-1: Failed to suspend device, error -19
[ 1271.989413][T15655] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1271.989431][T15655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1271.989460][T15655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1272.175710][T15845] binder: 15844:15845 unknown command 0
[ 1272.175731][T15845] binder: 15844:15845 ioctl c0306201 200000000080 returned -22
[ 1272.177996][T15845] binder: 15844:15845 ioctl c0306201 2000000003c0 returned -14
[ 1272.332963][T15847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3201'.
[ 1272.409242][T15681] team0: Port device team_slave_0 added
[ 1272.808008][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1273.395355][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1273.579512][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1273.689949][T15681] team0: Port device team_slave_1 added
[ 1275.115765][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1275.247795][T15875] random: crng reseeded on system resumption
[ 1275.480725][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1275.914347][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1276.144190][T15879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3211'.
[ 1276.270232][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1276.302756][ T7231] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1276.336837][ T5950] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[ 1276.369235][T15681] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1276.369253][T15681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1276.369343][T15681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1276.375580][T15655] hsr_slave_0: entered promiscuous mode
[ 1276.376872][T15655] hsr_slave_1: entered promiscuous mode
[ 1276.377849][T15655] debugfs: 'hsr0' already exists in 'hsr'
[ 1276.377873][T15655] Cannot create hsr debugfs directory
[ 1276.393061][T15681] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1276.393078][T15681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1276.393105][T15681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1276.487181][ T5950] usb 1-1: Using ep0 maxpacket: 32
[ 1276.489910][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1276.489941][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1276.489980][ T5950] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1276.490003][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1276.495636][ T5950] usb 1-1: config 0 descriptor??
[ 1276.500284][ T5950] hub 1-1:0.0: USB hub found
[ 1276.702857][ T5950] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19)
[ 1276.775967][ T7231] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1277.318666][    C0] raw-gadget.0 gadget.0: ignoring, device is not running
[ 1277.318838][ T5950] usbhid 1-1:0.0: can't add hid device: -32
[ 1277.318964][ T5950] usbhid 1-1:0.0: probe with driver usbhid failed with error -32
[ 1277.916191][ T5950] usb 1-1: USB disconnect, device number 54
[ 1278.353238][ T7231] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1278.431740][T15681] hsr_slave_0: entered promiscuous mode
[ 1278.433184][T15681] hsr_slave_1: entered promiscuous mode
[ 1278.434429][T15681] debugfs: 'hsr0' already exists in 'hsr'
[ 1278.434454][T15681] Cannot create hsr debugfs directory
[ 1278.700601][ T7231] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1278.807281][ T7486] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[ 1278.857463][ T5950] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[ 1278.960157][ T7486] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1278.960181][ T7486] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1278.962122][ T7486] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1278.962151][ T7486] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1278.962169][ T7486] usb 4-1: SerialNumber: syz
[ 1279.027764][ T5950] usb 1-1: config 171 has an invalid interface number: 109 but max is 0
[ 1279.027792][ T5950] usb 1-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config
[ 1279.027812][ T5950] usb 1-1: config 171 has no interface number 0
[ 1279.027871][ T5950] usb 1-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 255
[ 1279.027896][ T5950] usb 1-1: config 171 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[ 1279.030968][ T5950] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e
[ 1279.030997][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1279.031018][ T5950] usb 1-1: Product: syz
[ 1279.031034][ T5950] usb 1-1: Manufacturer: syz
[ 1279.031049][ T5950] usb 1-1: SerialNumber: syz
[ 1279.119342][T15892] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1279.179568][ T7486] usb 4-1: 0:2 : does not exist
[ 1279.197058][ T7486] usb 4-1: USB disconnect, device number 46
[ 1279.350195][   T37] audit: type=1326 audit(1762258726.822:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15891 comm="syz.0.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23735df6c9 code=0x7ffc0000
[ 1279.350249][   T37] audit: type=1326 audit(1762258726.822:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15891 comm="syz.0.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f23735df6c9 code=0x7ffc0000
[ 1279.350292][   T37] audit: type=1326 audit(1762258726.822:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15891 comm="syz.0.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23735df6c9 code=0x7ffc0000
[ 1279.350334][   T37] audit: type=1326 audit(1762258726.822:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15891 comm="syz.0.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f23735df6c9 code=0x7ffc0000
[ 1279.350375][   T37] audit: type=1326 audit(1762258726.832:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15891 comm="syz.0.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23735df6c9 code=0x7ffc0000
[ 1279.350417][   T37] audit: type=1326 audit(1762258726.832:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15891 comm="syz.0.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f23735df6c9 code=0x7ffc0000
[ 1279.350460][   T37] audit: type=1326 audit(1762258726.832:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15891 comm="syz.0.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23735df6c9 code=0x7ffc0000
[ 1279.350500][   T37] audit: type=1326 audit(1762258726.832:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15891 comm="syz.0.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f23735df6c9 code=0x7ffc0000
[ 1279.350544][   T37] audit: type=1326 audit(1762258726.832:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15891 comm="syz.0.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23735df6c9 code=0x7ffc0000
[ 1279.353157][   T37] audit: type=1326 audit(1762258726.832:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15891 comm="syz.0.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23735df6c9 code=0x7ffc0000
[ 1279.356079][ T5950] ath6kl: Failed to submit usb control message: -71
[ 1279.356130][ T5950] ath6kl: unable to send the bmi data to the device: -71
[ 1279.356147][ T5950] ath6kl: Unable to send get target info: -71
[ 1279.456744][ T5950] ath6kl: Failed to init ath6kl core: -71
[ 1279.458552][ T5950] ath6kl_usb 1-1:171.109: probe with driver ath6kl_usb failed with error -71
[ 1279.625348][ T5950] usb 1-1: USB disconnect, device number 55
[ 1280.841614][T15903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3219'.
[ 1281.813806][T15908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3221'.
[ 1281.866963][T15909] tmpfs: Bad value for 'mpol'
[ 1281.968686][ T7486] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[ 1282.129921][ T7486] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1282.129955][ T7486] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1282.129978][ T7486] usb 1-1: Product: syz
[ 1282.129993][ T7486] usb 1-1: Manufacturer: syz
[ 1282.130008][ T7486] usb 1-1: SerialNumber: syz
[ 1282.139955][ T7486] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1282.200349][ T5806] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1282.224229][T15915] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1282.242950][T15915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3224'.
[ 1282.423907][T15906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1282.424286][T15906] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1282.655403][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1282.732287][T15906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1282.732752][T15906] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1282.912986][ T5950] usb 1-1: USB disconnect, device number 56
[ 1283.063728][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1283.063965][ T5869] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[ 1283.122365][ T7231] bridge_slave_1: left allmulticast mode
[ 1283.122395][ T7231] bridge_slave_1: left promiscuous mode
[ 1283.123506][ T7231] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1283.178450][ T7231] bridge_slave_0: left allmulticast mode
[ 1283.178488][ T7231] bridge_slave_0: left promiscuous mode
[ 1283.179825][ T7231] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1283.236859][ T5869] usb 4-1: Using ep0 maxpacket: 32
[ 1283.239704][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1283.239738][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1283.239783][ T5869] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1283.239797][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1283.242888][ T5869] usb 4-1: config 0 descriptor??
[ 1283.245281][ T5869] hub 4-1:0.0: USB hub found
[ 1283.251757][ T7231] bridge_slave_1: left allmulticast mode
[ 1283.251788][ T7231] bridge_slave_1: left promiscuous mode
[ 1283.252029][ T7231] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1283.257188][ T5806] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 1283.257444][ T5806] ath9k_htc: Failed to initialize the device
[ 1283.258402][ T5950] usb 1-1: ath9k_htc: USB layer deinitialized
[ 1283.343662][T15924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3227'.
[ 1283.378455][ T7231] bridge_slave_0: left allmulticast mode
[ 1283.378484][ T7231] bridge_slave_0: left promiscuous mode
[ 1283.378710][ T7231] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1283.452061][ T5869] hub 4-1:0.0: 1 port detected
[ 1283.471895][ T7231] bridge_slave_1: left allmulticast mode
[ 1283.471927][ T7231] bridge_slave_1: left promiscuous mode
[ 1283.472147][ T7231] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1283.548498][ T7231] bridge_slave_0: left allmulticast mode
[ 1283.548520][ T7231] bridge_slave_0: left promiscuous mode
[ 1283.548772][ T7231] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1283.999184][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1284.066180][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1284.076094][ T5869] hub 4-1:0.0: hub_ext_port_status failed (err = -71)
[ 1284.084262][ T5869] usb 4-1: Failed to suspend device, error -71
[ 1284.084611][ T5950] usb 4-1: USB disconnect, device number 47
[ 1284.145315][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1284.217217][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1284.297947][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1284.506927][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1284.639598][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1284.714500][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1284.794727][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1284.929700][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1285.053774][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1285.105876][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1285.171804][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1285.282366][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1285.331837][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1285.422956][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1285.532707][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1285.650629][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1285.701452][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1285.752913][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1285.826368][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1285.987456][ T7231] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1286.068751][ T7231] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1286.089649][ T7231] bond0 (unregistering): Released all slaves
[ 1286.318832][ T7231] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1286.397718][ T7231] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1286.460937][ T7231] bond0 (unregistering): Released all slaves
[ 1286.531114][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1286.679405][ T7231] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1286.768954][ T7231] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1286.850152][ T7231] bond0 (unregistering): Released all slaves
[ 1287.039882][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1287.125904][T15942] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1287.136151][T15942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3233'.
[ 1287.160720][T15940] netdevsim netdevsim0 ������: renamed from netdevsim0 (while UP)
[ 1287.216059][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1287.296183][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1287.368000][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1287.390870][T15946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3234'.
[ 1288.740787][T15956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3238'.
[ 1290.788853][ T7231] hsr_slave_0: left promiscuous mode
[ 1290.807251][T15968] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1290.809248][T15968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3241'.
[ 1290.833079][ T7231] hsr_slave_1: left promiscuous mode
[ 1290.833782][ T7231] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1290.833807][ T7231] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1290.887786][ T7231] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1290.887816][ T7231] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1291.037069][ T7231] hsr_slave_0: left promiscuous mode
[ 1291.057089][ T7231] hsr_slave_1: left promiscuous mode
[ 1291.058380][ T7231] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1291.097991][ T7231] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1291.237061][ T7231] hsr_slave_0: left promiscuous mode
[ 1291.257160][ T7231] hsr_slave_1: left promiscuous mode
[ 1291.258314][ T7231] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1291.307963][ T7231] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1291.399121][ T7231] veth1_macvtap: left promiscuous mode
[ 1291.399205][ T7231] veth0_macvtap: left promiscuous mode
[ 1291.399360][ T7231] veth1_vlan: left promiscuous mode
[ 1291.399463][ T7231] veth0_vlan: left promiscuous mode
[ 1291.893647][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1291.944202][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1292.001965][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1292.065226][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1292.163855][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1292.477579][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1292.545858][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1292.618418][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1292.697284][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1292.810840][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1292.937334][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1293.013584][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1293.078626][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1293.137268][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1293.656834][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1293.797441][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1294.246927][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1294.318120][ T7231] team0 (unregistering): Port device team_slave_1 removed
[ 1294.357771][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1294.433027][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1294.619178][ T7231] team0 (unregistering): Port device team_slave_0 removed
[ 1294.657195][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1294.732590][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1294.808238][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1294.882734][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1295.012888][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1295.081072][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1295.133738][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1295.212012][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1295.281848][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1295.350065][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1295.401928][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1295.455622][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1295.503823][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1295.577674][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1298.377789][ T7231] team0 (unregistering): Port device team_slave_1 removed
[ 1298.538431][ T7231] team0 (unregistering): Port device team_slave_0 removed
[ 1299.119726][T13736] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1299.127818][T13736] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1299.129518][T13736] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1299.130668][T13736] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1299.132112][T13736] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1299.917837][ T7231] team0 (unregistering): Port device team_slave_1 removed
[ 1300.079809][ T7231] team0 (unregistering): Port device team_slave_0 removed
[ 1300.338201][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.338270][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[ 1300.543946][ T5805] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1300.559656][ T5805] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1300.624219][ T5805] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1300.626090][ T5805] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1300.646141][ T5805] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1300.868172][T15964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3240'.
[ 1300.987417][T15978] FAULT_INJECTION: forcing a failure.
[ 1300.987417][T15978] name failslab, interval 1, probability 0, space 0, times 0
[ 1300.987446][T15978] CPU: 0 UID: 0 PID: 15978 Comm: syz.3.3242 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1300.987463][T15978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1300.987472][T15978] Call Trace:
[ 1300.987478][T15978]  <TASK>
[ 1300.987485][T15978]  dump_stack_lvl+0x189/0x250
[ 1300.987511][T15978]  ? __pfx____ratelimit+0x10/0x10
[ 1300.987532][T15978]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1300.987552][T15978]  ? __pfx__printk+0x10/0x10
[ 1300.987574][T15978]  ? __pfx___might_resched+0x10/0x10
[ 1300.987590][T15978]  ? fs_reclaim_acquire+0x7d/0x100
[ 1300.987613][T15978]  should_fail_ex+0x46c/0x600
[ 1300.987636][T15978]  ? alloc_empty_file+0x55/0x1d0
[ 1300.987649][T15978]  should_failslab+0xa8/0x100
[ 1300.987670][T15978]  ? alloc_empty_file+0x55/0x1d0
[ 1300.987682][T15978]  kmem_cache_alloc_noprof+0x6f/0x6b0
[ 1300.987699][T15978]  ? rt_spin_unlock+0x150/0x200
[ 1300.987720][T15978]  alloc_empty_file+0x55/0x1d0
[ 1300.987734][T15978]  alloc_file_pseudo+0x13d/0x210
[ 1300.987760][T15978]  ? __pfx_alloc_file_pseudo+0x10/0x10
[ 1300.987772][T15978]  ? evm_inode_alloc_security+0x40/0xb0
[ 1300.987789][T15978]  ? security_inode_alloc+0xd5/0x330
[ 1300.987816][T15978]  sock_alloc_file+0xb8/0x2f0
[ 1300.987838][T15978]  do_accept+0x351/0x680
[ 1300.987857][T15978]  ? __pfx_do_accept+0x10/0x10
[ 1300.987888][T15978]  __sys_accept4+0x11c/0x1c0
[ 1300.987904][T15978]  ? __pfx___sys_accept4+0x10/0x10
[ 1300.987916][T15978]  ? ksys_write+0x230/0x260
[ 1300.987936][T15978]  ? __pfx_ksys_write+0x10/0x10
[ 1300.987957][T15978]  __x64_sys_accept4+0x9a/0xb0
[ 1300.987973][T15978]  do_syscall_64+0xfa/0xfa0
[ 1300.987990][T15978]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1300.988010][T15978]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1300.988025][T15978]  ? clear_bhb_loop+0x60/0xb0
[ 1300.988042][T15978]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1300.988056][T15978] RIP: 0033:0x7f3ad81ef6c9
[ 1300.988071][T15978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1300.988084][T15978] RSP: 002b:00007f3ad644e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120
[ 1300.988101][T15978] RAX: ffffffffffffffda RBX: 00007f3ad8445fa0 RCX: 00007f3ad81ef6c9
[ 1300.988112][T15978] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 1300.988122][T15978] RBP: 00007f3ad644e090 R08: 0000000000000000 R09: 0000000000000000
[ 1300.988131][T15978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1300.988140][T15978] R13: 00007f3ad8446038 R14: 00007f3ad8445fa0 R15: 00007ffd05304628
[ 1300.988165][T15978]  </TASK>
[ 1301.179678][ T5805] Bluetooth: hci1: command tx timeout
[ 1301.328582][T15980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3243'.
[ 1302.836201][ T5805] Bluetooth: hci2: command tx timeout
[ 1303.770921][ T5805] Bluetooth: hci1: command tx timeout
[ 1304.096415][T16005] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[ 1304.099903][T16005] VFS: Can't find a romfs filesystem on dev nullb0.
[ 1304.099903][T16005] 
[ 1304.102945][T16005] autofs: Bad value for 'fd'
[ 1304.171039][T16005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3248'.
[ 1304.861003][ T5805] Bluetooth: hci2: command tx timeout
[ 1305.165091][T15972] chnl_net:caif_netlink_parms(): no params data found
[ 1305.266270][T16014] random: crng reseeded on system resumption
[ 1305.571837][ T7486] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[ 1306.167172][ T7486] usb 1-1: Using ep0 maxpacket: 16
[ 1306.171903][ T7486] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[ 1306.171934][ T7486] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1306.202801][ T7486] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1306.202834][ T7486] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1306.202857][ T7486] usb 1-1: Product: syz
[ 1306.202874][ T7486] usb 1-1: Manufacturer: syz
[ 1306.202890][ T7486] usb 1-1: SerialNumber: syz
[ 1306.409403][ T5805] Bluetooth: hci1: command tx timeout
[ 1306.469391][T13736] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1306.487047][T13736] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1306.488713][T13736] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1306.490522][T13736] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1306.491307][T13736] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1307.170287][ T5805] Bluetooth: hci2: command tx timeout
[ 1307.734265][T15975] chnl_net:caif_netlink_parms(): no params data found
[ 1307.786669][T10988] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[ 1307.982023][T10988] usb 4-1: Using ep0 maxpacket: 32
[ 1307.984699][T10988] usb 4-1: config 8 has an invalid interface number: 229 but max is 0
[ 1307.984727][T10988] usb 4-1: config 8 has no interface number 0
[ 1307.984813][T10988] usb 4-1: config 8 interface 229 has no altsetting 0
[ 1308.016247][T10988] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=54.94
[ 1308.016334][T10988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1308.016357][T10988] usb 4-1: Product: syz
[ 1308.016372][T10988] usb 4-1: Manufacturer: syz
[ 1308.016388][T10988] usb 4-1: SerialNumber: syz
[ 1308.280781][T10988] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.229/input/input118
[ 1308.314987][T10988] usb 4-1: USB disconnect, device number 48
[ 1308.462271][ T5805] Bluetooth: hci1: command tx timeout
[ 1308.558381][T15972] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1308.558509][T15972] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1308.558755][T15972] bridge_slave_0: entered allmulticast mode
[ 1308.562129][T15972] bridge_slave_0: entered promiscuous mode
[ 1308.602359][T15972] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1308.602515][T15972] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1308.602798][T15972] bridge_slave_1: entered allmulticast mode
[ 1308.605857][T15972] bridge_slave_1: entered promiscuous mode
[ 1308.696722][ T5805] Bluetooth: hci4: command tx timeout
[ 1309.336756][ T5805] Bluetooth: hci2: command tx timeout
[ 1309.363755][T15972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1309.563170][T15972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1309.563592][T15975] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1309.563765][T15975] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1309.563966][T15975] bridge_slave_0: entered allmulticast mode
[ 1309.566402][T15975] bridge_slave_0: entered promiscuous mode
[ 1309.728231][T15975] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1309.728410][T15975] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1309.728635][T15975] bridge_slave_1: entered allmulticast mode
[ 1309.731030][T15975] bridge_slave_1: entered promiscuous mode
[ 1310.028980][T16034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3254'.
[ 1310.238101][T15972] team0: Port device team_slave_0 added
[ 1310.779992][ T5805] Bluetooth: hci4: command tx timeout
[ 1311.076142][T15972] team0: Port device team_slave_1 added
[ 1311.148657][T15975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1311.291505][T15975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1311.351951][ T7486] usb 1-1: 0:2 : does not exist
[ 1311.352023][ T7486] usb 1-1: unit 97 not found!
[ 1311.402329][ T9624] usb 1-1: USB disconnect, device number 57
[ 1311.513917][T15972] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1311.513930][T15972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1311.513945][T15972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1311.645111][T15972] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1311.645123][T15972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1311.645139][T15972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1311.675813][T15975] team0: Port device team_slave_0 added
[ 1311.713348][T15975] team0: Port device team_slave_1 added
[ 1312.053781][T15975] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1312.053799][T15975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1312.053824][T15975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1312.947336][ T5805] Bluetooth: hci4: command tx timeout
[ 1313.150118][T15975] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1313.150131][T15975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1313.150146][T15975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1313.271569][T15972] hsr_slave_0: entered promiscuous mode
[ 1313.274011][T15972] hsr_slave_1: entered promiscuous mode
[ 1313.275083][T15972] debugfs: 'hsr0' already exists in 'hsr'
[ 1313.275109][T15972] Cannot create hsr debugfs directory
[ 1313.334805][T16017] chnl_net:caif_netlink_parms(): no params data found
[ 1314.127084][ T5806] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[ 1314.276956][ T5806] usb 4-1: Using ep0 maxpacket: 32
[ 1314.278743][ T5806] usb 4-1: config 8 has an invalid interface number: 229 but max is 0
[ 1314.278760][ T5806] usb 4-1: config 8 has no interface number 0
[ 1314.278779][ T5806] usb 4-1: config 8 interface 229 has no altsetting 0
[ 1314.280804][ T5806] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=54.94
[ 1314.280820][ T5806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1314.280832][ T5806] usb 4-1: Product: syz
[ 1314.280840][ T5806] usb 4-1: Manufacturer: syz
[ 1314.280848][ T5806] usb 4-1: SerialNumber: syz
[ 1314.494381][ T5806] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.229/input/input119
[ 1314.607892][ T5806] usb 4-1: USB disconnect, device number 49
[ 1314.692843][T15975] hsr_slave_0: entered promiscuous mode
[ 1314.697871][T15975] hsr_slave_1: entered promiscuous mode
[ 1314.698948][T15975] debugfs: 'hsr0' already exists in 'hsr'
[ 1314.698973][T15975] Cannot create hsr debugfs directory
[ 1314.817080][T16067] 9pnet_fd: Insufficient options for proto=fd
[ 1315.017291][ T5805] Bluetooth: hci4: command tx timeout
[ 1315.077852][ T9624] usb 1-1: new full-speed USB device number 58 using dummy_hcd
[ 1315.208597][ T9624] usb 1-1: device descriptor read/64, error -71
[ 1315.333875][T16017] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1315.334079][T16017] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1315.334343][T16017] bridge_slave_0: entered allmulticast mode
[ 1315.336044][T16017] bridge_slave_0: entered promiscuous mode
[ 1315.362848][ T5950] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[ 1315.385508][T16017] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1315.385633][T16017] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1315.385794][T16017] bridge_slave_1: entered allmulticast mode
[ 1315.409210][T16017] bridge_slave_1: entered promiscuous mode
[ 1315.457051][ T9624] usb 1-1: new full-speed USB device number 59 using dummy_hcd
[ 1315.533605][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1315.533626][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1315.534745][ T5950] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[ 1315.534773][ T5950] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1315.534791][ T5950] usb 4-1: Manufacturer: syz
[ 1315.580229][ T5950] usb 4-1: config 0 descriptor??
[ 1315.587024][ T9624] usb 1-1: device descriptor read/64, error -71
[ 1315.697218][ T9624] usb usb1-port1: attempt power cycle
[ 1315.968953][T16017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1315.995124][ T5950] pyra 0003:1E7D:2CF6.0027: unknown main item tag 0x0
[ 1315.995149][ T5950] pyra 0003:1E7D:2CF6.0027: unknown main item tag 0x0
[ 1315.995165][ T5950] pyra 0003:1E7D:2CF6.0027: unknown main item tag 0x0
[ 1315.995196][ T5950] pyra 0003:1E7D:2CF6.0027: unknown main item tag 0x0
[ 1315.995212][ T5950] pyra 0003:1E7D:2CF6.0027: unknown main item tag 0x0
[ 1315.995228][ T5950] pyra 0003:1E7D:2CF6.0027: unknown main item tag 0x0
[ 1315.995244][ T5950] pyra 0003:1E7D:2CF6.0027: unknown main item tag 0x0
[ 1315.998128][ T5950] pyra 0003:1E7D:2CF6.0027: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[ 1316.057022][ T9624] usb 1-1: new full-speed USB device number 60 using dummy_hcd
[ 1316.059914][T16017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1316.078459][ T9624] usb 1-1: device descriptor read/8, error -71
[ 1316.201295][ T5950] pyra 0003:1E7D:2CF6.0027: couldn't init struct pyra_device
[ 1316.201351][ T5950] pyra 0003:1E7D:2CF6.0027: couldn't install mouse
[ 1316.203468][ T5950] pyra 0003:1E7D:2CF6.0027: probe with driver pyra failed with error -5
[ 1316.317172][ T9624] usb 1-1: new full-speed USB device number 61 using dummy_hcd
[ 1316.348202][ T9624] usb 1-1: device descriptor read/8, error -71
[ 1316.457571][ T9624] usb usb1-port1: unable to enumerate USB device
[ 1316.544879][T16017] team0: Port device team_slave_0 added
[ 1316.559209][T16017] team0: Port device team_slave_1 added
[ 1316.805256][T16017] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1316.805274][T16017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1316.805301][T16017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1316.808598][T16017] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1316.808613][T16017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1316.808639][T16017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1317.154580][T16017] hsr_slave_0: entered promiscuous mode
[ 1317.155590][T16017] hsr_slave_1: entered promiscuous mode
[ 1317.156187][T16017] debugfs: 'hsr0' already exists in 'hsr'
[ 1317.156211][T16017] Cannot create hsr debugfs directory
[ 1318.536008][ T9624] usb 4-1: USB disconnect, device number 50
[ 1319.942401][ T7231] bridge_slave_1: left allmulticast mode
[ 1319.942429][ T7231] bridge_slave_1: left promiscuous mode
[ 1319.943553][ T7231] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1319.999181][ T7231] bridge_slave_0: left allmulticast mode
[ 1319.999211][ T7231] bridge_slave_0: left promiscuous mode
[ 1319.999505][ T7231] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1320.026753][ T5950] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[ 1320.059526][ T7231] bridge_slave_1: left allmulticast mode
[ 1320.059548][ T7231] bridge_slave_1: left promiscuous mode
[ 1320.059703][ T7231] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1320.127844][ T7231] bridge_slave_0: left allmulticast mode
[ 1320.127866][ T7231] bridge_slave_0: left promiscuous mode
[ 1320.128054][ T7231] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1320.186893][ T5950] usb 1-1: Using ep0 maxpacket: 32
[ 1320.189415][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1320.189448][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1320.189479][ T5950] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1320.189492][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1320.192830][ T5950] usb 1-1: config 0 descriptor??
[ 1320.195742][ T5950] hub 1-1:0.0: USB hub found
[ 1320.254974][ T7231] bridge_slave_1: left allmulticast mode
[ 1320.255006][ T7231] bridge_slave_1: left promiscuous mode
[ 1320.255209][ T7231] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1320.341051][ T7231] bridge_slave_0: left allmulticast mode
[ 1320.341089][ T7231] bridge_slave_0: left promiscuous mode
[ 1320.341338][ T7231] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1320.400750][ T5950] hub 1-1:0.0: 1 port detected
[ 1320.729941][ T7231] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1320.803053][T16088] loop2: detected capacity change from 0 to 7
[ 1320.804141][T16088]  loop2:
[ 1320.804163][T16088] loop2: partition table partially beyond EOD, truncated
[ 1320.867466][ T7231] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1320.960019][ T7231] bond0 (unregistering): Released all slaves
[ 1321.030773][ T5950] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 1321.031740][T10627] usb 1-1: USB disconnect, device number 62
[ 1321.031969][ T5950] usb 1-1: Failed to suspend device, error -19
[ 1321.337515][ T7231] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1321.448095][ T7231] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1321.500534][ T7231] bond0 (unregistering): Released all slaves
[ 1321.746399][T16095] 9pnet_fd: Insufficient options for proto=fd
[ 1322.928201][ T7231] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1323.077766][ T7231] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1323.355422][ T7231] bond0 (unregistering): Released all slaves
[ 1324.009003][T16103] 9pnet_fd: Insufficient options for proto=fd
[ 1324.520419][ T5869] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[ 1324.520649][ T7231] hsr_slave_0: left promiscuous mode
[ 1324.563996][ T7231] hsr_slave_1: left promiscuous mode
[ 1324.572644][ T7231] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1324.667682][ T7231] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1324.706917][ T5869] usb 1-1: Using ep0 maxpacket: 32
[ 1324.708853][ T5869] usb 1-1: config index 0 descriptor too short (expected 35577, got 27)
[ 1324.708870][ T5869] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 1324.708881][ T5869] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 1324.708893][ T5869] usb 1-1: config 1 has no interface number 0
[ 1324.708922][ T5869] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1324.708938][ T5869] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[ 1324.708962][ T5869] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 1324.708974][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1324.764419][ T5869] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[ 1324.967382][ T7231] hsr_slave_0: left promiscuous mode
[ 1324.980917][ T5869] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached
[ 1325.017505][ T7231] hsr_slave_1: left promiscuous mode
[ 1325.020266][ T7231] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1325.058357][ T7231] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1325.207248][ T7231] hsr_slave_0: left promiscuous mode
[ 1325.247211][ T7231] hsr_slave_1: left promiscuous mode
[ 1325.248170][ T7231] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1325.277866][ T7231] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1326.067826][ T5950] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22)
[ 1326.268075][ T7231] team0 (unregistering): Port device team_slave_1 removed
[ 1326.437810][ T7231] team0 (unregistering): Port device team_slave_0 removed
[ 1328.027740][ T7231] team0 (unregistering): Port device team_slave_1 removed
[ 1328.237829][ T7231] team0 (unregistering): Port device team_slave_0 removed
[ 1329.758029][ T7231] team0 (unregistering): Port device team_slave_1 removed
[ 1329.919931][ T7231] team0 (unregistering): Port device team_slave_0 removed
[ 1330.793971][ T5901] usb 1-1: USB disconnect, device number 63
[ 1330.828087][ T5901] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[ 1331.652608][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1331.721537][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1331.794112][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1331.879542][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1331.964217][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1331.990997][T15972] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1332.063515][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1332.081683][T15972] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1332.158367][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1332.253242][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1332.341044][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1332.390654][T15972] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1332.521380][T15972] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1333.371612][ T5950] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[ 1333.637456][ T5950] usb 4-1: Using ep0 maxpacket: 32
[ 1333.747374][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1333.747432][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1333.747557][ T5950] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1333.747622][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1333.932077][ T5950] usb 4-1: config 0 descriptor??
[ 1334.012910][ T5950] hub 4-1:0.0: USB hub found
[ 1334.698637][ T5950] hub 4-1:0.0: 1 port detected
[ 1335.826216][ T5950] hub 4-1:0.0: hub_ext_port_status failed (err = -71)
[ 1335.840820][ T5869] usb 4-1: USB disconnect, device number 51
[ 1335.842266][ T5950] usb 4-1: Failed to suspend device, error -71
[ 1336.069025][T15972] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1337.155085][T15972] 8021q: adding VLAN 0 to HW filter on device team0
[ 1337.175239][T12034] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1337.175443][T12034] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1337.248689][ T1450] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1337.250384][ T1450] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1337.437110][ T5889] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[ 1337.877144][ T5889] usb 4-1: Using ep0 maxpacket: 32
[ 1340.073223][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1340.073259][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1340.073303][ T5889] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1340.073329][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1341.198621][ T5889] usb 4-1: config 0 descriptor??
[ 1341.237893][ T5889] usb 4-1: can't set config #0, error -71
[ 1341.245181][ T5889] usb 4-1: USB disconnect, device number 52
[ 1341.584105][T15972] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1341.673312][T16155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3286'.
[ 1342.259371][T15972] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1342.260077][T15975] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1342.368464][T15975] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1342.500427][T15975] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1342.540676][T15975] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1342.829886][ T5889] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[ 1343.222375][T16017] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1343.257563][ T5889] usb 1-1: Using ep0 maxpacket: 8
[ 1343.264198][ T5889] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1343.279848][ T5889] usb 1-1: config 89 has an invalid interface number: 228 but max is 0
[ 1343.279878][ T5889] usb 1-1: config 89 has no interface number 0
[ 1343.279931][ T5889] usb 1-1: config 89 interface 228 altsetting 252 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[ 1343.279960][ T5889] usb 1-1: config 89 interface 228 has no altsetting 0
[ 1343.293269][T16017] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1343.347476][ T5889] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=5e.95
[ 1343.347507][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1343.347528][ T5889] usb 1-1: Product: syz
[ 1343.347543][ T5889] usb 1-1: Manufacturer: syz
[ 1343.347557][ T5889] usb 1-1: SerialNumber: syz
[ 1343.401396][T16017] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1343.415946][T16182] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3290'.
[ 1343.465972][T16017] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1343.579280][ T5889] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1343.591333][ T3627] usb 1-1: Failed to submit usb control message: -71
[ 1343.591370][ T3627] usb 1-1: unable to send the bmi data to the device: -71
[ 1343.591388][ T3627] usb 1-1: unable to get target info from device
[ 1343.591403][ T3627] usb 1-1: could not get target info (-71)
[ 1343.591510][ T3627] usb 1-1: could not probe fw (-71)
[ 1343.630928][ T5889] usb 1-1: USB disconnect, device number 64
[ 1343.792717][T15972] veth0_vlan: entered promiscuous mode
[ 1344.579592][T15972] veth1_vlan: entered promiscuous mode
[ 1344.631160][T16199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3294'.
[ 1344.631186][T16199] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3294'.
[ 1344.631215][T16199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3294'.
[ 1344.705572][T16200] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1344.739095][T15975] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1344.795077][T16202] 9pnet_fd: Insufficient options for proto=fd
[ 1344.815598][T15972] veth0_macvtap: entered promiscuous mode
[ 1344.824421][T15975] 8021q: adding VLAN 0 to HW filter on device team0
[ 1344.846984][T15972] veth1_macvtap: entered promiscuous mode
[ 1344.855278][ T3587] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1344.856326][ T3587] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1344.945218][ T3587] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1344.945379][ T3587] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1344.982313][T16017] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1345.026227][T15972] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1345.114238][T15972] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1345.961757][T16017] 8021q: adding VLAN 0 to HW filter on device team0
[ 1346.073286][ T1450] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1346.073566][ T1450] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1346.074615][T14833] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1346.104444][T14833] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1346.121063][T14833] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1346.147479][T14833] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1346.150990][ T1450] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1346.151167][ T1450] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1348.485804][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1348.485818][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1348.716939][T12951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1348.716960][T12951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1348.836183][T15975] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1349.149914][T16017] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1349.377095][ T7486] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 1349.526614][ T7486] usb 8-1: Using ep0 maxpacket: 32
[ 1349.529088][ T7486] usb 8-1: config 0 has an invalid interface number: 184 but max is 0
[ 1349.529115][ T7486] usb 8-1: config 0 has no interface number 0
[ 1349.529176][ T7486] usb 8-1: config 0 interface 184 has no altsetting 0
[ 1349.533654][ T7486] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1349.533685][ T7486] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1349.533706][ T7486] usb 8-1: Product: syz
[ 1349.533720][ T7486] usb 8-1: Manufacturer: syz
[ 1349.533735][ T7486] usb 8-1: SerialNumber: syz
[ 1349.564676][ T7486] usb 8-1: config 0 descriptor??
[ 1349.599848][ T7486] smsc75xx v1.0.0
[ 1349.645223][T15975] veth0_vlan: entered promiscuous mode
[ 1349.662411][T15975] veth1_vlan: entered promiscuous mode
[ 1349.703869][T15975] veth0_macvtap: entered promiscuous mode
[ 1349.715533][T15975] veth1_macvtap: entered promiscuous mode
[ 1349.742433][T15975] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1349.758502][T15975] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1350.316741][T12034] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1350.318752][T12034] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1350.320266][T12034] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1350.356264][T12034] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1350.513882][T16257] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3305'.
[ 1350.658972][ T7486] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[ 1350.659004][ T7486] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1350.942115][T12951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1350.942137][T12951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1351.008597][T16017] veth0_vlan: entered promiscuous mode
[ 1351.132736][ T3587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1351.132759][ T3587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1351.155873][T16017] veth1_vlan: entered promiscuous mode
[ 1351.343972][T16017] veth0_macvtap: entered promiscuous mode
[ 1351.386516][T16017] veth1_macvtap: entered promiscuous mode
[ 1351.473314][ T7486] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[ 1351.473344][ T7486] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[ 1351.473364][ T7486] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61
[ 1351.473623][ T7486] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -61
[ 1351.501663][T16017] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1351.583868][T16017] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1351.631771][T14833] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1351.650209][T14833] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1351.658020][T14833] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1351.676526][T14833] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1352.234923][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1352.746099][ T5869] usb 8-1: USB disconnect, device number 2
[ 1352.995845][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1352.995866][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1353.147624][ T3587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1353.147648][ T3587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1353.173042][ T5806] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[ 1353.317025][ T5806] usb 1-1: Using ep0 maxpacket: 32
[ 1353.319318][ T5806] usb 1-1: config 8 has an invalid interface number: 229 but max is 0
[ 1353.319344][ T5806] usb 1-1: config 8 has no interface number 0
[ 1353.319378][ T5806] usb 1-1: config 8 interface 229 has no altsetting 0
[ 1353.323388][ T5806] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=54.94
[ 1353.323417][ T5806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1353.323438][ T5806] usb 1-1: Product: syz
[ 1353.323453][ T5806] usb 1-1: Manufacturer: syz
[ 1353.323469][ T5806] usb 1-1: SerialNumber: syz
[ 1353.389366][ T5869] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[ 1353.546733][ T5869] usb 8-1: Using ep0 maxpacket: 32
[ 1353.549456][ T5869] usb 8-1: config 8 has an invalid interface number: 229 but max is 0
[ 1353.549476][ T5869] usb 8-1: config 8 has no interface number 0
[ 1353.549506][ T5869] usb 8-1: config 8 interface 229 has no altsetting 0
[ 1353.552742][ T5869] usb 8-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=54.94
[ 1353.552772][ T5869] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1353.552793][ T5869] usb 8-1: Product: syz
[ 1353.552808][ T5869] usb 8-1: Manufacturer: syz
[ 1353.552824][ T5869] usb 8-1: SerialNumber: syz
[ 1353.626104][ T5806] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:8.229/input/input120
[ 1353.677254][ T5806] usb 1-1: USB disconnect, device number 65
[ 1353.932637][ T5869] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:8.229/input/input121
[ 1353.952912][ T5869] usb 8-1: USB disconnect, device number 3
[ 1354.398692][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1354.861423][T16284] 9pnet_fd: Insufficient options for proto=fd
[ 1355.958543][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1356.175454][T16289] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1356.245384][T16289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3316'.
[ 1356.262985][T16289] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1356.263929][T16289] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1357.752390][T16307] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3321'.
[ 1358.020604][ T5805] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1358.051702][ T5805] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1358.074515][ T5805] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1358.100355][ T5805] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1358.101664][ T5805] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1358.548206][T16314] 9pnet_fd: Insufficient options for proto=fd
[ 1360.280728][ T5805] Bluetooth: hci0: command tx timeout
[ 1360.534431][T16321] 9pnet_fd: Insufficient options for proto=fd
[ 1361.779746][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.779791][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[ 1362.221373][T16308] chnl_net:caif_netlink_parms(): no params data found
[ 1362.297818][ T5805] Bluetooth: hci0: command tx timeout
[ 1363.444616][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1363.657360][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1364.052528][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1364.377132][ T5805] Bluetooth: hci0: command tx timeout
[ 1365.119063][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1365.186751][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1365.371285][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1365.586743][T16350] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3331'.
[ 1366.287937][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1366.502574][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1366.509342][ T5805] Bluetooth: hci0: command tx timeout
[ 1367.103644][T16357] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[ 1367.104532][T16357] VFS: Can't find a romfs filesystem on dev nullb0.
[ 1367.104532][T16357] 
[ 1367.138524][T16357] No control pipe specified
[ 1367.159139][T16357] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3333'.
[ 1367.177528][T16359] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1367.215907][T16359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3334'.
[ 1367.382845][T16357] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1367.384345][T16357] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1367.411914][T16308] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1367.412055][T16308] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1367.412347][T16308] bridge_slave_0: entered allmulticast mode
[ 1367.415427][T16308] bridge_slave_0: entered promiscuous mode
[ 1367.449150][T16308] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1367.450679][T16308] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1367.451533][T16308] bridge_slave_1: entered allmulticast mode
[ 1367.481586][T16308] bridge_slave_1: entered promiscuous mode
[ 1369.102483][T16308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1369.117347][T16308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1369.561831][T16380] 9pnet_fd: Insufficient options for proto=fd
[ 1369.685085][T16308] team0: Port device team_slave_0 added
[ 1369.694214][T16384] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1369.711915][T16308] team0: Port device team_slave_1 added
[ 1370.017032][T10988] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[ 1370.045785][T16308] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1370.045802][T16308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1370.045827][T16308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1370.055826][T16308] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1370.055851][T16308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1370.055877][T16308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1370.178125][T10988] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1370.178248][T10988] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1370.182401][T10988] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[ 1370.182433][T10988] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1370.182456][T10988] usb 5-1: Manufacturer: syz
[ 1370.191304][T10988] usb 5-1: config 0 descriptor??
[ 1370.297098][ T1610] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[ 1370.447564][ T1610] usb 4-1: Using ep0 maxpacket: 32
[ 1370.450538][ T1610] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[ 1370.450567][ T1610] usb 4-1: config 0 has no interface number 0
[ 1370.450674][ T1610] usb 4-1: config 0 interface 184 has no altsetting 0
[ 1370.490962][ T1610] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1370.490982][ T1610] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1370.490994][ T1610] usb 4-1: Product: syz
[ 1370.491002][ T1610] usb 4-1: Manufacturer: syz
[ 1370.491194][ T1610] usb 4-1: SerialNumber: syz
[ 1370.508046][T16308] hsr_slave_0: entered promiscuous mode
[ 1370.509225][ T1610] usb 4-1: config 0 descriptor??
[ 1370.512004][T16308] hsr_slave_1: entered promiscuous mode
[ 1370.513658][T16308] debugfs: 'hsr0' already exists in 'hsr'
[ 1370.513745][T16308] Cannot create hsr debugfs directory
[ 1370.606074][ T1610] smsc75xx v1.0.0
[ 1370.623785][T10988] pyra 0003:1E7D:2CF6.0028: unknown main item tag 0x0
[ 1370.623815][T10988] pyra 0003:1E7D:2CF6.0028: unknown main item tag 0x0
[ 1370.624196][T10988] pyra 0003:1E7D:2CF6.0028: unknown main item tag 0x0
[ 1370.624220][T10988] pyra 0003:1E7D:2CF6.0028: unknown main item tag 0x0
[ 1370.624236][T10988] pyra 0003:1E7D:2CF6.0028: unknown main item tag 0x0
[ 1370.624251][T10988] pyra 0003:1E7D:2CF6.0028: unknown main item tag 0x0
[ 1370.624267][T10988] pyra 0003:1E7D:2CF6.0028: unknown main item tag 0x0
[ 1370.818221][T16401] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3346'.
[ 1371.070107][T10988] pyra 0003:1E7D:2CF6.0028: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[ 1371.837202][T10988] pyra 0003:1E7D:2CF6.0028: couldn't init struct pyra_device
[ 1371.838289][T10988] pyra 0003:1E7D:2CF6.0028: couldn't install mouse
[ 1371.928815][ T1610] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[ 1371.928916][ T1610] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1372.893347][T10988] pyra 0003:1E7D:2CF6.0028: probe with driver pyra failed with error -5
[ 1372.914424][T10988] usb 5-1: USB disconnect, device number 47
[ 1373.148719][T16413] 9pnet_fd: Insufficient options for proto=fd
[ 1373.334266][ T1610] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[ 1373.334300][ T1610] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[ 1373.334322][ T1610] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61
[ 1373.334629][ T1610] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61
[ 1375.146054][T16420] usb 4-1: USB disconnect, device number 53
[ 1375.787991][T16420] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[ 1375.956829][T16420] usb 4-1: Using ep0 maxpacket: 32
[ 1375.965058][T16420] usb 4-1: config 8 has an invalid interface number: 229 but max is 0
[ 1375.965167][T16420] usb 4-1: config 8 has no interface number 0
[ 1375.965886][T16420] usb 4-1: config 8 interface 229 has no altsetting 0
[ 1375.996120][T16420] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=54.94
[ 1375.996355][T16420] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1376.001552][T16420] usb 4-1: Product: syz
[ 1376.001953][T16420] usb 4-1: Manufacturer: syz
[ 1376.002357][T16420] usb 4-1: SerialNumber: syz
[ 1376.123431][T16308] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1376.374928][T16420] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.229/input/input122
[ 1376.733992][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1376.830477][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1376.930006][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1377.247077][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1377.375711][T16420] usb 4-1: USB disconnect, device number 54
[ 1377.605858][T16446] 9pnet_fd: Insufficient options for proto=fd
[ 1377.759483][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1377.931561][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1378.162977][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1378.262201][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1378.362940][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1378.543968][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1378.563781][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1378.717225][ T5869] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[ 1378.847351][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1378.866895][ T5869] usb 5-1: Using ep0 maxpacket: 32
[ 1378.949311][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1378.949332][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1378.949357][ T5869] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1378.949370][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1379.135589][ T5869] usb 5-1: config 0 descriptor??
[ 1379.136113][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1379.610924][ T5869] hub 5-1:0.0: USB hub found
[ 1379.650914][T16308] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1379.747661][ T5806] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 1380.220737][ T5869] hub 5-1:0.0: 1 port detected
[ 1380.234184][ T5806] usb 7-1: Using ep0 maxpacket: 32
[ 1380.249453][ T5806] usb 7-1: config 0 has an invalid interface number: 184 but max is 0
[ 1380.249482][ T5806] usb 7-1: config 0 has no interface number 0
[ 1380.249533][ T5806] usb 7-1: config 0 interface 184 has no altsetting 0
[ 1380.255234][ T5806] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1380.255264][ T5806] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1380.255285][ T5806] usb 7-1: Product: syz
[ 1380.255301][ T5806] usb 7-1: Manufacturer: syz
[ 1380.255317][ T5806] usb 7-1: SerialNumber: syz
[ 1380.322686][ T5806] usb 7-1: config 0 descriptor??
[ 1380.334944][ T5806] smsc75xx v1.0.0
[ 1380.756647][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1380.867609][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1381.048091][T16308] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1381.085286][T16465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3367'.
[ 1381.117126][T16466] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3365'.
[ 1382.164391][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1382.330005][ T5869] hub 5-1:0.0: activate --> -90
[ 1382.394809][ T5806] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71
[ 1382.394840][ T5806] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1382.395438][ T5806] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1382.395463][ T5806] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[ 1382.395482][ T5806] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[ 1382.395500][ T5806] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[ 1382.395764][ T5806] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71
[ 1382.472627][ T5806] usb 7-1: USB disconnect, device number 2
[ 1382.487051][ T5869] usb 5-1: USB disconnect, device number 48
[ 1382.537070][ T5901] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[ 1382.721546][ T5901] usb 4-1: Using ep0 maxpacket: 16
[ 1383.132539][ T5901] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1383.132808][ T5901] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1383.132831][ T5901] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1383.132870][ T5901] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1383.186984][ T5901] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1383.187004][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1383.187015][ T5901] usb 4-1: Product: 
[ 1383.187024][ T5901] usb 4-1: Manufacturer: 廓꽒牍꘡᧭ᜇ梍똳ꋼ︧熶粌苮腽慌෰遲ᓞꉽ뮩䱮婢钤俍⣮돷醖䌈탂厵臐柄嘗꒤쬜䱭傲踻Π므ᨠ忡ꔼꆺ뢔硴꼉殯Ὡ蝘琬皅ﱸ夫䝭屗퉚쬀鋖⹗毿竁蟹ｭ໎鲼㾍섬ʵᑙ郙ྌ춃蟓熐땯终刌亽轢၄꒿௫죄蟺ꥣ㥟䉕ꅏ碩䅩ㆤ滃
[ 1383.187041][ T5901] usb 4-1: SerialNumber: 㠁
[ 1383.198212][T16465] wireguard0: entered allmulticast mode
[ 1383.237584][T16470] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 1383.382945][T16482] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[ 1383.386001][T16482] VFS: Can't find a romfs filesystem on dev nullb0.
[ 1383.386001][T16482] 
[ 1383.466028][T16482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3371'.
[ 1384.105868][T16308] netdevsim netdevsim0 ������ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1384.576724][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1384.881952][ T5901] usb 4-1: 0:2 : does not exist
[ 1384.949646][ T5901] usb 4-1: USB disconnect, device number 55
[ 1385.033266][T16308] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1385.201035][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1385.430018][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1385.768070][T16308] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1385.919353][T16308] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1386.178353][T16308] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1386.576633][ T5869] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[ 1386.700513][T16308] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1386.727196][ T5869] usb 4-1: Using ep0 maxpacket: 32
[ 1386.979195][ T5869] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[ 1386.979253][ T5869] usb 4-1: config 0 has no interface number 0
[ 1386.979616][ T5869] usb 4-1: config 0 interface 184 has no altsetting 0
[ 1387.782670][ T5869] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1387.782704][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1387.782727][ T5869] usb 4-1: Product: syz
[ 1387.782743][ T5869] usb 4-1: Manufacturer: syz
[ 1387.782759][ T5869] usb 4-1: SerialNumber: syz
[ 1387.794093][ T5869] usb 4-1: config 0 descriptor??
[ 1387.809725][ T5869] smsc75xx v1.0.0
[ 1387.930120][T16308] 8021q: adding VLAN 0 to HW filter on device team0
[ 1387.993346][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1388.011816][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1388.127846][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1388.128334][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1388.307038][ T7606] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[ 1388.478013][ T7606] usb 5-1: Using ep0 maxpacket: 32
[ 1388.486187][ T7606] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1388.486222][ T7606] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1388.486264][ T7606] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1388.486288][ T7606] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1388.533294][ T7606] usb 5-1: config 0 descriptor??
[ 1388.536411][ T5869] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[ 1388.536618][ T5869] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1388.565371][ T7606] hub 5-1:0.0: USB hub found
[ 1389.333542][ T7606] hub 5-1:0.0: 1 port detected
[ 1389.523474][T16542] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3388'.
[ 1389.578102][ T5869] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71
[ 1389.578135][ T5869] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71
[ 1389.578155][ T5869] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[ 1389.578439][ T5869] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71
[ 1389.681765][ T5869] usb 4-1: USB disconnect, device number 56
[ 1389.726618][T16544] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1389.739741][T16544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3389'.
[ 1389.978229][T16308] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1390.150877][T16308] veth0_vlan: entered promiscuous mode
[ 1390.183279][T16308] veth1_vlan: entered promiscuous mode
[ 1390.279762][T16308] veth0_macvtap: entered promiscuous mode
[ 1390.293391][T16308] veth1_macvtap: entered promiscuous mode
[ 1391.298103][T16420] hub 5-1:0.0: activate --> -90
[ 1391.424241][T16559] 9pnet_fd: Insufficient options for proto=fd
[ 1391.472776][T16308] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1391.672696][T16308] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1391.741335][T12512] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1391.745890][T12512] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1391.747470][T16481] usb 5-1: USB disconnect, device number 49
[ 1391.795975][T12512] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1391.826337][T12512] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1392.101849][T16570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3400'.
[ 1392.123865][T16572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3399'.
[ 1392.724696][T16481] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[ 1393.276956][T16481] usb 8-1: Using ep0 maxpacket: 32
[ 1393.279433][T16481] usb 8-1: config 0 has an invalid interface number: 184 but max is 0
[ 1393.279461][T16481] usb 8-1: config 0 has no interface number 0
[ 1393.279502][T16481] usb 8-1: config 0 interface 184 has no altsetting 0
[ 1393.283030][T16481] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1393.283061][T16481] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1393.283083][T16481] usb 8-1: Product: syz
[ 1393.283099][T16481] usb 8-1: Manufacturer: syz
[ 1393.283118][T16481] usb 8-1: SerialNumber: syz
[ 1393.368959][T16481] usb 8-1: config 0 descriptor??
[ 1393.375194][T16481] smsc75xx v1.0.0
[ 1393.561507][ T7231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1393.561529][ T7231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1393.727533][T12951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1393.727554][T12951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1393.886993][T10276] usb 5-1: new full-speed USB device number 50 using dummy_hcd
[ 1394.014210][T16481] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[ 1394.014244][T16481] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1394.042958][T10276] usb 5-1: config 0 has an invalid interface number: 20 but max is 0
[ 1394.042987][T10276] usb 5-1: config 0 has no interface number 0
[ 1394.043044][T10276] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[ 1394.046074][T10276] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[ 1394.046106][T10276] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1394.046128][T10276] usb 5-1: Product: syz
[ 1394.046144][T10276] usb 5-1: Manufacturer: syz
[ 1394.046160][T10276] usb 5-1: SerialNumber: syz
[ 1394.071139][T10276] usb 5-1: config 0 descriptor??
[ 1394.072652][T16579] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1394.089577][T10276] usb-storage 5-1:0.20: USB Mass Storage device detected
[ 1394.112433][T10276] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[ 1394.295046][T10276] scsi host1: usb-storage 5-1:0.20
[ 1394.561878][ T5950] usb 5-1: USB disconnect, device number 50
[ 1394.833734][T16481] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[ 1394.833768][T16481] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[ 1394.833789][T16481] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61
[ 1394.834090][T16481] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -61
[ 1395.519003][T16592] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1395.521451][T16592] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3402'.
[ 1395.545976][T16592] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1395.564182][T16592] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1397.101875][T16604] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3405'.
[ 1397.623904][T10276] usb 8-1: USB disconnect, device number 4
[ 1398.346897][T10276] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[ 1398.846316][T16619] 9pnet_fd: Insufficient options for proto=fd
[ 1398.878659][T10276] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1398.878680][T10276] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1398.879682][T10276] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[ 1398.879699][T10276] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1398.879710][T10276] usb 1-1: Manufacturer: syz
[ 1398.882675][T10276] usb 1-1: config 0 descriptor??
[ 1399.507660][T10276] usbhid 1-1:0.0: can't add hid device: -32
[ 1399.507791][T10276] usbhid 1-1:0.0: probe with driver usbhid failed with error -32
[ 1399.761726][T16632] 9pnet_fd: Insufficient options for proto=fd
[ 1403.444615][T16640] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1403.469227][T16640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3416'.
[ 1403.497326][T16641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3417'.
[ 1403.669925][ T5901] usb 1-1: USB disconnect, device number 66
[ 1404.161703][ T5901] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[ 1404.477145][ T5901] usb 1-1: Using ep0 maxpacket: 32
[ 1404.480713][ T5901] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[ 1404.480743][ T5901] usb 1-1: config 0 has no interface number 0
[ 1404.480795][ T5901] usb 1-1: config 0 interface 184 has no altsetting 0
[ 1404.522979][ T5901] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1404.523011][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1404.523034][ T5901] usb 1-1: Product: syz
[ 1404.523049][ T5901] usb 1-1: Manufacturer: syz
[ 1404.523065][ T5901] usb 1-1: SerialNumber: syz
[ 1404.569282][ T5901] usb 1-1: config 0 descriptor??
[ 1404.571965][ T5901] smsc75xx v1.0.0
[ 1405.263080][ T5901] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[ 1405.263115][ T5901] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1406.085081][ T5901] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32
[ 1406.085115][ T5901] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32
[ 1406.085137][ T5901] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32
[ 1406.085454][ T5901] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32
[ 1406.232441][T16663] 9pnet_fd: Insufficient options for proto=fd
[ 1409.222237][ T5901] usb 1-1: USB disconnect, device number 67
[ 1409.369742][ T7606] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[ 1409.647857][ T7606] usb 5-1: Using ep0 maxpacket: 32
[ 1409.697607][ T7606] usb 5-1: config index 0 descriptor too short (expected 37, got 36)
[ 1409.697650][ T7606] usb 5-1: config 0 has an invalid interface number: 196 but max is 0
[ 1409.697805][ T7606] usb 5-1: config 0 has an invalid descriptor of length 35, skipping remainder of the config
[ 1409.697827][ T7606] usb 5-1: config 0 has no interface number 0
[ 1409.698044][ T7606] usb 5-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1409.698255][ T7606] usb 5-1: config 0 interface 196 has no altsetting 0
[ 1409.792004][ T7606] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[ 1409.792038][ T7606] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1409.792060][ T7606] usb 5-1: Product: syz
[ 1409.792240][ T7606] usb 5-1: Manufacturer: syz
[ 1409.792257][ T7606] usb 5-1: SerialNumber: syz
[ 1410.306386][ T7606] usb 5-1: config 0 descriptor??
[ 1414.101672][ T7606] ipheth 5-1:0.196: Unable to find endpoints
[ 1414.647082][ T7606] usb 5-1: USB disconnect, device number 51
[ 1415.486482][T16677] 9pnet_fd: Insufficient options for proto=fd
[ 1417.219466][T16681] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3432'.
[ 1421.854195][T16734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3449'.
[ 1422.397305][T16420] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[ 1422.414800][ T5950] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[ 1422.557320][T16420] usb 8-1: Using ep0 maxpacket: 32
[ 1422.563928][T16420] usb 8-1: config index 0 descriptor too short (expected 37, got 36)
[ 1422.563969][T16420] usb 8-1: config 0 has an invalid interface number: 196 but max is 0
[ 1422.563991][T16420] usb 8-1: config 0 has an invalid descriptor of length 35, skipping remainder of the config
[ 1422.564052][T16420] usb 8-1: config 0 has no interface number 0
[ 1422.564144][T16420] usb 8-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1422.564189][T16420] usb 8-1: config 0 interface 196 has no altsetting 0
[ 1425.060630][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1427.556966][ T5950] usb 4-1: device descriptor read/64, error -110
[ 1427.966795][ T5950] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[ 1428.266872][ T5950] usb 4-1: device descriptor read/64, error -32
[ 1428.383435][ T5950] usb usb4-port1: attempt power cycle
[ 1429.106937][ T5950] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[ 1429.156421][ T5950] usb 4-1: device descriptor read/8, error -32
[ 1429.355248][T16730] raw-gadget.0 gadget.3: fail, usb_ep_queue returned -108
[ 1429.547126][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[ 1429.547170][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[ 1429.576689][ T5950] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[ 1429.611294][ T5950] usb 4-1: device descriptor read/8, error -32
[ 1429.718690][ T5950] raw-gadget.0 gadget.3: failed to queue suspend event
[ 1429.725396][ T5950] usb usb4-port1: unable to enumerate USB device
[ 1429.868047][T16420] usb 8-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[ 1429.868081][T16420] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1429.891336][T16420] usb 8-1: config 0 descriptor??
[ 1429.909676][T16420] usb 8-1: can't set config #0, error -71
[ 1429.930471][T16725] raw-gadget.0 gadget.3: failed to queue disconnect event
[ 1429.954366][T16420] usb 8-1: USB disconnect, device number 5
[ 1430.139836][T16746] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3451'.
[ 1431.235262][T16758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3457'.
[ 1431.287657][T10276] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[ 1431.616547][T10276] usb 8-1: Using ep0 maxpacket: 32
[ 1431.620483][T10276] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1431.620517][T10276] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1431.620559][T10276] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1431.620584][T10276] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1431.683693][T10276] usb 8-1: config 0 descriptor??
[ 1431.700756][T10276] hub 8-1:0.0: USB hub found
[ 1431.738711][T16740] Bluetooth: hci4: command 0x0406 tx timeout
[ 1431.738748][T16740] Bluetooth: hci1: command 0x0406 tx timeout
[ 1431.738829][T16740] Bluetooth: hci2: command 0x0406 tx timeout
[ 1431.919946][T10276] hub 8-1:0.0: 1 port detected
[ 1433.720885][ T5901] usb 8-1: USB disconnect, device number 6
[ 1436.940635][T16799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3469'.
[ 1437.078532][T16481] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[ 1437.851354][T16481] usb 8-1: Using ep0 maxpacket: 32
[ 1439.006858][T16481] usb 8-1: config index 0 descriptor too short (expected 37, got 36)
[ 1439.006888][T16481] usb 8-1: config 0 has an invalid interface number: 196 but max is 0
[ 1439.006910][T16481] usb 8-1: config 0 has an invalid descriptor of length 35, skipping remainder of the config
[ 1439.006931][T16481] usb 8-1: config 0 has no interface number 0
[ 1439.006982][T16481] usb 8-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1439.007009][T16481] usb 8-1: config 0 interface 196 has no altsetting 0
[ 1439.015631][T16481] usb 8-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[ 1439.015662][T16481] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1439.015683][T16481] usb 8-1: Product: syz
[ 1439.015699][T16481] usb 8-1: Manufacturer: syz
[ 1439.015712][T16481] usb 8-1: SerialNumber: syz
[ 1439.148353][T16801] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3467'.
[ 1439.383430][T16481] usb 8-1: config 0 descriptor??
[ 1440.871725][T16481] usb 8-1: can't set config #0, error -71
[ 1440.906799][T16481] usb 8-1: USB disconnect, device number 7
[ 1441.888276][T16819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3474'.
[ 1442.184183][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1443.168581][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1443.244181][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1443.380222][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1443.535144][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1444.205537][T16839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3478'.
[ 1444.511078][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1444.536639][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1445.036595][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1445.256021][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1447.639039][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1450.409115][ T5950] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[ 1450.993274][ T5950] usb 1-1: Using ep0 maxpacket: 32
[ 1451.037261][ T5950] usb 1-1: config index 0 descriptor too short (expected 37, got 36)
[ 1451.037294][ T5950] usb 1-1: config 0 has an invalid interface number: 196 but max is 0
[ 1451.037315][ T5950] usb 1-1: config 0 has an invalid descriptor of length 35, skipping remainder of the config
[ 1451.037336][ T5950] usb 1-1: config 0 has no interface number 0
[ 1451.037478][ T5950] usb 1-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1451.037551][ T5950] usb 1-1: config 0 interface 196 has no altsetting 0
[ 1452.236651][ T5950] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[ 1452.236685][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1452.236708][ T5950] usb 1-1: Product: syz
[ 1452.236723][ T5950] usb 1-1: Manufacturer: syz
[ 1452.236739][ T5950] usb 1-1: SerialNumber: syz
[ 1452.608157][ T5950] usb 1-1: config 0 descriptor??
[ 1452.624007][ T5950] usb 1-1: can't set config #0, error -71
[ 1452.691805][ T5950] usb 1-1: USB disconnect, device number 68
[ 1456.414423][T16878] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[ 1456.414855][T16878] VFS: Can't find a romfs filesystem on dev nullb0.
[ 1456.414855][T16878] 
[ 1456.564624][T16880] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3492'.
[ 1456.609051][ T5808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1456.624363][ T5808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1456.639366][ T5808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1456.640633][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1456.641281][ T5808] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1458.853060][ T5808] Bluetooth: hci3: command tx timeout
[ 1460.206911][ T7606] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[ 1460.593223][ T7606] usb 8-1: Using ep0 maxpacket: 32
[ 1460.747974][ T7606] usb 8-1: config 8 has an invalid interface number: 229 but max is 0
[ 1460.748005][ T7606] usb 8-1: config 8 has no interface number 0
[ 1460.748043][ T7606] usb 8-1: config 8 interface 229 has no altsetting 0
[ 1460.751499][ T7606] usb 8-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=54.94
[ 1460.751529][ T7606] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1460.751550][ T7606] usb 8-1: Product: syz
[ 1460.751567][ T7606] usb 8-1: Manufacturer: syz
[ 1460.751582][ T7606] usb 8-1: SerialNumber: syz
[ 1460.798497][T16883] chnl_net:caif_netlink_parms(): no params data found
[ 1461.026978][ T5808] Bluetooth: hci3: command tx timeout
[ 1461.136657][T16272] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[ 1461.290600][T16272] usb 1-1: Using ep0 maxpacket: 32
[ 1461.303240][T16272] usb 1-1: config index 0 descriptor too short (expected 37, got 36)
[ 1461.303271][T16272] usb 1-1: config 0 has an invalid interface number: 196 but max is 0
[ 1461.303290][T16272] usb 1-1: config 0 has an invalid descriptor of length 35, skipping remainder of the config
[ 1461.303310][T16272] usb 1-1: config 0 has no interface number 0
[ 1461.303359][T16272] usb 1-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1461.303465][T16272] usb 1-1: config 0 interface 196 has no altsetting 0
[ 1461.371356][T16272] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[ 1461.371389][T16272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1461.371411][T16272] usb 1-1: Product: syz
[ 1461.371427][T16272] usb 1-1: Manufacturer: syz
[ 1461.371443][T16272] usb 1-1: SerialNumber: syz
[ 1461.635403][T16272] usb 1-1: config 0 descriptor??
[ 1461.850645][ T7606] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:8.229/input/input123
[ 1461.878591][T16272] ipheth 1-1:0.196: Unable to find endpoints
[ 1461.955651][ T7606] usb 8-1: USB disconnect, device number 8
[ 1462.155528][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1462.360429][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1463.298368][ T5808] Bluetooth: hci3: command tx timeout
[ 1463.432252][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1463.904516][T16926] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[ 1463.915405][T16926] VFS: Can't find a romfs filesystem on dev nullb0.
[ 1463.915405][T16926] 
[ 1463.945720][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1463.998704][ T5805] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1464.027198][ T5805] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1464.036338][ T5805] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1464.089634][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1464.122841][ T5805] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1464.123879][ T5805] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1464.321400][T16930] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3504'.
[ 1464.590388][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1464.653958][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1464.695159][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1465.002127][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1465.337395][ T5808] Bluetooth: hci3: command tx timeout
[ 1465.359507][T16480] usb 1-1: USB disconnect, device number 69
[ 1466.216836][ T5808] Bluetooth: hci4: command tx timeout
[ 1467.554706][T16883] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1467.554845][T16883] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1467.555048][T16883] bridge_slave_0: entered allmulticast mode
[ 1467.560760][T16883] bridge_slave_0: entered promiscuous mode
[ 1467.579900][T16883] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1467.580118][T16883] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1467.580377][T16883] bridge_slave_1: entered allmulticast mode
[ 1467.583613][T16883] bridge_slave_1: entered promiscuous mode
[ 1467.728993][ T7486] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[ 1467.947961][ T7486] usb 1-1: Using ep0 maxpacket: 32
[ 1467.957238][ T7486] usb 1-1: config 8 has an invalid interface number: 229 but max is 0
[ 1467.957331][ T7486] usb 1-1: config 8 has no interface number 0
[ 1467.957655][ T7486] usb 1-1: config 8 interface 229 has no altsetting 0
[ 1468.011438][ T7486] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=54.94
[ 1468.011560][ T7486] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1468.011645][ T7486] usb 1-1: Product: syz
[ 1468.011725][ T7486] usb 1-1: Manufacturer: syz
[ 1468.011806][ T7486] usb 1-1: SerialNumber: syz
[ 1468.297472][ T5808] Bluetooth: hci4: command tx timeout
[ 1468.469893][ T7486] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:8.229/input/input124
[ 1468.494744][ T7241] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1468.510108][ T7486] usb 1-1: USB disconnect, device number 70
[ 1468.734461][T16953] FAULT_INJECTION: forcing a failure.
[ 1468.734461][T16953] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1468.734497][T16953] CPU: 0 UID: 0 PID: 16953 Comm: syz.4.3508 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1468.734521][T16953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1468.734533][T16953] Call Trace:
[ 1468.734541][T16953]  <TASK>
[ 1468.734551][T16953]  dump_stack_lvl+0x189/0x250
[ 1468.734583][T16953]  ? __pfx____ratelimit+0x10/0x10
[ 1468.734608][T16953]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1468.734635][T16953]  ? __pfx__printk+0x10/0x10
[ 1468.734659][T16953]  ? __might_fault+0xb0/0x130
[ 1468.734697][T16953]  should_fail_ex+0x46c/0x600
[ 1468.734728][T16953]  _copy_from_user+0x2d/0xb0
[ 1468.734751][T16953]  ___sys_sendmsg+0x158/0x2a0
[ 1468.734778][T16953]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1468.734839][T16953]  ? __fget_files+0x2a/0x420
[ 1468.734863][T16953]  ? __fget_files+0x3a6/0x420
[ 1468.734899][T16953]  __x64_sys_sendmsg+0x1a1/0x260
[ 1468.734924][T16953]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1468.734957][T16953]  ? __pfx_ksys_write+0x10/0x10
[ 1468.734985][T16953]  ? do_syscall_64+0xbe/0xfa0
[ 1468.735013][T16953]  do_syscall_64+0xfa/0xfa0
[ 1468.735036][T16953]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1468.735060][T16953]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1468.735080][T16953]  ? clear_bhb_loop+0x60/0xb0
[ 1468.735104][T16953]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1468.735130][T16953] RIP: 0033:0x7f534d71f6c9
[ 1468.735148][T16953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1468.735166][T16953] RSP: 002b:00007f534b944038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1468.735188][T16953] RAX: ffffffffffffffda RBX: 00007f534d976180 RCX: 00007f534d71f6c9
[ 1468.735203][T16953] RDX: 0000000004004094 RSI: 00002000000001c0 RDI: 0000000000000008
[ 1468.735217][T16953] RBP: 00007f534b944090 R08: 0000000000000000 R09: 0000000000000000
[ 1468.735230][T16953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1468.735243][T16953] R13: 00007f534d976218 R14: 00007f534d976180 R15: 00007ffe046559a8
[ 1468.735277][T16953]  </TASK>
[ 1468.974229][ T5950] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[ 1469.116528][ T5950] usb 8-1: Using ep0 maxpacket: 32
[ 1469.118863][ T5950] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1469.118898][ T5950] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1469.118940][ T5950] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1469.118964][ T5950] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1469.128812][ T5950] usb 8-1: config 0 descriptor??
[ 1469.138926][ T5950] hub 8-1:0.0: USB hub found
[ 1469.195717][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1469.496763][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1469.512089][ T5950] hub 8-1:0.0: 1 port detected
[ 1470.067532][ T7241] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1470.083332][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1470.345629][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1470.376999][ T5808] Bluetooth: hci4: command tx timeout
[ 1470.418412][T16883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1470.451058][T16883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1470.495826][T16964] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1470.507703][T16964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3515'.
[ 1470.562004][ T5950] hub 8-1:0.0: activate --> -90
[ 1470.617760][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1470.621372][T10627] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[ 1470.629904][ T7241] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1470.767366][T10627] usb 5-1: Using ep0 maxpacket: 32
[ 1470.770252][T10627] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1470.770284][T10627] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1470.770321][T10627] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1470.770346][T10627] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1470.780852][T10627] usb 5-1: config 0 descriptor??
[ 1470.842394][T16964] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1470.843145][T10627] hub 5-1:0.0: USB hub found
[ 1470.849859][T16964] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1470.867131][ T5950] usb 8-1: USB disconnect, device number 9
[ 1472.118477][T10627] hub 5-1:0.0: 1 port detected
[ 1472.214039][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1472.291412][T16972] 9pnet_fd: Insufficient options for proto=fd
[ 1472.515853][ T5808] Bluetooth: hci4: command tx timeout
[ 1472.559481][ T7241] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1472.582342][T16973] 9pnet_fd: Insufficient options for proto=fd
[ 1472.843005][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1472.873678][T16976] trusted_key: encrypted_key: insufficient parameters specified
[ 1473.807749][T16977] trusted_key: encrypted_key: insufficient parameters specified
[ 1475.059962][T16883] team0: Port device team_slave_0 added
[ 1475.066235][T16272] usb 5-1: USB disconnect, device number 52
[ 1475.335442][T16883] team0: Port device team_slave_1 added
[ 1476.645464][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1476.728054][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1477.550442][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1478.021313][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1478.278850][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1478.319993][T16883] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1478.320011][T16883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1478.320037][T16883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1478.931021][T16883] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1478.931047][T16883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1478.931075][T16883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1479.179791][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1479.458418][T10988] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[ 1479.487691][ T5901] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[ 1479.929897][T10988] usb 1-1: Using ep0 maxpacket: 32
[ 1479.946215][T10988] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1479.946244][T10988] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1479.946269][T10988] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1479.946282][T10988] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1480.137083][ T5901] usb 8-1: device not accepting address 10, error -71
[ 1480.197515][T10988] usb 1-1: config 0 descriptor??
[ 1480.499218][T10988] hub 1-1:0.0: USB hub found
[ 1480.613271][T10988] hub 1-1:0.0: 1 port detected
[ 1480.691211][T16883] hsr_slave_0: entered promiscuous mode
[ 1480.692477][T16883] hsr_slave_1: entered promiscuous mode
[ 1480.693360][T16883] debugfs: 'hsr0' already exists in 'hsr'
[ 1480.693385][T16883] Cannot create hsr debugfs directory
[ 1480.867809][ T7606] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[ 1480.909243][ T7241] bridge_slave_1: left allmulticast mode
[ 1480.909273][ T7241] bridge_slave_1: left promiscuous mode
[ 1480.909758][ T7241] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1480.985852][ T7241] bridge_slave_0: left allmulticast mode
[ 1480.985909][ T7241] bridge_slave_0: left promiscuous mode
[ 1480.986278][ T7241] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1481.036929][ T7606] usb 5-1: Using ep0 maxpacket: 32
[ 1481.039534][ T7606] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1481.039568][ T7606] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1481.039608][ T7606] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1481.039635][ T7606] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1481.045017][ T7606] usb 5-1: config 0 descriptor??
[ 1481.101063][ T7606] hub 5-1:0.0: USB hub found
[ 1481.273611][T16481] hub 1-1:0.0: activate --> -90
[ 1481.404148][ T7606] hub 5-1:0.0: 1 port detected
[ 1482.086214][ T5808] Bluetooth: hci0: command 0x0406 tx timeout
[ 1482.206848][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1482.227460][ T5901] usb 1-1: USB disconnect, device number 71
[ 1482.657265][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1483.202334][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1485.215280][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1485.245983][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[ 1485.246046][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[ 1493.449136][T16480] hub 5-1:0.0: activate --> -90
[ 1494.050959][T16480] usb 5-1: USB disconnect, device number 53
[ 1494.094006][T17035] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[ 1494.094677][T17035] VFS: Can't find a romfs filesystem on dev nullb0.
[ 1494.094677][T17035] 
[ 1494.463701][T17051] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3544'.
[ 1495.847368][T10988] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[ 1496.237031][T10988] usb 1-1: Using ep0 maxpacket: 32
[ 1496.239309][T10988] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1496.239341][T10988] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1496.239378][T10988] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1496.239402][T10988] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1496.243996][T10988] usb 1-1: config 0 descriptor??
[ 1496.248474][T10988] hub 1-1:0.0: USB hub found
[ 1496.271449][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1496.373971][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1496.467677][T16480] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[ 1496.486963][T10988] hub 1-1:0.0: 1 port detected
[ 1496.565570][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1496.629737][T16480] usb 8-1: Using ep0 maxpacket: 32
[ 1496.821831][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1496.850714][T16480] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1496.850805][T16480] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1496.850849][T16480] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1496.850874][T16480] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1497.086988][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1497.137046][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1497.181276][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1497.254648][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1497.364041][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1497.619647][T16480] usb 8-1: config 0 descriptor??
[ 1497.626003][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1497.660012][T16480] hub 8-1:0.0: USB hub found
[ 1497.952008][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1498.098442][T16480] hub 8-1:0.0: 1 port detected
[ 1498.126661][T10627] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[ 1498.188937][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1499.693952][ T7606] hub 1-1:0.0: hub_ext_port_status failed (err = -32)
[ 1499.846659][T10627] usb 5-1: Using ep0 maxpacket: 32
[ 1504.867083][T10627] usb 5-1: device descriptor read/all, error -110
[ 1507.177886][T10627] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] SMP KASAN PTI
[ 1507.177918][T10627] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047]
[ 1507.177940][T10627] CPU: 0 UID: 0 PID: 10627 Comm: kworker/0:9 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1507.177966][T10627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1507.177981][T10627] Workqueue: usb_hub_wq hub_event
[ 1507.178011][T10627] RIP: 0010:usb_gadget_udc_reset+0x27/0x60
[ 1507.178041][T10627] Code: 90 90 90 f3 0f 1e fa 41 56 53 49 89 f6 48 89 fb e8 1e 57 fb fa 49 83 c6 40 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 ab 0e 5d fb 4d 8b 1e 48 89 df 2e 2e
[ 1507.178061][T10627] RSP: 0018:ffffc900105b7260 EFLAGS: 00010202
[ 1507.178080][T10627] RAX: 0000000000000008 RBX: ffff8880277c4c40 RCX: dffffc0000000000
[ 1507.178097][T10627] RDX: ffffc9001bc7b000 RSI: 000000000000866d RDI: 000000000000866e
[ 1507.178112][T10627] RBP: ffff8880324f546c R08: ffffffff8ed62f77 R09: 1ffffffff1dac5ee
[ 1507.178129][T10627] R10: dffffc0000000000 R11: fffffbfff1dac5ef R12: ffff8880277c4c40
[ 1507.178147][T10627] R13: 1ffff11004f306a1 R14: 0000000000000040 R15: 1ffff11004ef8987
[ 1507.178163][T10627] FS:  0000000000000000(0000) GS:ffff888126df9000(0000) knlGS:0000000000000000
[ 1507.178182][T10627] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1507.178198][T10627] CR2: 00007f534b0fdf98 CR3: 0000000036476000 CR4: 00000000003526f0
[ 1507.178218][T10627] Call Trace:
[ 1507.178226][T10627]  <TASK>
[ 1507.178237][T10627]  set_link_state+0x80b/0x1220
[ 1507.178265][T10627]  dummy_hub_control+0xcc0/0x1760
[ 1507.178295][T10627]  usb_hcd_submit_urb+0xde9/0x1a80
[ 1507.178327][T10627]  usb_start_wait_urb+0x114/0x4c0
[ 1507.178348][T10627]  ? irqentry_exit+0x74/0x90
[ 1507.178377][T10627]  ? __pfx_usb_start_wait_urb+0x10/0x10
[ 1507.178404][T10627]  ? usb_alloc_urb+0x80/0x150
[ 1507.178433][T10627]  ? usb_start_wait_urb+0xc/0x4c0
[ 1507.178453][T10627]  usb_control_msg+0x232/0x3e0
[ 1507.178483][T10627]  hub_port_reset+0x390/0x1740
[ 1507.178518][T10627]  hub_port_init+0x2b0/0x2800
[ 1507.178541][T10627]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1507.178570][T10627]  hub_event+0x2532/0x4a20
[ 1507.178614][T10627]  ? __pfx_hub_event+0x10/0x10
[ 1507.178637][T10627]  ? process_scheduled_works+0x9ef/0x17b0
[ 1507.178666][T10627]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1507.178694][T10627]  ? process_scheduled_works+0x9ef/0x17b0
[ 1507.178719][T10627]  ? process_scheduled_works+0x9ef/0x17b0
[ 1507.178745][T10627]  process_scheduled_works+0xae1/0x17b0
[ 1507.178782][T10627]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1507.178815][T10627]  worker_thread+0x8a0/0xda0
[ 1507.178840][T10627]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1507.178871][T10627]  ? __kthread_parkme+0x7b/0x200
[ 1507.178902][T10627]  kthread+0x711/0x8a0
[ 1507.178930][T10627]  ? __pfx_worker_thread+0x10/0x10
[ 1507.178953][T10627]  ? __pfx_kthread+0x10/0x10
[ 1507.178978][T10627]  ? rt_spin_unlock+0x150/0x200
[ 1507.179002][T10627]  ? rt_spin_unlock+0x161/0x200
[ 1507.179023][T10627]  ? __pfx_kthread+0x10/0x10
[ 1507.179052][T10627]  ret_from_fork+0x4bc/0x870
[ 1507.179079][T10627]  ? __pfx_ret_from_fork+0x10/0x10
[ 1507.179106][T10627]  ? __switch_to_asm+0x39/0x70
[ 1507.179127][T10627]  ? __switch_to_asm+0x33/0x70
[ 1507.179147][T10627]  ? __pfx_kthread+0x10/0x10
[ 1507.179178][T10627]  ret_from_fork_asm+0x1a/0x30
[ 1507.179208][T10627]  </TASK>
[ 1507.179226][T10627] Modules linked in:
[ 1507.179260][T10627] ---[ end trace 0000000000000000 ]---
[ 1507.226093][T10627] RIP: 0010:usb_gadget_udc_reset+0x27/0x60
[ 1507.226134][T10627] Code: 90 90 90 f3 0f 1e fa 41 56 53 49 89 f6 48 89 fb e8 1e 57 fb fa 49 83 c6 40 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 ab 0e 5d fb 4d 8b 1e 48 89 df 2e 2e
[ 1507.226154][T10627] RSP: 0018:ffffc900105b7260 EFLAGS: 00010202
[ 1507.226173][T10627] RAX: 0000000000000008 RBX: ffff8880277c4c40 RCX: dffffc0000000000
[ 1507.226190][T10627] RDX: ffffc9001bc7b000 RSI: 000000000000866d RDI: 000000000000866e
[ 1507.226206][T10627] RBP: ffff8880324f546c R08: ffffffff8ed62f77 R09: 1ffffffff1dac5ee
[ 1507.226224][T10627] R10: dffffc0000000000 R11: fffffbfff1dac5ef R12: ffff8880277c4c40
[ 1507.226241][T10627] R13: 1ffff11004f306a1 R14: 0000000000000040 R15: 1ffff11004ef8987
[ 1507.226257][T10627] FS:  0000000000000000(0000) GS:ffff888126df9000(0000) knlGS:0000000000000000
[ 1507.226276][T10627] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1507.226291][T10627] CR2: 000055558d7b75c8 CR3: 0000000036476000 CR4: 00000000003526f0
[ 1507.226325][T10627] Kernel panic - not syncing: Fatal exception
[ 1507.226588][T10627] Kernel Offset: disabled