last executing test programs:

1m38.969362541s ago: executing program 1 (id=928):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="401403"], 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000980)={0x44, &(0x7f0000000780)={0x20, 0x0, 0x3, "0b4cde"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f00000005c0)={0x20, 0xa, 0x3, "632506"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000003c0)={0x40, 0x1, 0x3, "02d75f"}, 0x0, 0x0, 0x0, 0x0, 0x0})

1m34.585238408s ago: executing program 1 (id=942):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1})
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}})
ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {<r4=>0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}}, 0x4004)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_usb_connect(0x1, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000380)=ANY=[@ANYRES8=r4]}]})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000003c0)="c4c37905d6040f0866bad104ec66660f388043006665660f3a0d9a0050000000b805000000b9050000000f01d926d0eb0f20e035200000000f22e0b9800000c00f3235000100000f306566dad3", 0x4d}], 0x1, 0x43, 0x0, 0x0)
request_key(&(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)='\x00', 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)

1m31.087738727s ago: executing program 1 (id=955):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mlock(&(0x7f0000a93000/0x4000)=nil, 0x4000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}])
ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000f40)=ANY=[@ANYBLOB="0100000000000000008000000700000014f7ffff0900000009000000af010000a2b9000001000000100000000800"])
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3})
write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d40)={0x578, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x550, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x1, @local, 0x4}}]}, {0x98, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @empty, 0xd96}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "722462f44843f8cdcfbf7696dd6365334b1cbe5c04ec4a20d26cb4e720e8f7ca"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d7017e586d63d13a9f7154c6c73787ee6235425fe68152cc590cc603a60797a6"}]}, {0x4}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @local}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f793f1dc8368b9309484a83ed7029bd346e38b70e680c8162763c5539c1426d3"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x2d8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "524ad0b1e0dceae5bea7c1b5029320e20f8d3b596df04ce932e5f6db615c1539"}, @WGPEER_A_ALLOWEDIPS={0x284, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x6}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xd0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x100, @remote, 0xfffffffd}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e050c75bb3599e01a1f0d47378bd76d943440925400018dabb4518b46d02f162"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0x5c, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x42}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x19}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x74, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x5, @local, 0x5}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "039265d561d14f4ab7e7b2034d7be9dc7fac6e631abbff146ea7e7dc25c38a08"}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x578}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
recvmsg(r6, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x2e)

1m28.348437565s ago: executing program 1 (id=964):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
open_tree(r1, &(0x7f0000000080)='.\x00', 0x9001)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
sendfile(r2, r2, &(0x7f0000000000)=0x2eb4, 0x2000007ff)

1m27.989762041s ago: executing program 1 (id=965):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xe472, 0x2, 0x0, 0x25a}, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000)
r2 = socket(0x840000000002, 0x3, 0xfa)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004850)
sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
getsockname$inet(r2, 0x0, &(0x7f0000002280))
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
getresuid(0x0, 0x0, 0x0)
lstat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0})
fchownat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, r5, 0x100)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50)
unshare(0x62040200)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x6, &(0x7f0000000700)=ANY=[@ANYRESHEX=r4], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000030000000084010500ac1414aa000000000000000000000000000000003200000000000000ffffffff0000000000000000000000000000000002000000000000000000000000000000ac1e0101000000000000000000000000000000002b000000000000"], 0x23c}}, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}}, 0x480c5)

1m27.173316661s ago: executing program 1 (id=968):
mkdir(&(0x7f00000000c0)='./file0\x00', 0x143)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000040)={0x80, 0x0, 0x0, 0x0})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40182, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0x6}, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8)
mknodat$loop(r7, &(0x7f0000000000)='./file0\x00', 0x4, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCPKT(r9, 0x5420, &(0x7f0000000000)=0x81)
ioctl$TCSETSF(r9, 0x5404, &(0x7f0000000080)={0x9, 0x4, 0x5, 0xe, 0x3, "0a2ad98453e9817cacbf39d84740f1eebb4e0c"})
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, 0x2e, 0x9, 0x70bd27, 0x0, {0x5}, [@nested={0x28, 0x11, 0x0, 0x1, [@generic="31f9e05e2f826cfc31dc2af824704f63dac994ce05dc7224e5479795b50d9015743a8b75"]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2)
r10 = inotify_init()
inotify_add_watch(r10, &(0x7f0000000080)='./file0\x00', 0x80000006)
setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0)

1m26.387964745s ago: executing program 32 (id=968):
mkdir(&(0x7f00000000c0)='./file0\x00', 0x143)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000040)={0x80, 0x0, 0x0, 0x0})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40182, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0x6}, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8)
mknodat$loop(r7, &(0x7f0000000000)='./file0\x00', 0x4, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCPKT(r9, 0x5420, &(0x7f0000000000)=0x81)
ioctl$TCSETSF(r9, 0x5404, &(0x7f0000000080)={0x9, 0x4, 0x5, 0xe, 0x3, "0a2ad98453e9817cacbf39d84740f1eebb4e0c"})
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, 0x2e, 0x9, 0x70bd27, 0x0, {0x5}, [@nested={0x28, 0x11, 0x0, 0x1, [@generic="31f9e05e2f826cfc31dc2af824704f63dac994ce05dc7224e5479795b50d9015743a8b75"]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2)
r10 = inotify_init()
inotify_add_watch(r10, &(0x7f0000000080)='./file0\x00', 0x80000006)
setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0)

13.455582802s ago: executing program 3 (id=1196):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xd}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000004c0)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})

12.183907743s ago: executing program 4 (id=1201):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mlock(&(0x7f0000a93000/0x4000)=nil, 0x4000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}])
ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000f40)=ANY=[@ANYBLOB="0100000000000000008000000700000014f7ffff0900000009000000af010000a2b9000001000000100000000800"])
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3})
write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d40)={0x754, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x72c, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x1, @local, 0x4}}]}, {0x98, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @empty, 0xd96}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "722462f44843f8cdcfbf7696dd6365334b1cbe5c04ec4a20d26cb4e720e8f7ca"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d7017e586d63d13a9f7154c6c73787ee6235425fe68152cc590cc603a60797a6"}]}, {0x4}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @local}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f793f1dc8368b9309484a83ed7029bd346e38b70e680c8162763c5539c1426d3"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x2d8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "524ad0b1e0dceae5bea7c1b5029320e20f8d3b596df04ce932e5f6db615c1539"}, @WGPEER_A_ALLOWEDIPS={0x284, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x6}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x1dc, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}, @WGPEER_A_ALLOWEDIPS={0x138, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x22}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010101}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9719d2edda23592449434336c7e9f3a89a1845fb283d61bcc291e3b774d85de0"}]}, {0xd0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x100, @remote, 0xfffffffd}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e050c75bb3599e01a1f0d47378bd76d943440925400018dabb4518b46d02f162"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0x5c, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x42}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x19}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x74, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x5, @local, 0x5}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "039265d561d14f4ab7e7b2034d7be9dc7fac6e631abbff146ea7e7dc25c38a08"}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x754}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
recvmsg(r6, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x2e)

9.943619524s ago: executing program 3 (id=1208):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r1, 0x0, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
socket(0x2, 0x80805, 0x0)
socket(0x1d, 0x2, 0x6)
socket$inet6_sctp(0xa, 0x1, 0x84)
unshare(0x20000400)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x3, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x1ff, 0x7fffffff}, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)='S8', 0x2}], 0x1}}], 0x1, 0x20008000)
shutdown(r0, 0x1)

9.745701034s ago: executing program 4 (id=1210):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x60b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r6 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r6, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14)

9.506783184s ago: executing program 4 (id=1212):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22883, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000880)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58)
r2 = syz_io_uring_setup(0xbd8, &(0x7f0000000640)={0x0, 0x4000312, 0x400, 0x200004, 0x257}, &(0x7f00000006c0)=<r3=>0x0, &(0x7f0000000240)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0)

9.034014848s ago: executing program 5 (id=1213):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1, 0x2, 0xfffffffc}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

8.885717708s ago: executing program 3 (id=1214):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x9, 0x7ffc0002}]})
personality(0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
creat(&(0x7f0000000240)='./file0\x00', 0x122)
setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000005380)='./file0\x00', &(0x7f00000053c0)={0x0, 0x0, 0x0, 0x0, <r7=>0x0, <r8=>0x0}, 0x4000)
r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r9)
ptrace$PTRACE_GETSIGMASK(0x420a, r9, 0x8, &(0x7f0000000780))
r10 = getegid()
r11 = socket$can_j1939(0x1d, 0x2, 0x7)
sendmmsg$unix(r1, &(0x7f0000005680)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000002c0)="79a1e0a2dfa3c7c4866aead144a55e2f2cb7adf832a11e2093198407162f0216a0517dcd8dfd5bd559b58d73adeebb55a7ff46c98725ad8c9ebb505f72fc7cf24fd385faf62818dcf461cbe09b7f2796fa825cedbb4337022315630201ec73ab9af835d03aeb", 0x66}], 0x1, &(0x7f0000001080)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000012000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r3], 0xe8, 0x40000}}, {{&(0x7f0000001180)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000004340)="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", 0x1000}], 0x1, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}, @rights={{0x34, 0x1, 0x1, [r11, r5, 0xffffffffffffffff, r3, r3, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}}, @rights={{0x20, 0x1, 0x1, [r11, r0, r2, r3]}}], 0x78, 0x810}}, {{&(0x7f00000054c0)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000005600)=[{&(0x7f0000005540)="ebc3b1b50b6067648ef6c17b1c57f931ec58d33f0475be18f4dd41cb468b70e75a6ee7d30d9c88ed8f290dd383e50aa5767dc6b563ad3847bc3c15878551d89612413d37e4cf9345b23cf3bd14ffdfdd2eb3d2a36c4c00800678a3674e9d20d0e98e41526d194fd54d09e79a7cd6f84ae309ff6cffc859080e648f0b9630016d6ae5813f06e6b47f9d1c127f883de1a3116a421a1f7435135d643e896ffa6253aca69c1e0b4e840f1eaafeef46f2bc4fcf13bac73195f5aa", 0xb8}], 0x1, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7, r10}}}], 0x38, 0x4048805}}], 0x3, 0x20000051)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=@newtfilter={0x888, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xb, 0xf}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x858, 0x2, [@TCA_BASIC_POLICE={0x854, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x10000000, 0xe8b, 0x6, 0x3, {0x9, 0x1, 0xfff, 0xfeff, 0x7, 0xe}, {0x1, 0x2, 0x8, 0x3c0, 0xbb, 0x800}, 0x8, 0x100, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x6c, 0x6, 0x6, 0x8, 0x8, 0x5, 0x0, 0x7, 0x8000, 0x3aee, 0x4, 0x4, 0x8000, 0x6, 0x69, 0x7, 0x3, 0x7, 0x0, 0x480000, 0xce0, 0xd208, 0x4, 0xc078, 0x0, 0x1, 0x8000, 0x6, 0x4, 0x7ff, 0x2, 0x4, 0x18000000, 0x5, 0x4, 0xfffffffd, 0x3, 0xfffffff8, 0x3, 0x2, 0x9, 0x400, 0xfffffff8, 0x40, 0x2, 0x2, 0xdd4, 0xb7d6, 0x4, 0x40, 0x3, 0x16d, 0x3, 0x10001, 0xf9, 0x6, 0x25, 0x9, 0x6, 0x7fffffff, 0xfffffff9, 0x7fffffff, 0x0, 0xc8c, 0x80000000, 0xfffffffa, 0x9, 0x1, 0x2, 0x0, 0x80, 0x6, 0xfffffff7, 0x1, 0x4, 0x3f5, 0x401, 0x5, 0x10001, 0xa55, 0x2, 0x0, 0x8, 0x2, 0x7fffffff, 0x2, 0x0, 0x7, 0xf4, 0x2, 0xdf9, 0x3, 0x4, 0x7b25, 0x1b, 0x5, 0x0, 0x8, 0x8001, 0xa98, 0x7, 0x8001, 0x2, 0x1000, 0x5, 0xf, 0x1, 0x4, 0xa3cd, 0xfb, 0xe6e2, 0x8, 0x80000001, 0x5, 0x6, 0xfffffffb, 0xcf4d, 0x6, 0x8000, 0x5, 0x4, 0x100, 0xfffffff8, 0x2, 0x10, 0xfe0, 0x80, 0x101, 0xc95, 0x5, 0x34, 0x4, 0x3, 0x2, 0x7, 0x6, 0x101, 0x6, 0x1, 0x4, 0x2, 0xe408, 0x6, 0x6, 0x395, 0x9, 0x3, 0x1, 0x1, 0x1e1f, 0x2, 0x0, 0x5, 0x7, 0x200, 0x7, 0x4, 0xd, 0x5, 0x9, 0xb54, 0x9, 0x180, 0x5, 0x4b6, 0x4, 0x414110a6, 0x0, 0x0, 0x8, 0xac, 0x4, 0x7fffffff, 0x2715, 0xe, 0x6, 0x8, 0x80, 0x5, 0x4, 0x1, 0x8000, 0x3, 0x3, 0x7f, 0x0, 0x25, 0xff, 0xaa8000, 0x0, 0x7, 0x9, 0x7fffffff, 0x8, 0x9, 0xfffffffa, 0x9, 0x6, 0x7, 0xffffffff, 0x8, 0xfffffffd, 0x3, 0x0, 0xa, 0x40, 0x8001, 0x2, 0x9, 0x200, 0x4, 0x401, 0xff, 0x7, 0x8, 0x9, 0x6, 0xa8f9, 0x6d, 0x1, 0x6, 0x0, 0x80000001, 0xd, 0x9, 0xd31, 0x6, 0x289df43f, 0x6, 0x7fff, 0x8, 0x4, 0x5, 0xf, 0x8, 0xc, 0x3ff, 0xffffffff, 0x3, 0x8001, 0x6, 0x9, 0x9, 0x7fff, 0x8f, 0x2, 0x8000, 0x4, 0x5, 0xca, 0x6, 0x8, 0xfffffff7, 0x2, 0xc]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x89, 0xa, 0x2, 0x8, 0x0, 0x1, 0x509, 0x3ff, 0x4, 0x4, 0x6, 0x3, 0x6, 0x8, 0xb647, 0x3, 0x20000000, 0x10, 0x7, 0x1, 0x964, 0xb03, 0x4, 0x2, 0x5f, 0x0, 0x3afa, 0xa8, 0x5, 0x4e24, 0xd747, 0x679b, 0x2, 0x5, 0x3ff, 0x3, 0x2e, 0x400, 0x5, 0x46f, 0x7fffffff, 0x4, 0xd4, 0xff, 0x7, 0x50, 0x4, 0x0, 0x10000, 0xffffffff, 0x7, 0x2, 0x7, 0xfffffff9, 0x5, 0x8, 0x80000001, 0x7, 0x9, 0xdf, 0x5, 0x3, 0xa41, 0x4, 0xfff, 0x80000001, 0x1, 0xe456, 0x8, 0x2, 0x4, 0x6a505143, 0x7fff, 0x9, 0xffe, 0x10000, 0x9, 0x6, 0x1, 0x5, 0xbcb6, 0xffff, 0xa, 0x9, 0x4, 0x0, 0x4, 0x9, 0x4, 0x2, 0xfffffffd, 0x5, 0x2, 0x7bcb, 0x5, 0x10001, 0xffffffff, 0x200, 0x9, 0x8, 0x7fffffff, 0x0, 0x0, 0x2, 0x2a, 0x9, 0x9, 0x8, 0x7, 0x6, 0x5, 0x5, 0x4, 0x400, 0x200000, 0x4, 0x1, 0x6, 0x7, 0x0, 0x7, 0x9, 0x8, 0x4, 0x8, 0x6, 0x1000, 0x8001, 0x7f, 0x20, 0x1, 0x656, 0x4d94, 0x2, 0x518, 0x3, 0x80, 0x0, 0x1, 0xa940, 0x3, 0xc, 0x2, 0x10, 0xffffff08, 0xb, 0x0, 0x2, 0x1, 0xe4, 0xfffffff8, 0x9, 0x2, 0x8, 0x3ff, 0xfffffff7, 0x3, 0x8, 0x1, 0x9, 0x4, 0x0, 0xffffffff, 0x7f, 0x3d08c4c7, 0x7f, 0x3, 0x4, 0x7, 0xfffffffd, 0x100, 0x7, 0x1, 0x7, 0xc, 0x2, 0x7, 0xffff, 0x5, 0xf9a, 0x1, 0x1, 0x728a0000, 0x2, 0x6, 0xe73, 0xffffffff, 0x4, 0x195, 0x1, 0x0, 0x3, 0x5a, 0x9, 0x9287, 0x3, 0xffffffc0, 0xe8b, 0x400, 0x0, 0xedd, 0x7, 0xa, 0x5, 0xff, 0x9d, 0x6, 0xb, 0xe84c, 0x0, 0x800, 0x9ef, 0xd, 0xfffffffe, 0xefa, 0x10001, 0xfffffeff, 0x5, 0x52b, 0x8, 0x4, 0xfffffffd, 0x4, 0xc, 0x3, 0x1, 0x8, 0x78e, 0x5, 0x4, 0x400, 0x800, 0x80, 0x200000, 0x3, 0x6, 0x1, 0x7ff, 0x800, 0x10, 0xfffffff8, 0x3, 0x6, 0x10, 0x5, 0x0, 0x7, 0xb, 0x7f, 0x7ff, 0x7ff, 0x2, 0xc1d2, 0xb, 0xfffffffd]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100000001}]}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x10}, 0x0)

8.696379995s ago: executing program 5 (id=1216):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
personality(0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = creat(0x0, 0x122)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x161842, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCSACTIVE(r3, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
ppoll(&(0x7f00000000c0)=[{r3, 0x8040}, {r3}], 0x2, 0x0, 0x0, 0x0)
write$ppp(r3, 0x0, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x10)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r6=>0x0})
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r7, &(0x7f0000000100)="fd0a0fc6dd4887c6048236609465f2e31c82c5f6be73b435a314bd11a3ccedb8ec4c8219ed81f552d8a12b9b15cdca91b058fbff98d619438ad5aaebb6ed6b54", 0xfffffffffffffe4f, 0x404c801, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r7, 0x8983, &(0x7f0000000000)={0x8, 'veth0_to_team\x00', {'batadv_slave_0\x00'}, 0x20})
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x2c, r5, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x18)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="020200020d00000000000000040000000200080008000000fd00000000000000020001000000000000000500000000a0030006000000000002000000ac1414ff0000000000000000020005000000000002"], 0x68}, 0x1, 0x7}, 0x0)

6.021337981s ago: executing program 5 (id=1219):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r2 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x80800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0)

5.860949111s ago: executing program 3 (id=1220):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mlock(&(0x7f0000a93000/0x4000)=nil, 0x4000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}])
ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000f40)=ANY=[@ANYBLOB="0100000000000000008000000700000014f7ffff0900000009000000af010000a2b9000001000000100000000800"])
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3})
write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d40)={0x754, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x72c, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x1, @local, 0x4}}]}, {0x98, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @empty, 0xd96}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "722462f44843f8cdcfbf7696dd6365334b1cbe5c04ec4a20d26cb4e720e8f7ca"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d7017e586d63d13a9f7154c6c73787ee6235425fe68152cc590cc603a60797a6"}]}, {0x4}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @local}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f793f1dc8368b9309484a83ed7029bd346e38b70e680c8162763c5539c1426d3"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x2d8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "524ad0b1e0dceae5bea7c1b5029320e20f8d3b596df04ce932e5f6db615c1539"}, @WGPEER_A_ALLOWEDIPS={0x284, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x6}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x1dc, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}, @WGPEER_A_ALLOWEDIPS={0x138, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x22}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010101}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9719d2edda23592449434336c7e9f3a89a1845fb283d61bcc291e3b774d85de0"}]}, {0xd0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x100, @remote, 0xfffffffd}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e050c75bb3599e01a1f0d47378bd76d943440925400018dabb4518b46d02f162"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0x5c, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x42}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x19}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x74, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x5, @local, 0x5}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "039265d561d14f4ab7e7b2034d7be9dc7fac6e631abbff146ea7e7dc25c38a08"}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x754}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
recvmsg(r6, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x2e)

5.653154831s ago: executing program 0 (id=1221):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x3, 0x6361, 0x7, 0xfffffff9, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x83b1, 0x7ff, 0x40, 0x3f9c79e7, 0x1, 0x4da}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40800)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x255fdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xd, 0x10}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x917}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4008000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r6, &(0x7f0000000080)="800000800000210e3000cd7a0100", 0xe, 0x10, &(0x7f00000001c0)={0x11, 0xf5, r5, 0x1, 0x51, 0x6, @broadcast}, 0x14)

5.277678285s ago: executing program 0 (id=1222):
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902"], 0x0)
syz_io_uring_setup(0x7479, &(0x7f0000000200)={0x0, 0x665, 0x0, 0x1, 0x11c}, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58)
syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x80002, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200))
r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34b}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0)

5.109125723s ago: executing program 2 (id=1223):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r2=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
fchmodat(0xffffffffffffff9c, 0x0, 0xfffffe11)
mknodat$null(0xffffffffffffff9c, 0x0, 0xb0a54e68b1cd2fdb, 0x103)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$alg(0x26, 0x5, 0x0)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)={0x1c, r5, 0x1, 0x80, 0x0, {{0x8}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0)

4.778180512s ago: executing program 2 (id=1224):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000540)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0})
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(r5, &(0x7f0000006380)={0x2020}, 0x2020)

4.469901885s ago: executing program 2 (id=1225):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x5, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0x4, 0x101}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r4)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4)

4.154193031s ago: executing program 2 (id=1226):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20040084)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x4, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000940)=@delqdisc={0x24, 0x25, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x1}, {0x0, 0xfff1}, {0xfff4, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20001005}, 0x20040080)

4.067695593s ago: executing program 4 (id=1227):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4)

3.910826846s ago: executing program 5 (id=1228):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x80, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x8001, 0x3151, 0x401, 0x6, 0xaa3c}, 0x3, 0x1, 0x6, 0x6, 0x7, 0x13, 0x11, 0xc, 0x6, 0x7f, {0x6, 0x407c, 0x7, 0x4, 0x2b52, 0x2}}}}, @TCA_RATE={0x4, 0x5, {0x0, 0x5}}]}, 0x80}, 0x1, 0x0, 0x0, 0x400dc}, 0x20000000)

3.710701986s ago: executing program 2 (id=1229):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
personality(0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = creat(0x0, 0x122)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x161842, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCSACTIVE(r3, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
ppoll(&(0x7f00000000c0)=[{r3, 0x8040}, {r3}], 0x2, 0x0, 0x0, 0x0)
write$ppp(r3, 0x0, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x10)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r6=>0x0})
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r7, &(0x7f0000000100)="fd0a0fc6dd4887c6048236609465f2e31c82c5f6be73b435a314bd11a3ccedb8ec4c8219ed81f552d8a12b9b15cdca91b058fbff98d619438ad5aaebb6ed6b54", 0xfffffffffffffe4f, 0x404c801, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r7, 0x8983, &(0x7f0000000000)={0x8, 'veth0_to_team\x00', {'batadv_slave_0\x00'}, 0x20})
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x2c, r5, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x18)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="020200020d00000000000000040000000200080008000000fd00000000000000020001000000000000000500000000a0030006000000000002000000ac1414ff0000000000000000020005000000000002"], 0x68}, 0x1, 0x7}, 0x0)

3.543557448s ago: executing program 5 (id=1230):
socket(0x1e, 0x1, 0x7)
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="000103"], 0x0, 0x0})

3.409419422s ago: executing program 4 (id=1231):
socket$nl_route(0x10, 0x3, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0x54a5, 0x400, 0x1, 0x37a}, &(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r5 = openat$kvm(0x0, 0x0, 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1)
ioctl$KVM_IOEVENTFD(r6, 0x40a0ae49, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r2, 0x47ba, 0x3e82, 0x60, 0x0, 0x0)

2.964642194s ago: executing program 0 (id=1232):
r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x1954, 0x300, 0x4}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000580)=<r2=>0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1})
io_uring_enter(r0, 0x6e2, 0x3900, 0x3, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
close(0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00')
read$FUSE(r3, &(0x7f0000006140)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x40, 0x7, 0x10}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x90, 0x0, 0xfffffffffffffffd, {0x4, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, 0x0, 0x4, 0x3, 0x400000, 0x0, 0x0, 0x400000, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r3, &(0x7f0000004140)="e605ee59ff948f02a0b50adc3c8f1b0f3a30057addb4536e05a81b6fc628c8526442afca55c2d5e2ca04610b710a0bf051d8f7cb91b68f5367faa3c8d1eb3ed17650c99d406284b538ecba9a278e67a4433502b6c5904267918cabd3ed7d8dbb09fdcd383a19b5620f3b682e46a5ad13a5e35daea7586b8ac0661a79be5086cb2b3f7a2c9d60a3299dc29cf10bddf597954de489587755d4e6cd87d6db8f1ff297c6f066bf38fb564f8d63129aadc0773d0a81b91b0a232ecda4a98c0483b33c709c702a9ef7684120f3cb268a1ec1eeff7228da793227b8de086d04ba722b58c491c3390fee4ab338ee3772adddd22990020d288acff920084cc0fa90f9cce095ecb2ec43132a589d3b1b7bf0cf518f3059c44d5ee5d18dbb8c9357eeadf569819a16b3a738206a83d98e73e0f6cdd4d72741df4e63dd7829694a3b505b294accd83c61bb3d4acfbc10e5d4180b513dacfaa08dc98115437a87419f04e1c6d105b5db1450b57bd0bfdbcd0cb15ba73ce5a213c3e0725786ff2af32d6c209f3695bfd944e403b1e3964c3f2ed0fa3ff2165be735750200808835f381d5a23b439953bfd87f04422596d35c3c9aecb0b9ef6e29f7468b0ccb05cfec9eb7c2e04408c1ed9792b8e5a426ee69ed5861486cbbf77973adc10a4ee5e37449bafb9b5502475802246929825cb1c60322f453bbb7eaf58c890fdd1ae4020b1c7d62ac0118070269cf74ef0843e4f38a51e088e9343296a1d2b3301cdbce8e357a5fe38684a800c9f4ba41a21948f5ca333d17353ac9a13c941e177d7d74ebdfd40fec527259eaa39d3b537324f7074984803046e2864e42641e9f203561ff0eaeed5b37439b54a0225884b5f884637d2f1ff101020b30b8c9a4238178db4b94357aae0c7f956c6985b655228a603665387810f10e8d8b6bfa745618dd3914101a0eccb543e0f82898fab7396d43d01b0f3d477f799b0a8469c26cd4b142a649b927a7b9b7bca66310fced1c066dfe334464d68627666f94f0fe43a60b4168273ddf2c74ab352416d451eba71181d57f27af9231a3e7d0b17a7a3e104fe387a29341e6eb82a751b5c584662ca74814a6c93ed9ea0c9ac11d74f2a2bdaded71f80e041cf886a55d35993bf45010a7f418543c4ee2f9ac8279fc1b721faa864caf3d5e96dcc6fd03b12bded14f6cb4e799bda7397c5580817473975b5bbfe4f298425160c532947292568e773c5c51ddf0deff7c8b9107e9b285f3e53f428cdc522a2589729c19bed7f0e90ea75b064e2c8b024f8634c075bbcc632f7e8bd49b87c061c2ddc94bee46a845441329c30e2c1b6c4c78afe46dc1a9ad3d31c0aee2d4fcd60f4d3454b05a3ae4922caf7f4e58a461648d5ccb8086d66783ed47fa9b6b53e49b6b4601aa5397a1e1d9f34a7038227cd242cf936b9a18d5d273dd0503aa2262f32b8462bf50b6bd9fd4e3ac20218e43fbd659ab9f9840d14f6bfc94e7cc69aa83e2abf93254d65a97c9ab16daca595670d8f0ff180bf6a38ada3484f1ae13ef91512a51afa7e3259ecfd071896ea3911a4dc6bc8a8cc008f9b65178d065fb6aa9528457ea50e9629f9f40b26f4378cb3a95f8c936444586ab530aea865850c186013391d1dd6dc695ff8737570f8f425ac33c3d5553f608678b1c46e5233b7754c1df1e6413f61fd65376921e2008f0a7a563178e53654765797428d2bd1977a38f1404858f192d6336b6242c11f4eed71158650d79ff5e660a08fb1383d3536ee323c934053d2b890d4e7d5fd3e364d5aaf9d16ca5c8eebabf13075b8a46ee321622c8bb0394d00e3fb7ad2012e86ae16dc68fe72912229151178af5d94936fdb292ff0faf952eee56d9fac72b313f30aa491b8e22531901a20a133e17a985ca1c0d1516ed5ce14a9b5b0904185da5203438fb032a212136eeb258131cb08a7c9cf518714f112634a0fe661e99a3d554b5ed46745e438c1f4d8cb1ab7d4895c4c13a55fecf803ad6bcfbfe03db949ea47faeb60bcdf9e0e54085d4e6956e261e21c140ef8032c757d33f03dfa2ca75f4aa416093d7aa527b9538682a617169b6da3ad5a9e4e2dd84c1cb5219b0bc96023597fdb70a82ff6da5c3927656367d61732a173cfe630d05c11057279e8622d9a2a4998400696caa15e2e9052035a6429ff5e81714ea0c01e383213476f69367e2fb8f8965b1d201cfee99821de8f7b716c277ea220da44f41d065e29a3baec4597e1286e517181b355074651a10ccab76acf36e26c435f3f4ec7a4b61947cc89ab078af2ec22e5528a05eb4277a51d1a597f84bb9e7c1f61a9ad27aa260ac60d64894b0b12160923034e633874426b800af1f9b4bb9db55cb64677b04d4b96db4c05260f4720b140b41ecac16ca26efced15d5deef397afb6b20f438a268873e5de4cccb0892b7ea94b1068db0d73c779012bb17c3a4af2bb48a8aca32dacfeaea3701aef6a8d318eac51aa6971429836c768da24d118fef4dc1ba2069991419db1806a3206ca992108f67a6316dbe3b8c009ac7b203fbf21a7010a0d10dc4ca5b7833b7d5c5086760c55df4eed9a227be6801ea3921409b8f31aab770bbf08107bcff1e98074af573ce4e9b6eda991e822b218c311a12669b3b048497fe676a448189937157ff406fb4705924fc693eb626b7c43fed16e0cd5c1719c915cbf97357f215edb78120da490acc3d95d5ff3d6574445df0fb76b2bfb1264c775d1011b3d42ee64ba7d60dea27f258a9fd57bc9d640bdd6bda7701445040abceb5b28c9d4877e0f2a85620fc62cf414a32569fe4f9bded7bdcb7d0f6aa90cb16129b4bf768af5095a977f6df426f438f16d3804a13f9b2941492c8daf2cfc0715c246ecd236d404b75984c9c3b0102cb8b302dda1019cfa5d9dd925e89845d90b85251953e156ce9bd5f889d2637c76c6b7867b60681d5be01251c825059be4f0cfb9789d8ba1a300bacc4b6a71e1f56c333227b8ce54f78636bfae648270d8c64b3681a7b3812fbbb60853b8d07df0c1856c8c5f2d84431763782830befb26b7a88e7aecd02d1600a05da658de59944873810f1fa12f032abae373872ae8729db6dd055c3c5c5efb4508df9116223172ec7df58a64062357ae6adb2a0313a1523986f3790503eb2ce547cfc86c7f5c8d91f320158d6f4005441f3589688ca0747a6dfdae01bd3f69ee006342f1ee326a62d9d45ac144d05e25fbe6e8f8faada6a62d8b6596b2a63d4c8a193ac6f766f7e494a449c0296bb46e0b930c4dd798a09d914faa518ac77807e9e98ec4a5b9a0848651cbd01ca1c0571ea03575902874755af79650d2aa8c6fbea2738e77de7d26962253c25cbaa2f497e8ee710a73360ae5b392ead41f90a83eb528c8994bbb7f0b3f2d22d3c1efdc5e0a5dc5e15a3c673cf0c7dd8ad4c98d6fcd077eac9648328f0f999063421fb9947751cfea199c59ee51000822a3b282f7c85d3d17910485d88f1e1f4dfd8464f8b827db9508a81734958fc17986185eaab1e0bd53da353d9bf170bc04d45a38ba094065fddc1b25c672417469e85313e8afe14d41e9ff6750c442f4e1ccf6d419fc75a7b963036b7d16164926fe4ebe049e650d829983216f04cb226c6f4dae60d01e4582e3c11fae682bc8d053f0167dd1c001627bbd099be1eb88284793f51653939a7507e25544fcdcc1d976393fc412c72aae8295ad7afb37317914f4b9fc6ecfb3968da1c313695827c6141326be5a98fe9ec22639e886b42fe432bd69cd264e6ea1a4d1e1995f2184f16f96e766306eda3ca811c3e29d58e5386be61a5695d3a2639d6502ab2c9a3b3363fdec05ffe933c4574dcf80a61f54ffa9d972305b4bcd16dedc3a068043a04e09b48db8b189a5cb578e15a494c2130590e99086da70dce30a83c3b888c29dd30475b7df13e89af9464f9c34e614717894a2368670dac9bfdf9fdd6dac019e52dc12feb4ab1397d82c4f8061087b1d6c7eadb8992fa279afd5d30915e909ce0e9854957d293c9da10f75b53fc4f69b09d698104b063a4ca1d6f52b074ae3a8c792369458594581ccdf6abb299fbe2091379c3425ad0ac2d85528c338df92e9d8b7607fd33734c7198d7135675d2a82937b821ebacba870973e60b88892d73ef75c39a6525cebf42741285832652f3d25b1c7b5889ca6fe02b11d6bbb79ee2b90c5daa5bdca244a81e0c3fc25ffeef7f5d55894d4f371f3a6fb6232831391f374905118275924e419d15ee87a34a317613de6129716766aff08becb056c714ce7cf1e585e8d591c722c3d12d2521826e0f2be0a2f30e2d3b3969f3dee34ef36152a1699fee3aef25bc365786d8ccb4f9cd6410ab7dc86a9a081438316f0caf4a384dc586a7aedf553e4126ffb85a60da368d10f9fbd8e3a79bd343b27813860835ce980c02d537c35a13e45ef4a3fc475be675091cd01fee4d04be8d23fe8e41fe0f6a1d38bbb8d5b5c7698c70402fe582665c14ff17cb6aadbad209e9326fad68491fff07acc0aeb5548fc99731b00868b5250f9e5f660fc0a966d540e2608b45ef08bc74fc65481985e9867f2aa673f847fd7138d7ebad822a3d7657d27b50c08fc16ef6df10fb6cd354ab83743762631f91f3f75c7c588eab3f7489bb89486f8254c4206f0b31311cba1695e51aab8ceea75ee3130bcb9d82fe93f6d8e4c8adddec30a1863a72a006620e40d89efdfef9c47f54ab1c4d138fd6cf9b02c1a585064f9bb418252002e96e817d903cf858c146233da56d000d6a8cbf7be2379121920b02287588881c85a69223bf3b0f5259270f19af7135cd57eacf2f1e992a187bd1bfba465da2b3451adf04e5c5562cd9890d075046b622f668c81d1d21197adbbe3eb8c8f1ec61f90ede4952e2fd06e94dd062bc66de1e18050477c1ce393bc1faaa93f67c34066c6c00c132fb84050931639d2119ea9a95b9778f9dc831f9f04530e4855984849580b3490ffba308e27b7e298dd894e1786bddd90753ad35fd74c7b2a6aee07b142e55c77d9dd454dadaee8e805f264317c871a5789e1709274a740127cb29c7dd454e92d648322e372b3b67b0c0aa38c33e9337601fd7f3107c4a01a2eca962f2078a09cc78d583f62fb0f32ac815abffa9c548926eb9ea4e572ef8cf7c8fd3ee97a1e10e4036bd0244fe1045a0b1e2006489e117208db0cbf91539f8d52d6c14eeb38be408569e29175f8814d065b6fb7679dba4200d93e25020abd6b574f759e611227de767969bc5ba179c708dbfb5bb86f1df6b18bbaef550b5aa7fc0e2027709a864191a1fa0cb078ab3e4b938c4e99fff5f74f9837f166a2f4606dfb2041239b7af835a9856153448bfeff74f56af69e5a8ad53ec28e1831aea2c9de96131f31f891fcc525afd131718b66f89e1e97f483808d3c36d975feaf3d868ac3c9e479c5bfc866f06a8835bfcc54d440553ad110e3708c1efa6220a88ac3d8d8d7ec2076ec272f7951463a68dfb7b54927681458304e867e8ba502ffe6bf92266163faa534deba891ad3a42049b1a02c2828e8ac5c6fe14a942e6845ac850c8540eb56280052f77854b5db05645e8ad42e479b65d999d6cddc4db67ad34e34f157cf41a18ac88ceea059dd618e6c2ef841962035a0f18f9a1adee2f90248d135647ef462ceebd71e2ae0f0026d04d18dcc19618419e2185f160855dd85697fe4393ee75c4a591c30c8c2dca65fc39d61adc2f46e8b90e265684ce0d3a9c51f04e24f8ccd895b43d3a09544f81b84aa5fe75a9c4ddb24b9e5cf59109835ccccbe5e2baa243bc1decf4d13480f4ee62fe65a41dd5548de686a4379d08a57149e2d4b89cad1cb14ffb4d5dcfafe31d8da5e96b47d96b1bf8706c5cc71a456e669f82f84e0ed36769c342c748d07f24af00fad7bba8386a4702e305be520d2e52f758011564d307e5254fd4aa974504f123f6e746257268084ff3df4cf0acffa8eab4dcee363f332d838c9eb7f63fc2e0d2f8dab58678d296d716090e5d5298baa18735fa605390cc1b4e9fbe33c042168d87d038f676baaf797af7d807d5544c61f7805d8a20a82c5aad40e89a3e4e0d8374cd7f9295c23984233d3804ffeaf383bc3bfead3e405f99fc009c6a7dc84c07bbd516c827f15153328abefebf42aa4d2cf82e1dedf7d1fc59648044ee4c8581b575e20a273d3f8d036ef07a87d4907700af6bcd68af263c9be8804cf8acb090824eae455a709d68ecd078a9dc7106fed7ec7ac0e9377e436d8f73efc0b4f85888f2407607b73ac76a92a24cb8d7d0ebaf42741794cec95dbb7661ab175a72684af52213abebc9d4cb61ef234372828e92b8feb4e7f55f9d545775daec28543b514612713b179b064decbeb65238f556f9288508c4547b2884405b12e87c9b8d2415b0c02741b5656e2514090c211a6a9c4d32b90ba62234b4c8b83e4dce018f466146bb13be04fa1f78b895df118d22f068e7984f2e812389b11340fb32ca77ad2e3f58bc5749f147da202c8f0aeba25fab2b33b6d56333f1319ae5df0c6b871eb3106fac0f7dd35ceec2689b764ad92593fba6afb8f03c1921296676b1baab433ff6447666d57cb169e5cad94aad0ec57b0b86eb0ebdd772311ffa621726f56481b1588334c5cb490e89073c8d80ee3b33a4842225942fa89f13a72b1bc6469fbd17c8a58b556d95488f171c613d4720e7a23ed4ebd717328b01c240d1287be9da9269d0e065bbea1b61cb3952b7d7339f54f5e8a4dadddd86cd2deb0139f02ea4d0bd731b676e3e329258314b63e39e497a83c81c76f54a08cc690e0d451151e262b51113e6160401b9653df6a8c65c24a785ee31319198d77ee858cff4860da5ff506ad605a73c981e65d9b5e451ad978e82e978728891061df07ea5986382889191fe565ede3bd949604a2b6e63177c4d3107d85a2b144578f0a6a909bfa695368178e93d13794135a9416a4566d741ed3484d600c18d5dc46383255268d3dc4323783c51e062313fdf4d1c6443fd92af9f4065212f3fc9437743c21f36641d4dcbb151a2978ea909ab8bbb92d6e5fb7a7077cbb7e146158577b3dcf1cf85cf2cfcbf7254c3e7ab34de4347c0006864ab7b914f33c33b6e0b327031bb30d974156cad137c35707fc375f5cbfcd93292cc658c3c7912e49fedb9a2b3b3bee8b05d266f81e13257293c0feb908bd7da40a75aaa60a13a7d79dca58d8231fa1c7ea5e29d79377f7e479dd1114e16edae82beb3b4e60e89f787ab06e2753318675e67a5d4aeedd0ada51f2a21991034a0c531ad38109b13a6e407973e4baaa4c45e2750ef0cd27993dcdb580223dbfa288e2d75b00a0cc6d49c8220ec1be1e285069a998bded748abbd7a537e6ec7b2040f100a08eb604321fd171edba89373070df24baece388e0df221eeed8e9b34da5fc3ed84b19dcbc8b80f806d3656e606dc3ff0e75d48795b3be06ec260dbb74a914607fb6d49c6f4f7a596f56a3d348219cd3eb0571a8cd1c46547cff12ff6647df83782314314d49426fe91bc029c964a6b61e0d1aa0e6b63b70a1aeffad4969aff320246a913cd68eb7ce1041c65b26caa784b002c9b55ef4516083559659961648e87785715063b7578e25b3e35927f4021df2c443ccc89efec425668c151d1e22fc24b9427d97a0e2d2766aa6217037a52b12e369f256059358dd71206d97bd40592209e6b4112c5241806b9d9a017ee985bb5a1396ee2f26bd6c06d8f8a13998411fe57684ec9bdf8f906d25a3aa5910e6057b9ac1c6b6d513a3a0baaff444f0a2408e95cc386e2c897f74e41ca00e14cd6c1d5170cfe5140eaa2ad3e27f400c4d6e81ed5c71faf739424c9bf938db4ce445d4dabf834c6e2a359be2ac721b90d93e1864a46153ba909df278413b249b99934c8c1bdde3fb2aa2492f88800cae33da8c2f023f0db6ad71caf80a3c387aea4571a80cef2472eb4b10474da6dd84bc77ed367f96121b557b37622d9aece01a1f3bdc794d9a16b44df3460d85ee4cc6e484f28dcaa43829ff6055181bef851b1a37dfb510589e9bda34e74b2ce6e24b36258b4190205d6b7bfd12e857f5e718ec9901cb2dee3e6723ef4585c6edb937e5a3f98b119e9e4e109e8c4ede1c96e22ffcf051d5de3df82093b731f7c42d92efb7b608013f29bace4eed00916a53e06f6728d39aedef4fc63f166cff7869146e388a9a39f1f3d5ccc953244c28d9c93ae20ca8341731dd26bd6ddbea397bda9b4906f991f43a29b36dcb538c97d67dbdc6f843c78042937a503f1e3d7afce6b26f08189cd6e9ce9011a99d4c801a23086121e3c045fadcba2c3ea11f9db831bee2e1f8874893c98e1e5869e979c9892d1fbb52c5ea8e1b677a9daa0d1e64042e518825bbbc83327576bcabb33c0c59e0856aa8c83a45e729adaabec80e10aa85ac74b543c826afdca1900d16d36a934e00dbea35e281e1c11157a9fea0dd5f9e5eea6482857c631b06486d7ac80aabfc296fc2291063c3b49db3aa6d0018ba9c727a88f2b7b1b362c7b428699cf0407658aa0c0e9498062cefbb84bdd2c375ea551c3affec2f70ba64d918ebe8fd256e81cf79ca5fae60dba5c1f45de469f8afb067f84314a6c14b4b601735fb1f8156350acdaf6708ddc96e1cc0987c39160c539330b2f30ac1085f6de02d5147680304dfd8fdb0e494f963f329dd59cd88a4f5be93ddb77f3c295525777c6b81fd0698a16445f572c96471cbcb847a5307a191c41ca6807b2b0ee0bcd9cea8b7f851bb6d6609b6e6267ba4ff3db86170e7e51087a9b67fe7b6b121b7e6f743f8561b2eb963d9b6b371bf24ee36eb9a8fe181848071fc5138fd18243ff296dfbafd9a7ad737ff993aca576114ce5bc68fef2fefb63a66623963240ab6cf9af21c32f27b278be091538be84a12e10e4be8276501993a2d6b0013043fd7127aa5eab00fec214a283d54525f00e9a005a420e3c9680de01768adbffe67f3a010f3c799f5a0023dd7800cc754037d58dc638d0f390c3e0c0dd921d62cb76ead2aeb5da97e34262d1ea243d0001ecb6c599765b5a18e9e19c9f186b15d4c874051b623076bb19ef3aa0f95a5f9963110b0f8451d470d9233597f1f263630c558635af711ce9ad58b9de914f57c4efff953cb8f6a675ad3093cf285773725414cbdd285784907f347efb05ca2e3f0c3d684b074b738fc2640ac6c804290188dd8b0b424bd013cd7465b8a6d9f78b6ce4d10fbe4e84e23a092f483ccaf41130dc80a682070749a987f74ac4a6310cec97eddaa9ca1df66306b530640302d785729b478df372741ebcf1dae4cc1255be8d6b25704880ef951a4cfa5a16f59a76d646810501c0c382b37f17b2b625db11261a129ae630c7028f4f588346f8f092be6f5cda30367e3184ca1a5df4ec5e73c2b7fed6148ff9a6f251a4e12fe34da37b75557bcd43770076878785162561f41e425bbafd3b8d3a9e10751d0e0f15aad660bd07a9b5351da429a615de99452f05dd49d71036461cb887fa7aa1c54e92f2c4b9a34936e4732d1ba21867eda2b4e1fa58b5b296e079ad1ff6eed85f80968404206ad7a50da606c361f36e4b45be4125203bcc54fc5597ec6d7b67b80348f9df6c8f335a3bb89a949dba947544051c5297b4f0680fc434efe5c62fb85c7b5c0c1d600b7d098ca0a220777ff541caf42c3445a60bca8b2e82055ac65e5654d7eb66c549f03e531503d0a70f8d16d76c92af8007f0cc373919a2ade4f6d1380ac53bd5ba0df33fc088548141db9a2ea3a32def40905011e45b8a1b8e48d9cf9b6d16a9d703520e497636ea071fe1e7a3c5b753a853d45511fd126384fca4abf52d8ec55a573ba108162141825e36eb28ac998dfb3a8915ee71bbc3708a002001b493246ef388a8fe92ac278ab3b205688c3b150d5210c60fcc240d2e4cb626ba0d6c992c7db0dfa44e09414e61b291918398723f587e20dbaeb55456c1579b3476d49148a602550f767dbcc32ca802ee26985325a9077c4c69ccf52e06d958c0f98aff4980d744433ff5aff46ec489e3971368d38b4f6d87677a2490818e2f45ff7e7025b9d94ee0e728df5251bb4b25d7a9a55a3c2a37825d309b9b10cde3581314b687419a442e73ee48dee1e36925e56f05f3b070f9f500fc579419611cb9fb311151c4af0d03bf40563de3f7673ac0ed5f3ab6a86c4b43d04ddfa196c82e34cac9247be687c429afc899600dcab617b875061159bae050a9783a82f0f54a7576c9c4797c0deff8cfb0afd70dd2e8008aa7b458aa7b0a9373cc0ad8672d8acdf808687462875d97413a329030d47915c859c4b9a85ee0295b1750540c99025e9b32376476224a71b493edabf06d788e5de4d79ec2badcf9e12f7211bf9ac797d9d18a1a1c2487ee7234e2d0cbcb5329af4d862a0a74643a2ece0f74f5488e13f1fb1de1315630e95ad87fe63fcf44663b3ad5121f612b5e528097659aa52a8256dd0f95e4c4dc1007d510df25ea45ffc8151e8715df34044a1e013b6d3f7543456a82fd3d11ac25787c5cd5e45548ee40d71d1c4fcd8f191a16a49438cf529196374f6919bd602beaefcaf688f35addb4c2b9e0a31fa166d784cf6aa8188ff1ed7272f9511a4344d1eb53d4a1a4986864b75a148b50697a145df989a6a9300eba61ab0666e3f1318d8adbfcb01ae33221905c3cc984746ffad626d74c35f207db12a1005aa065116aed65973f35359bdc866cb08a549406353d3dfddbf2120bb2bce86047c14d89217bd32427281702bcd733aae02be0abfba07198f785c8bfc2dbcb46f9bec26d7b6d3fb21686dc269631438c020cf4f63db199d7717436190783e0d7672ed7a90b25bd3f6888dbb2e58c760702312ea91535ebfa37f6d3d0ef01a5e5db590f39b44e7cc5b550d688bc28f5c26ac479164a18fddaf52a54b75e6690e65b30a4b7f86c686fef6ea6fc36e06369a09c1aa0c775f098d9e1067f844c145434c1938fbfb666b2d3cdfdfef7d122f3f3461b3fac7604b4f15b9fc979b68bf9219f1fb9c05231e0f0d17a1d5de5185362b237d18f6d3c62b4ee5fbdfb460c42c49dbe1438943634a2024dba7cd1240abb4b010e99a560668c89babc65a10fe8ce7a5d63b6e5043bc0b402acb3671582eb5254c1453c444a51a1e61f0b155ba6223db331d63e40b26d709b810987856395e9d82d74dbc14c5b18e56758cda5b9be5c8eb98a2b5d9a34fa02940def22b3823428c8c88d476cca2020a5947f96922b8a1fa0edf806a7b58b10731e753bb06a3f832e07b3c3620e4364d873ca0a37189badc3fec9ff2d9a49909ff23378b057868f07488fc2031509e10dc93676483e8cbc2275e85516732fe0ce9492c32a3368d5ed9db0e1d3f2491143597ace60059f7b93abf94be90a3a39e0a096d2cbc6b0b829d074f67ab043630044ad5e3200d2de12b15a53b5661fcc1480b536bf52760495a9080ede4d31f42b2cffda75150e8fe2f9ed7a120b24e21f63bfb58b3937e471c1b06eaae4f0b2bd0e6e6d8c76ec83d25c2129045534e407bf6752152aa69dbe180d159ce86f7876a3ba87d013fb0b430aea62f07190b4b1fdc58", 0x2000, &(0x7f0000001880)={&(0x7f00000010c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.602563744s ago: executing program 0 (id=1233):
r0 = socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000)
get_mempolicy(0x0, 0x0, 0x206, &(0x7f0000394000/0x3000)=nil, 0x3)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001cc0)={'ipvlan1\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000300)={0x11, 0x6, r2}, 0x14)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/29, 0x0, 0x8000000})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680))
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00')
dup3(r0, r4, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000000c0)={0x0, r4})

2.048094201s ago: executing program 3 (id=1234):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x38e72a2a, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6341, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0xb, 0xb}, {0x10, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x1, 0xb, 0x1, 0xfffffff8, 0xffff, 0x3, 0x1, 0x5}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24058081}, 0xc804)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.577091848s ago: executing program 2 (id=1235):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000000)=r3)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0x1000})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, 0x0, &(0x7f0000000900)=""/103, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000ac0))
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000980)=0x1)

1.493054702s ago: executing program 4 (id=1236):
r0 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0xa0000001})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

1.30831512s ago: executing program 5 (id=1237):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
personality(0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = creat(0x0, 0x122)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x161842, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCSACTIVE(r3, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
ppoll(&(0x7f00000000c0)=[{r3, 0x8040}, {r3}], 0x2, 0x0, 0x0, 0x0)
write$ppp(r3, &(0x7f0000000200), 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x10)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r6=>0x0})
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r7, &(0x7f0000000100)="fd0a0fc6dd4887c6048236609465f2e31c82c5f6be73b435a314bd11a3ccedb8ec4c8219ed81f552d8a12b9b15cdca91b058fbff98d619438ad5aaebb6ed6b54", 0xfffffffffffffe4f, 0x404c801, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r7, 0x8983, &(0x7f0000000000)={0x8, 'veth0_to_team\x00', {'batadv_slave_0\x00'}, 0x20})
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x2c, r5, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x18)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="020200020d00000000000000040000000200080008000000fd00000000000000020001000000000000000500000000a0030006000000000002000000ac1414ff0000000000000000020005000000000002"], 0x68}, 0x1, 0x7}, 0x0)

1.208340633s ago: executing program 3 (id=1238):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mlock(&(0x7f0000a93000/0x4000)=nil, 0x4000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}])
ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000f40)=ANY=[@ANYBLOB="0100000000000000008000000700000014f7ffff0900000009000000af010000a2b9000001000000100000000800"])
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3})
write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d40)={0x748, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x720, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x1, @local, 0x4}}]}, {0x98, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @empty, 0xd96}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "722462f44843f8cdcfbf7696dd6365334b1cbe5c04ec4a20d26cb4e720e8f7ca"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d7017e586d63d13a9f7154c6c73787ee6235425fe68152cc590cc603a60797a6"}]}, {0x4}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @local}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f793f1dc8368b9309484a83ed7029bd346e38b70e680c8162763c5539c1426d3"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x2d8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "524ad0b1e0dceae5bea7c1b5029320e20f8d3b596df04ce932e5f6db615c1539"}, @WGPEER_A_ALLOWEDIPS={0x284, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x6}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x1d0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}, @WGPEER_A_ALLOWEDIPS={0x12c, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x29}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010101}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9719d2edda23592449434336c7e9f3a89a1845fb283d61bcc291e3b774d85de0"}]}, {0xd0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x100, @remote, 0xfffffffd}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e050c75bb3599e01a1f0d47378bd76d943440925400018dabb4518b46d02f162"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0x5c, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x42}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x19}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x74, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x5, @local, 0x5}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "039265d561d14f4ab7e7b2034d7be9dc7fac6e631abbff146ea7e7dc25c38a08"}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x748}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
recvmsg(r6, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x2e)

447.180244ms ago: executing program 0 (id=1239):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xa4, 0x0, &(0x7f0000000600)="fd133c3e428741101fa55f46b9a0290f42dc76b9d8bf596749ae786bb67dbd4e397691d651ea0cb8de7eec0f39be0a5d621affe556d1de60c7a577b259832b13af92c92b7fc0783e9245499ff9fd877604ff56ca02a06af29160a93d71c9635fc7e5ab4cf2f0e13c08961d5f73d204ddd8831099084ad00123e671264c296f2c052bbe1bc89bdb2a3ae96928832e82de3c7856617b47223ff3c823c41bb28a9c7f7882da"})

0s ago: executing program 0 (id=1240):
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
close(r0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x1a1)
fcntl$setlease(r2, 0x400, 0x1)
r3 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0)
write$binfmt_script(r3, &(0x7f0000000340)={'#! ', './file0'}, 0xb)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000300)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x17, 0x7fffffff}]})

kernel console output (not intermixed with test programs):

.059000][ T7957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.592'.
[  264.074511][   T30] audit: type=1326 audit(1769897117.444:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7943 comm="syz.4.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09399aeb9 code=0x7ffc0000
[  264.099395][   T30] audit: type=1326 audit(1769897117.444:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7943 comm="syz.4.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc09399aeb9 code=0x7ffc0000
[  264.138086][ T7954] netdevsim netdevsim4: Falling back to sysfs fallback for: /
[  264.138086][ T7954] 
[  264.238301][ T5912] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  264.317989][ T7957] bond0: entered promiscuous mode
[  264.398102][ T7957] bond_slave_0: entered promiscuous mode
[  264.447960][ T7957] bond_slave_1: entered promiscuous mode
[  264.459894][ T7957] bond0: left promiscuous mode
[  264.465801][   T30] audit: type=1326 audit(1769897117.444:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7943 comm="syz.4.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09399aeb9 code=0x7ffc0000
[  264.488593][ T7957] bond_slave_0: left promiscuous mode
[  264.495734][ T7957] bond_slave_1: left promiscuous mode
[  264.519469][ T5912] usb 1-1: config 0 has no interfaces?
[  264.525203][ T5912] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  264.546186][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.613429][ T5912] usb 1-1: config 0 descriptor??
[  264.953236][ T7951] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  264.999866][ T5912] usb 1-1: USB disconnect, device number 22
[  265.774647][ T5899] usb 4-1: USB disconnect, device number 23
[  266.019537][ T7977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.594'.
[  266.048196][ T7977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.594'.
[  266.317666][ T5899] usb 3-1: new full-speed USB device number 24 using dummy_hcd
[  266.422248][ T7986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.597'.
[  266.431634][ T7986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.597'.
[  266.526400][ T5899] usb 3-1: unable to get BOS descriptor or descriptor too short
[  266.535258][ T5899] usb 3-1: not running at top speed; connect to a high speed hub
[  266.606210][ T5899] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  266.627763][ T5899] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  266.680412][ T5899] usb 3-1: string descriptor 0 read error: -22
[  266.686787][ T5899] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  266.716850][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.870450][ T5899] usb 3-1: 0:2 : does not exist
[  267.068763][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.599'.
[  267.544321][ T7994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.600'.
[  268.102905][ T5899] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  268.134808][ T5899] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  268.162645][ T5899] usb 3-1: 5:0: failed to get current value for ch 1 (-22)
[  268.285695][ T5899] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  268.326786][ T5899] usb 3-1: USB disconnect, device number 24
[  268.758575][ T8018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.606'.
[  268.820143][ T8020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.607'.
[  269.553829][   T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  269.630956][ T5912] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  269.717680][   T10] usb 1-1: Using ep0 maxpacket: 16
[  269.757704][   T10] usb 1-1: config 0 has no interfaces?
[  269.852060][   T10] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  269.877743][   T10] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  269.913460][   T10] usb 1-1: Manufacturer: syz
[  269.941882][   T10] usb 1-1: config 0 descriptor??
[  269.999145][ T5912] usb 5-1: Using ep0 maxpacket: 16
[  270.011318][ T5912] usb 5-1: config 0 has no interfaces?
[  270.020329][ T5912] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  270.070093][ T5912] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  270.084841][ T5912] usb 5-1: Manufacturer: syz
[  270.137301][ T5912] usb 5-1: config 0 descriptor??
[  270.647591][ T5912] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  270.858333][ T5912] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  270.873128][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.896654][ T5912] usb 2-1: config 0 descriptor??
[  270.913746][ T5912] gspca_main: spca508-2.14.0 probing 8086:0110
[  271.249472][ T5912] gspca_spca508: reg_read err -32
[  271.260211][ T5912] gspca_spca508: reg_read err -32
[  271.268835][ T5912] gspca_spca508: reg_read err -32
[  271.297007][ T5912] gspca_spca508: reg_read err -32
[  271.504598][ T5912] gspca_spca508: reg write: error -71
[  271.510341][ T5912] spca508 2-1:0.0: probe with driver spca508 failed with error -71
[  271.549020][ T5912] usb 2-1: USB disconnect, device number 19
[  271.651897][ T8056] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  272.248160][ T8062] netlink: 'syz.1.619': attribute type 12 has an invalid length.
[  272.294975][ T5943] usb 5-1: USB disconnect, device number 20
[  272.327359][ T8062] netlink: 'syz.1.619': attribute type 29 has an invalid length.
[  272.361486][ T8062] netlink: 148 bytes leftover after parsing attributes in process `syz.1.619'.
[  272.407913][ T8062] netlink: 'syz.1.619': attribute type 1 has an invalid length.
[  272.455741][   T10] usb 1-1: USB disconnect, device number 23
[  273.047906][ T8081] netlink: 'syz.1.627': attribute type 20 has an invalid length.
[  273.087147][ T8081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.627'.
[  273.117269][ T8083] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  273.217215][ T8081] netlink: 'syz.1.627': attribute type 20 has an invalid length.
[  273.232135][ T8081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.627'.
[  273.232175][ T1144] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  273.278990][ T1144] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  273.305207][ T8081] netlink: 'syz.1.627': attribute type 20 has an invalid length.
[  273.305923][ T1144] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  273.335903][ T8081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.627'.
[  273.349801][ T1144] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  273.365387][   T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  273.557959][   T10] usb 5-1: Using ep0 maxpacket: 16
[  273.563292][ T5943] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  273.583314][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  273.607643][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  273.620988][   T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  273.630444][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.651567][   T10] usb 5-1: config 0 descriptor??
[  273.732290][ T5943] usb 3-1: Using ep0 maxpacket: 16
[  273.748716][ T5943] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  273.760475][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  273.851416][ T5943] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  273.861079][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.877631][ T5943] usb 3-1: Product: syz
[  273.881979][ T5943] usb 3-1: Manufacturer: syz
[  273.886743][ T5943] usb 3-1: SerialNumber: syz
[  273.911989][ T5943] usb 3-1: config 0 descriptor??
[  273.926640][ T5943] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  273.936221][ T5943] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  274.017130][ T8100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.634'.
[  274.104106][   T10] HID 045e:07da: Invalid code 65791 type 1
[  274.151690][   T10] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0013/input/input24
[  274.207705][   T10] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  274.261963][ T8105] netlink: 104 bytes leftover after parsing attributes in process `syz.3.635'.
[  274.562348][ T5943] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  274.592264][ T5943] em28xx 3-1:0.0: Config register raw data: 0x36
[  274.648046][ T5943] em28xx 3-1:0.0: I2S Audio (3 sample rate(s))
[  274.684712][ T5943] em28xx 3-1:0.0: No AC97 audio processor
[  274.979997][ T8122] Cannot find add_set index 0 as target
[  275.004893][ T8120] Cannot find add_set index 0 as target
[  275.014558][ T8120] netdevsim netdevsim1: Direct firmware load for /
[  275.014558][ T8120]  failed with error -2
[  275.025386][ T8120] netdevsim netdevsim1: Falling back to sysfs fallback for: /
[  275.025386][ T8120] 
[  275.096678][ T5943] usb 3-1: USB disconnect, device number 25
[  275.159163][ T5912] usb 5-1: USB disconnect, device number 21
[  276.547744][ T5834] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  276.729569][ T5834] usb 5-1: Using ep0 maxpacket: 16
[  276.779572][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  276.812726][ T5834] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  276.842245][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.868683][ T5834] usb 5-1: config 0 descriptor??
[  276.997827][ T8137] warning: `syz.1.643' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  277.353088][ T5834] mcp2221 0003:04D8:00DD.0014: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[  277.648297][ T5834] usb 5-1: USB disconnect, device number 22
[  277.858237][ T5927] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  278.027627][ T5927] usb 1-1: Using ep0 maxpacket: 8
[  278.039381][ T5927] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  278.050952][ T5927] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  278.070374][ T5927] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  278.082348][ T5927] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  278.098092][ T5927] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  278.112273][ T5927] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  278.128038][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.157616][ T5886] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  278.341943][ T5886] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  278.353524][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.367012][ T5927] usb 1-1: usb_control_msg returned -32
[  278.382728][ T5886] usb 2-1: Product: syz
[  278.386995][ T5886] usb 2-1: Manufacturer: syz
[  278.397622][ T5886] usb 2-1: SerialNumber: syz
[  278.399724][ T5927] usbtmc 1-1:16.0: can't read capabilities
[  278.419914][ T5886] usb 2-1: config 0 descriptor??
[  278.456034][ T5886] gspca_main: sunplus-2.14.0 probing 055f:c230
[  278.468270][ T5912] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  278.618395][ T8161] SET target dimension over the limit!
[  278.628882][ T8161] netdevsim netdevsim2: Direct firmware load for /
[  278.628882][ T8161]  failed with error -2
[  278.641671][ T5912] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  278.668217][ T8161] netdevsim netdevsim2: Falling back to sysfs fallback for: /
[  278.668217][ T8161] 
[  278.689265][ T5912] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  278.707641][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  278.807597][ T5912] usb 5-1: Product: syz
[  278.819920][ T5912] usb 5-1: Manufacturer: syz
[  278.829849][ T5912] usb 5-1: SerialNumber: syz
[  279.069107][ T5912] usblp 5-1:1.0: usblp1: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  279.183616][   T30] kauditd_printk_skb: 30 callbacks suppressed
[  279.183639][   T30] audit: type=1326 audit(1769897133.114:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.3.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec63d9aeb9 code=0x7ffc0000
[  279.347871][   T30] audit: type=1326 audit(1769897133.114:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.3.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fec63d9aeb9 code=0x7ffc0000
[  279.471628][   T30] audit: type=1326 audit(1769897133.114:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.3.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec63d9aeb9 code=0x7ffc0000
[  279.535657][   T30] audit: type=1326 audit(1769897133.114:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.3.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec63d9aeb9 code=0x7ffc0000
[  279.609049][   T30] audit: type=1326 audit(1769897133.114:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.3.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fec63d9aeb9 code=0x7ffc0000
[  279.675192][   T30] audit: type=1326 audit(1769897133.114:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.3.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec63d9aeb9 code=0x7ffc0000
[  279.740568][   T30] audit: type=1326 audit(1769897133.124:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.3.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fec63d9aeb9 code=0x7ffc0000
[  279.823698][   T30] audit: type=1326 audit(1769897133.124:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.3.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec63d9aeb9 code=0x7ffc0000
[  279.876238][ T8171] usbtmc 1-1:16.0: usb_control_msg returned -32
[  279.885028][   T30] audit: type=1326 audit(1769897133.124:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.3.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fec63d9aeb9 code=0x7ffc0000
[  279.928552][ T5886] gspca_sunplus: reg_r err -71
[  279.933485][ T5886] sunplus 2-1:0.0: probe with driver sunplus failed with error -71
[  279.962553][   T30] audit: type=1326 audit(1769897133.124:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.3.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec63d9aeb9 code=0x7ffc0000
[  279.995076][ T5886] usb 2-1: USB disconnect, device number 20
[  280.012472][ T5912] usb 1-1: USB disconnect, device number 24
[  281.151379][ T8181] Cannot find add_set index 0 as target
[  281.160852][ T8181] netdevsim netdevsim1: Direct firmware load for /
[  281.160852][ T8181]  failed with error -2
[  281.171535][ T8181] netdevsim netdevsim1: Falling back to sysfs fallback for: /
[  281.171535][ T8181] 
[  281.234994][ T5912] usb 5-1: USB disconnect, device number 23
[  281.278028][ T5912] usblp1: removed
[  281.639234][ T5912] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  281.807624][ T5912] usb 5-1: Using ep0 maxpacket: 8
[  281.814518][ T5912] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  281.826409][ T5912] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  281.856430][ T5912] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  281.885523][ T5912] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  281.914940][ T5912] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  281.948142][ T5912] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  281.966408][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.244766][ T5912] usb 5-1: usb_control_msg returned -32
[  282.254051][ T5912] usbtmc 5-1:16.0: can't read capabilities
[  282.550823][ T8196] netlink: 104 bytes leftover after parsing attributes in process `syz.0.660'.
[  282.613354][ T8202] usbtmc 5-1:16.0: INDICATOR_PULSE returned 0
[  282.852653][   T10] usb 5-1: USB disconnect, device number 24
[  283.267174][ T8215] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[  283.444630][ T8217] netlink: 76 bytes leftover after parsing attributes in process `syz.1.668'.
[  283.612888][ T8222] capability: warning: `syz.2.670' uses 32-bit capabilities (legacy support in use)
[  283.845812][ T8228] IPv6: addrconf: prefix option has invalid lifetime
[  283.876552][ T8228] IPv6: addrconf: prefix option has invalid lifetime
[  283.972188][ T8229] Cannot find add_set index 0 as target
[  283.983951][ T8229] netdevsim netdevsim1: Direct firmware load for /
[  283.983951][ T8229]  failed with error -2
[  284.094095][ T8231] netlink: 28 bytes leftover after parsing attributes in process `syz.2.673'.
[  284.122384][ T8229] netdevsim netdevsim1: Falling back to sysfs fallback for: /
[  284.122384][ T8229] 
[  284.289998][ T8231] geneve2: entered promiscuous mode
[  284.832296][   T30] kauditd_printk_skb: 92 callbacks suppressed
[  284.832316][   T30] audit: type=1326 audit(1769897138.794:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8234 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc95999aeb9 code=0x7ffc0000
[  284.928666][   T30] audit: type=1326 audit(1769897138.794:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8234 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fc95999aeb9 code=0x7ffc0000
[  284.987761][   T30] audit: type=1326 audit(1769897138.794:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8234 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc95999aeb9 code=0x7ffc0000
[  285.029403][   T30] audit: type=1326 audit(1769897138.794:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8234 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc95999aeb9 code=0x7ffc0000
[  285.113296][   T30] audit: type=1326 audit(1769897138.794:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8234 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc95999aeb9 code=0x7ffc0000
[  285.227374][   T30] audit: type=1326 audit(1769897138.794:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8234 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc95999aeb9 code=0x7ffc0000
[  285.286121][   T30] audit: type=1326 audit(1769897138.794:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8234 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc95999aeb9 code=0x7ffc0000
[  285.327610][ T5912] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  285.382753][   T30] audit: type=1326 audit(1769897138.794:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8234 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc95999aeb9 code=0x7ffc0000
[  285.484534][   T30] audit: type=1326 audit(1769897138.794:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8234 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fc95999aeb9 code=0x7ffc0000
[  285.498281][ T5912] usb 4-1: Using ep0 maxpacket: 32
[  285.560440][ T5912] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10
[  285.581971][ T5912] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024
[  285.597873][   T30] audit: type=1326 audit(1769897138.794:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8234 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc95999aeb9 code=0x7ffc0000
[  285.604512][ T5912] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  285.743016][ T5912] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  285.755155][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  285.797607][ T5912] usb 4-1: Product: syz
[  285.815962][ T5912] usb 4-1: Manufacturer: syz
[  285.825091][ T5912] usb 4-1: SerialNumber: syz
[  285.874944][ T5912] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input25
[  286.109470][ T5912] usb 4-1: USB disconnect, device number 24
[  286.160256][ T5912] appletouch 4-1:1.0: input: appletouch disconnected
[  286.207639][ T5886] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  286.327686][ T5927] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  286.384569][ T5886] usb 5-1: Using ep0 maxpacket: 8
[  286.401286][ T5886] usb 5-1: config index 0 descriptor too short (expected 74, got 45)
[  286.417703][ T5886] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  286.433002][ T5886] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  286.444055][ T5886] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  286.462885][ T5886] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  286.473670][ T5886] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  286.498849][ T5886] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  286.508332][ T8258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.683'.
[  286.519689][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.519929][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  286.578349][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  286.605740][ T8258] 8021q: adding VLAN 0 to HW filter on device bond1
[  286.619134][ T5927] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  286.635740][ T5927] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  286.650615][ T8262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.683'.
[  286.696869][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.742522][ T5927] usb 1-1: config 0 descriptor??
[  286.756149][ T8261] 8021q: adding VLAN 0 to HW filter on device batadv1
[  286.778759][ T5886] usb 5-1: usb_control_msg returned -32
[  286.786700][ T8261] bond1: (slave batadv1): Enslaving as an active interface with an up link
[  286.794694][ T5886] usbtmc 5-1:16.0: can't read capabilities
[  287.082300][ T8262] bond1 (unregistering): (slave batadv1): Releasing backup interface
[  287.108748][ T5899] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  287.121634][ T8262] bond1 (unregistering): Released all slaves
[  287.162426][    C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  287.173720][ T8265] usbtmc 5-1:16.0: Unable to send data, error -71
[  287.198261][ T8265] usbtmc 5-1:16.0: usb_control_msg returned -32
[  287.215904][ T5912] usb 5-1: USB disconnect, device number 25
[  287.264637][ T5927] plantronics 0003:047F:FFFF.0015: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  287.300107][ T5899] usb 4-1: Using ep0 maxpacket: 8
[  287.309381][ T5899] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  287.322215][ T5899] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  287.333406][ T5899] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  287.356213][ T5899] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  287.373660][ T5899] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  287.393672][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.405295][ T5927] usb 1-1: USB disconnect, device number 25
[  287.464818][ T8266] fido_id[8266]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  287.651876][ T5899] usb 4-1: GET_CAPABILITIES returned 0
[  287.657470][ T5899] usbtmc 4-1:16.0: can't read capabilities
[  287.893624][ T5834] usb 4-1: USB disconnect, device number 25
[  290.689914][ T8323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.702'.
[  290.704159][ T8323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.702'.
[  291.223014][ T5886] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  291.517752][ T5886] usb 5-1: Using ep0 maxpacket: 16
[  291.554772][ T5886] usb 5-1: config 0 has no interfaces?
[  291.577946][ T5886] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  291.597181][ T5886] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  291.610428][ T5886] usb 5-1: Manufacturer: syz
[  291.660449][ T5886] usb 5-1: config 0 descriptor??
[  291.796421][ T8336] Cannot find add_set index 0 as target
[  291.808290][ T8336] netdevsim netdevsim1: Direct firmware load for /
[  291.808290][ T8336]  failed with error -2
[  291.819858][ T8336] netdevsim netdevsim1: Falling back to sysfs fallback for: /
[  291.819858][ T8336] 
[  292.057609][ T5927] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  292.265161][ T5927] usb 1-1: Using ep0 maxpacket: 32
[  292.291944][ T5927] usb 1-1: config 0 has no interfaces?
[  292.303316][ T5927] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  292.344824][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.432459][ T5927] usb 1-1: config 0 descriptor??
[  292.661483][ T5886] usb 1-1: USB disconnect, device number 26
[  293.343728][ T8343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.708'.
[  293.354284][ T8343] netlink: 20 bytes leftover after parsing attributes in process `syz.2.708'.
[  293.578968][ T8347] netlink: 104 bytes leftover after parsing attributes in process `syz.0.709'.
[  293.748331][ T8356] Cannot find add_set index 0 as target
[  293.757207][ T8356] netdevsim netdevsim1: Direct firmware load for /
[  293.757207][ T8356]  failed with error -2
[  293.768095][ T8356] netdevsim netdevsim1: Falling back to sysfs fallback for: /
[  293.768095][ T8356] 
[  294.392103][ T5899] usb 5-1: USB disconnect, device number 26
[  295.130046][ T8365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.713'.
[  295.139317][ T8365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.713'.
[  295.871353][ T8373] veth0: entered promiscuous mode
[  295.904902][ T8373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.716'.
[  296.075299][ T8377] netlink: 'syz.1.718': attribute type 3 has an invalid length.
[  296.140833][ T8379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  296.863100][ T8383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  297.330123][ T8392] netlink: 388 bytes leftover after parsing attributes in process `syz.0.721'.
[  297.523997][ T8396] Cannot find add_set index 0 as target
[  297.532881][ T8396] netdevsim netdevsim4: Direct firmware load for /
[  297.532881][ T8396]  failed with error -2
[  297.543585][ T8396] netdevsim netdevsim4: Falling back to sysfs fallback for: /
[  297.543585][ T8396] 
[  298.522619][ T8403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.723'.
[  298.597883][ T8403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.723'.
[  301.317627][   T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  301.558993][ T8444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  301.573067][   T10] usb 1-1: Using ep0 maxpacket: 8
[  301.583988][   T10] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[  301.599608][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.660836][   T10] usb 1-1: Product: syz
[  301.668379][   T10] usb 1-1: Manufacturer: syz
[  301.677966][   T10] usb 1-1: SerialNumber: syz
[  301.702820][ T8454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.737'.
[  301.734776][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.739'.
[  301.744401][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.739'.
[  301.764373][   T10] usb 1-1: config 0 descriptor??
[  302.034692][   T10] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  302.314415][ T5943] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  302.497593][ T5943] usb 3-1: Using ep0 maxpacket: 16
[  302.648066][ T5943] usb 3-1: config 0 has no interfaces?
[  302.692186][ T5943] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  302.747716][ T5943] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  302.780873][ T8461] gre1: entered promiscuous mode
[  302.825093][ T5943] usb 3-1: Manufacturer: syz
[  302.839984][ T8461] gre1: entered allmulticast mode
[  302.877194][ T8462] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[  302.924823][ T5943] usb 3-1: config 0 descriptor??
[  303.259040][   T10] gspca_sunplus: reg_w_riv err -71
[  303.264271][   T10] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[  303.298969][   T10] usb 1-1: USB disconnect, device number 27
[  303.992942][ T8467] netlink: 'syz.1.742': attribute type 2 has an invalid length.
[  304.174964][ T8472] netlink: 104 bytes leftover after parsing attributes in process `syz.3.743'.
[  305.128414][   T30] kauditd_printk_skb: 74 callbacks suppressed
[  305.128433][   T30] audit: type=1326 audit(1769897159.114:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.1.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41a99aeb9 code=0x7ffc0000
[  305.214114][   T30] audit: type=1326 audit(1769897159.144:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.1.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41a99aeb9 code=0x7ffc0000
[  305.268811][   T30] audit: type=1326 audit(1769897159.154:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.1.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fa41a99aeb9 code=0x7ffc0000
[  305.309154][   T30] audit: type=1326 audit(1769897159.154:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.1.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41a99aeb9 code=0x7ffc0000
[  305.359983][   T30] audit: type=1326 audit(1769897159.154:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.1.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41a99aeb9 code=0x7ffc0000
[  305.399622][   T30] audit: type=1326 audit(1769897159.154:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.1.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fa41a99aeb9 code=0x7ffc0000
[  305.440566][   T30] audit: type=1326 audit(1769897159.154:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.1.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41a99aeb9 code=0x7ffc0000
[  305.509105][   T30] audit: type=1326 audit(1769897159.154:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.1.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41a99aeb9 code=0x7ffc0000
[  305.608568][ T5943] usb 3-1: USB disconnect, device number 26
[  305.751504][   T30] audit: type=1326 audit(1769897159.154:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.1.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fa41a99aeb9 code=0x7ffc0000
[  305.792452][   T30] audit: type=1326 audit(1769897159.164:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.1.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41a99aeb9 code=0x7ffc0000
[  306.950413][ T8506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.752'.
[  306.963899][ T8506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.752'.
[  307.668377][   T10] usb 3-1: new full-speed USB device number 27 using dummy_hcd
[  307.781828][ T8525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  307.829835][ T8527] bridge0: port 3(syz_tun) entered blocking state
[  307.836746][ T8527] bridge0: port 3(syz_tun) entered disabled state
[  307.854728][ T8527] syz_tun: entered allmulticast mode
[  307.870966][   T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  307.903781][   T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  307.939536][ T8527] syz_tun: entered promiscuous mode
[  308.071158][ T8527] bridge0: port 3(syz_tun) entered blocking state
[  308.077792][ T8527] bridge0: port 3(syz_tun) entered forwarding state
[  308.085354][   T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  308.095324][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.156577][ T8527] netlink: 'syz.3.761': attribute type 10 has an invalid length.
[  308.171872][ T8527] bridge0: port 3(syz_tun) entered disabled state
[  308.178890][ T8527] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.187198][ T8527] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.282891][ T8527] bridge0: port 3(syz_tun) entered blocking state
[  308.289599][ T8527] bridge0: port 3(syz_tun) entered forwarding state
[  308.297455][ T8527] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.304732][ T8527] bridge0: port 2(bridge_slave_1) entered forwarding state
[  308.312224][ T8527] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.319473][ T8527] bridge0: port 1(bridge_slave_0) entered forwarding state
[  308.355938][   T10] usb 3-1: usb_control_msg returned -32
[  308.369375][   T10] usbtmc 3-1:16.0: can't read capabilities
[  308.445955][ T8527] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  309.042613][   T10] usb 4-1: new full-speed USB device number 26 using dummy_hcd
[  309.068064][ T8539] xt_hashlimit: size too large, truncated to 1048576
[  309.206730][   T10] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  309.221777][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.242414][   T10] usb 4-1: Product: syz
[  309.250117][   T10] usb 4-1: Manufacturer: syz
[  309.260260][   T10] usb 4-1: SerialNumber: syz
[  309.291003][   T10] usb 4-1: config 0 descriptor??
[  309.309961][   T10] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  309.954552][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.769'.
[  310.399578][ T8562] netlink: 67 bytes leftover after parsing attributes in process `syz.0.773'.
[  310.417228][ T5943] usb 3-1: USB disconnect, device number 27
[  310.546495][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.771'.
[  310.556018][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.771'.
[  310.918483][   T10] gspca_stk1135: reg_w 0x200 err -71
[  310.931952][   T10] gspca_stk1135: serial bus timeout: status=0x00
[  310.943027][   T10] gspca_stk1135: Sensor write failed
[  310.956193][   T10] gspca_stk1135: serial bus timeout: status=0x00
[  310.965864][   T10] gspca_stk1135: Sensor write failed
[  310.974114][   T10] gspca_stk1135: serial bus timeout: status=0x00
[  310.981778][   T30] kauditd_printk_skb: 210 callbacks suppressed
[  310.981796][   T30] audit: type=1326 audit(1769897164.964:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.4.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09399aeb9 code=0x7ffc0000
[  311.011576][   T10] gspca_stk1135: Sensor read failed
[  311.019078][   T10] gspca_stk1135: serial bus timeout: status=0x00
[  311.149048][   T10] gspca_stk1135: Sensor read failed
[  311.171757][   T10] gspca_stk1135: Detected sensor type unknown (0x0)
[  311.194182][   T30] audit: type=1326 audit(1769897164.964:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.4.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09399aeb9 code=0x7ffc0000
[  311.237418][   T10] gspca_stk1135: serial bus timeout: status=0x00
[  311.280487][   T10] gspca_stk1135: Sensor read failed
[  311.285968][   T10] gspca_stk1135: serial bus timeout: status=0x00
[  311.292519][   T10] gspca_stk1135: Sensor read failed
[  311.298053][   T30] audit: type=1326 audit(1769897165.084:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.4.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fc09399aeb9 code=0x7ffc0000
[  311.324789][   T10] gspca_stk1135: serial bus timeout: status=0x00
[  311.335743][   T10] gspca_stk1135: Sensor write failed
[  311.347877][   T10] gspca_stk1135: serial bus timeout: status=0x00
[  311.385346][   T30] audit: type=1326 audit(1769897165.084:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.4.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09399aeb9 code=0x7ffc0000
[  311.411311][   T10] gspca_stk1135: Sensor write failed
[  311.436217][   T10] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71
[  311.479690][   T30] audit: type=1326 audit(1769897165.084:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.4.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09399aeb9 code=0x7ffc0000
[  311.539729][   T10] usb 4-1: USB disconnect, device number 26
[  311.742252][   T30] audit: type=1326 audit(1769897165.124:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.4.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc09399aeb9 code=0x7ffc0000
[  311.796104][   T30] audit: type=1326 audit(1769897165.124:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.4.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09399aeb9 code=0x7ffc0000
[  311.889875][   T30] audit: type=1326 audit(1769897165.124:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.4.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fc09399aeb9 code=0x7ffc0000
[  311.917118][   T30] audit: type=1326 audit(1769897165.124:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.4.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09399aeb9 code=0x7ffc0000
[  312.017139][   T30] audit: type=1326 audit(1769897165.124:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.4.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc09399aeb9 code=0x7ffc0000
[  312.069043][   T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  312.230482][   T10] usb 4-1: Using ep0 maxpacket: 16
[  312.239754][   T10] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  312.581003][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.617308][   T10] usb 4-1: Product: syz
[  312.621648][   T10] usb 4-1: Manufacturer: syz
[  312.626579][   T10] usb 4-1: SerialNumber: syz
[  312.857134][   T10] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  312.892241][   T10] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  312.923380][   T10] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  312.973874][   T10] usb 4-1: media controller created
[  313.026786][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  313.127898][   T10] zl10353_read_register: readreg error (reg=127, ret==-32)
[  313.482638][ T8609] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  313.593821][ T8616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.791'.
[  313.648028][   T50] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  313.648299][ T8616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.791'.
[  313.670364][   T79] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  313.684679][   T10] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  313.687200][   T79] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  313.717031][   T10] usb 4-1: USB disconnect, device number 27
[  313.754205][   T79] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  314.295447][ T8628] kvm: kvm [8627]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xffff9031
[  314.341271][ T8628] kvm: kvm [8627]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0xffff8ba6
[  315.774005][ T8659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.803'.
[  316.267662][ T5834] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  316.518701][   T30] kauditd_printk_skb: 65 callbacks suppressed
[  316.518724][   T30] audit: type=1326 audit(1769897170.424:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.2.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc95999aeb9 code=0x7ffc0000
[  316.568384][   T30] audit: type=1326 audit(1769897170.424:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.2.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fc95999aeb9 code=0x7ffc0000
[  316.597067][ T5834] usb 1-1: config 0 has no interfaces?
[  316.605654][ T5834] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  316.615137][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.623578][ T5834] usb 1-1: Product: syz
[  316.631780][ T5834] usb 1-1: Manufacturer: syz
[  316.636817][   T30] audit: type=1326 audit(1769897170.424:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.2.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc95999aeb9 code=0x7ffc0000
[  316.660586][ T5834] usb 1-1: SerialNumber: syz
[  316.685707][   T30] audit: type=1326 audit(1769897170.424:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.2.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc95999aeb9 code=0x7ffc0000
[  316.710630][ T5834] usb 1-1: config 0 descriptor??
[  316.719973][   T30] audit: type=1326 audit(1769897170.424:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.2.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc95999aeb9 code=0x7ffc0000
[  316.743188][   T30] audit: type=1326 audit(1769897170.424:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.2.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc95999aeb9 code=0x7ffc0000
[  316.766772][   T30] audit: type=1326 audit(1769897170.424:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.2.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc95999aeb9 code=0x7ffc0000
[  316.925031][ T5834] usb 1-1: USB disconnect, device number 28
[  316.971917][   T30] audit: type=1326 audit(1769897170.424:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.2.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fc95999aeb9 code=0x7ffc0000
[  317.077898][   T30] audit: type=1326 audit(1769897170.424:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.2.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc95999aeb9 code=0x7ffc0000
[  317.149174][   T30] audit: type=1326 audit(1769897170.424:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.2.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc95999aeb9 code=0x7ffc0000
[  317.668919][ T8703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.817'.
[  317.678857][ T8703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.817'.
[  319.718093][ T8733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.829'.
[  319.740861][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.828'.
[  319.778175][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.828'.
[  319.870208][ T8738] l2tp_ppp: sess 2/0: no socket in recv
[  320.247955][ T5834] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  320.407579][ T5834] usb 4-1: Using ep0 maxpacket: 16
[  320.434110][ T5834] usb 4-1: config 0 has no interfaces?
[  320.450695][ T5834] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  320.472437][ T5834] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  320.527591][ T5834] usb 4-1: Manufacturer: syz
[  320.554426][ T5834] usb 4-1: config 0 descriptor??
[  321.644271][ T8765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.835'.
[  321.653354][ T8765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.835'.
[  321.686897][ T8764] syzkaller0: entered promiscuous mode
[  321.693623][ T8764] syzkaller0: entered allmulticast mode
[  321.792081][ T8764] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  322.471431][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  322.479179][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  323.032255][ T8780] input: syz0 as /devices/virtual/input/input26
[  323.250698][ T5912] usb 4-1: USB disconnect, device number 28
[  323.653960][ T8798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.844'.
[  323.716546][ T8798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.844'.
[  324.247583][   T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  324.378854][ T8808] loop8: detected capacity change from 0 to 7
[  324.402603][ T7449] Dev loop8: unable to read RDB block 7
[  324.418052][   T10] usb 2-1: Using ep0 maxpacket: 16
[  324.440403][ T7449]  loop8: unable to read partition table
[  324.446345][ T7449] loop8: partition table beyond EOD, truncated
[  324.458675][   T10] usb 2-1: config 0 has no interfaces?
[  324.477639][   T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  324.486836][   T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  325.116790][ T8808] Dev loop8: unable to read RDB block 7
[  325.135859][   T10] usb 2-1: Manufacturer: syz
[  325.165832][   T10] usb 2-1: config 0 descriptor??
[  325.176359][ T8808]  loop8: unable to read partition table
[  325.357754][ T8808] loop8: partition table beyond EOD, truncated
[  325.387668][ T8808] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  325.846422][ T8821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  326.414600][   T30] kauditd_printk_skb: 141 callbacks suppressed
[  326.414619][   T30] audit: type=1326 audit(1769897180.394:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.0.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874499aeb9 code=0x7ffc0000
[  326.997701][   T30] audit: type=1326 audit(1769897180.404:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.0.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874499aeb9 code=0x7ffc0000
[  327.127567][   T30] audit: type=1326 audit(1769897180.404:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.0.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f874499aeb9 code=0x7ffc0000
[  327.229734][   T30] audit: type=1326 audit(1769897180.404:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.0.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874499aeb9 code=0x7ffc0000
[  327.357620][   T30] audit: type=1326 audit(1769897180.404:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.0.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874499aeb9 code=0x7ffc0000
[  327.467333][   T30] audit: type=1326 audit(1769897180.434:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.0.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f874499aeb9 code=0x7ffc0000
[  327.528028][ T5943] usb 2-1: USB disconnect, device number 21
[  327.631657][   T30] audit: type=1326 audit(1769897180.434:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.0.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874499aeb9 code=0x7ffc0000
[  327.727613][   T30] audit: type=1326 audit(1769897180.554:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.0.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874499aeb9 code=0x7ffc0000
[  327.836940][   T30] audit: type=1326 audit(1769897180.554:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.0.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f874499aeb9 code=0x7ffc0000
[  327.877334][ T8838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.857'.
[  327.902846][ T8838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.857'.
[  327.932128][   T30] audit: type=1326 audit(1769897180.554:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.0.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874499aeb9 code=0x7ffc0000
[  329.583917][ T8867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.867'.
[  329.642057][ T8867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.867'.
[  330.345712][ T8879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.870'.
[  330.354869][ T8879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.870'.
[  331.144373][ T8886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  331.521686][ T8891] bond1: (slave netdevsim0): Enslaving as a backup interface with a down link
[  331.977290][ T8906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.876'.
[  332.106771][   T30] kauditd_printk_skb: 153 callbacks suppressed
[  332.106788][   T30] audit: type=1326 audit(1769897186.074:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8907 comm="syz.4.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09399aeb9 code=0x7ffc0000
[  332.162307][   T30] audit: type=1326 audit(1769897186.074:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8907 comm="syz.4.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09399aeb9 code=0x7ffc0000
[  332.196305][   T30] audit: type=1326 audit(1769897186.074:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8907 comm="syz.4.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fc09399aeb9 code=0x7ffc0000
[  332.233895][   T30] audit: type=1326 audit(1769897186.074:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8907 comm="syz.4.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09399aeb9 code=0x7ffc0000
[  332.257174][   T30] audit: type=1326 audit(1769897186.074:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8907 comm="syz.4.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09399aeb9 code=0x7ffc0000
[  332.282159][   T30] audit: type=1326 audit(1769897186.074:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8907 comm="syz.4.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc09399aeb9 code=0x7ffc0000
[  332.352428][   T30] audit: type=1326 audit(1769897186.074:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8907 comm="syz.4.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09399aeb9 code=0x7ffc0000
[  332.376431][   T30] audit: type=1326 audit(1769897186.074:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8907 comm="syz.4.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09399aeb9 code=0x7ffc0000
[  332.400265][   T30] audit: type=1326 audit(1769897186.074:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8907 comm="syz.4.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc09399aeb9 code=0x7ffc0000
[  332.428560][   T30] audit: type=1326 audit(1769897186.074:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8907 comm="syz.4.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09399aeb9 code=0x7ffc0000
[  333.468155][ T8930] netlink: 'syz.2.884': attribute type 9 has an invalid length.
[  333.479747][ T8930] netlink: 32 bytes leftover after parsing attributes in process `syz.2.884'.
[  333.684053][ T8935] kvm: vcpu 0: requested 6656 ns lapic timer period limited to 200000 ns
[  333.693848][ T8935] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3480241289 (13920965156 ns) > initial count (200000 ns). Using initial count to start timer.
[  334.123179][ T8949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.890'.
[  334.133173][ T8949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.890'.
[  334.520181][ T8956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  334.607601][   T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  334.647155][ T8958] netlink: 'syz.2.893': attribute type 1 has an invalid length.
[  334.927574][   T10] usb 2-1: Using ep0 maxpacket: 16
[  334.943977][   T10] usb 2-1: config 0 has no interfaces?
[  334.956032][   T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  335.057582][   T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  335.095482][   T10] usb 2-1: Manufacturer: syz
[  335.145483][   T10] usb 2-1: config 0 descriptor??
[  336.039355][ T8969] af_packet: tpacket_rcv: packet too big, clamped from 65354 to 4294967272. macoff=96
[  336.368118][   T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  336.402247][ T8982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  336.526419][ T8985] kvm: pic: non byte write
[  336.609913][   T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  336.626652][   T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  336.639192][   T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  336.649779][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  336.658293][   T10] usb 5-1: SerialNumber: syz
[  336.882246][   T10] usb 5-1: 0:2 : does not exist
[  337.022753][ T5912] usb 2-1: USB disconnect, device number 22
[  337.136484][   T10] usb 5-1: USB disconnect, device number 27
[  337.222342][ T7449] udevd[7449]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  339.264310][ T9026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.912'.
[  339.274571][ T9026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.912'.
[  339.589963][ T9033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.916'.
[  339.749875][   T30] kauditd_printk_skb: 99 callbacks suppressed
[  339.749894][   T30] audit: type=1326 audit(1769897193.724:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.4.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09399aeb9 code=0x7ffc0000
[  339.884071][   T30] audit: type=1326 audit(1769897193.724:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.4.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fc09399aeb9 code=0x7ffc0000
[  339.907689][ T5943] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  339.985015][   T30] audit: type=1326 audit(1769897193.724:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.4.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09399aeb9 code=0x7ffc0000
[  340.014084][   T30] audit: type=1326 audit(1769897193.724:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.4.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc09399aeb9 code=0x7ffc0000
[  340.100905][ T5927] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  340.156741][ T9049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  340.288227][   T30] audit: type=1326 audit(1769897193.724:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.4.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09399aeb9 code=0x7ffc0000
[  340.317981][ T5943] usb 2-1: Using ep0 maxpacket: 16
[  340.347752][   T30] audit: type=1326 audit(1769897193.724:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.4.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc09399aeb9 code=0x7ffc0000
[  340.471342][ T5927] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  340.493301][ T5927] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  340.508288][ T5943] usb 2-1: config 0 has no interfaces?
[  340.521970][   T30] audit: type=1326 audit(1769897193.724:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.4.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09399aeb9 code=0x7ffc0000
[  340.545551][ T5927] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  340.566061][ T5943] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  340.586365][ T5943] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  340.640698][ T5927] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  340.734653][ T5943] usb 2-1: Manufacturer: syz
[  340.754368][ T5943] usb 2-1: config 0 descriptor??
[  340.787550][ T5927] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  340.802487][   T30] audit: type=1326 audit(1769897193.724:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.4.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fc09399aeb9 code=0x7ffc0000
[  340.885812][ T5927] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  340.896416][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  340.911116][   T30] audit: type=1326 audit(1769897193.724:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.4.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09399aeb9 code=0x7ffc0000
[  340.939863][ T5927] usb 3-1: Product: syz
[  340.944074][ T5927] usb 3-1: Manufacturer: syz
[  341.066289][   T30] audit: type=1326 audit(1769897193.724:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.4.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc09399aeb9 code=0x7ffc0000
[  341.121081][ T5927] cdc_wdm 3-1:1.0: skipping garbage
[  341.129491][ T5927] cdc_wdm 3-1:1.0: skipping garbage
[  341.152681][ T5927] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  341.165880][ T5927] cdc_wdm 3-1:1.0: Unknown control protocol
[  341.336263][ T5927] usb 3-1: USB disconnect, device number 28
[  341.827263][ T9062] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  341.935659][ T9062] bond1 (unregistering): Released all slaves
[  342.294110][ T9067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.926'.
[  342.398022][ T9070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.925'.
[  342.445802][ T9070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.925'.
[  342.669528][ T5943] usb 2-1: USB disconnect, device number 23
[  342.938503][ T5912] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  343.173116][ T5912] usb 3-1: Using ep0 maxpacket: 16
[  343.185030][ T5912] usb 3-1: config 0 has no interfaces?
[  343.193566][ T5912] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  343.204737][ T5912] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  343.226258][ T5912] usb 3-1: Manufacturer: syz
[  343.233792][ T5912] usb 3-1: config 0 descriptor??
[  343.278285][ T9076] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3851450944 (3851450944 ns) > initial count (1115526657 ns). Using initial count to start timer.
[  343.313130][ T9076] kvm: pic: level sensitive irq not supported
[  343.313418][ T9076] kvm: pic: non byte read
[  343.324479][ T9076] kvm: pic: level sensitive irq not supported
[  343.324540][ T9076] kvm: pic: non byte read
[  343.340486][ T9076] kvm: pic: level sensitive irq not supported
[  343.340548][ T9076] kvm: pic: non byte read
[  343.360296][ T5943] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  343.561432][ T9084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  343.599631][ T5943] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  343.611549][ T5943] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  343.706485][ T5943] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  343.717964][ T5943] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  343.733461][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.754018][ T9075] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  344.512535][ T9092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  345.735651][ T9097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  346.291037][ T5886] usb 3-1: USB disconnect, device number 29
[  346.531397][ T5943] aiptek 2-1:17.0: Aiptek using 400 ms programming speed
[  346.554587][ T5943] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input27
[  346.798849][ T5943] usb 2-1: USB disconnect, device number 24
[  346.804866][    C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  347.222274][ T9120] netlink: 104 bytes leftover after parsing attributes in process `syz.2.938'.
[  347.570334][   T30] kauditd_printk_skb: 38 callbacks suppressed
[  347.570357][   T30] audit: type=1326 audit(1769897201.544:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9119 comm="syz.4.941" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc09399aeb9 code=0x0
[  347.917758][ T5912] usb 1-1: new full-speed USB device number 29 using dummy_hcd
[  348.222833][ T5912] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  348.281158][ T5912] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  348.420509][ T5912] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  348.430178][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.442061][ T5912] usb 1-1: config 0 descriptor??
[  348.453265][ T5912] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  348.462552][ T5912] dvb-usb: bulk message failed: -22 (3/0)
[  348.533015][ T5912] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  348.566569][ T5912] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  348.591103][ T5912] usb 1-1: media controller created
[  348.619903][ T5912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  348.675519][ T5912] dvb-usb: bulk message failed: -22 (6/0)
[  348.709121][ T5912] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  348.771570][ T9133] dvb-usb: bulk message failed: -22 (2/0)
[  348.830587][ T5912] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input28
[  348.857593][ T5912] dvb-usb: schedule remote query interval to 150 msecs.
[  348.880773][ T9146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.945'.
[  348.926615][ T9146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.945'.
[  348.983336][ T5912] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  349.002155][ T5912] usb 1-1: USB disconnect, device number 29
[  349.139819][ T5912] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  349.358107][ T5834] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  349.747635][ T5834] usb 4-1: Using ep0 maxpacket: 16
[  349.767552][ T5834] usb 4-1: config 0 has no interfaces?
[  349.777973][ T5834] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  349.793634][ T5834] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  349.806651][ T5834] usb 4-1: Manufacturer: syz
[  349.821636][ T5834] usb 4-1: config 0 descriptor??
[  350.268359][ T9161] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  350.661854][ T9170] GUP no longer grows the stack in syz.2.954 (9170): 200000011000-200000018000 (20000000e000)
[  350.682855][ T9170] CPU: 1 UID: 0 PID: 9170 Comm: syz.2.954 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  350.682891][ T9170] Tainted: [L]=SOFTLOCKUP
[  350.682899][ T9170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  350.682917][ T9170] Call Trace:
[  350.682928][ T9170]  <TASK>
[  350.682938][ T9170]  dump_stack_lvl+0xe8/0x150
[  350.682971][ T9170]  __get_user_pages+0x2453/0x29d0
[  350.683036][ T9170]  get_user_pages_remote+0x2f6/0xab0
[  350.683066][ T9170]  ? __pfx_mtree_load+0x10/0x10
[  350.683106][ T9170]  ? __pfx_get_user_pages_remote+0x10/0x10
[  350.683134][ T9170]  ? __access_remote_vm+0xa3/0x7f0
[  350.683168][ T9170]  ? __access_remote_vm+0x44d/0x7f0
[  350.683201][ T9170]  __access_remote_vm+0x226/0x7f0
[  350.683234][ T9170]  ? __pfx___access_remote_vm+0x10/0x10
[  350.683262][ T9170]  ? alloc_pages_noprof+0xbd/0x190
[  350.683286][ T9170]  proc_pid_cmdline_read+0x419/0x7f0
[  350.683314][ T9170]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  350.683339][ T9170]  ? rw_verify_area+0x2a6/0x4d0
[  350.683368][ T9170]  vfs_readv+0x587/0x840
[  350.683388][ T9170]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  350.683413][ T9170]  ? __pfx_vfs_readv+0x10/0x10
[  350.683443][ T9170]  ? __fget_files+0x2a/0x420
[  350.683465][ T9170]  ? __fget_files+0x3a0/0x420
[  350.683482][ T9170]  ? __fget_files+0x2a/0x420
[  350.683507][ T9170]  __x64_sys_preadv+0x19f/0x2a0
[  350.683526][ T9170]  ? __pfx___x64_sys_preadv+0x10/0x10
[  350.683551][ T9170]  do_syscall_64+0xe2/0xf80
[  350.683569][ T9170]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.683585][ T9170]  ? trace_irq_disable+0x37/0x100
[  350.683601][ T9170]  ? clear_bhb_loop+0x60/0xb0
[  350.683621][ T9170]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.683638][ T9170] RIP: 0033:0x7fc95999aeb9
[  350.683659][ T9170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  350.683674][ T9170] RSP: 002b:00007fc957bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  350.683692][ T9170] RAX: ffffffffffffffda RBX: 00007fc959c16180 RCX: 00007fc95999aeb9
[  350.683705][ T9170] RDX: 0000000000000001 RSI: 0000200000001200 RDI: 0000000000000005
[  350.683716][ T9170] RBP: 00007fc959a08c1f R08: 0000000000006a76 R09: 0000000000000000
[  350.683727][ T9170] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000
[  350.683738][ T9170] R13: 00007fc959c16218 R14: 00007fc959c16180 R15: 00007fc959d3fa48
[  350.683764][ T9170]  </TASK>
[  351.435286][ T9180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  351.727569][ T5912] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  351.906090][ T5912] usb 1-1: unable to get BOS descriptor or descriptor too short
[  351.942127][ T5912] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  351.960686][ T9186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  351.989306][ T5912] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db
[  352.010964][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.027584][ T5912] usb 1-1: Product: syz
[  352.040462][ T9186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  352.081087][ T5912] usb 1-1: Manufacturer: syz
[  352.085762][ T5912] usb 1-1: SerialNumber: syz
[  352.104656][ T5834] usb 4-1: USB disconnect, device number 29
[  352.334090][   T30] audit: type=1326 audit(1769897206.314:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9188 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec63d9aeb9 code=0x7ffc0000
[  352.436055][   T30] audit: type=1326 audit(1769897206.374:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9188 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fec63d9aeb9 code=0x7ffc0000
[  352.471366][   T30] audit: type=1326 audit(1769897206.374:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9188 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec63d9aeb9 code=0x7ffc0000
[  352.502124][   T30] audit: type=1326 audit(1769897206.374:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9188 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec63d9aeb9 code=0x7ffc0000
[  352.530868][ T5912] usb 1-1: reset high-speed USB device number 30 using dummy_hcd
[  352.541562][   T30] audit: type=1326 audit(1769897206.384:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9188 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fec63d9aeb9 code=0x7ffc0000
[  352.565969][   T30] audit: type=1326 audit(1769897206.384:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9188 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec63d9aeb9 code=0x7ffc0000
[  352.620260][   T30] audit: type=1326 audit(1769897206.384:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9188 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec63d9aeb9 code=0x7ffc0000
[  352.646202][   T30] audit: type=1326 audit(1769897206.384:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9188 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fec63d9aeb9 code=0x7ffc0000
[  352.681942][   T30] audit: type=1326 audit(1769897206.384:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9188 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec63d9aeb9 code=0x7ffc0000
[  352.764291][   T30] audit: type=1326 audit(1769897206.384:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9188 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec63d9aeb9 code=0x7ffc0000
[  352.854791][   T30] audit: type=1326 audit(1769897206.394:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9188 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fec63d9aeb9 code=0x7ffc0000
[  352.914084][   T30] audit: type=1326 audit(1769897206.394:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9188 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec63d9aeb9 code=0x7ffc0000
[  352.963562][   T30] audit: type=1326 audit(1769897206.394:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9188 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec63d9aeb9 code=0x7ffc0000
[  353.012917][   T30] audit: type=1326 audit(1769897206.394:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9188 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fec63d9aeb9 code=0x7ffc0000
[  353.059678][   T30] audit: type=1326 audit(1769897206.394:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9188 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec63d9aeb9 code=0x7ffc0000
[  353.137026][   T30] audit: type=1326 audit(1769897206.394:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9188 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec63d9aeb9 code=0x7ffc0000
[  353.237604][ T5912] usb 1-1: device descriptor read/64, error -71
[  353.257350][ T9199] netlink: 104 bytes leftover after parsing attributes in process `syz.2.961'.
[  353.496328][ T5912] usb 1-1: reset high-speed USB device number 30 using dummy_hcd
[  353.523203][ T5912] usb 1-1: device reset changed ep0 maxpacket size!
[  353.541863][ T5912] usb 1-1: USB disconnect, device number 30
[  353.567659][ T5943] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  353.707776][ T5912] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  353.718602][ T5943] usb 4-1: Using ep0 maxpacket: 32
[  353.751566][ T5943] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 214, changing to 11
[  353.776658][ T5943] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  353.805302][ T5943] usb 4-1: config 0 interface 0 has no altsetting 0
[  353.840178][ T5943] usb 4-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00
[  353.865764][ T5943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.915962][ T5912] usb 1-1: Using ep0 maxpacket: 8
[  353.925035][ T5943] usb 4-1: config 0 descriptor??
[  353.958894][ T5912] usb 1-1: unable to get BOS descriptor or descriptor too short
[  353.975696][ T5912] usb 1-1: unable to read config index 0 descriptor/start: -71
[  353.987270][ T5912] usb 1-1: can't read configurations, error -71
[  354.622753][ T5943] input: HID 28bd:0933 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:0933.0016/input/input29
[  354.669081][ T5943] uclogic 0003:28BD:0933.0016: input,hidraw0: USB HID v5f.b2 Mouse [HID 28bd:0933] on usb-dummy_hcd.3-1/input0
[  354.874498][ T5943] usb 4-1: USB disconnect, device number 30
[  355.223427][ T9217] fido_id[9217]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  355.846201][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  355.856415][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  355.996846][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  356.004934][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  356.085638][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  358.150805][ T5839] Bluetooth: hci3: command tx timeout
[  358.826188][ T9252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.978'.
[  359.040198][ T9262] syzkaller0: entered promiscuous mode
[  359.056198][ T9262] syzkaller0: entered allmulticast mode
[  359.182897][ T9236] chnl_net:caif_netlink_parms(): no params data found
[  359.264726][ T9268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.984'.
[  359.628454][ T9236] bridge0: port 1(bridge_slave_0) entered blocking state
[  359.653525][ T9236] bridge0: port 1(bridge_slave_0) entered disabled state
[  359.662717][ T9236] bridge_slave_0: entered allmulticast mode
[  359.679526][ T9236] bridge_slave_0: entered promiscuous mode
[  359.690489][ T9236] bridge0: port 2(bridge_slave_1) entered blocking state
[  359.706442][ T9236] bridge0: port 2(bridge_slave_1) entered disabled state
[  359.727180][ T9236] bridge_slave_1: entered allmulticast mode
[  359.743558][ T9236] bridge_slave_1: entered promiscuous mode
[  359.968288][ T9236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  359.986655][ T9236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  360.071557][ T9236] team0: Port device team_slave_0 added
[  360.090701][ T9236] team0: Port device team_slave_1 added
[  360.227691][ T5839] Bluetooth: hci3: command tx timeout
[  360.269066][ T9236] batman_adv: batadv0: Adding interface: batadv_slave_0
[  360.284544][ T9236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  360.389937][ T9236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  360.522052][ T9236] batman_adv: batadv0: Adding interface: batadv_slave_1
[  360.597417][ T9236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  360.629565][ T9236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  360.677005][ T9290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  361.053620][ T9236] hsr_slave_0: entered promiscuous mode
[  361.065561][ T9236] hsr_slave_1: entered promiscuous mode
[  361.075189][ T9236] debugfs: 'hsr0' already exists in 'hsr'
[  361.085545][ T9236] Cannot create hsr debugfs directory
[  361.742698][ T9236] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  361.756880][ T9236] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  361.781735][ T9236] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  361.801465][ T9236] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  361.817927][ T5886] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  361.982920][ T5886] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  362.006131][ T5886] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  362.033589][ T5886] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  362.042470][ T9236] 8021q: adding VLAN 0 to HW filter on device bond0
[  362.055189][ T5886] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  362.082313][ T5886] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  362.121283][ T5886] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  362.121571][ T9236] 8021q: adding VLAN 0 to HW filter on device team0
[  362.146660][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  362.177953][ T5886] usb 1-1: Product: syz
[  362.191984][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state
[  362.199486][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  362.218664][ T5886] usb 1-1: Manufacturer: syz
[  362.241376][ T5886] cdc_wdm 1-1:1.0: skipping garbage
[  362.246655][ T5886] cdc_wdm 1-1:1.0: skipping garbage
[  362.266674][   T79] bridge0: port 2(bridge_slave_1) entered blocking state
[  362.274007][   T79] bridge0: port 2(bridge_slave_1) entered forwarding state
[  362.299339][ T5886] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  362.312302][ T5886] cdc_wdm 1-1:1.0: Unknown control protocol
[  362.327951][ T5839] Bluetooth: hci3: command tx timeout
[  362.480713][ T9236] 8021q: adding VLAN 0 to HW filter on device batadv0
[  362.557134][ T9236] veth0_vlan: entered promiscuous mode
[  362.585849][ T9236] veth1_vlan: entered promiscuous mode
[  362.711796][ T9236] veth0_macvtap: entered promiscuous mode
[  362.745095][ T9236] veth1_macvtap: entered promiscuous mode
[  362.816949][ T9236] batman_adv: batadv0: Interface activated: batadv_slave_0
[  362.860754][ T9236] batman_adv: batadv0: Interface activated: batadv_slave_1
[  363.017288][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  363.073345][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  363.113546][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  363.153847][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  363.254441][ T5899] usb 1-1: USB disconnect, device number 33
[  363.465537][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  363.496764][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  363.860913][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  363.893941][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  364.388150][ T5839] Bluetooth: hci3: command tx timeout
[  365.506732][ T9348] netlink: 4 bytes leftover after parsing attributes in process `syz.5.970'.
[  365.521704][ T9348] netlink: 4 bytes leftover after parsing attributes in process `syz.5.970'.
[  365.845163][ T9341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  365.880039][ T9346] binder: BINDER_SET_CONTEXT_MGR already set
[  365.886336][ T9346] binder: 9345:9346 ioctl 4018620d 2000000002c0 returned -16
[  366.047708][ T5834] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  366.207584][ T5834] usb 6-1: Using ep0 maxpacket: 16
[  366.235881][ T5834] usb 6-1: config 0 has no interfaces?
[  366.247025][ T5834] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  366.260268][ T5834] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  366.295308][ T5834] usb 6-1: Manufacturer: syz
[  366.413909][ T5834] usb 6-1: config 0 descriptor??
[  366.717647][ T5912] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  367.020787][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  367.035427][ T5912] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  367.198260][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.208576][ T5912] usb 3-1: config 0 descriptor??
[  367.489378][ T5912] usbhid 3-1:0.0: can't add hid device: -71
[  367.526630][ T5912] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  367.556033][ T5912] usb 3-1: USB disconnect, device number 30
[  368.047615][ T5912] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  368.217739][ T5834] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  368.230205][ T5912] usb 3-1: Using ep0 maxpacket: 32
[  368.238409][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  368.256268][ T5912] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  368.310144][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.346232][ T5912] usb 3-1: config 0 descriptor??
[  368.367567][ T5834] usb 4-1: Using ep0 maxpacket: 16
[  368.376940][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  368.440750][ T5834] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  368.444177][ T5912] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  368.485205][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.499248][ T5912] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  368.539382][ T5834] usb 4-1: Product: syz
[  368.558087][ T5834] usb 4-1: Manufacturer: syz
[  368.576293][ T5834] usb 4-1: SerialNumber: syz
[  368.593820][ T5834] usb 4-1: config 0 descriptor??
[  368.632194][ T5834] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  368.662130][ T5834] em28xx 4-1:0.0: DVB interface 0 found: bulk
[  368.670665][    C1] ldusb 3-1:0.0: Ring buffer overflow, 8 bytes dropped
[  368.889421][ T5886] usb 6-1: USB disconnect, device number 2
[  368.939724][ T5912] hid-generic 0080:0003:0001.0017: unknown main item tag 0x0
[  368.963658][ T5912] hid-generic 0080:0003:0001.0017: unknown main item tag 0x0
[  368.996700][    C0] ldusb 3-1:0.0: Ring buffer overflow, 8 bytes dropped
[  369.020837][ T5912] hid-generic 0080:0003:0001.0017: hidraw0: <UNKNOWN> HID v0.03 Device [syz0] on syz1
[  369.169128][ T9378] fido_id[9378]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  369.262008][ T5834] em28xx 4-1:0.0: chip ID is em2765
[  369.373622][ T9382] binder: 9381:9382 ioctl c0306201 200000000dc0 returned -14
[  369.886747][ T5834] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  369.907555][ T5834] em28xx 4-1:0.0: board has no eeprom
[  370.121112][ T5886] usb 3-1: USB disconnect, device number 31
[  370.140952][ T5886] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  370.208997][ T5834] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  370.216913][ T5834] em28xx 4-1:0.0: dvb set to bulk mode.
[  370.238044][   T10] em28xx 4-1:0.0: Binding DVB extension
[  370.276362][ T5834] usb 4-1: USB disconnect, device number 31
[  370.315457][ T5834] em28xx 4-1:0.0: Disconnecting em28xx
[  370.426420][   T10] em28xx 4-1:0.0: Registering input extension
[  370.451831][ T5834] em28xx 4-1:0.0: Closing input extension
[  370.542455][ T5834] em28xx 4-1:0.0: Freeing device
[  370.650822][ T9401] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1020'.
[  370.773326][ T9397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  370.922883][ T9407] binder: BINDER_SET_CONTEXT_MGR already set
[  370.930846][ T9407] binder: 9406:9407 ioctl 4018620d 200000004a80 returned -16
[  370.940581][ T9407] binder: 9406:9407 ioctl c018620c 200000000240 returned -1
[  371.339733][ T5927] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  371.497631][ T5927] usb 3-1: Using ep0 maxpacket: 16
[  371.517296][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  371.555635][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  371.588318][ T5927] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  371.617051][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.657778][ T5927] usb 3-1: config 0 descriptor??
[  372.098278][ T5927] kye 0003:0458:5016.0018: control desc unexpectedly large
[  372.125642][ T5927] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0018/input/input31
[  372.221705][ T5927] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0018/input/input32
[  372.268503][ T5886] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  372.297730][ T5927] kye 0003:0458:5016.0018: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0
[  372.442705][ T5886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  372.466211][ T5886] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  372.503233][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  372.535601][ T5886] usb 4-1: config 0 descriptor??
[  372.553073][ T5886] pwc: Askey VC010 type 2 USB webcam detected.
[  372.833298][ T9424] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1027'.
[  372.976286][ T5886] pwc: recv_control_msg error -32 req 02 val 2b00
[  373.004258][ T5886] pwc: recv_control_msg error -32 req 02 val 2700
[  373.033941][ T5886] pwc: recv_control_msg error -32 req 02 val 2c00
[  373.062644][ T5886] pwc: recv_control_msg error -32 req 04 val 1000
[  373.084580][ T5886] pwc: recv_control_msg error -32 req 04 val 1300
[  373.103249][ T5886] pwc: recv_control_msg error -32 req 04 val 1400
[  373.130496][ T5886] pwc: recv_control_msg error -32 req 02 val 2000
[  373.147731][ T5886] pwc: recv_control_msg error -32 req 02 val 2100
[  373.241731][    C0] kye 0003:0458:5016.0018: usb_submit_urb(ctrl) failed: -1
[  373.377238][ T5886] pwc: recv_control_msg error -71 req 02 val 2500
[  373.386714][ T5886] pwc: recv_control_msg error -71 req 02 val 2400
[  373.396069][ T5886] pwc: recv_control_msg error -71 req 02 val 2600
[  373.403290][ T5886] pwc: recv_control_msg error -71 req 02 val 2900
[  373.410444][ T5886] pwc: recv_control_msg error -71 req 02 val 2800
[  373.417933][ T5886] pwc: recv_control_msg error -71 req 04 val 1100
[  373.425262][ T5886] pwc: recv_control_msg error -71 req 04 val 1200
[  373.445407][ T5886] pwc: Registered as video103.
[  373.457790][ T5886] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input33
[  373.504633][ T5886] usb 4-1: USB disconnect, device number 32
[  373.522239][ T9436] Cannot find add_set index 0 as target
[  373.531558][ T9436] netdevsim netdevsim0: Direct firmware load for /
[  373.531558][ T9436]  failed with error -2
[  373.542629][ T9436] netdevsim netdevsim0: Falling back to sysfs fallback for: /
[  373.542629][ T9436] 
[  374.107912][ T5927] usb 3-1: USB disconnect, device number 32
[  374.253625][ T9450] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1035'.
[  374.728432][ T9468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  374.921854][ T9472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  375.025757][ T9473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  377.989943][ T9509] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  378.334653][ T9517] Cannot find add_set index 0 as target
[  378.412172][ T9520] netdevsim netdevsim5: Direct firmware load for /
[  378.412172][ T9520]  failed with error -2
[  378.433206][ T9520] netdevsim netdevsim5: Falling back to sysfs fallback for: /
[  378.433206][ T9520] 
[  378.827825][ T9527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  378.882996][ T9512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  379.695842][ T9543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  382.430094][ T5886] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  382.697123][ T5886] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[  382.758626][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  382.927874][ T5886] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  382.937006][ T5886] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  382.945351][ T5886] usb 5-1: Manufacturer: syz
[  382.962421][ T5886] usb 5-1: config 0 descriptor??
[  383.048349][ T9572] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1064'.
[  383.417524][ T5886] rc_core: IR keymap rc-hauppauge not found
[  383.424080][ T5886] Registered IR keymap rc-empty
[  383.451399][ T5886] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  383.528039][ T5886] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input34
[  383.608148][    C0] igorplugusb 5-1:0.0: Error: urb status = -32
[  383.708964][ T5834] usb 5-1: USB disconnect, device number 28
[  383.937989][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  383.963568][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  385.019389][ T9594] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.026855][ T9594] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.350759][ T9604] loop5: detected capacity change from 0 to 7
[  385.368771][ T9605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  385.395728][ T9604] Dev loop5: unable to read RDB block 7
[  385.420125][ T9604]  loop5: unable to read partition table
[  385.444284][ T9604] loop5: partition table beyond EOD, truncated
[  385.470473][ T9604] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  385.812013][ T9594] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  385.871973][ T9594] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  386.411272][ T9594] hsr1: left allmulticast mode
[  386.421658][ T9594] dummy0: left allmulticast mode
[  386.433924][ T9594] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  386.472629][ T9594] geneve2: left promiscuous mode
[  386.574871][ T3524] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  386.615815][ T3524] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  386.646354][ T3524] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  386.697567][ T3524] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  386.751030][ T3524] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  386.793172][ T3524] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  386.846228][ T3524] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  386.929836][ T3524] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  387.086639][ T9637] xt_hashlimit: size too large, truncated to 1048576
[  387.106479][ T9641] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  387.175078][ T9639] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  387.385435][ T9647] Cannot find add_set index 0 as target
[  387.419088][ T9647] netdevsim netdevsim5: Direct firmware load for /
[  387.419088][ T9647]  failed with error -2
[  387.457108][ T9647] netdevsim netdevsim5: Falling back to sysfs fallback for: /
[  387.457108][ T9647] 
[  388.247642][ T9627] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  388.369584][ T9662] syzkaller0: entered promiscuous mode
[  388.378079][ T9662] syzkaller0: entered allmulticast mode
[  388.457770][ T9627] usb 3-1: Using ep0 maxpacket: 8
[  388.481357][ T9627] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  388.534700][ T9627] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  388.571110][ T9627] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00
[  388.647552][ T9627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.742431][ T9627] usb 3-1: config 0 descriptor??
[  389.441599][ T9627] usbhid 3-1:0.0: can't add hid device: -71
[  389.457948][ T9627] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  389.472477][ T9627] usb 3-1: USB disconnect, device number 33
[  390.390124][ T9693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1092'.
[  390.511026][ T9694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1092'.
[  390.950285][ T9627] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  391.156180][ T9627] usb 3-1: Using ep0 maxpacket: 16
[  391.186046][ T9627] usb 3-1: config 0 has no interfaces?
[  391.198887][ T9627] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  391.227626][ T9627] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  391.256745][ T9627] usb 3-1: Manufacturer: syz
[  391.435150][ T9627] usb 3-1: config 0 descriptor??
[  392.007570][ T9626] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  392.197554][ T9626] usb 5-1: Using ep0 maxpacket: 8
[  392.231998][ T9626] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  392.266414][ T9626] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  392.344913][ T9626] pvrusb2: Hardware description: Terratec Grabster AV400
[  392.380330][ T9626] pvrusb2: **********
[  392.404832][ T9626] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  392.457744][ T9626] pvrusb2: Important functionality might not be entirely working.
[  392.485901][ T9626] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  392.532015][ T9626] pvrusb2: **********
[  392.541718][ T2345] pvrusb2: Invalid write control endpoint
[  392.704055][ T2345] pvrusb2: Invalid write control endpoint
[  392.750402][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  392.809437][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  392.851591][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  392.890307][ T2345] pvrusb2: Device being rendered inoperable
[  392.922269][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  392.931313][ T5927] usb 5-1: USB disconnect, device number 29
[  392.960239][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  392.999271][ T2345] pvrusb2: Attached sub-driver cx25840
[  393.032994][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  393.070513][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  393.700681][ T5927] usb 3-1: USB disconnect, device number 34
[  394.207647][ T9730] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1100'.
[  394.468948][ T9736] SET target dimension over the limit!
[  394.654312][ T9736] netdevsim netdevsim2: Direct firmware load for /
[  394.654312][ T9736]  failed with error -2
[  394.718512][ T9736] netdevsim netdevsim2: Falling back to sysfs fallback for: /
[  394.718512][ T9736] 
[  395.368512][ T9739] kvm: requested 23466 ns i8254 timer period limited to 200000 ns
[  395.417792][ T9739] kvm: requested 138285 ns i8254 timer period limited to 200000 ns
[  395.457087][ T9739] kvm: requested 117333 ns i8254 timer period limited to 200000 ns
[  395.498007][ T9739] kvm: requested 157562 ns i8254 timer period limited to 200000 ns
[  395.541215][ T9739] kvm: requested 84647 ns i8254 timer period limited to 200000 ns
[  395.575299][ T9739] kvm: requested 88838 ns i8254 timer period limited to 200000 ns
[  395.623166][ T9739] kvm: requested 102247 ns i8254 timer period limited to 200000 ns
[  395.665383][ T9739] kvm: requested 173485 ns i8254 timer period limited to 200000 ns
[  395.736404][ T9739] kvm: requested 21790 ns i8254 timer period limited to 200000 ns
[  395.790269][ T9739] kvm: requested 178514 ns i8254 timer period limited to 200000 ns
[  396.295269][   T30] kauditd_printk_skb: 65 callbacks suppressed
[  396.295289][   T30] audit: type=1326 audit(1769897250.274:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.4.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09399aeb9 code=0x7ffc0000
[  396.371741][   T30] audit: type=1326 audit(1769897250.274:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.4.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09399aeb9 code=0x7ffc0000
[  396.420039][   T30] audit: type=1326 audit(1769897250.354:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.4.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc09399ab4b code=0x7ffc0000
[  396.457623][   T30] audit: type=1326 audit(1769897250.354:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.4.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc09399ab4b code=0x7ffc0000
[  396.499928][   T30] audit: type=1326 audit(1769897250.354:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.4.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc09399ab4b code=0x7ffc0000
[  396.527966][   T30] audit: type=1326 audit(1769897250.354:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.4.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc09399ab4b code=0x7ffc0000
[  396.662560][ T9753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1105'.
[  396.717376][   T30] audit: type=1326 audit(1769897250.354:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.4.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc09399ab4b code=0x7ffc0000
[  396.758707][ T9757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1105'.
[  396.790249][   T30] audit: type=1326 audit(1769897250.424:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.4.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc09399ab4b code=0x7ffc0000
[  396.826505][   T30] audit: type=1326 audit(1769897250.424:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.4.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc09399ab4b code=0x7ffc0000
[  396.860997][   T30] audit: type=1326 audit(1769897250.424:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.4.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc09399ab4b code=0x7ffc0000
[  397.148901][ T5886] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  397.308092][ T5886] usb 4-1: Using ep0 maxpacket: 16
[  397.342404][ T5886] usb 4-1: config 0 has no interfaces?
[  397.387870][ T5886] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  397.421153][ T5886] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  397.482956][ T5886] usb 4-1: Manufacturer: syz
[  397.529599][ T5886] usb 4-1: config 0 descriptor??
[  397.889554][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1112'.
[  397.902762][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1112'.
[  398.327894][ T5886] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  398.508495][ T5886] usb 3-1: Using ep0 maxpacket: 16
[  398.567544][ T5886] usb 3-1: config 0 has no interfaces?
[  398.597051][ T5886] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  398.645426][ T5886] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  398.701116][ T5886] usb 3-1: Manufacturer: syz
[  398.733873][ T5886] usb 3-1: config 0 descriptor??
[  399.671289][ T9801] Cannot find add_set index 0 as target
[  400.126001][ T9801] netdevsim netdevsim4: Direct firmware load for /
[  400.126001][ T9801]  failed with error -2
[  400.156156][ T9801] netdevsim netdevsim4: Falling back to sysfs fallback for: /
[  400.156156][ T9801] 
[  400.414947][ T5886] usb 4-1: USB disconnect, device number 33
[  401.306532][ T5886] usb 3-1: USB disconnect, device number 35
[  402.085786][ T9831] Cannot find add_set index 0 as target
[  402.329604][ T9827] netdevsim netdevsim3: Direct firmware load for /
[  402.329604][ T9827]  failed with error -2
[  402.341665][ T9827] netdevsim netdevsim3: Falling back to sysfs fallback for: /
[  402.341665][ T9827] 
[  402.739125][ T5927] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  402.953020][ T5927] usb 1-1: Using ep0 maxpacket: 8
[  402.988217][ T5927] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  403.021992][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.051862][ T5927] usb 1-1: Product: syz
[  403.059383][ T5927] usb 1-1: Manufacturer: syz
[  403.103296][ T5927] usb 1-1: SerialNumber: syz
[  403.126409][ T5927] usb 1-1: config 0 descriptor??
[  403.310333][ T9849] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1128'.
[  403.393745][ T5927] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  403.422275][ T9850] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1128'.
[  403.837758][ T9626] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  404.048057][ T9626] usb 6-1: Using ep0 maxpacket: 16
[  404.063437][ T9626] usb 6-1: config 0 has no interfaces?
[  404.087414][ T9626] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  404.120515][ T9626] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  404.161935][ T9626] usb 6-1: Manufacturer: syz
[  404.190595][ T9626] usb 6-1: config 0 descriptor??
[  404.675472][ T9869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1132'.
[  404.730932][ T9869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1132'.
[  404.818882][ T5927] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  404.882812][ T5927] usb 1-1: USB disconnect, device number 34
[  405.147537][ T5886] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  405.339250][ T5886] usb 5-1: Using ep0 maxpacket: 16
[  405.380140][ T5886] usb 5-1: config 0 has no interfaces?
[  405.416803][ T5886] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  405.518726][ T5886] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  405.547593][ T5886] usb 5-1: Manufacturer: syz
[  405.701193][ T5886] usb 5-1: config 0 descriptor??
[  405.879610][ T9885] Cannot find add_set index 0 as target
[  406.438791][ T9885] netdevsim netdevsim0: Direct firmware load for /
[  406.438791][ T9885]  failed with error -2
[  406.474949][ T9885] netdevsim netdevsim0: Falling back to sysfs fallback for: /
[  406.474949][ T9885] 
[  407.073957][ T5886] usb 6-1: USB disconnect, device number 3
[  407.607786][ T5927] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  407.639319][ T9622] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  407.797811][ T5927] usb 4-1: Using ep0 maxpacket: 32
[  407.811024][ T9622] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  407.812013][ T5927] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  407.823114][ T9622] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  407.877521][ T5927] usb 4-1: config 0 has no interfaces?
[  407.878230][ T9622] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  407.894523][ T9622] usb 6-1: config 0 descriptor??
[  407.900341][ T9894] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  407.929629][ T5927] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  407.939070][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  407.987635][ T5927] usb 4-1: Product: syz
[  408.009907][ T5927] usb 4-1: Manufacturer: syz
[  408.027601][ T5927] usb 4-1: SerialNumber: syz
[  408.061221][ T5927] usb 4-1: config 0 descriptor??
[  408.351504][ T9622] elan 0003:04F3:0755.0019: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0
[  408.517243][ T9906] Cannot find add_set index 0 as target
[  408.596934][ T9626] usb 5-1: USB disconnect, device number 30
[  408.606776][ T9906] netdevsim netdevsim0: Direct firmware load for /
[  408.606776][ T9906]  failed with error -2
[  408.643674][ T9906] netdevsim netdevsim0: Falling back to sysfs fallback for: /
[  408.643674][ T9906] 
[  408.707394][ T5927] usb 4-1: USB disconnect, device number 34
[  408.797061][ T9621] usb 6-1: USB disconnect, device number 4
[  409.596621][ T9924] netlink: 'syz.5.1144': attribute type 13 has an invalid length.
[  410.279239][ T9924] bridge0: port 2(bridge_slave_1) entered disabled state
[  410.286909][ T9924] bridge0: port 1(bridge_slave_0) entered disabled state
[  410.842951][ T9946] netlink: 'syz.2.1147': attribute type 1 has an invalid length.
[  410.916719][ T9947] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1147'.
[  410.974124][ T9924] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  411.034319][ T9924] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  411.924481][ T9946] 8021q: adding VLAN 0 to HW filter on device bond2
[  411.983674][ T9947] bond2: entered promiscuous mode
[  411.993400][ T9947] bond2: entered allmulticast mode
[  412.037523][ T9615] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  412.079100][ T9615] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  412.107962][ T9955] syzkaller0: entered promiscuous mode
[  412.147786][ T9955] syzkaller0: entered allmulticast mode
[  412.308781][ T9615] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  412.399422][ T9615] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  412.578851][ T9971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1152'.
[  412.636415][ T9971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1152'.
[  413.379783][ T9991] Cannot find add_set index 0 as target
[  414.528417][ T9991] netdevsim netdevsim4: Direct firmware load for /
[  414.528417][ T9991]  failed with error -2
[  414.539243][ T9991] netdevsim netdevsim4: Falling back to sysfs fallback for: /
[  414.539243][ T9991] 
[  415.741174][T10011] binder: 10009:10011 ioctl c0306201 200000000540 returned -14
[  416.799455][T10035] syzkaller0: entered promiscuous mode
[  416.814788][T10035] syzkaller0: entered allmulticast mode
[  417.499045][T10044] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1166'.
[  420.577539][ T5831] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  420.645102][T10078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1176'.
[  420.759379][T10079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1176'.
[  420.778009][ T5831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  420.824905][ T5831] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  420.874847][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  420.924763][ T5831] usb 1-1: config 0 descriptor??
[  421.224358][ T5831] usbhid 1-1:0.0: can't add hid device: -71
[  421.250995][ T5831] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  421.375190][ T5831] usb 1-1: USB disconnect, device number 35
[  421.807664][ T5831] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  421.998348][ T5831] usb 1-1: Using ep0 maxpacket: 32
[  422.020576][ T5831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  422.068788][ T5831] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  422.148901][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  422.183726][ T5831] usb 1-1: config 0 descriptor??
[  422.227272][ T5831] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  422.282247][T10096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  422.306464][ T5831] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  422.672643][T10069] ldusb 1-1:0.0: Read buffer overflow, 316 bytes dropped
[  422.714935][ T5831] usb 1-1: USB disconnect, device number 36
[  422.801814][ T5831] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  424.950564][T10118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  425.422490][   T30] kauditd_printk_skb: 57 callbacks suppressed
[  425.422504][   T30] audit: type=1326 audit(1769897279.404:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.5.1188" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee08d9aeb9 code=0x0
[  426.697606][ T9628] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  426.719559][T10150] netlink: 388 bytes leftover after parsing attributes in process `syz.5.1190'.
[  426.857606][ T9628] usb 4-1: Using ep0 maxpacket: 8
[  426.871601][ T9628] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  426.932591][ T9628] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  427.139396][ T9628] pvrusb2: Hardware description: Terratec Grabster AV400
[  427.187679][ T9628] pvrusb2: **********
[  427.208398][ T9628] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  427.226852][ T9628] pvrusb2: Important functionality might not be entirely working.
[  427.311531][ T9628] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  427.437966][ T9628] pvrusb2: **********
[  427.503680][ T2345] pvrusb2: Invalid write control endpoint
[  427.646728][ T5831] usb 4-1: USB disconnect, device number 35
[  427.704683][T10158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1193'.
[  427.714882][ T2345] pvrusb2: Invalid write control endpoint
[  427.725949][T10158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1193'.
[  427.752576][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  427.775780][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  427.855643][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  427.903016][ T2345] pvrusb2: Device being rendered inoperable
[  427.936868][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  427.970842][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  428.009216][ T2345] pvrusb2: Attached sub-driver cx25840
[  428.020176][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  428.039827][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  428.157989][ T5969] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  428.347980][ T5969] usb 1-1: Using ep0 maxpacket: 16
[  428.368912][ T5969] usb 1-1: config 0 has no interfaces?
[  428.404918][ T5969] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  428.429158][ T5969] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  428.449480][ T5969] usb 1-1: Manufacturer: syz
[  428.490849][ T5969] usb 1-1: config 0 descriptor??
[  428.547887][ T5831] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  428.707875][ T5831] usb 4-1: Using ep0 maxpacket: 16
[  428.731346][ T5831] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  428.777620][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  428.820455][ T5831] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  428.848726][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  428.879812][ T5831] usb 4-1: Product: syz
[  428.884025][ T5831] usb 4-1: Manufacturer: syz
[  428.903254][ T5831] usb 4-1: SerialNumber: syz
[  428.928268][ T5831] usb 4-1: config 0 descriptor??
[  428.942692][ T5831] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  428.956669][ T5831] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  428.963977][ T5969] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  429.117592][ T5969] usb 3-1: Using ep0 maxpacket: 16
[  429.145944][ T5969] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  429.173559][ T5969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  429.209522][ T5969] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  429.227609][ T5969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  429.257054][ T5969] usb 3-1: Product: syz
[  429.261440][ T5969] usb 3-1: Manufacturer: syz
[  429.280434][ T5969] usb 3-1: SerialNumber: syz
[  429.327683][ T5969] usb 3-1: config 0 descriptor??
[  429.359220][ T5969] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  429.402693][ T5969] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  429.576484][ T5831] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  429.587341][ T5831] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[  429.954548][ T5969] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  429.963821][ T5969] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[  430.037668][T10189] tipc: Started in network mode
[  430.056286][T10189] tipc: Node identity , cluster identity 4711
[  430.064163][T10189] tipc: Failed to obtain node identity
[  430.074825][T10189] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  430.214008][ T5831] em28xx 4-1:0.0: Unknown AC97 audio processor detected!
[  430.225283][ T5831] em28xx 4-1:0.0: couldn't setup AC97 register 2
[  430.474516][T10182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  430.569208][T10194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  430.591967][ T5969] em28xx 3-1:0.0: Unknown AC97 audio processor detected!
[  430.627854][ T5969] em28xx 3-1:0.0: couldn't setup AC97 register 2
[  430.689229][ T5969] em28xx 3-1:0.0: couldn't setup AC97 register 4
[  430.907706][ T5831] em28xx 4-1:0.0: AC97 command still being executed: not handled properly!
[  430.939487][ T5969] em28xx 3-1:0.0: couldn't setup AC97 register 6
[  430.956587][ T5831] em28xx 4-1:0.0: couldn't setup AC97 register 6
[  430.988536][ T5969] em28xx 3-1:0.0: couldn't setup AC97 register 54
[  431.014627][ T5969] em28xx 3-1:0.0: couldn't setup AC97 register 56
[  431.054453][ T5969] usb 3-1: USB disconnect, device number 36
[  431.102311][ T5831] em28xx 4-1:0.0: couldn't setup AC97 register 54
[  431.134800][ T5831] em28xx 4-1:0.0: couldn't setup AC97 register 56
[  431.162141][ T5831] usb 4-1: USB disconnect, device number 36
[  431.273316][ T9628] usb 1-1: USB disconnect, device number 37
[  432.403363][T10219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1211'.
[  432.443788][T10219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1211'.
[  432.889099][   T43] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  433.060098][   T30] audit: type=1326 audit(1769897287.034:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10225 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec63d9aeb9 code=0x7ffc0000
[  433.107563][   T43] usb 1-1: Using ep0 maxpacket: 16
[  433.146414][   T43] usb 1-1: config 0 has no interfaces?
[  433.152272][   T30] audit: type=1326 audit(1769897287.034:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10225 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec63d9aeb9 code=0x7ffc0000
[  433.217042][   T43] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  433.237772][   T43] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  433.245836][   T43] usb 1-1: Manufacturer: syz
[  433.269131][   T30] audit: type=1326 audit(1769897287.034:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10225 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fec63d9aeb9 code=0x7ffc0000
[  433.327579][   T43] usb 1-1: config 0 descriptor??
[  433.506076][   T30] audit: type=1326 audit(1769897287.034:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10225 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec63d9aeb9 code=0x7ffc0000
[  433.615705][   T30] audit: type=1326 audit(1769897287.034:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10225 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fec63d9aeb9 code=0x7ffc0000
[  433.719995][   T30] audit: type=1326 audit(1769897287.034:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10225 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec63d9aeb9 code=0x7ffc0000
[  433.860698][   T30] audit: type=1326 audit(1769897287.034:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10225 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec63d9aeb9 code=0x7ffc0000
[  434.017009][   T30] audit: type=1326 audit(1769897287.034:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10225 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fec63d9aeb9 code=0x7ffc0000
[  434.134421][   T30] audit: type=1326 audit(1769897287.034:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10225 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec63d9aeb9 code=0x7ffc0000
[  434.310762][   T30] audit: type=1326 audit(1769897287.034:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10225 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec63d9aeb9 code=0x7ffc0000
[  436.002610][ T5969] usb 1-1: USB disconnect, device number 38
[  436.827529][   T43] usb 1-1: new full-speed USB device number 39 using dummy_hcd
[  437.042978][   T43] usb 1-1: config 0 has no interfaces?
[  437.076306][   T43] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  437.128606][   T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.136676][   T43] usb 1-1: Product: syz
[  437.157325][   T43] usb 1-1: Manufacturer: syz
[  437.167509][   T43] usb 1-1: SerialNumber: syz
[  437.183387][   T43] usb 1-1: config 0 descriptor??
[  437.313592][T10274] syzkaller0: entered promiscuous mode
[  437.327614][T10274] syzkaller0: entered allmulticast mode
[  438.058303][ T5969] usb 1-1: USB disconnect, device number 39
[  438.066119][T10288] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1228'.
[  438.368710][T10262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  438.417565][ T5969] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  438.579662][ T5969] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  438.611211][ T5969] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  438.657050][ T5969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  438.722788][ T5969] usb 6-1: config 0 descriptor??
[  438.774590][ T5969] pwc: Askey VC010 type 2 USB webcam detected.
[  439.174846][ T5969] pwc: recv_control_msg error -32 req 02 val 2b00
[  439.218712][ T5969] pwc: recv_control_msg error -32 req 02 val 2700
[  439.289312][ T5969] pwc: recv_control_msg error -32 req 02 val 2c00
[  439.319245][ T5969] pwc: recv_control_msg error -32 req 04 val 1000
[  439.360107][ T5969] pwc: recv_control_msg error -32 req 04 val 1300
[  439.387764][ T5969] pwc: recv_control_msg error -32 req 04 val 1400
[  439.434174][ T5969] pwc: recv_control_msg error -32 req 02 val 2000
[  439.457758][ T5969] pwc: recv_control_msg error -32 req 02 val 2100
[  439.478780][ T5969] pwc: recv_control_msg error -32 req 04 val 1500
[  439.707078][ T5969] pwc: recv_control_msg error -71 req 02 val 2400
[  439.742622][ T5969] pwc: recv_control_msg error -71 req 02 val 2600
[  439.773077][ T5969] pwc: recv_control_msg error -71 req 02 val 2900
[  439.807752][ T5969] pwc: recv_control_msg error -71 req 02 val 2800
[  439.827338][T10307] tipc: Started in network mode
[  439.836849][T10307] tipc: Node identity , cluster identity 4711
[  439.847396][ T5969] pwc: recv_control_msg error -71 req 04 val 1100
[  439.875004][ T5969] pwc: recv_control_msg error -71 req 04 val 1200
[  439.875581][T10307] tipc: Failed to obtain node identity
[  439.928096][ T5969] pwc: Registered as video103.
[  439.948900][ T5969] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input35
[  439.984526][T10307] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  440.045766][ T5969] usb 6-1: USB disconnect, device number 5
[  441.424462][T10323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  441.820987][T10335] 
[  441.823368][T10335] =====================================================
[  441.830303][T10335] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[  441.837775][T10335] syzkaller #0 Tainted: G             L     
[  441.843758][T10335] -----------------------------------------------------
[  441.850690][T10335] syz.0.1240/10335 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[  441.858413][T10335] ffff888058c4f7a0 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370
[  441.867054][T10335] 
[  441.867054][T10335] and this task is already holding:
[  441.874428][T10335] ffff88803273d0c0 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0
[  441.883176][T10335] which would create a new lock dependency:
[  441.889182][T10335]  (&new->fa_lock){....}-{3:3} -> (&f_owner->lock){....}-{3:3}
[  441.896802][T10335] 
[  441.896802][T10335] but this new dependency connects a SOFTIRQ-irq-safe lock:
[  441.906277][T10335]  (&dev->event_lock#2){..-.}-{3:3}
[  441.906314][T10335] 
[  441.906314][T10335] ... which became SOFTIRQ-irq-safe at:
[  441.919241][T10335]   lock_acquire+0x106/0x330
[  441.923873][T10335]   _raw_spin_lock_irqsave+0x40/0x60
[  441.929188][T10335]   input_event+0x76/0xe0
[  441.933539][T10335]   hidinput_report_event+0xa1/0x100
[  441.939011][T10335]   hid_report_raw_event+0x1489/0x1720
[  441.944619][T10335]   hid_input_report+0x44b/0x580
[  441.949595][T10335]   hid_irq_in+0x47e/0x6d0
[  441.954034][T10335]   __usb_hcd_giveback_urb+0x376/0x540
[  441.959521][T10335]   dummy_timer+0xbbd/0x45d0
[  441.964139][T10335]   __hrtimer_run_queues+0x527/0xc30
[  441.969450][T10335]   hrtimer_run_softirq+0x182/0x5a0
[  441.974672][T10335]   handle_softirqs+0x22a/0x7c0
[  441.979539][T10335]   __irq_exit_rcu+0x5f/0x150
[  441.984249][T10335]   irq_exit_rcu+0x9/0x30
[  441.988617][T10335]   sysvec_apic_timer_interrupt+0xa6/0xc0
[  441.994375][T10335]   asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  442.000494][T10335]   queue_delayed_work_on+0x17a/0x1e0
[  442.005989][T10335]   process_scheduled_works+0xaec/0x17a0
[  442.011660][T10335]   worker_thread+0xda6/0x1360
[  442.016468][T10335]   kthread+0x726/0x8b0
[  442.020664][T10335]   ret_from_fork+0x51b/0xa40
[  442.025384][T10335]   ret_from_fork_asm+0x1a/0x30
[  442.030268][T10335] 
[  442.030268][T10335] to a SOFTIRQ-irq-unsafe lock:
[  442.037308][T10335]  (tasklist_lock){.+.+}-{3:3}
[  442.037338][T10335] 
[  442.037338][T10335] ... which became SOFTIRQ-irq-unsafe at:
[  442.050019][T10335] ...
[  442.050029][T10335]   lock_acquire+0x106/0x330
[  442.057257][T10335]   _raw_read_lock+0x36/0x50
[  442.061871][T10335]   __do_wait+0xde/0x740
[  442.066142][T10335]   do_wait+0x1e7/0x4f0
[  442.070323][T10335]   kernel_wait+0xd6/0x1c0
[  442.074766][T10335]   call_usermodehelper_exec_work+0xbe/0x230
[  442.080784][T10335]   process_scheduled_works+0xaec/0x17a0
[  442.086457][T10335]   worker_thread+0xda6/0x1360
[  442.091252][T10335]   kthread+0x726/0x8b0
[  442.095436][T10335]   ret_from_fork+0x51b/0xa40
[  442.100140][T10335]   ret_from_fork_asm+0x1a/0x30
[  442.105025][T10335] 
[  442.105025][T10335] other info that might help us debug this:
[  442.105025][T10335] 
[  442.115271][T10335] Chain exists of:
[  442.115271][T10335]   &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock
[  442.115271][T10335] 
[  442.128439][T10335]  Possible interrupt unsafe locking scenario:
[  442.128439][T10335] 
[  442.136786][T10335]        CPU0                    CPU1
[  442.142172][T10335]        ----                    ----
[  442.147556][T10335]   lock(tasklist_lock);
[  442.151832][T10335]                                local_irq_disable();
[  442.158651][T10335]                                lock(&dev->event_lock#2);
[  442.165889][T10335]                                lock(&new->fa_lock);
[  442.172692][T10335]   <Interrupt>
[  442.176172][T10335]     lock(&dev->event_lock#2);
[  442.181061][T10335] 
[  442.181061][T10335]  *** DEADLOCK ***
[  442.181061][T10335] 
[  442.189220][T10335] 5 locks held by syz.0.1240/10335:
[  442.194527][T10335]  #0: ffff88802e1bf2a0 (&sig->cred_guard_mutex){+.+.}-{4:4}, at: bprm_execve+0xb7/0x1410
[  442.204496][T10335]  #1: ffffffff8e6f6010 (file_rwsem){.+.+}-{0:0}, at: __break_lease+0x41c/0x1b80
[  442.213702][T10335]  #2: ffff8880268916f8 (&ctx->flc_lock){+.+.}-{3:3}, at: __break_lease+0x429/0x1b80
[  442.223235][T10335]  #3: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0
[  442.232326][T10335]  #4: ffff88803273d0c0 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0
[  442.241495][T10335] 
[  442.241495][T10335] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[  442.251921][T10335]   -> (&dev->event_lock#2){..-.}-{3:3} {
[  442.257693][T10335]      IN-SOFTIRQ-W at:
[  442.261885][T10335]                         lock_acquire+0x106/0x330
[  442.268683][T10335]                         _raw_spin_lock_irqsave+0x40/0x60
[  442.275996][T10335]                         input_event+0x76/0xe0
[  442.282258][T10335]                         hidinput_report_event+0xa1/0x100
[  442.289575][T10335]                         hid_report_raw_event+0x1489/0x1720
[  442.296965][T10335]                         hid_input_report+0x44b/0x580
[  442.303838][T10335]                         hid_irq_in+0x47e/0x6d0
[  442.310206][T10335]                         __usb_hcd_giveback_urb+0x376/0x540
[  442.317608][T10335]                         dummy_timer+0xbbd/0x45d0
[  442.324140][T10335]                         __hrtimer_run_queues+0x527/0xc30
[  442.331357][T10335]                         hrtimer_run_softirq+0x182/0x5a0
[  442.338489][T10335]                         handle_softirqs+0x22a/0x7c0
[  442.345269][T10335]                         __irq_exit_rcu+0x5f/0x150
[  442.351889][T10335]                         irq_exit_rcu+0x9/0x30
[  442.358147][T10335]                         sysvec_apic_timer_interrupt+0xa6/0xc0
[  442.365798][T10335]                         asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  442.373805][T10335]                         queue_delayed_work_on+0x17a/0x1e0
[  442.381212][T10335]                         process_scheduled_works+0xaec/0x17a0
[  442.388972][T10335]                         worker_thread+0xda6/0x1360
[  442.395776][T10335]                         kthread+0x726/0x8b0
[  442.401879][T10335]                         ret_from_fork+0x51b/0xa40
[  442.408501][T10335]                         ret_from_fork_asm+0x1a/0x30
[  442.415291][T10335]      INITIAL USE at:
[  442.419380][T10335]                        lock_acquire+0x106/0x330
[  442.425820][T10335]                        _raw_spin_lock_irqsave+0x40/0x60
[  442.432971][T10335]                        input_inject_event+0xa5/0x340
[  442.439847][T10335]                        kbd_led_trigger_activate+0xbc/0x100
[  442.447275][T10335]                        led_trigger_set+0x535/0x960
[  442.453975][T10335]                        led_trigger_set_default+0x260/0x2a0
[  442.461373][T10335]                        led_classdev_register_ext+0x787/0x9c0
[  442.468947][T10335]                        input_leds_connect+0x517/0x790
[  442.475909][T10335]                        input_register_device+0xd00/0x1160
[  442.483217][T10335]                        atkbd_connect+0x731/0xa50
[  442.489733][T10335]                        serio_driver_probe+0x82/0xd0
[  442.496609][T10335]                        really_probe+0x267/0xaf0
[  442.503050][T10335]                        __driver_probe_device+0x18c/0x320
[  442.510273][T10335]                        driver_probe_device+0x4f/0x240
[  442.517240][T10335]                        __driver_attach+0x349/0x640
[  442.523943][T10335]                        bus_for_each_dev+0x23b/0x2c0
[  442.530743][T10335]                        serio_handle_event+0x232/0x10d0
[  442.537799][T10335]                        process_scheduled_works+0xaec/0x17a0
[  442.545292][T10335]                        worker_thread+0xda6/0x1360
[  442.551909][T10335]                        kthread+0x726/0x8b0
[  442.557940][T10335]                        ret_from_fork+0x51b/0xa40
[  442.564476][T10335]                        ret_from_fork_asm+0x1a/0x30
[  442.571176][T10335]    }
[  442.573869][T10335]    ... key      at: [<ffffffff9a372b20>] input_allocate_device.__key.7+0x0/0x20
[  442.583108][T10335]  -> (&client->buffer_lock){....}-{3:3} {
[  442.588972][T10335]     INITIAL USE at:
[  442.592983][T10335]                      lock_acquire+0x106/0x330
[  442.599261][T10335]                      _raw_spin_lock+0x2e/0x40
[  442.605539][T10335]                      evdev_pass_values+0xb9/0xbd0
[  442.612172][T10335]                      evdev_events+0x1e6/0x340
[  442.618446][T10335]                      input_pass_values+0x288/0x890
[  442.625157][T10335]                      input_event_dispose+0x330/0x6b0
[  442.632062][T10335]                      input_inject_event+0x1dd/0x340
[  442.638934][T10335]                      evdev_write+0x325/0x4c0
[  442.645204][T10335]                      vfs_write+0x29a/0xb90
[  442.651214][T10335]                      ksys_write+0x150/0x270
[  442.657311][T10335]                      do_syscall_64+0xe2/0xf80
[  442.663576][T10335]                      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.671234][T10335]   }
[  442.673848][T10335]   ... key      at: [<ffffffff9a372dc0>] evdev_open.__key.27+0x0/0x20
[  442.682116][T10335]   ... acquired at:
[  442.686034][T10335]    _raw_spin_lock+0x2e/0x40
[  442.690744][T10335]    evdev_pass_values+0xb9/0xbd0
[  442.695804][T10335]    evdev_events+0x1e6/0x340
[  442.700508][T10335]    input_pass_values+0x288/0x890
[  442.705655][T10335]    input_event_dispose+0x330/0x6b0
[  442.710980][T10335]    input_inject_event+0x1dd/0x340
[  442.716208][T10335]    evdev_write+0x325/0x4c0
[  442.720835][T10335]    vfs_write+0x29a/0xb90
[  442.725281][T10335]    ksys_write+0x150/0x270
[  442.729819][T10335]    do_syscall_64+0xe2/0xf80
[  442.734519][T10335]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.740702][T10335] 
[  442.743045][T10335] -> (&new->fa_lock){....}-{3:3} {
[  442.748201][T10335]    INITIAL USE at:
[  442.752115][T10335]                    lock_acquire+0x106/0x330
[  442.758209][T10335]                    _raw_write_lock_irq+0x3d/0x50
[  442.764736][T10335]                    fasync_remove_entry+0xf1/0x1c0
[  442.771364][T10335]                    __fput+0x8a5/0xa70
[  442.777028][T10335]                    task_work_run+0x1d9/0x270
[  442.783206][T10335]                    exit_to_user_mode_loop+0xed/0x480
[  442.790092][T10335]                    do_syscall_64+0x2b7/0xf80
[  442.796283][T10335]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.803763][T10335]    INITIAL READ USE at:
[  442.808118][T10335]                         lock_acquire+0x106/0x330
[  442.814655][T10335]                         _raw_read_lock_irqsave+0x48/0x60
[  442.821876][T10335]                         kill_fasync+0x199/0x4d0
[  442.828316][T10335]                         evdev_pass_values+0x627/0xbd0
[  442.835277][T10335]                         evdev_events+0x1e6/0x340
[  442.841812][T10335]                         input_pass_values+0x288/0x890
[  442.848789][T10335]                         input_event_dispose+0x330/0x6b0
[  442.855942][T10335]                         input_inject_event+0x1dd/0x340
[  442.863007][T10335]                         evdev_write+0x325/0x4c0
[  442.869469][T10335]                         vfs_write+0x29a/0xb90
[  442.875839][T10335]                         ksys_write+0x150/0x270
[  442.882203][T10335]                         do_syscall_64+0xe2/0xf80
[  442.888737][T10335]                         entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.896675][T10335]  }
[  442.899212][T10335]  ... key      at: [<ffffffff9a054c80>] fasync_insert_entry.__key+0x0/0x20
[  442.907931][T10335]  ... acquired at:
[  442.911767][T10335]    _raw_read_lock_irqsave+0x48/0x60
[  442.917167][T10335]    kill_fasync+0x199/0x4d0
[  442.921793][T10335]    evdev_pass_values+0x627/0xbd0
[  442.926937][T10335]    evdev_events+0x1e6/0x340
[  442.931644][T10335]    input_pass_values+0x288/0x890
[  442.936792][T10335]    input_event_dispose+0x330/0x6b0
[  442.942107][T10335]    input_inject_event+0x1dd/0x340
[  442.947331][T10335]    evdev_write+0x325/0x4c0
[  442.951955][T10335]    vfs_write+0x29a/0xb90
[  442.956404][T10335]    ksys_write+0x150/0x270
[  442.961035][T10335]    do_syscall_64+0xe2/0xf80
[  442.965754][T10335]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.971853][T10335] 
[  442.974208][T10335] 
[  442.974208][T10335] the dependencies between the lock to be acquired
[  442.974219][T10335]  and SOFTIRQ-irq-unsafe lock:
[  442.987781][T10335]  -> (tasklist_lock){.+.+}-{3:3} {
[  442.993032][T10335]     HARDIRQ-ON-R at:
[  442.997124][T10335]                       lock_acquire+0x106/0x330
[  443.003483][T10335]                       _raw_read_lock+0x36/0x50
[  443.009833][T10335]                       __do_wait+0xde/0x740
[  443.015853][T10335]                       do_wait+0x1e7/0x4f0
[  443.021782][T10335]                       kernel_wait+0xd6/0x1c0
[  443.027977][T10335]                       call_usermodehelper_exec_work+0xbe/0x230
[  443.035728][T10335]                       process_scheduled_works+0xaec/0x17a0
[  443.043137][T10335]                       worker_thread+0xda6/0x1360
[  443.049678][T10335]                       kthread+0x726/0x8b0
[  443.055593][T10335]                       ret_from_fork+0x51b/0xa40
[  443.062042][T10335]                       ret_from_fork_asm+0x1a/0x30
[  443.068661][T10335]     SOFTIRQ-ON-R at:
[  443.072753][T10335]                       lock_acquire+0x106/0x330
[  443.079158][T10335]                       _raw_read_lock+0x36/0x50
[  443.085516][T10335]                       __do_wait+0xde/0x740
[  443.091550][T10335]                       do_wait+0x1e7/0x4f0
[  443.097489][T10335]                       kernel_wait+0xd6/0x1c0
[  443.103700][T10335]                       call_usermodehelper_exec_work+0xbe/0x230
[  443.111452][T10335]                       process_scheduled_works+0xaec/0x17a0
[  443.118861][T10335]                       worker_thread+0xda6/0x1360
[  443.125497][T10335]                       kthread+0x726/0x8b0
[  443.131416][T10335]                       ret_from_fork+0x51b/0xa40
[  443.137878][T10335]                       ret_from_fork_asm+0x1a/0x30
[  443.144517][T10335]     INITIAL USE at:
[  443.148518][T10335]                      lock_acquire+0x106/0x330
[  443.154815][T10335]                      _raw_write_lock_irq+0x3d/0x50
[  443.161526][T10335]                      copy_process+0x2199/0x3980
[  443.167972][T10335]                      kernel_clone+0x248/0x870
[  443.174242][T10335]                      user_mode_thread+0x110/0x180
[  443.180858][T10335]                      rest_init+0x23/0x300
[  443.186777][T10335]                      start_kernel+0x380/0x3d0
[  443.193129][T10335]                      x86_64_start_reservations+0x24/0x30
[  443.200347][T10335]                      x86_64_start_kernel+0x143/0x1c0
[  443.207219][T10335]                      common_startup_64+0x13e/0x147
[  443.213928][T10335]     INITIAL READ USE at:
[  443.218377][T10335]                           lock_acquire+0x106/0x330
[  443.225086][T10335]                           _raw_read_lock+0x36/0x50
[  443.231786][T10335]                           __do_wait+0xde/0x740
[  443.238140][T10335]                           do_wait+0x1e7/0x4f0
[  443.244405][T10335]                           kernel_wait+0xd6/0x1c0
[  443.250927][T10335]                           call_usermodehelper_exec_work+0xbe/0x230
[  443.259020][T10335]                           process_scheduled_works+0xaec/0x17a0
[  443.266780][T10335]                           worker_thread+0xda6/0x1360
[  443.273669][T10335]                           kthread+0x726/0x8b0
[  443.279930][T10335]                           ret_from_fork+0x51b/0xa40
[  443.286738][T10335]                           ret_from_fork_asm+0x1a/0x30
[  443.293698][T10335]   }
[  443.296299][T10335]   ... key      at: [<ffffffff8e20c058>] tasklist_lock+0x18/0x40
[  443.304164][T10335]   ... acquired at:
[  443.308158][T10335]    _raw_read_lock+0x36/0x50
[  443.312861][T10335]    send_sigurg+0x12b/0x420
[  443.317481][T10335]    sk_send_sigurg+0x6c/0x2e0
[  443.322276][T10335]    queue_oob+0x42c/0x4f0
[  443.326717][T10335]    unix_stream_sendmsg+0xcb1/0xe80
[  443.332023][T10335]    ____sys_sendmsg+0xa68/0xad0
[  443.336994][T10335]    ___sys_sendmsg+0x2a5/0x360
[  443.341882][T10335]    __x64_sys_sendmsg+0x1bd/0x2a0
[  443.347026][T10335]    do_syscall_64+0xe2/0xf80
[  443.351814][T10335]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  443.357920][T10335] 
[  443.360270][T10335] -> (&f_owner->lock){....}-{3:3} {
[  443.365509][T10335]    INITIAL USE at:
[  443.369421][T10335]                    lock_acquire+0x106/0x330
[  443.375525][T10335]                    _raw_write_lock_irq+0x3d/0x50
[  443.382139][T10335]                    __f_setown+0x67/0x370
[  443.387971][T10335]                    do_fcntl+0x171c/0x1a20
[  443.393895][T10335]                    __se_sys_fcntl+0xc8/0x150
[  443.400091][T10335]                    do_syscall_64+0xe2/0xf80
[  443.406179][T10335]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  443.413704][T10335]    INITIAL READ USE at:
[  443.418061][T10335]                         lock_acquire+0x106/0x330
[  443.424596][T10335]                         _raw_read_lock_irqsave+0x48/0x60
[  443.431823][T10335]                         send_sigurg+0x55/0x420
[  443.438532][T10335]                         sk_send_sigurg+0x6c/0x2e0
[  443.445142][T10335]                         queue_oob+0x42c/0x4f0
[  443.451403][T10335]                         unix_stream_sendmsg+0xcb1/0xe80
[  443.458537][T10335]                         ____sys_sendmsg+0xa68/0xad0
[  443.465332][T10335]                         ___sys_sendmsg+0x2a5/0x360
[  443.472034][T10335]                         __sys_sendmmsg+0x27c/0x4e0
[  443.478743][T10335]                         __x64_sys_sendmmsg+0xa0/0xc0
[  443.485625][T10335]                         do_syscall_64+0xe2/0xf80
[  443.492150][T10335]                         entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  443.500070][T10335]  }
[  443.502588][T10335]  ... key      at: [<ffffffff9a054c60>] file_f_owner_allocate.__key+0x0/0x20
[  443.511475][T10335]  ... acquired at:
[  443.515297][T10335]    _raw_read_lock_irqsave+0x48/0x60
[  443.520693][T10335]    send_sigio+0x38/0x370
[  443.525144][T10335]    kill_fasync+0x24d/0x4d0
[  443.529762][T10335]    lease_break_callback+0x26/0x30
[  443.534988][T10335]    __break_lease+0x741/0x1b80
[  443.539880][T10335]    do_dentry_open+0x73a/0x1420
[  443.544845][T10335]    vfs_open+0x3b/0x340
[  443.549116][T10335]    path_openat+0x3486/0x3e20
[  443.553913][T10335]    do_filp_open+0x22d/0x490
[  443.558618][T10335]    do_open_execat+0x164/0x5b0
[  443.563494][T10335]    open_exec+0x40/0x60
[  443.567762][T10335]    load_script+0x6e9/0x860
[  443.572379][T10335]    bprm_execve+0x93d/0x1410
[  443.577082][T10335]    do_execveat_common+0x50f/0x690
[  443.582313][T10335]    __x64_sys_execveat+0xc4/0xe0
[  443.587369][T10335]    do_syscall_64+0xe2/0xf80
[  443.592071][T10335]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  443.598160][T10335] 
[  443.600499][T10335] 
[  443.600499][T10335] stack backtrace:
[  443.606491][T10335] CPU: 0 UID: 0 PID: 10335 Comm: syz.0.1240 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  443.606517][T10335] Tainted: [L]=SOFTLOCKUP
[  443.606524][T10335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  443.606538][T10335] Call Trace:
[  443.606547][T10335]  <TASK>
[  443.606555][T10335]  dump_stack_lvl+0xe8/0x150
[  443.606579][T10335]  __lock_acquire+0x2a94/0x2cf0
[  443.606612][T10335]  ? send_sigio+0x38/0x370
[  443.606633][T10335]  lock_acquire+0x106/0x330
[  443.606656][T10335]  ? send_sigio+0x38/0x370
[  443.606677][T10335]  ? kill_fasync+0x199/0x4d0
[  443.606697][T10335]  ? lock_acquire+0x106/0x330
[  443.606720][T10335]  ? kill_fasync+0x199/0x4d0
[  443.606743][T10335]  _raw_read_lock_irqsave+0x48/0x60
[  443.606759][T10335]  ? send_sigio+0x38/0x370
[  443.606780][T10335]  send_sigio+0x38/0x370
[  443.606804][T10335]  kill_fasync+0x24d/0x4d0
[  443.606827][T10335]  ? kill_fasync+0x53/0x4d0
[  443.606850][T10335]  lease_break_callback+0x26/0x30
[  443.606869][T10335]  __break_lease+0x741/0x1b80
[  443.606900][T10335]  ? __pfx___break_lease+0x10/0x10
[  443.606924][T10335]  ? do_raw_spin_lock+0x12b/0x2f0
[  443.606944][T10335]  ? __pfx_apparmor_file_open+0x10/0x10
[  443.606961][T10335]  ? fsnotify_open_perm_and_set_mode+0x135/0x6d0
[  443.606985][T10335]  do_dentry_open+0x73a/0x1420
[  443.607010][T10335]  vfs_open+0x3b/0x340
[  443.607027][T10335]  ? path_openat+0x346e/0x3e20
[  443.607056][T10335]  path_openat+0x3486/0x3e20
[  443.607079][T10335]  ? is_bpf_text_address+0x26/0x2b0
[  443.607100][T10335]  ? is_bpf_text_address+0x292/0x2b0
[  443.607128][T10335]  ? __pfx_path_openat+0x10/0x10
[  443.607150][T10335]  ? stack_trace_save+0xa9/0x100
[  443.607170][T10335]  ? __pfx_stack_trace_save+0x10/0x10
[  443.607192][T10335]  ? stack_depot_save_flags+0x33/0x810
[  443.607216][T10335]  do_filp_open+0x22d/0x490
[  443.607241][T10335]  ? __pfx_do_filp_open+0x10/0x10
[  443.607275][T10335]  ? do_open_execat+0xb0/0x5b0
[  443.607298][T10335]  do_open_execat+0x164/0x5b0
[  443.607320][T10335]  ? __pfx_do_open_execat+0x10/0x10
[  443.607342][T10335]  ? getname_kernel+0x146/0x2f0
[  443.607362][T10335]  ? getname_kernel+0x20d/0x2f0
[  443.607380][T10335]  open_exec+0x40/0x60
[  443.607401][T10335]  load_script+0x6e9/0x860
[  443.607426][T10335]  bprm_execve+0x93d/0x1410
[  443.607456][T10335]  ? __pfx_bprm_execve+0x10/0x10
[  443.607480][T10335]  ? alloc_bprm+0x508/0x5c0
[  443.607501][T10335]  ? count+0x1cb/0x230
[  443.607525][T10335]  do_execveat_common+0x50f/0x690
[  443.607554][T10335]  __x64_sys_execveat+0xc4/0xe0
[  443.607579][T10335]  do_syscall_64+0xe2/0xf80
[  443.607597][T10335]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  443.607612][T10335]  ? trace_irq_disable+0x37/0x100
[  443.607629][T10335]  ? clear_bhb_loop+0x60/0xb0
[  443.607647][T10335]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  443.607669][T10335] RIP: 0033:0x7f874499aeb9
[  443.607686][T10335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  443.607701][T10335] RSP: 002b:00007f8745901028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[  443.607720][T10335] RAX: ffffffffffffffda RBX: 00007f8744c15fa0 RCX: 00007f874499aeb9
[  443.607733][T10335] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[  443.607744][T10335] RBP: 00007f8744a08c1f R08: 0000000000001000 R09: 0000000000000000
[  443.607755][T10335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  443.607765][T10335] R13: 00007f8744c16038 R14: 00007f8744c15fa0 R15: 00007f8744d3fa48
[  443.607784][T10335]  </TASK>
[  445.359240][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  445.366222][ T1302] ieee802154 phy1 wpan1: encryption failed: -22