last executing test programs:

1m21.904725495s ago: executing program 3 (id=4455):
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000000a05000000000000000000070000010900011973797a30000000000c0004400000000000000001140000001100010000000000000000000300000a"], 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c000000100001002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a821000000000000140003006e657464657673696d300000"], 0x7c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000cc0)=@RTM_NEWMDB={0xd8, 0x54, 0x100, 0x70bd2d, 0x25dfdbfe, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x1, 0x3, {@in6_addr=@mcast2, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x3, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x2, 0x3, {@ip4=@broadcast, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x1, 0x0, {@in6_addr=@remote}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x2, 0x1, {@in6_addr=@private2, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x3, 0x3, {@in6_addr=@remote, 0x8edd}}}]}, 0xd8}}, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10000, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x149800, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup, 0xe, 0x0, 0xfffffff4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], <r4=>0x0}, 0x40)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00')
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001b61e308d016a91052300102030109021b000100000000090400"], 0x0)
preadv(r5, &(0x7f0000000580)=[{&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f0000000200)=""/202, 0xca}, {&(0x7f0000000000)=""/19, 0x13}, {&(0x7f0000000040)=""/22, 0x16}, {&(0x7f0000000080)=""/47, 0x2f}], 0x5, 0x1fe, 0x12)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x2a, &(0x7f00000019c0)=0x5, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1d, 0x20, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180000001f76f740000000006605000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095001c000000000015a0ffffffffffff9019500004d5b6e2472f4b16f1d10000008520000004000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823000003dcfcc57e0000000000002fe4a89d5abb9a2913a9a0f6813506921aac9825a6b1de89ecb89185bf0ea6812b009a56cf1cb959bafbecbba80157d837d6f128df132522d2", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000005c0)='GPL\x00', 0x4, 0xd4, &(0x7f0000000600)=""/212, 0x0, 0x4e, '\x00', r2, @lsm=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0x4, 0x5, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000780), &(0x7f00000007c0), 0x10, 0x5}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYBLOB='6\x00\x00\x00\b\x00\x00\x00', @ANYBLOB="ee60b85b30702b3d0017dc383b6cea583c07cdeb4b858cc30364e5692eb3c7aee8f5f6dcb0c1f7bfcecc3af9e67306cadfb83087e200951f3ea97e8149ce1aeaed728389e185653695ece09d692652f1b09cb6242b0a2651919927fba7bf9485440b4328ce", @ANYRES32=r7, @ANYBLOB, @ANYRES64=r4], 0x20)
ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000080)=0x2)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r8, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4)
bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @empty}, 0x5e}, 0x1c)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r10, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0100001900010000000000ffdbdf2578c7b790144d20bbc3b88e00000000000000000000ffffac1414bbac1414bb0000000000000000000000004e20000bf7ff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000090000000000000080000000000000000000000000000000fcffffff00000000000000000000000084000500fe8000000000000000000000000000bb000000003c0000000a000000ffffffff000000000000000000000000fdffffff04030000000800000008000000000000000000000000000000000000000000010000000032000000000000000000000000000000000000000000000003350000010004000800"/244], 0x13c}, 0x1, 0x0, 0x0, 0x20006854}, 0x800)
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1)
ioctl$KVM_SET_GSI_ROUTING(r10, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter={0x7, 0x6, 0xaaca, 0x80000001, 0x2}}]})
ioctl$KVM_IRQ_LINE_STATUS(r10, 0xc008ae67, &(0x7f0000000140)={0x0, 0x3fe})

1m21.075304255s ago: executing program 0 (id=4460):
r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x10, 0x8800)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff}, 0x106, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000d40)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x7a, 0x889, {}, 0x1119dfc, 0xffffffff80000002, 0xcd41}}}, 0x90)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, {0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}, r2, 0x73}}, 0x48)
write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000c40)={0x13, 0x10, 0xfa00, {&(0x7f0000000500), r2, 0x2}}, 0x18)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r2}}, 0x18)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0xd41, 0x1840007, 0x7e, 0x4, 0xfff8, 0x0, 0x1000, 0x2, 0x4bfe, 0x10000, 0x200000000002, 0x85, 0x2, 0x7, 0x9, 0x100000088], 0x41000, 0x128657})
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1)
ptrace$setregs(0xd, r3, 0x2, &(0x7f0000000180))
ptrace$cont(0x21, r3, 0x1000005, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
r4 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r5, &(0x7f0000000040), 0xe09)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101101, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000b80)={'\x00', 0x8411})
ioctl$TUNSETOFFLOAD(r6, 0x400454c9, 0x9)
ioctl$TUNSETNOCSUM(r6, 0x400454c8, 0x1)
syz_open_dev$video4linux(&(0x7f0000000e40), 0x3f, 0x8200)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}})
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=@security={'security\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x0, 0x0, 0x228, 0xffffffff, 0xffffffff, 0x340, 0x340, 0x340, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@socket0={{0x20}}, @common=@set={{0x40}, {{0xffffffffffffffff, [0x6, 0x6, 0x7, 0x6, 0x1, 0x2], 0x1, 0x1}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, 0x2, 0xf, [0x12, 0x1d, 0x27, 0x3, 0xf, 0x20, 0x13, 0xa, 0x1e, 0x2e, 0x6, 0x20, 0x1c, 0x28, 0x22, 0x16], 0x0, 0x7, 0xffffffffffff8000}}}, {{@ip={@empty, @private=0xa010102, 0xffffffff, 0x0, 'caif0\x00', 'syz_tun\x00', {}, {}, 0x1d, 0x3, 0x2}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x11, '\x00', 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x6, 0x2, 0x1, 0x4, 0xe], 0x4, 0x6}, {0x1, [0x0, 0x1, 0x1, 0x6, 0x6, 0x7], 0xfd, 0x3}}}}, {{@uncond, 0x0, 0xe8, 0x118, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x8, 0x0, 0x1}}, @common=@icmp={{0x28}, {0x11, "46e6"}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x1}, {0x5, 0x1, 0x1}, 0x0, 0x7f}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f0000000800)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x4e23, @rand_addr=0x64010100}}}, 0x90)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)

1m20.574630006s ago: executing program 0 (id=4461):
syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x10678000)
writev(r0, &(0x7f0000000300)=[{&(0x7f00000005c0)="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", 0x13d}, {&(0x7f0000000340)="bf67a361000138944b854b78cc4e2237f68791bd7786513b715bf9ad6389844bc809b10b216304437e8d4b9e9cec7b31a34a02854029d58ba77b51b6479ef73e43d95fb478cc230a625897", 0x4b}, {&(0x7f0000000440)="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", 0x147}], 0x3)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x0)

1m19.912057755s ago: executing program 3 (id=4468):
shmget(0x1, 0x1000, 0x2, &(0x7f00003ae000/0x1000)=nil)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
syz_open_dev$sndpcmp(0x0, 0xfffffffffffffff1, 0x402000)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)
landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0xc, 0x2, 0x86cb}, 0x30, 0x1)
landlock_restrict_self(r2, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newlink={0x38, 0x10, 0x403, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x429a4}, [@IFLA_XDP={0x4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x38}}, 0x48000)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
close(r6)
syz_clone3(&(0x7f00000003c0)={0x122125000, &(0x7f00000000c0), 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/ipc\x00')
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@link_local={0xd}, @multicast, @void, {@ipv4={0x800, @udp={{0xc, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x8, 0x73, 0x0, @private, @broadcast, {[@timestamp_prespec={0x44, 0x1c, 0xe, 0x3, 0xd, [{@local, 0x8}, {@loopback, 0x5}, {@local, 0x8}]}]}}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)
syz_open_procfs$userns(0xffffffffffffffff, 0x0)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x14, 0x0, 0x1, 0x400000, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24}, 0x804)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42)

1m19.557646629s ago: executing program 0 (id=4470):
syz_emit_ethernet(0x5a, &(0x7f00000004c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x4, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010104, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d2a24922167bc87bfc6a48bd16072d3e"}, @md5sig={0x1d, 0x12, "910000000000006ffeffffff00"}]}}}}}}}, 0x0)

1m19.418728945s ago: executing program 0 (id=4472):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x510, 0x1f0, 0x0, 0x148, 0x1f0, 0x148, 0x478, 0x240, 0x240, 0x478, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0x1000000, 0xffffff00], 0x4e22, 0x4e22, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4a, 0x100, 0x2}}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'wlan0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x260, 0x288, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x8000000, 0x1, 0x1, 'syz1\x00', 0x5}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'})
syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x3b00089, 0x0, 0x1, 0x0, 0x0)
setxattr$incfs_metadata(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), &(0x7f0000000640)=':', 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000)
getxattr(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)=@known='user.incfs.metadata\x00', 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@rand_addr=0x64010101, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7, 0x0, 0x1}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@local}}, 0xe8)
socket$nl_route(0x10, 0x3, 0x0)
sendto(r2, &(0x7f0000000000)="1d5cbbf632fb6516d49b1aa1741c2cea8f5e32cfb8500ae4a5e37ef598451a6ba6dcf9b1fce9dc20977d1c20d41cac42fa40ba949b9ed0bcc051171a84af8c0161de7438530795180a4a02f959c4384b288769036fd37b27b9b0227f32d54908e3e55c2e1e98167af978e20dc51c265f5456", 0x72, 0x4004001, &(0x7f0000000080)=@in={0x2, 0x4e24, @multicast1}, 0x80)

1m18.956006028s ago: executing program 0 (id=4473):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b703000000000000850000000c"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)

1m18.762889905s ago: executing program 0 (id=4475):
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsopen(0x0, 0x0)
gettid()
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000026000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000910030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0)
close(r0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'xfrm0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x6, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xfff1}, {0x8, 0x1}}, [@TCA_EGRESS_BLOCK={0x0, 0xe, 0x40400000}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x50}}, 0xc014)
timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f00000001c0)=ANY=[@ANYRES64=r2], 0x3a)
r6 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000440)={'#! ', './file1/../file0', [{0x20, 'cgroup.stat\x00'}, {0x20, '\x00#a\xe2\xa0&E\te\xec\xd4\xd4<\xdf\xb0\xa9k0\x8f~BsZ\x91\x7ft\xdb\xac\x9d\x87\fC\xcf\x9d\x94n\x1fP\x7f2\xb28\x00\x1a\xd2'}]}, 0x4f)
write$UHID_INPUT(r7, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}})
mmap(&(0x7f0000cda000/0x4000)=nil, 0x4000, 0x9, 0x12, r0, 0x173b000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000600000000010000000900010073797a30000000000900030073797a310000000058000000060a010400004000000000000100000008000b4000000000300004802c000180090001007866726d000000001c0002800800014000000016050003000000000008000240000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x0)

1m13.364148998s ago: executing program 2 (id=4478):
openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$kcm(0x2d, 0x2, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0))
unshare(0x22020600)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x3000000}, 0x0, &(0x7f0000000040)={0x3ff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

1m8.727920577s ago: executing program 3 (id=4480):
syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x10678000)
writev(r0, &(0x7f0000000300)=[{&(0x7f00000005c0)="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", 0x13d}, {&(0x7f0000000340)="bf67a361000138944b854b78cc4e2237f68791bd7786513b715bf9ad6389844bc809b10b216304437e8d4b9e9cec7b31a34a02854029d58ba77b51b6479ef73e43d95fb478cc230a625897", 0x4b}, {&(0x7f0000000440)="9daf5194d6ff2fb71e455a389b8ead15aebc12ea8ead35a3b45cb2f2603e607dfe3f1228fb0b1cd1968a9bcd1badfa49059ce704fa1228343bfe3f3600c5000000000000d09c5c82111202b07c1c755457049ad0ebcd70cbaa678adaa17831266adfc9fa04f5093b8c9fd353b714b22e5454084aa316bd17dbadd5a49b0dd3b073051bb901212a764a56d76d2ff9747d5cad8712e20378bbbcca075b5564a0b50df37294931900f48618135effbb4f2392455f6451fd556b02e166b774d78b8f419eebd9998b8d428dc4b2fcb57503d0eeba1a3280f447ccf7812d1895b6479c7059fe50fff0e5c7dcf0768191e9bcb9c2b1e58427a93a7396d404a4116c8cd5e00456979d2dce4347f00189da68317adf15ea9e728f1fb93db495bd754b84cfc923a1428c97643f05cf00000000000000000000000000005e2cd2cd53a53fab4d50415b7fc96347", 0x148}], 0x3)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x0)

1m8.648926569s ago: executing program 1 (id=4481):
io_setup(0x8, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2b)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x0, 0x1, 0x4, 0x0, 0xfffffff9, {0x0, 0xea60}, {0x1, 0xc, 0x9, 0x48, 0x3, 0x8}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x496000})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000280)={0x2, 0x0, [{0x7, 0xfffffff8, 0x7, 0x703f4ebb, 0x1000001}, {0x1, 0x6, 0x6, 0xffffffff, 0x3}]})
r5 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x112)
openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
writev(r1, 0x0, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r6, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r7, 0xffffffffffffffff, 0x0)
r8 = io_uring_setup(0x5c41, &(0x7f0000000300)={0x0, 0x6053, 0x803, 0x1, 0x99})
io_uring_register$IORING_REGISTER_RING_FDS(r8, 0x14, &(0x7f0000001780), 0xa)
io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2000, r5, 0x0, 0x0, 0x801000}, &(0x7f0000000080)={0x300000000000000, 0x0, 0x0, 0x0, 0x48f, r5, 0x0, 0x0, 0x0, 0x0, 0x0, r5}])
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40014)
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r9, &(0x7f00000017c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@gre_packet={0x5, 0x6, "47a01b", 0x4d, 0x2f, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x1}, {0x8, 0x88be, 0x2, {{0x7, 0x1, 0x40, 0x0, 0x0, 0x1, 0x0, 0x89}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x1, {{0xe, 0x2, 0x9, 0x0, 0x0, 0x3, 0x5, 0x5}, 0x2, {0x7, 0x2, 0x2, 0x1b, 0x0, 0x0, 0x3, 0x1}}}, {0x8, 0x6558, 0x4, "c7b72f8b091f11c6e7"}}}}}}, 0x83)
r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
io_setup(0x222, &(0x7f0000000180)=<r12=>0x0)
io_submit(r12, 0x2, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, r11, &(0x7f0000000000)='%', 0x1, 0xfffffffffffffffc}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd}])
sendmmsg(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00)'], 0x28}}], 0x1, 0x4000000)

1m8.283865879s ago: executing program 4 (id=4483):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096230b26e53f07010000002a900683749e821dab8b9236592b000400009371"], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="4d0001d751307c8673098eaeac14fb9cb0398f0952f2d7a80375c959ad616f6f928203cf073a1f59487e3715fcb54701f05f3e1fb4a0c7105422dfc79d38833ea5016c40de819b8e4aaab58fbec480c8c37d9a8c017c1207b67993cfeae7d02bccaf22acb50362107b21cd835e8511402351b512d8a0bf8f5875d5632556b9a9da17"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)

1m7.762892409s ago: executing program 2 (id=4484):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x88)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0x2020)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000100000f4000200000000000000001000", @ANYRES32=0x0, @ANYBLOB="31200000000000000c002b80080003000200000008001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44040)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/address_bits', 0x2002, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0x8, 0x9, 0x3, 0xe4, 0x40, 0x30, 0xff, 0x30, 0x19, 0x80}, {0x41000, 0x3000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x8, 0x58, 0x3, 0x3}, {0xdddd1000, 0xe000, 0xb, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x81}, {0xdddd0000, 0xffff1000, 0xe, 0x5d, 0x4, 0x43, 0x0, 0xfa, 0x80, 0x7, 0xe, 0x4}, {0xdddd0000, 0x9000, 0x8, 0x1, 0x3, 0x7, 0xab, 0x7f, 0x47, 0x7, 0xf7, 0x82}, {0x0, 0x80a0000, 0x8, 0xa0, 0xb5, 0x8, 0x1, 0xd, 0x88, 0xf, 0x1, 0xfd}, {0x54000, 0x2, 0x4, 0x5, 0x7, 0x2, 0xb, 0x0, 0x6, 0x7e, 0xff, 0x70}, {0xf000, 0xb000, 0xe, 0x5, 0xf, 0x7, 0x3, 0x16, 0x2, 0x3, 0x7, 0x9}, {0xb000, 0x2d}, {0x10000, 0x3ff}, 0xa0010000, 0x0, 0x6000, 0x42024, 0x6, 0x9501, 0x3000, [0x6840000000000002, 0x3, 0x91, 0xff]})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f000000a000/0x18000)=nil, &(0x7f0000001b00)=[@textreal={0x8, 0x0}], 0x1, 0xe, 0x0, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
socket(0x400000000010, 0x3, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a740000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000480003801c0000800c00018006000100d10300000c000440000000002df31ab3240000800c00044000000000000000050800034000000002"], 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r9 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x20, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x8, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x9, 0x32}}}}}}]}}, 0x0)
syz_usb_control_io$sierra_net(r9, 0x0, 0x0)
syz_open_dev$admmidi(&(0x7f0000000000), 0x8, 0x400080)

1m7.134524468s ago: executing program 1 (id=4485):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r0, &(0x7f0000000900)={0x0, 0x601, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x20, 0x110, 0xd, {0x0, @multicast2, @loopback}}}], 0x20}, 0x24000090)

1m6.682171364s ago: executing program 1 (id=4486):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup_subtree(r6, &(0x7f0000000300), 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af3653400120038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = fsopen(&(0x7f0000000040)='squashfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000200)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcf\xcb\x92\xf1\x83\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x5, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0)
r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
read$FUSE(r9, &(0x7f00000027c0)={0x2020}, 0x2020)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac0102030109021b0001000000000904000001098b7500090583", @ANYRES8], 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0xc0000)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)={0x0, 0x11, 0x6, {0x6, 0x5, "9e56c35f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

1m4.027729511s ago: executing program 4 (id=4487):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r1, {r0}}, './file0\x00'})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r3, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xdcc}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8801}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x1, 0x8, 0x2, 0x0, 0x4, 0x9, 0x3, 0x4, 0x1, 0x7, 0x0, 0x2, 0x0, 0xffffffc4, 0x7fffffff, 0x0, 0xff, 0x40, 0x6, '\x00', 0x10, 0x2})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000072, 0x0, 0x2}]})

1m3.000456961s ago: executing program 32 (id=4475):
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsopen(0x0, 0x0)
gettid()
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000026000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000910030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0)
close(r0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'xfrm0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x6, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xfff1}, {0x8, 0x1}}, [@TCA_EGRESS_BLOCK={0x0, 0xe, 0x40400000}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x50}}, 0xc014)
timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f00000001c0)=ANY=[@ANYRES64=r2], 0x3a)
r6 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000440)={'#! ', './file1/../file0', [{0x20, 'cgroup.stat\x00'}, {0x20, '\x00#a\xe2\xa0&E\te\xec\xd4\xd4<\xdf\xb0\xa9k0\x8f~BsZ\x91\x7ft\xdb\xac\x9d\x87\fC\xcf\x9d\x94n\x1fP\x7f2\xb28\x00\x1a\xd2'}]}, 0x4f)
write$UHID_INPUT(r7, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183e9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf063a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c838587b915337169ee054655f26a04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f9fd2b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b124e4ebe0d9883ef100f1934e425a4146056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423d27f7b78fafa060000006eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c734052af9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f87d2a1a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746733d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7bfba20f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c1169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a42010e24f69de817f676c2a224300d749571ad43f49d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d026f58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a63941564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc46f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9fe9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4670b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2d27c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f44888b14941b5911b050e9319fe88033f830a8490917a9c0572ebbc5492b4e1083a2e3d77215a34abef947b5b9a950e780662de18873e55899c92db3ad3d437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb0466c237376ca2944ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c7c636b3a2b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e400000000000000000000000000000001df00", 0x1000}}, 0x1006)
ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}})
mmap(&(0x7f0000cda000/0x4000)=nil, 0x4000, 0x9, 0x12, r0, 0x173b000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000600000000010000000900010073797a30000000000900030073797a310000000058000000060a010400004000000000000100000008000b4000000000300004802c000180090001007866726d000000001c0002800800014000000016050003000000000008000240000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x0)

1m2.460859548s ago: executing program 3 (id=4489):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000100), 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, <r6=>0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0)
pipe2$9p(0x0, 0x81800)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r8=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={<r9=>0xffffffffffffffff}, 0x106, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x9}, {0xa, 0x4e23, 0x6, @mcast1, 0x7fffffff}, r8, 0x80d}}, 0x48)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r7, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r9, r7}}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r6, {<r10=>0xee01, 0xee00}}, './file0\x00'})
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000a80)={0xa0, 0x19, 0x1, {0x8, {0x0, 0x2, 0x6}, 0x38, r10, 0x0, 0x6, 0x3ff, 0x9, 0x4, 0xf8b, 0xa3f7, 0x7, 0x1000, 0x0, 0x9, 0x100, 0x800000000000, 0x2, 0x6, 0x3}}, 0xa0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r11, 0x11c, 0x4, 0x0, &(0x7f00000001c0)=0x28)
r12 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r13=>0x0, &(0x7f0000000280)=<r14=>0x0, &(0x7f0000000140)=<r15=>0x0)
syz_ublk_add_dev(r12, r13, r14, r15, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r16=>0x0)
r17 = socket$inet6_tcp(0xa, 0x1, 0x0)
r18 = dup(r17)
syz_ublk_setup_queues(r18, r16, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x1, 0x255, 0x0, r12}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x3, 0x10000002, 0x0, r18}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x0, 0xffffffc, 0x2cb}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcc92, 0x800, 0x1, 0x287, 0x0, r18}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x100, 0x1, 0x367, 0x0, r12}}], 0x1, &(0x7f0000000780)={0x2e, 0x11, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
syz_ublk_setup_queues(0xffffffffffffffff, r16, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x6, 0x14c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x71ea, 0x8, 0x2000, 0x35f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x400, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x451e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
writev(r1, &(0x7f0000000300)=[{&(0x7f00000003c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000591b00224e00", 0x57}], 0x1)
r19 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r20 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r20, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1400000010000100000000000000000000000000010000200900010073797a300000000028000000030a0102000000000000fc7ec4d3a0d9679b0000010000080900010073797a3000000000080003006e6174005c000000060a01040000000000000000010000"], 0xcc}}, 0x0)
r21 = ioctl$KVM_CREATE_VCPU(r19, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r21, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000001c0)="b9800000c00f3235000800000f30b980010000b80d000000ba000000000f30f20f5fc566ba2000ed886da40f01c5440f20c0350f000000440f22c03e77bfb8020000000f23c80f21f8350c0000000f23f8640f01ca", 0x55}], 0x1, 0x11, 0x0, 0x0)

1m2.375267301s ago: executing program 1 (id=4490):
syz_open_pts(0xffffffffffffffff, 0x40)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r3, 0xf)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r6, 0x0)
landlock_restrict_self(r6, 0x0)
landlock_restrict_self(r6, 0x0)
r7 = getpgid(0x0)
fcntl$setownex(r5, 0xf, &(0x7f0000000140)={0x2, r7})
sendmmsg$unix(r4, &(0x7f0000011500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4004040}}], 0x1, 0x40015)
write$tun(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd000011"], 0xfce)

59.850972783s ago: executing program 2 (id=4491):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x2c, r3, 0x1, 0xfffffffc, 0x6727, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x20004810)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = dup(r7)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r8, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, r8}, 0x94)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00022abd7000fddbdf254f00000008000300", @ANYRES32=0x0, @ANYBLOB="30007af576f9c3690c00c5001a14cbb8d38d84b308000400030000001300130050f68aa967f1c2ae"], 0x4c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r5)
getpeername$packet(r8, &(0x7f0000000300)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000340)=0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f00000003c0)={'sit0\x00', <r12=>0x0, 0x20, 0x8000, 0x3, 0xdef, {{0xd, 0x4, 0x3, 0x5, 0x34, 0x64, 0x0, 0x3, 0x4, 0x0, @empty, @multicast1, {[@cipso={0x86, 0x12, 0x2, [{0x0, 0xc, "7fd543434a9172c99792"}]}, @generic={0xe36bfff05d74bb32, 0xd, "cf7c31193d017cd01f4349"}]}}}}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r8, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r13=>0x0}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000640)={'ip6_vti0\x00', &(0x7f00000005c0)={'ip6tnl0\x00', <r14=>0x0, 0x4, 0x2, 0xf9, 0x6, 0x2, @local, @mcast1, 0x700, 0x40, 0x9, 0xd}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r8, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r15=>0x0}}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'tunl0\x00', <r16=>0x0, 0x8000, 0x40, 0x3, 0xff, {{0x15, 0x4, 0x2, 0x29, 0x54, 0x67, 0x0, 0x3, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0x10, 0x3, 0x8, [{@private=0xa010100, 0x9}]}, @cipso={0x86, 0x13, 0x0, [{0x6, 0xd, "a18456f17c42764d274e90"}]}, @timestamp={0x44, 0x20, 0x21, 0x0, 0x0, [0x3, 0xfffffffc, 0x8, 0x0, 0x1, 0xff, 0x6]}]}}}}})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000980)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0xbc, r10, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="0000000001020103000000000000004002000000300000ff010000000000000000000000000001140004002001000000abc0000000000000000002"], 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x20000080)
r17 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x6, 0x0)
ioctl$SNDRV_PCM_IOCTL_PREPARE(r17, 0x4140, 0x0)

58.684576926s ago: executing program 4 (id=4492):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1bfde, 0xe1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x41000000}, 0x0)

58.547412609s ago: executing program 4 (id=4493):
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000a00)={0x0, 0x1, 0x1, [0x0, 0x25, 0x863, 0x1fe000, 0x1], [0x8, 0xc1b, 0x1, 0x7, 0x9, 0x1, 0x8, 0x2, 0x7, 0x0, 0xfffffffffffffffa, 0x1000, 0x7fff, 0x7, 0xfe6b, 0x8, 0x7f, 0x2, 0x3, 0x40, 0x3, 0x5, 0x5, 0xc4473b3, 0xff1, 0x1, 0xfffffffffffff4e9, 0xa78b, 0x0, 0x29, 0x7, 0x2, 0x7ff, 0xb, 0xa, 0xffffffff, 0x6, 0x4, 0xfe, 0x7, 0x3, 0x7, 0x1, 0x6, 0x100000001, 0x5, 0x1, 0xa61, 0x0, 0xfffffffffffffcab, 0xbe, 0x9a4, 0x7, 0x6, 0x6, 0x80000000, 0x7ff, 0x0, 0x1000000000, 0x7ff, 0x5, 0xbf45d04000000000, 0xdff, 0x81, 0x0, 0x5, 0x2, 0x7fffffff, 0x2, 0x80000000, 0x0, 0x8001, 0x9, 0x2, 0x3, 0x3d9, 0x2, 0x0, 0x6, 0x4, 0x1, 0xa063, 0x10000, 0x4, 0xf8, 0x7fff, 0x1, 0x6, 0xd1, 0x3c, 0x9, 0x5, 0x80000000, 0x40, 0xd, 0x3, 0x6, 0x8, 0xfffffffffffffffe, 0x700000, 0x9, 0x80000001, 0x8000000000000000, 0x69c, 0x7, 0x9, 0x4, 0x2040000000000000, 0x3, 0x4, 0x21a4, 0xf4, 0x412, 0x2, 0x5, 0xff, 0xa6, 0xe0a, 0x7, 0x0, 0x1]})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40c4}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000012c0)=[@dstopts={{0x108, 0x29, 0x37, {0x87, 0x1d, '\x00', [@generic={0xf, 0xe3, "8e01531082fd4d45fc0b378f6d2b6229c8851be2938da33781743c1dfc409824a51fbe363d1d134556e8da2ace73443b9a7ecd82788307fbd726d4521a64ae70c37ef27d85e09cf282659bfbc9af37c892963124635a3ce85986e59665743065a15bf70882895570208af2b8984298611467c2e1c2c1576596999dfb278859702f15177c80174deabb90b4dce62deb80f08353ace35f5c03f36a3222f5bd9d01e02cb328d6152894e7a3fb0b98e5b52ac293efaa7ccfa1e0c48d7ea420220db23d0261210982bd73b932620e3d84e755e7d27c323cfaa6690d2a47310fd5d7fa0589aa"}, @pad1, @enc_lim={0x4, 0x1, 0xa}, @pad1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xb8, 0x29, 0x4, {0x4, 0x13, '\x00', [@generic={0xfe, 0x39, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36"}, @jumbo={0xc2, 0x4, 0x7f}, @calipso={0x7, 0x30, {0x1, 0xa, 0x7a, 0x8001, [0x5, 0x9, 0x100000000004, 0x4, 0xb]}}, @pad1, @ra={0x5, 0x2, 0xbf4}, @calipso={0x7, 0x20, {0x1, 0x6, 0x4, 0xf9, [0xfffffffffffffff9, 0x0, 0xfdf9]}}]}}}, @hoplimit={{0x14}}, @hopopts={{0x18, 0x29, 0x36, {0x5e}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x270}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/75, 0x4b}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000002840)="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", 0xf91}, {&(0x7f0000000500)="0176aa328ab4de4ae23569cd227d7268b1133acc410077b87d061cbe30d5860e9323c7ec74fca7af7f25f9dda688b311e098d12916c48cbc63b91485bf3c03e95dbda6d0687c8169fee4c8250f75e4e09562bfc023db33d96e0bff24456f18630b77e7876ae8d26c63b4eb58583c", 0x6e}], 0x2, 0x1, 0x8)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2132, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r6, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @mgmt_frame=@deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x2}, @broadcast, @broadcast, @initial, {0x7, 0x2}}, 0x39, @val={0x8c, 0x10, {0x5e, "dd7d48c8934a", @short="37feb538b4e746e4"}}}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x40c49)
brk(0x200000ffc000)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)

57.324530918s ago: executing program 5 (id=4488):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x460a6000)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000200)=ANY=[@ANYBLOB="12011001000000108a25330000000000000109022d"], 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
timer_create(0x3, &(0x7f0000000100)={0x0, 0x38, 0x4}, 0x0)
syz_open_dev$evdev(&(0x7f00000005c0), 0x3214, 0x0)
syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00060008"], 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe804c000000000000000000000000aa11000001"], 0x0)

55.732773247s ago: executing program 4 (id=4494):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000130005002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="026404000000000014000300766c616e300000000000000000f100000a000100ba"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x42)

55.526564868s ago: executing program 3 (id=4495):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x80, 0x80, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000885}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f00000004"], 0x50)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
rename(0x0, &(0x7f00000000c0)='./file0\x00')
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x8, 0x4, 0x4, 0x9, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x8, 0x7, 0x4000000000000e52, 0x1, 0x5479, 0x1041, 0x200000000006, 0xfffffffffffffffd, 0x1, 0xfffffffffffffffe, 0x100000000, 0x1, 0x40000000009, 0x8000000000005, 0x10000800040068], 0xd000, 0x80})
ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000080)={0xeeee8000, 0xeeee0000, 0xe, 0x9, 0x1})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

55.415889967s ago: executing program 2 (id=4496):
r0 = socket$alg(0x26, 0x5, 0x0) (async)
r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x1b0400)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1}) (async)
r3 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000200)={0x2, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) (async)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000000)={r2, 0x0, 0x1, 0x0, 0x3})
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16) (async)
r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000002140)=0x20)
ppoll(&(0x7f00000003c0)=[{r4, 0x20}], 0x1, 0x0, 0x0, 0x0)
mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000f, 0x11, r4, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x4000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) (async)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x6, &(0x7f0000000140)=[{0x67, 0x3, 0xf7, 0x1}, {0x7e, 0x58, 0x9, 0xffffff00}, {0xfffe, 0x8, 0x0, 0x3ff}, {0x2, 0x3, 0x0, 0xd}, {0xbb1, 0x1, 0x32, 0x6}, {0x3, 0xb, 0x6b, 0x1}]}, 0x10) (async)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000002c0))
ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000400)={0x60, 0x0, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x9, &(0x7f0000000340)=[{0xa, 0x4cc8, 0x1}], 0x1, 0x1, 0x24, 0x0, 0x17, 0x6f})

55.415591381s ago: executing program 1 (id=4497):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180500f3ffffff000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70600000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

55.411914169s ago: executing program 4 (id=4498):
syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x10678000)
writev(r0, &(0x7f0000000300)=[{&(0x7f00000005c0)="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", 0x13d}, {&(0x7f0000000340)="bf67a361000138944b854b78cc4e2237f68791bd7786513b715bf9ad6389844bc809b10b216304437e8d4b9e9cec7b31a34a02854029d58ba77b51b6479ef73e43d95fb478cc230a625897", 0x4b}, {&(0x7f0000000440)="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", 0x148}], 0x3)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x0)

55.109316585s ago: executing program 5 (id=4499):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup_subtree(r6, &(0x7f0000000300), 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af3653400120038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = fsopen(&(0x7f0000000040)='squashfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000200)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcf\xcb\x92\xf1\x83\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x5, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0)
r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
read$FUSE(r9, &(0x7f00000027c0)={0x2020}, 0x2020)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac0102030109021b0001000000000904000001098b7500090583", @ANYRES8], 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0xc0000)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)={0x0, 0x11, 0x6, {0x6, 0x5, "9e56c35f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

54.935552535s ago: executing program 1 (id=4500):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x88)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0x2020)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000100000f4000200000000000000001000", @ANYRES32=0x0, @ANYBLOB="31200000000000000c002b80080003000200000008001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44040)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/address_bits', 0x2002, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0x8, 0x9, 0x3, 0xe4, 0x40, 0x30, 0xff, 0x30, 0x19, 0x80}, {0x41000, 0x3000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x8, 0x58, 0x3, 0x3}, {0xdddd1000, 0xe000, 0xb, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x81}, {0xdddd0000, 0xffff1000, 0xe, 0x5d, 0x4, 0x43, 0x0, 0xfa, 0x80, 0x7, 0xe, 0x4}, {0xdddd0000, 0x9000, 0x8, 0x1, 0x3, 0x7, 0xab, 0x7f, 0x47, 0x7, 0xf7, 0x82}, {0x0, 0x80a0000, 0x8, 0xa0, 0xb5, 0x8, 0x1, 0xd, 0x88, 0xf, 0x1, 0xfd}, {0x54000, 0x2, 0x4, 0x5, 0x7, 0x2, 0xb, 0x0, 0x6, 0x7e, 0xff, 0x70}, {0xf000, 0xb000, 0xe, 0x5, 0xf, 0x7, 0x3, 0x16, 0x2, 0x3, 0x7, 0x9}, {0xb000, 0x2d}, {0x10000, 0x3ff}, 0xa0010000, 0x0, 0x6000, 0x42024, 0x6, 0x9501, 0x3000, [0x6840000000000002, 0x3, 0x91, 0xff]})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f000000a000/0x18000)=nil, &(0x7f0000001b00)=[@textreal={0x8, 0x0}], 0x1, 0xe, 0x0, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
socket(0x400000000010, 0x3, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a740000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000480003801c0000800c00018006000100d10300000c000440000000002df31ab3240000800c00044000000000000000050800034000000002"], 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r9 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x20, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x8, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x9, 0x32}}}}}}]}}, 0x0)
syz_usb_control_io$sierra_net(r9, 0x0, 0x0)
syz_open_dev$admmidi(&(0x7f0000000000), 0x8, 0x400080)

54.929472379s ago: executing program 2 (id=4501):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r1, {r0}}, './file0\x00'})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r3, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xdcc}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8801}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x1, 0x8, 0x2, 0x0, 0x4, 0x9, 0x3, 0x4, 0x1, 0x7, 0x0, 0x2, 0x0, 0xffffffc4, 0x7fffffff, 0x0, 0xff, 0x40, 0x6, '\x00', 0x10, 0x2})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000072, 0x0, 0x2}]})

54.66304723s ago: executing program 3 (id=4502):
prctl$PR_MCE_KILL(0x4e, 0x0, 0x20000)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x40800, 0x0)
syz_emit_ethernet(0x23, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa01de23000000810020000011000153128e8900119d8bf89ca1bb2532f1"], 0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201ab00c4b20710200e01015a7a0102030109021b0001000000000904"], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4000003e)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x1000f)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4048043)
getpeername(0xffffffffffffffff, &(0x7f0000000240)=@ethernet={0x0, @remote}, &(0x7f0000000080)=0x80)
socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00'})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)

53.906437259s ago: executing program 2 (id=4503):
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0xd, 0x80000000, 0xc27, 0x11, 0xffffffffffffffff, 0x5]}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0xd00, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2827e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac008000000000000200", "f4bd000000801900", [0x8, 0xffffffff9673e359]}})

53.486808463s ago: executing program 5 (id=4504):
socket$inet6(0xa, 0x3, 0x8000000003c)
socket$unix(0x1, 0x1, 0x0)
syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0x3}, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0)
syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1d}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300000000800000000000000000000007000000000000000800000000004000050000000000000002"], 0x78)
ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101)
ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x400}], 0x20000000000000dc, 0x0, 0x0, 0xfffffffffffffcdd)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xc}]}, 0x40}}, 0x0)

0s ago: executing program 33 (id=4500):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x88)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0x2020)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000100000f4000200000000000000001000", @ANYRES32=0x0, @ANYBLOB="31200000000000000c002b80080003000200000008001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44040)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/address_bits', 0x2002, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0x8, 0x9, 0x3, 0xe4, 0x40, 0x30, 0xff, 0x30, 0x19, 0x80}, {0x41000, 0x3000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x8, 0x58, 0x3, 0x3}, {0xdddd1000, 0xe000, 0xb, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x81}, {0xdddd0000, 0xffff1000, 0xe, 0x5d, 0x4, 0x43, 0x0, 0xfa, 0x80, 0x7, 0xe, 0x4}, {0xdddd0000, 0x9000, 0x8, 0x1, 0x3, 0x7, 0xab, 0x7f, 0x47, 0x7, 0xf7, 0x82}, {0x0, 0x80a0000, 0x8, 0xa0, 0xb5, 0x8, 0x1, 0xd, 0x88, 0xf, 0x1, 0xfd}, {0x54000, 0x2, 0x4, 0x5, 0x7, 0x2, 0xb, 0x0, 0x6, 0x7e, 0xff, 0x70}, {0xf000, 0xb000, 0xe, 0x5, 0xf, 0x7, 0x3, 0x16, 0x2, 0x3, 0x7, 0x9}, {0xb000, 0x2d}, {0x10000, 0x3ff}, 0xa0010000, 0x0, 0x6000, 0x42024, 0x6, 0x9501, 0x3000, [0x6840000000000002, 0x3, 0x91, 0xff]})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f000000a000/0x18000)=nil, &(0x7f0000001b00)=[@textreal={0x8, 0x0}], 0x1, 0xe, 0x0, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
socket(0x400000000010, 0x3, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a740000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000480003801c0000800c00018006000100d10300000c000440000000002df31ab3240000800c00044000000000000000050800034000000002"], 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r9 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x20, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x8, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x9, 0x32}}}}}}]}}, 0x0)
syz_usb_control_io$sierra_net(r9, 0x0, 0x0)
syz_open_dev$admmidi(&(0x7f0000000000), 0x8, 0x400080)

kernel console output (not intermixed with test programs):

 754.478180][T13487] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  754.489407][T13487] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  754.499473][ T5691] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  754.510067][T13487] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[  754.520326][T13487] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  754.529600][T13487] usb 3-1: Product: syz
[  754.533944][T13487] usb 3-1: Manufacturer: syz
[  754.544022][T13487] usb 3-1: SerialNumber: syz
[  754.550626][T13487] usb 3-1: config 0 descriptor??
[  754.559971][T13487] hub 3-1:0.0: bad descriptor, ignoring hub
[  754.565913][T13487] hub 3-1:0.0: probe with driver hub failed with error -5
[  754.576031][T13487] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input76
[  754.668147][ T5691] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  754.679886][ T5691] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  754.690989][ T5691] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  754.702379][ T5691] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  754.712273][ T5691] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  754.724063][T18876] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  754.737883][ T5713] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  754.896484][ T5713] usb 4-1: device descriptor read/64, error -71
[  754.978338][T13501] usb 3-1: USB disconnect, device number 19
[  755.146508][ T5713] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  755.276505][ T5713] usb 4-1: device descriptor read/64, error -71
[  755.302429][ T5691] aiptek 1-1:17.0: Aiptek using 400 ms programming speed
[  755.313018][ T5691] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input77
[  755.366780][ T5691] usb 1-1: USB disconnect, device number 12
[  755.372777][    C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  755.388603][ T5713] usb usb4-port1: attempt power cycle
[  755.736462][ T5713] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  755.760141][ T5713] usb 4-1: device descriptor read/8, error -71
[  755.897562][T13500] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  756.006422][ T5713] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  756.027409][ T5713] usb 4-1: device descriptor read/8, error -71
[  756.046343][T13500] usb 3-1: Using ep0 maxpacket: 16
[  756.053685][T13500] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  756.064488][T13500] usb 3-1: config 0 has no interfaces?
[  756.070527][T13500] usb 3-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00
[  756.081768][T13500] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  756.093174][T13500] usb 3-1: config 0 descriptor??
[  756.136637][ T5713] usb usb4-port1: unable to enumerate USB device
[  756.176415][T13487] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  756.304203][ T5713] usb 3-1: USB disconnect, device number 20
[  756.347194][T13487] usb 1-1: Using ep0 maxpacket: 8
[  756.363033][T13487] usb 1-1: unable to get BOS descriptor or descriptor too short
[  756.372019][T13487] usb 1-1: unable to read config index 0 descriptor/start: -71
[  756.380013][T13487] usb 1-1: can't read configurations, error -71
[  756.513622][T18910] netlink: 'syz.1.4178': attribute type 9 has an invalid length.
[  756.617762][T18916] loop4: detected capacity change from 0 to 7
[  756.630634][T18916]  loop4: [CUMANA/ADFS] p1 [ADFS] p1
[  756.636056][T18916] loop4: partition table partially beyond EOD, truncated
[  756.643492][T18916] loop4: p1 size 2989602745 extends beyond EOD, truncated
[  756.689344][ T9662] udevd[9662]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  756.966353][ T5713] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  757.170133][ T5713] usb 2-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02
[  757.192221][ T5713] usb 2-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255
[  757.208945][ T5713] usb 2-1: Product: syz
[  757.220769][ T5713] usb 2-1: SerialNumber: syz
[  757.229118][T13500] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  757.242090][ T5713] usb 2-1: config 0 descriptor??
[  757.396839][T13500] usb 3-1: Using ep0 maxpacket: 8
[  757.412212][T13500] usb 3-1: config 0 interface 0 has no altsetting 0
[  757.419573][T13500] usb 3-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00
[  757.429106][T13500] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  757.438295][T18930] netlink: 'syz.4.4187': attribute type 8 has an invalid length.
[  757.450185][T13487] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  757.452498][T13500] usb 3-1: config 0 descriptor??
[  757.502910][ T5713] ldusb 2-1:0.0: Interrupt in endpoint not found
[  757.519082][ T5713] usb 2-1: USB disconnect, device number 8
[  757.630040][T13487] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  757.641230][T13487] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  757.653883][T13487] usb 1-1: config 0 interface 0 has no altsetting 0
[  757.662747][T13487] usb 1-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00
[  757.672827][T13487] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  757.683827][T13487] usb 1-1: config 0 descriptor??
[  757.884992][T13500] hid_parser_main: 8 callbacks suppressed
[  757.885014][T13500] lg-g15 0003:046D:C225.001A: unknown main item tag 0x1
[  757.903233][T13500] lg-g15 0003:046D:C225.001A: unknown main item tag 0x6
[  757.912609][T13500] lg-g15 0003:046D:C225.001A: unknown main item tag 0x0
[  757.921409][T13500] lg-g15 0003:046D:C225.001A: unknown main item tag 0x0
[  757.929112][T13500] lg-g15 0003:046D:C225.001A: unknown main item tag 0x0
[  757.936123][T13500] lg-g15 0003:046D:C225.001A: unknown main item tag 0x0
[  757.943387][T13500] lg-g15 0003:046D:C225.001A: unknown main item tag 0x0
[  757.950454][T13500] lg-g15 0003:046D:C225.001A: unknown main item tag 0x0
[  757.959611][T13500] lg-g15 0003:046D:C225.001A: unknown main item tag 0x0
[  757.966996][T13500] lg-g15 0003:046D:C225.001A: unknown main item tag 0x0
[  757.977566][T13500] lg-g15 0003:046D:C225.001A: hidraw0: USB HID v0.81 Device [HID 046d:c225] on usb-dummy_hcd.2-1/input0
[  758.099399][ T5691] usb 3-1: USB disconnect, device number 21
[  758.108762][T18942] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4191'.
[  758.120949][T18942] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4191'.
[  758.135658][T18942] netlink: 'syz.3.4191': attribute type 2 has an invalid length.
[  758.159328][T13487] usbhid 1-1:0.0: can't add hid device: -71
[  758.165410][T13487] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  758.178043][T13487] usb 1-1: USB disconnect, device number 14
[  758.396408][T13500] usb 4-1: new full-speed USB device number 35 using dummy_hcd
[  758.456497][T13494] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  758.547779][T13500] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  758.559067][T13500] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  758.572495][T13500] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[  758.581644][T13500] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  758.589768][T13500] usb 4-1: Product: syz
[  758.594153][T13500] usb 4-1: Manufacturer: syz
[  758.598889][T13500] usb 4-1: SerialNumber: syz
[  758.606561][T13500] usb 4-1: config 0 descriptor??
[  758.617250][T13500] hub 4-1:0.0: bad descriptor, ignoring hub
[  758.625924][T13500] hub 4-1:0.0: probe with driver hub failed with error -5
[  758.633618][T13494] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  758.638042][T13500] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input79
[  758.652785][T13494] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  758.666214][T13494] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  758.720011][T13494] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  758.755282][T13494] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  758.775665][T13494] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  758.828505][T13494] usb 2-1: config 0 descriptor??
[  758.868305][T18944] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  758.962237][T18947] __nla_validate_parse: 4 callbacks suppressed
[  758.962255][T18947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4193'.
[  758.995982][ T5691] IPVS: starting estimator thread 0...
[  759.059505][T18954] netlink: 'syz.0.4195': attribute type 1 has an invalid length.
[  759.084876][T18954] 8021q: adding VLAN 0 to HW filter on device bond7
[  759.097187][T18952] IPVS: using max 38 ests per chain, 91200 per kthread
[  759.226527][T13500] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  759.237195][T13501] usb 4-1: USB disconnect, device number 35
[  759.313874][T18964] FAULT_INJECTION: forcing a failure.
[  759.313874][T18964] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  759.328164][T18964] CPU: 0 UID: 0 PID: 18964 Comm: syz.0.4198 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  759.328194][T18964] Tainted: [L]=SOFTLOCKUP
[  759.328202][T18964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  759.328212][T18964] Call Trace:
[  759.328220][T18964]  <TASK>
[  759.328229][T18964]  dump_stack_lvl+0xe8/0x150
[  759.328258][T18964]  should_fail_ex+0x40c/0x560
[  759.328276][T18964]  _copy_to_user+0x31/0xb0
[  759.328288][T18964]  simple_read_from_buffer+0xe1/0x170
[  759.328305][T18964]  proc_fail_nth_read+0x1bb/0x230
[  759.328326][T18964]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  759.328353][T18964]  ? rw_verify_area+0x24a/0x4c0
[  759.328373][T18964]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  759.328401][T18964]  vfs_read+0x213/0xa80
[  759.328416][T18964]  ? __pfx___mutex_lock+0x10/0x10
[  759.328430][T18964]  ? __pfx_vfs_read+0x10/0x10
[  759.328440][T18964]  ? __fget_files+0x2a/0x420
[  759.328456][T18964]  ? __fget_files+0x3a2/0x420
[  759.328470][T18964]  ? __fget_files+0x2a/0x420
[  759.328500][T18964]  ksys_read+0x150/0x270
[  759.328521][T18964]  ? __pfx_ksys_read+0x10/0x10
[  759.328546][T18964]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  759.328564][T18964]  do_syscall_64+0x174/0x580
[  759.328583][T18964]  ? trace_irq_disable+0x3b/0x140
[  759.328605][T18964]  ? clear_bhb_loop+0x40/0x90
[  759.328626][T18964]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  759.328644][T18964] RIP: 0033:0x7f5aa9b5e84e
[  759.328662][T18964] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  759.328679][T18964] RSP: 002b:00007f5aaa982fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  759.328699][T18964] RAX: ffffffffffffffda RBX: 00007f5aaa9836c0 RCX: 00007f5aa9b5e84e
[  759.328707][T18964] RDX: 000000000000000f RSI: 00007f5aaa9830a0 RDI: 0000000000000004
[  759.328713][T18964] RBP: 00007f5aaa983090 R08: 0000000000000000 R09: 0000000000000000
[  759.328719][T18964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  759.328725][T18964] R13: 00007f5aa9e26038 R14: 00007f5aa9e25fa0 R15: 00007f5aa9f4fa48
[  759.328741][T18964]  </TASK>
[  759.563352][T13494] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  759.571509][T13500] usb 3-1: config 1 has an invalid interface number: 7 but max is 0
[  759.583853][T13500] usb 3-1: config 1 has no interface number 0
[  759.590271][T13500] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  759.601953][T13500] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  759.611886][T13500] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 8
[  759.622006][T13500] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  759.632985][T13500] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  759.645009][T13500] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  759.654296][T13500] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  759.662938][T13500] usb 3-1: Product: syz
[  759.667179][T13500] usb 3-1: Manufacturer: syz
[  759.671788][T13500] usb 3-1: SerialNumber: syz
[  759.680651][T18946] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  759.688023][T18946] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  759.742388][T18968] xt_CT: You must specify a L4 protocol and not use inversions on it
[  759.772003][T18944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  759.783108][T18944] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  759.813785][T18970] loop9: detected capacity change from 0 to 7
[  759.820831][    C0] blk_print_req_error: 10 callbacks suppressed
[  759.820848][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  759.836750][    C0] buffer_io_error: 10 callbacks suppressed
[  759.836776][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  759.854117][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  759.863780][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  759.872242][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  759.881996][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  759.893036][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  759.902735][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  759.913535][T18946] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  759.915307][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  759.921351][T18946] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  759.930405][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  759.941950][T13500] usb 3-1: No status endpoint found
[  759.951835][T18965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  759.980126][T18965] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  760.017917][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  760.027730][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  760.036289][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  760.045931][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  760.060585][T18970] ldm_validate_partition_table(): Disk read failed.
[  760.069809][T18974] loop4: detected capacity change from 0 to 7
[  760.076995][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  760.086666][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  760.095405][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  760.105165][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  760.114943][T18974]  loop4:
[  760.118137][T18974] loop4: partition table partially beyond EOD, truncated
[  760.120053][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  760.134873][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  760.156339][T13487] usb 3-1: USB disconnect, device number 22
[  760.172807][T18970] Dev loop9: unable to read RDB block 0
[  760.203091][T18970]  loop9: unable to read partition table
[  760.209371][T18970] loop9: partition table beyond EOD, truncated
[  760.216784][T13500] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  760.240659][T18970] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5)
[  760.392171][T13500] usb 1-1: not running at top speed; connect to a high speed hub
[  760.401213][T13500] usb 1-1: config 1 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  760.426546][T13500] usb 1-1: config 1 interface 0 has no altsetting 0
[  760.474428][T13500] usb 1-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.40
[  760.490728][T13500] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  760.499649][T13500] usb 1-1: Product: syz
[  760.516367][T13500] usb 1-1: Manufacturer: syz
[  760.526595][T13500] usb 1-1: SerialNumber: syz
[  760.572919][T18993] IPv6: addrconf: prefix option has invalid lifetime
[  760.586934][ T5698] IPVS: starting estimator thread 0...
[  760.679313][T18994] IPVS: using max 30 ests per chain, 72000 per kthread
[  760.743303][T19000] loop4: detected capacity change from 0 to 7
[  760.760688][T19000]  loop4: [CUMANA/ADFS] p1 [ADFS] p1
[  760.769264][T19000] loop4: partition table partially beyond EOD, truncated
[  760.778349][T19000] loop4: p1 size 2989602745 extends beyond EOD, truncated
[  760.797266][T13500] usbhid 1-1:1.0: can't add hid device: -71
[  760.803533][T13500] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  760.827244][T13500] usb 1-1: USB disconnect, device number 15
[  760.947346][ T5698] usb 2-1: reset high-speed USB device number 9 using dummy_hcd
[  760.997550][T19002] netlink: 'syz.3.4212': attribute type 1 has an invalid length.
[  761.042192][T19002] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  761.486333][ T5713] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  761.505171][T19021] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4217'.
[  761.525601][T19021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  761.549964][T19021] loop8: detected capacity change from 0 to 7
[  761.565677][T19021] Dev loop8: unable to read RDB block 7
[  761.571766][T19021]  loop8: unable to read partition table
[  761.578324][T19021] loop8: partition table beyond EOD, truncated
[  761.584690][T19021] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  761.646343][ T5713] usb 4-1: Using ep0 maxpacket: 16
[  761.670377][ T5713] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  761.695029][ T5713] usb 4-1: config 0 has no interfaces?
[  761.707618][ T5713] usb 4-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00
[  761.731085][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  761.753729][ T5713] usb 4-1: config 0 descriptor??
[  761.767903][T13501] usb 2-1: USB disconnect, device number 9
[  762.182459][T13501] usb 4-1: USB disconnect, device number 36
[  762.405389][T19026] syzkaller0: entered promiscuous mode
[  762.411337][T19026] syzkaller0: entered allmulticast mode
[  762.738105][T19030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4221'.
[  762.986851][ T5713] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  763.088834][T13494] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  763.178585][ T5713] usb 2-1: config 1 has an invalid interface number: 7 but max is 0
[  763.194685][ T5713] usb 2-1: config 1 has no interface number 0
[  763.211526][ T5713] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  763.243779][ T5713] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  763.256440][T13494] usb 1-1: Using ep0 maxpacket: 8
[  763.289371][ T5713] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 8
[  763.299340][T13494] usb 1-1: config index 0 descriptor too short (expected 6427, got 27)
[  763.315129][T13494] usb 1-1: config 0 has an invalid interface number: 21 but max is 0
[  763.326062][ T5713] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  763.344803][T13494] usb 1-1: config 0 has no interface number 0
[  763.356845][ T5713] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  763.356875][T13494] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  763.381740][T13494] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  763.405428][T13494] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  763.432791][T13494] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  763.452856][ T5713] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  763.466956][T13494] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  763.479973][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  763.491328][ T5713] usb 2-1: Product: syz
[  763.497373][T13494] usb 1-1: Product: syz
[  763.503474][ T5713] usb 2-1: Manufacturer: syz
[  763.511924][ T5713] usb 2-1: SerialNumber: syz
[  763.524601][T13494] usb 1-1: config 0 descriptor??
[  763.546553][T19029] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  763.683411][T19029] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  763.952018][T19029] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  764.001850][T19029] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  764.031580][ T5713] usb 2-1: No status endpoint found
[  764.080100][T19053] IPv6: addrconf: prefix option has invalid lifetime
[  764.114006][T13487] IPVS: starting estimator thread 0...
[  764.217632][T19054] IPVS: using max 54 ests per chain, 129600 per kthread
[  764.241839][ T5713] usb 2-1: USB disconnect, device number 10
[  764.505338][T19063] syzkaller0: entered promiscuous mode
[  764.512912][T19063] syzkaller0: entered allmulticast mode
[  764.587630][T13494] usb 1-1: USB disconnect, device number 16
[  764.732630][T19064] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  764.766368][T13501] usb 3-1: new full-speed USB device number 23 using dummy_hcd
[  764.918320][T13501] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  764.930076][T13501] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  764.941230][T13501] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  764.952503][T13501] usb 3-1: config 1 interface 1 has no altsetting 0
[  764.962154][T13501] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  764.977819][T13501] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  764.985886][T13501] usb 3-1: Product: syz
[  764.990470][T13501] usb 3-1: Manufacturer: syz
[  764.995086][T13501] usb 3-1: SerialNumber: syz
[  765.012232][T19063] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  765.022457][T13501] cdc_mbim 3-1:1.0: skipping garbage
[  765.028025][T13501] usb 3-1: selecting invalid altsetting 1
[  765.033869][T13501] usb 3-1: selecting invalid altsetting 0
[  765.046466][T13501] usb 3-1: selecting invalid altsetting 0
[  765.056381][T13501] cdc_mbim 3-1:1.0: bind() failure
[  765.064411][T13501] usb 3-1: selecting invalid altsetting 0
[  765.070622][T13501] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -22
[  765.080054][T13501] usb 3-1: selecting invalid altsetting 0
[  765.085855][T13501] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -22
[  765.094926][T13501] usb 3-1: selecting invalid altsetting 0
[  765.102284][T13501] usbtest 3-1:1.1: probe with driver usbtest failed with error -22
[  765.238718][T19063] netlink: 'syz.2.4234': attribute type 16 has an invalid length.
[  765.246650][T19063] netlink: 'syz.2.4234': attribute type 17 has an invalid length.
[  765.263134][T19063] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  765.281399][T13501] usb 3-1: USB disconnect, device number 23
[  765.408870][T19085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4241'.
[  765.449207][T19088] IPv6: addrconf: prefix option has invalid lifetime
[  765.462814][T19085] bond8: Removing last arp target with arp_interval on
[  765.581806][T19090] IPVS: fo: FWM 3 0x00000003 - no destination available
[  765.594151][T19090] IPVS: fo: FWM 3 0x00000003 - no destination available
[  765.626610][T13494] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  765.796770][T13494] usb 4-1: Using ep0 maxpacket: 8
[  765.817135][T13494] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9
[  765.828776][T13494] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[  765.836436][ T5713] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  765.840679][T13494] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  765.858736][T13494] usb 4-1: config 0 descriptor??
[  766.003302][ T5713] usb 2-1: Using ep0 maxpacket: 32
[  766.036840][ T5713] usb 2-1: unable to get BOS descriptor or descriptor too short
[  766.053644][ T5713] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  766.081867][ T5713] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  766.093477][ T5713] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  766.102738][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  766.110799][ T5713] usb 2-1: Product: syz
[  766.114956][ T5713] usb 2-1: Manufacturer: syz
[  766.120074][ T5713] usb 2-1: SerialNumber: syz
[  766.234426][T19106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4249'.
[  766.361768][ T5713] usb 2-1: unit 0 not found!
[  766.429952][ T5713] usb 2-1: USB disconnect, device number 11
[  766.442656][T13494] logitech 0003:046D:C20E.001C: rdesc size test failed for formula gp
[  766.465396][T13494] logitech 0003:046D:C20E.001C: unbalanced collection at end of report description
[  766.478259][T13494] logitech 0003:046D:C20E.001C: parse failed
[  766.484388][T13494] logitech 0003:046D:C20E.001C: probe with driver logitech failed with error -22
[  766.493977][ T5691] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  766.649358][ T5691] usb 3-1: config 1 has an invalid interface number: 7 but max is 0
[  766.657675][ T5691] usb 3-1: config 1 has no interface number 0
[  766.663815][ T5691] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  766.675722][ T5691] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  766.686003][ T5691] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 8
[  766.695940][ T5691] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  766.707056][ T5691] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  766.718677][T13494] usb 4-1: USB disconnect, device number 37
[  766.727171][ T5691] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  766.740225][ T5691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  766.750156][ T5691] usb 3-1: Product: syz
[  766.757306][ T5691] usb 3-1: Manufacturer: syz
[  766.761991][ T5691] usb 3-1: SerialNumber: syz
[  766.773217][T19106] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  766.781723][T19106] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  766.992138][T19106] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  767.000382][T19106] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  767.011238][ T5691] usb 3-1: No status endpoint found
[  767.160940][T19126] xt_CONNSECMARK: invalid mode: 3
[  767.215790][ T5713] usb 3-1: USB disconnect, device number 24
[  767.461391][T19136] bridge0: port 3(veth0_to_bridge) entered blocking state
[  767.469051][T19136] bridge0: port 3(veth0_to_bridge) entered disabled state
[  767.480028][T19136] veth0_to_bridge: entered allmulticast mode
[  767.509207][T19136] veth0_to_bridge: entered promiscuous mode
[  767.533942][T19136] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  767.566558][ T5698] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  767.572546][T19136] bridge0: port 3(veth0_to_bridge) entered blocking state
[  767.581520][T19136] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  767.731978][ T5698] usb 2-1: Using ep0 maxpacket: 32
[  767.739760][ T5698] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  767.750765][ T5698] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  767.760901][ T5698] usb 2-1: config 0 interface 0 has no altsetting 0
[  767.773138][ T5698] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  767.782980][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  767.791316][ T5698] usb 2-1: Product: syz
[  767.795615][ T5698] usb 2-1: Manufacturer: syz
[  767.800304][ T5698] usb 2-1: SerialNumber: syz
[  767.807651][ T5698] usb 2-1: config 0 descriptor??
[  767.936832][   T29] kauditd_printk_skb: 58 callbacks suppressed
[  767.936849][   T29] audit: type=1400 audit(1785528839.407:3270): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F0
[  767.995470][T19153] loop5: detected capacity change from 0 to 7
[  768.100977][T19153]  loop5: p1 p3 p4
[  768.106362][T19153] loop5: partition table partially beyond EOD, truncated
[  768.115277][T19153] loop5: p1 size 128 extends beyond EOD, truncated
[  768.123829][T19153] loop5: p3 size 3645588866 extends beyond EOD, truncated
[  768.192614][T10014] udevd[10014]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  768.193926][ T9721] udevd[9721]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  768.217877][ T9755] udevd[9755]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  768.245671][T19158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4268'.
[  768.296143][ T5698] gs_usb 2-1:0.0: Couldn't get device config: (err=-71)
[  768.303413][ T5698] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71
[  768.317257][ T5698] usb 2-1: USB disconnect, device number 12
[  768.741269][T19172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  768.756347][T19172] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  768.896403][ T5691] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  768.966374][T13495] usb 1-1: new low-speed USB device number 17 using dummy_hcd
[  769.047375][ T5691] usb 4-1: Using ep0 maxpacket: 32
[  769.054169][ T5691] usb 4-1: config 0 has an invalid interface number: 61 but max is 1
[  769.062591][ T5691] usb 4-1: config 0 has no interface number 1
[  769.071025][ T5691] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6
[  769.081076][ T5691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  769.089420][ T5691] usb 4-1: Product: syz
[  769.093795][ T5691] usb 4-1: Manufacturer: syz
[  769.098548][ T5691] usb 4-1: SerialNumber: syz
[  769.106184][ T5691] usb 4-1: config 0 descriptor??
[  769.126425][T13495] usb 1-1: Invalid ep0 maxpacket: 64
[  769.196602][T13501] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  769.216870][ T5691] viperboard 4-1:0.61: version 0.00 found at bus 004 address 038
[  769.238499][ T5691] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100
[  769.248528][ T5691] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5
[  769.259140][T13495] usb 1-1: new low-speed USB device number 18 using dummy_hcd
[  769.279675][ T5691] viperboard 4-1:0.0: version 0.00 found at bus 004 address 038
[  769.309756][ T5691] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100
[  769.321994][ T5691] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5
[  769.346428][T13501] usb 2-1: Using ep0 maxpacket: 8
[  769.347281][ T5691] usb 4-1: USB disconnect, device number 38
[  769.355328][T13501] usb 2-1: unable to get BOS descriptor or descriptor too short
[  769.372858][T19181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4276'.
[  769.389340][T13501] usb 2-1: config 1 has an invalid descriptor of length 221, skipping remainder of the config
[  769.419326][T13501] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  769.442494][T13501] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  769.447447][T13495] usb 1-1: Invalid ep0 maxpacket: 64
[  769.483826][T13495] usb usb1-port1: attempt power cycle
[  769.499850][T13501] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  769.510676][T13501] usb 2-1: New USB device strings: Mfr=1, Product=232, SerialNumber=3
[  769.521567][T13501] usb 2-1: Product: syz
[  769.525857][T13501] usb 2-1: Manufacturer: syz
[  769.531681][T13501] usb 2-1: SerialNumber: syz
[  769.536636][T19183] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4277'.
[  769.672827][T19186] IPv6: Can't replace route, no match found
[  769.759221][T19190] Invalid logical block size (-4)
[  769.826386][T13495] usb 1-1: new low-speed USB device number 19 using dummy_hcd
[  769.846950][T13495] usb 1-1: Invalid ep0 maxpacket: 64
[  769.986529][T13495] usb 1-1: new low-speed USB device number 20 using dummy_hcd
[  770.017067][T13495] usb 1-1: Invalid ep0 maxpacket: 64
[  770.022775][T13495] usb usb1-port1: unable to enumerate USB device
[  770.096026][   T29] audit: type=1326 audit(1785528841.567:3271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19192 comm="syz.3.4281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe0d9e019 code=0x7ffc0000
[  770.122936][   T29] audit: type=1326 audit(1785528841.567:3272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19192 comm="syz.3.4281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe0d9e019 code=0x7ffc0000
[  770.148519][   T29] audit: type=1326 audit(1785528841.597:3273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19192 comm="syz.3.4281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe0d9e019 code=0x7ffc0000
[  770.173769][   T29] audit: type=1326 audit(1785528841.597:3274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19192 comm="syz.3.4281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe0d9e019 code=0x7ffc0000
[  770.199695][   T29] audit: type=1326 audit(1785528841.597:3275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19192 comm="syz.3.4281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6fe0d9e019 code=0x7ffc0000
[  770.225354][   T29] audit: type=1326 audit(1785528841.597:3276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19192 comm="syz.3.4281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe0d9e019 code=0x7ffc0000
[  770.250075][   T29] audit: type=1326 audit(1785528841.597:3277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19192 comm="syz.3.4281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe0d9e019 code=0x7ffc0000
[  770.286368][   T29] audit: type=1326 audit(1785528841.677:3278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19192 comm="syz.3.4281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe0d9e019 code=0x7ffc0000
[  770.311656][   T29] audit: type=1326 audit(1785528841.677:3279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19192 comm="syz.3.4281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe0d9e019 code=0x7ffc0000
[  771.311860][T19207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4285'.
[  771.323614][T19207] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  771.572191][ T5627] Bluetooth: hci4: SCO packet for unknown connection handle 200
[  771.887186][T13503] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  772.038428][T19224] loop4: detected capacity change from 0 to 7
[  772.062988][T13501] cdc_ncm 2-1:1.0: invalid descriptor buffer length
[  772.071918][T13501] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  772.079263][T13501] cdc_ncm 2-1:1.0: bind() failure
[  772.085434][T13503] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  772.100071][T13503] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  772.112297][T13501] usb 2-1: USB disconnect, device number 13
[  772.124551][T13503] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  772.160887][T19224]  loop4: [CUMANA/ADFS] p1 [ADFS] p1
[  772.172627][T13503] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  772.183152][T19224] loop4: partition table partially beyond EOD, truncated
[  772.188617][T13503] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  772.210063][T19224] loop4: p1 size 2989602745 extends beyond EOD, truncated
[  772.210460][T13503] usb 3-1: config 0 descriptor??
[  772.383477][T19234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  772.449041][T19234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  772.523616][T19234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  772.588325][T19235] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  772.637501][T13503] hid_parser_main: 10 callbacks suppressed
[  772.637524][T13503] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  772.655871][T13503] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  772.663849][T13503] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  772.672004][T13503] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  772.680169][T13503] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  772.700538][T13503] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  772.959912][T19238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4297'.
[  773.236475][T13503] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  773.386634][T13503] usb 2-1: Using ep0 maxpacket: 8
[  773.398547][T13503] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  773.407700][T13503] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  773.415721][T13503] usb 2-1: Product: syz
[  773.420074][T13503] usb 2-1: Manufacturer: syz
[  773.424698][T13503] usb 2-1: SerialNumber: syz
[  773.759764][T13503] usb 2-1: Audio class v2/v3 interfaces need an interface association
[  773.803117][T13503] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  773.820627][T13503] usb 2-1: USB disconnect, device number 14
[  773.857895][ T9662] udevd[9662]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  774.054048][T19251] netlink: 'syz.0.4302': attribute type 10 has an invalid length.
[  774.086363][T13501] usb 3-1: reset high-speed USB device number 25 using dummy_hcd
[  774.208501][T19259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4305'.
[  774.235100][T19257] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  774.328791][T19262] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4305'.
[  774.427664][T19266] netlink: 'syz.3.4307': attribute type 1 has an invalid length.
[  774.469404][T19266] 8021q: adding VLAN 0 to HW filter on device bond6
[  774.584136][T19272] syzkaller0: entered promiscuous mode
[  774.591126][T19272] syzkaller0: entered allmulticast mode
[  774.625991][T19272] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  774.638646][T19271] tipc: Resetting bearer <eth:syzkaller0>
[  774.665061][T19274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4309'.
[  774.676087][T19274] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4309'.
[  774.688160][T19274] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4309'.
[  774.808669][T19271] tipc: Disabling bearer <eth:syzkaller0>
[  774.857623][T13503] usb 3-1: USB disconnect, device number 25
[  774.880679][T19282] xt_CT: You must specify a L4 protocol and not use inversions on it
[  774.929541][T19284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4313'.
[  774.966671][T19284] bond4: Removing last arp target with arp_interval on
[  775.337806][T13503] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  775.498990][T13503] usb 3-1: Using ep0 maxpacket: 16
[  775.505853][T13503] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  775.520348][T13503] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  775.529928][T13503] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  775.538865][T13503] usb 3-1: Product: syz
[  775.543179][T13503] usb 3-1: Manufacturer: syz
[  775.548182][T13503] usb 3-1: SerialNumber: syz
[  775.558593][T13503] usb 3-1: config 0 descriptor??
[  775.568659][T13503] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  775.578429][T13503] em28xx 3-1:0.0: DVB interface 0 found: bulk
[  776.085080][T19310] mac80211_hwsim hwsim30 wlan1: entered promiscuous mode
[  776.178998][T19288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4314'.
[  776.204616][T13503] em28xx 3-1:0.0: chip ID is em2750
[  776.406626][T13494] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  776.490067][T13503] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  776.502580][T13503] em28xx 3-1:0.0: board has no eeprom
[  776.576592][T13503] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  776.584645][T13503] em28xx 3-1:0.0: dvb set to bulk mode.
[  776.588064][T13494] usb 1-1: Using ep0 maxpacket: 8
[  776.591399][T13501] em28xx 3-1:0.0: Binding DVB extension
[  776.599981][T13494] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[  776.613187][T13503] usb 3-1: USB disconnect, device number 26
[  776.628025][T13503] em28xx 3-1:0.0: Disconnecting em28xx
[  776.643965][T13494] usb 1-1: config 0 has no interface number 0
[  776.667645][T13494] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  776.678622][T13494] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  776.691080][T13494] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  776.697890][T13501] em28xx 3-1:0.0: Registering input extension
[  776.703913][T13494] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  776.712858][T13503] em28xx 3-1:0.0: Closing input extension
[  776.722826][T13494] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  776.745600][T13494] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  776.760557][T13494] usb 1-1: config 0 descriptor??
[  776.804072][T13494] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  776.843762][T13503] em28xx 3-1:0.0: Freeing device
[  777.010116][T13494] usb 1-1: USB disconnect, device number 21
[  777.016130][    C1] ldusb 1-1:0.55: usb_submit_urb failed (-19)
[  777.031657][T13494] ldusb 1-1:0.55: LD USB Device #0 now disconnected
[  777.235764][T19327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4327'.
[  777.486561][T13503] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  777.648275][T13503] usb 3-1: config 1 has an invalid interface number: 7 but max is 0
[  777.658190][T13503] usb 3-1: config 1 has no interface number 0
[  777.664350][T13503] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  777.676603][T13503] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  777.688575][T13503] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 8
[  777.698748][T13503] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  777.710107][T13503] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  777.728624][T13503] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  777.738701][T13503] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  777.747198][T13503] usb 3-1: Product: syz
[  777.751867][T13503] usb 3-1: Manufacturer: syz
[  777.756870][T13503] usb 3-1: SerialNumber: syz
[  777.765262][T19327] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  777.773578][T19327] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  777.980799][T19354] fuse: Bad value for 'fd'
[  777.989968][T19327] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  777.998045][T19327] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  778.009462][T13503] usb 3-1: No status endpoint found
[  778.053481][T19354] kvm: apic: phys broadcast and lowest prio
[  778.221882][T13503] usb 3-1: USB disconnect, device number 27
[  778.544152][T19375] Cannot find add_set index 0 as target
[  778.576361][T13501] usb 4-1: new full-speed USB device number 39 using dummy_hcd
[  778.755059][T13501] usb 4-1: not running at top speed; connect to a high speed hub
[  778.792554][T13501] usb 4-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40
[  778.803007][T13501] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  778.811215][T13501] usb 4-1: Product: 抶넹璢�沯李સ鋘䭌鈰볅硻䛬�燺ပ㋮뚴핱�삞翷⽀꽠鳲８䶰鷿⾈ꠢ�롛䢳⥻툫釕ᬚ鲰䪗鯃¶꽟�鴵鈺ͨ�쮹ᅬ둼☟虷騊梈뾅唲ᦞᤴइ콕欇뜽멦켉챕嶼Ꞙ�○䵫ʪ୳�嫯ቸ򓇻售႔⺶�冑嘄�톀�欦먼먈셩�⛵면ꚑћ忸륷鿗�䟋窲伹
[  778.843206][T13501] usb 4-1: Manufacturer: И
[  778.849911][T13501] usb 4-1: SerialNumber: à ’
[  779.068963][T13501] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  779.125444][T19387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4343'.
[  779.182054][T19389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  779.260297][T19389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  779.344588][T19390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  779.435059][T13501] usb 4-1: 2:1 : unknown format tag 0x3 is detected.  processed as MPEG.
[  779.453336][T13501] usb 4-1: found format II with max.bitrate = 0, frame size=129
[  779.462525][T13501] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  779.471952][T13501] usb 4-1: unit 4 not found!
[  779.514229][T13501] usb 4-1: USB disconnect, device number 39
[  781.578281][T13495] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  781.736329][T13495] usb 2-1: Using ep0 maxpacket: 16
[  781.744048][T13495] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  781.755602][T13495] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  781.767477][T13495] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  781.778169][T13495] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  781.786461][T13495] usb 2-1: Product: syz
[  781.790822][T13495] usb 2-1: Manufacturer: syz
[  781.795475][T13495] usb 2-1: SerialNumber: syz
[  781.811446][T13495] usb 2-1: 0:2 : does not exist
[  782.424843][T13495] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  782.483006][T13495] usb 2-1: USB disconnect, device number 15
[  782.537122][ T9662] udevd[9662]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  782.668347][T19416] IPv6: Can't replace route, no match found
[  782.685475][T19416] fuse: Bad value for 'group_id'
[  782.692200][T19416] fuse: Bad value for 'group_id'
[  782.697969][T13494] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  782.713409][T19419] syzkaller0: entered promiscuous mode
[  782.727026][T19419] syzkaller0: entered allmulticast mode
[  782.869486][T13494] usb 3-1: Using ep0 maxpacket: 32
[  782.876576][T13494] usb 3-1: config 1 interface 0 has no altsetting 0
[  782.886973][T13494] usb 3-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.40
[  782.896856][T13494] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  782.904958][T13494] usb 3-1: Product: syz
[  782.909344][T13494] usb 3-1: Manufacturer: à �
[  782.915172][T13494] usb 3-1: SerialNumber: syz
[  783.332678][T19411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  783.342033][T19411] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  783.353456][T19411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  783.363294][T19411] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  783.375119][T19411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  783.384363][T19411] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  783.399471][T19411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  783.411202][T19411] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  783.422614][T19411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  783.431915][T19411] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  783.460279][T13494] usbhid 3-1:1.0: can't add hid device: -71
[  783.467152][T13494] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  783.479328][T13494] usb 3-1: USB disconnect, device number 28
[  783.923822][T19450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4360'.
[  784.062468][T19468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4365'.
[  784.075828][T19468] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4365'.
[  784.100501][T19468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4365'.
[  784.164325][T19464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4362'.
[  784.195600][T13494] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  784.367970][T13494] usb 2-1: config 1 has an invalid interface number: 7 but max is 0
[  784.376062][T13494] usb 2-1: config 1 has no interface number 0
[  784.382384][T13494] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  784.394027][T13494] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  784.403945][T13494] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 8
[  784.414360][T13494] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  784.425416][T13494] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  784.441921][T13494] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  784.451098][T13494] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  784.459171][T13494] usb 2-1: Product: syz
[  784.463469][T13494] usb 2-1: Manufacturer: syz
[  784.468208][T13494] usb 2-1: SerialNumber: syz
[  784.477689][T19450] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  784.496756][T19450] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  784.717545][T19473] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4367'.
[  784.744286][T19450] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  784.773153][T19450] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  784.812887][T13494] usb 2-1: No status endpoint found
[  784.839786][T19476] IPv6: Can't replace route, no match found
[  785.034173][ T5713] usb 2-1: USB disconnect, device number 16
[  785.197798][T13500] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  785.358326][T13500] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  785.369744][T13500] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  785.380424][T13500] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  785.397070][T13500] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  785.406573][T13500] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  785.417862][T13500] usb 3-1: config 0 descriptor??
[  785.449472][T19489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4372'.
[  785.460434][T19491] netlink: 165 bytes leftover after parsing attributes in process `syz.0.4373'.
[  785.832550][T13500] plantronics 0003:047F:FFFF.001E: reserved main item tag 0xd
[  785.840900][T13500] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0
[  785.850620][T13500] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0
[  785.858432][T13500] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0
[  785.866757][T13500] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0
[  785.874202][T13500] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0
[  785.910538][T13500] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  786.159854][T19479] fuse: Bad value for 'fd'
[  786.182711][T13500] usb 3-1: USB disconnect, device number 29
[  786.516911][T19512] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  786.564411][T19512] netlink: 'syz.3.4377': attribute type 10 has an invalid length.
[  786.574300][T19514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4378'.
[  787.117470][T19532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4385'.
[  787.376526][T13494] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  787.416518][T13495] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  787.538389][T13494] usb 3-1: config 1 has an invalid interface number: 7 but max is 0
[  787.546841][T13494] usb 3-1: config 1 has no interface number 0
[  787.553261][T13494] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  787.565753][T13494] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  787.575845][T13495] usb 2-1: Using ep0 maxpacket: 8
[  787.581713][T13494] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 8
[  787.592116][T13494] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  787.603458][T13495] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  787.611848][T13494] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  787.621720][T13495] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  787.631827][T13495] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  787.642237][T13495] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  787.652990][T13495] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  787.667213][T13495] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  787.678200][T13494] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  787.687466][T13494] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  787.695521][T13494] usb 3-1: Product: syz
[  787.699776][T13495] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  787.708219][T13494] usb 3-1: Manufacturer: syz
[  787.713010][T13494] usb 3-1: SerialNumber: syz
[  787.729197][T19532] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  787.736756][T19532] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  787.953521][T19532] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  787.963461][T19532] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  787.973822][T13494] usb 3-1: No status endpoint found
[  788.177536][T13494] usb 3-1: USB disconnect, device number 30
[  788.178367][ T5713] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  788.360589][ T5713] usb 4-1: unable to get BOS descriptor or descriptor too short
[  788.390879][ T5713] usb 4-1: config 3 has an invalid interface number: 86 but max is 0
[  788.399499][ T5713] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  788.410297][ T5713] usb 4-1: config 3 has no interface number 0
[  788.416712][ T5713] usb 4-1: config 3 interface 86 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  788.419368][T13495] usb 2-1: usb_control_msg returned -71
[  788.430515][ T5713] usb 4-1: config 3 interface 86 has no altsetting 0
[  788.431884][ T5713] usb 4-1: New USB device found, idVendor=e4b7, idProduct=cda2, bcdDevice= 0.01
[  788.439636][T13495] usbtmc 2-1:16.0: can't read capabilities
[  788.445060][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  788.458676][T13495] usb 2-1: USB disconnect, device number 17
[  788.473312][ T5713] usb 4-1: SerialNumber: syz
[  788.695629][T19566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  788.726166][T19566] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  788.736811][T19567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  788.747613][T19567] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  789.031628][T19576] Invalid logical block size (18)
[  789.072713][T19578] __nla_validate_parse: 2 callbacks suppressed
[  789.072731][T19578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4402'.
[  789.093935][T19578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  789.145344][   T29] kauditd_printk_skb: 386 callbacks suppressed
[  789.145359][   T29] audit: type=1326 audit(1785528860.617:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19579 comm="syz.2.4403" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f885db9e019 code=0x0
[  789.157457][T19578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  789.253531][T19581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  789.373323][T19588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4405'.
[  789.516100][ T5713] rndis_host 4-1:3.86: rndis: master #0/0000000000000000 slave #1/0000000000000000
[  789.537351][ T5713] usb 4-1: USB disconnect, device number 40
[  789.624614][T19594] IPv6: Can't replace route, no match found
[  790.277558][T13500] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  790.427554][T19616] IPv6: Can't replace route, no match found
[  790.438336][T13500] usb 1-1: Using ep0 maxpacket: 16
[  790.445163][T13500] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  790.456960][T13500] usb 1-1: config 0 has no interfaces?
[  790.462474][T13500] usb 1-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00
[  790.471556][T13500] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  790.482334][T13500] usb 1-1: config 0 descriptor??
[  790.511899][T19628] xt_CT: You must specify a L4 protocol and not use inversions on it
[  790.704631][T13500] usb 1-1: USB disconnect, device number 22
[  790.835719][T19645] syzkaller0: entered promiscuous mode
[  790.849140][T19645] syzkaller0: entered allmulticast mode
[  791.065641][T19656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4432'.
[  791.226341][T13500] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  791.376599][T13500] usb 4-1: Using ep0 maxpacket: 8
[  791.383863][T13500] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  791.390810][T19660] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4434'.
[  791.392432][T13500] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  791.415520][T13500] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  791.425530][T13500] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  791.437135][T13500] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  791.451160][T13500] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  791.460576][T13500] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  791.546019][T19663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4435'.
[  791.592863][T19665] xt_recent: hitcount (134217728) is larger than allowed maximum (65535)
[  791.603820][   T29] audit: type=1326 audit(1785528863.087:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19664 comm="syz.1.4436" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188939e019 code=0x7ffc0000
[  791.632254][   T29] audit: type=1326 audit(1785528863.087:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19664 comm="syz.1.4436" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188939e019 code=0x7ffc0000
[  791.657277][   T29] audit: type=1326 audit(1785528863.107:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19664 comm="syz.1.4436" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188939e019 code=0x7ffc0000
[  791.683666][   T29] audit: type=1326 audit(1785528863.107:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19664 comm="syz.1.4436" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188939e019 code=0x7ffc0000
[  791.709660][   T29] audit: type=1326 audit(1785528863.107:3671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19664 comm="syz.1.4436" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f188939e019 code=0x7ffc0000
[  791.734842][   T29] audit: type=1326 audit(1785528863.137:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19664 comm="syz.1.4436" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188939e019 code=0x7ffc0000
[  791.759986][   T29] audit: type=1326 audit(1785528863.137:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19664 comm="syz.1.4436" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188939e019 code=0x7ffc0000
[  791.784825][   T29] audit: type=1326 audit(1785528863.257:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19664 comm="syz.1.4436" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188939e019 code=0x7ffc0000
[  791.809991][   T29] audit: type=1326 audit(1785528863.257:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19664 comm="syz.1.4436" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188939e019 code=0x7ffc0000
[  792.584208][T19685] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4442'.
[  792.616631][T19685] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4442'.
[  793.186432][T13503] usb 3-1: new full-speed USB device number 31 using dummy_hcd
[  793.338399][T13503] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  793.348029][T13503] usb 3-1: config 0 interface 0 has no altsetting 0
[  793.358624][T13503] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  793.367870][T13503] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  793.376105][T13503] usb 3-1: Product: syz
[  793.380573][T13503] usb 3-1: Manufacturer: syz
[  793.385275][T13503] usb 3-1: SerialNumber: syz
[  793.394375][T13503] usb 3-1: config 0 descriptor??
[  793.405756][T13503] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[  793.414846][T13503] pctv452e: pctv452e_power_ctrl: 1
[  793.414846][T13503] 
[  793.530134][T19694] xt_CONNSECMARK: invalid mode: 3
[  793.624996][T13503] dvb-usb: bulk message failed: -22 (5/0)
[  793.639496][T13503] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  793.658979][T13503] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19)
[  793.797119][T19700] loop9: detected capacity change from 0 to 7
[  793.811514][    C0] blk_print_req_error: 10 callbacks suppressed
[  793.811533][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  793.827488][    C0] buffer_io_error: 10 callbacks suppressed
[  793.827505][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  793.841350][T13500] usb 4-1: usb_control_msg returned -71
[  793.843529][T13486] usb 3-1: USB disconnect, device number 31
[  793.849266][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  793.862626][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  793.875257][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  793.884928][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  793.896035][T13500] usbtmc 4-1:16.0: can't read capabilities
[  793.913606][T13500] usb 4-1: USB disconnect, device number 41
[  793.929064][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  793.938798][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  793.949196][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  793.958872][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  793.985775][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  793.995468][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  794.004142][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  794.013780][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  794.026984][T19700] ldm_validate_partition_table(): Disk read failed.
[  794.054352][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  794.063999][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  794.072847][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  794.082507][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  794.093533][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  794.103153][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  794.112818][T19700] Dev loop9: unable to read RDB block 0
[  794.141172][T19700]  loop9: unable to read partition table
[  794.161869][T19700] loop9: partition table beyond EOD, truncated
[  794.202294][T19700] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5)
[  794.515100][T19713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4453'.
[  795.248652][T19720] netlink: 'syz.3.4455': attribute type 4 has an invalid length.
[  795.307983][T19720] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4455'.
[  795.407552][T19723] netlink: 165 bytes leftover after parsing attributes in process `syz.0.4456'.
[  795.513552][T19727] syzkaller0: entered promiscuous mode
[  795.524424][T19727] syzkaller0: entered allmulticast mode
[  795.545833][T19727] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  795.563558][T19726] tipc: Resetting bearer <eth:syzkaller0>
[  795.626372][T13500] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  795.677634][T19726] tipc: Disabling bearer <eth:syzkaller0>
[  795.779030][T13500] usb 4-1: Using ep0 maxpacket: 8
[  795.812290][T19730] netlink: 200 bytes leftover after parsing attributes in process `syz.2.4458'.
[  795.848462][T13500] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  795.896594][T13500] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  795.907743][T13500] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  795.915813][T13500] usb 4-1: Product: syz
[  795.922412][T13500] usb 4-1: Manufacturer: syz
[  795.929127][T13500] usb 4-1: SerialNumber: syz
[  795.946058][T13500] usb 4-1: config 0 descriptor??
[  796.033044][T19738] tun0: tun_chr_ioctl cmd 1074025672
[  796.039463][T19738] tun0: ignored: set checksum disabled
[  796.046086][T19738] loop4: detected capacity change from 0 to 7
[  796.056003][T19738] Dev loop4: unable to read RDB block 7
[  796.061683][T19738]  loop4: AHDI p1 p2 p3
[  796.066031][T19738] loop4: partition table partially beyond EOD, truncated
[  796.074158][T19738] loop4: p1 start 1601398130 is beyond EOD, truncated
[  796.081289][T19738] loop4: p2 start 1702059890 is beyond EOD, truncated
[  796.225019][T19720] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4455'.
[  796.329580][T13500] usb 4-1: USB disconnect, device number 42
[  796.368293][T19752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4463'.
[  796.381682][T19752] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4463'.
[  796.488712][T19756] vlan0: entered promiscuous mode
[  796.646377][T13503] usb 2-1: new full-speed USB device number 18 using dummy_hcd
[  796.766512][T13500] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  796.809422][T13503] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  796.830043][T13503] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  796.849753][T13503] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[  796.859402][T13503] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  796.867997][T13503] usb 2-1: Product: syz
[  796.872436][T13503] usb 2-1: Manufacturer: syz
[  796.877735][T13503] usb 2-1: SerialNumber: syz
[  796.885117][T13503] usb 2-1: config 0 descriptor??
[  796.893069][T13503] hub 2-1:0.0: bad descriptor, ignoring hub
[  796.899859][T13503] hub 2-1:0.0: probe with driver hub failed with error -5
[  796.910229][T13503] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input84
[  796.920523][T13500] usb 3-1: Using ep0 maxpacket: 8
[  796.942071][T13500] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d
[  796.953281][T13500] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  796.962343][T13500] usb 3-1: Product: syz
[  796.967232][T13500] usb 3-1: Manufacturer: syz
[  796.979578][T13500] usb 3-1: SerialNumber: syz
[  796.998620][T13500] usb 3-1: config 0 descriptor??
[  797.007009][T13500] gspca_main: sonixj-2.14.0 probing 0c45:614a
[  797.503757][T19784] xt_recent: hitcount (134217728) is larger than allowed maximum (65535)
[  797.529801][   T29] kauditd_printk_skb: 24 callbacks suppressed
[  797.529897][   T29] audit: type=1326 audit(1785528869.007:3700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19783 comm="syz.0.4472" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa9b9e019 code=0x7ffc0000
[  797.540794][T19782] fuse: Bad value for 'user_id'
[  797.577465][   T29] audit: type=1326 audit(1785528869.057:3701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19783 comm="syz.0.4472" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa9b9e019 code=0x7ffc0000
[  797.604112][T13486] usb 2-1: USB disconnect, device number 18
[  797.623585][   T29] audit: type=1326 audit(1785528869.057:3702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19783 comm="syz.0.4472" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa9b9e019 code=0x7ffc0000
[  797.649569][   T29] audit: type=1326 audit(1785528869.057:3703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19783 comm="syz.0.4472" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5aa9b9e019 code=0x7ffc0000
[  797.674048][   T29] audit: type=1326 audit(1785528869.057:3704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19783 comm="syz.0.4472" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa9b9e019 code=0x7ffc0000
[  797.698753][   T29] audit: type=1326 audit(1785528869.157:3705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19783 comm="syz.0.4472" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa9b9e019 code=0x7ffc0000
[  797.724604][   T29] audit: type=1326 audit(1785528869.157:3706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19783 comm="syz.0.4472" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5aa9b9dd82 code=0x7ffc0000
[  797.739973][T19782] fuse: Bad value for 'user_id'
[  797.764079][   T29] audit: type=1326 audit(1785528869.237:3708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19783 comm="syz.0.4472" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f5aa9b9de17 code=0x7ffc0000
[  797.793374][   T29] audit: type=1326 audit(1785528869.237:3707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19783 comm="syz.0.4472" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa9b9e019 code=0x7ffc0000
[  797.853848][   T29] audit: type=1326 audit(1785528869.237:3709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19783 comm="syz.0.4472" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa9b9e019 code=0x7ffc0000
[  798.245060][T19804] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4475'.
[  798.256076][T19762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  798.294201][T19762] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  798.297750][T19804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  798.394247][T19804] loop8: detected capacity change from 0 to 7
[  798.437417][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  798.449906][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  798.462241][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  798.474468][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  798.486812][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  798.499048][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  798.511298][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  798.523544][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  798.535949][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  798.548273][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  798.729633][T13500] gspca_sonixj: reg_w err -110
[  798.734506][T13500] sonixj 3-1:0.0: probe with driver sonixj failed with error -110
[  803.107169][ T5691] usb 3-1: USB disconnect, device number 32
[  803.446395][    C0] net_ratelimit: 27569 callbacks suppressed
[  803.446415][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  803.464804][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  803.477095][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  803.489457][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  803.501910][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  803.514325][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  803.526635][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  803.539083][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  803.551416][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  803.563911][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  807.944865][T19804] Dev loop8: unable to read RDB block 7
[  808.042504][T19804]  loop8: unable to read partition table
[  808.089024][T19804] loop8: partition table beyond EOD, truncated
[  808.125160][T19804] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  808.456297][    C0] net_ratelimit: 27086 callbacks suppressed
[  808.456319][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  808.474747][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  808.487255][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  808.499703][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  808.512128][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  808.524612][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  808.537496][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  808.549960][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  808.562415][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  808.574866][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  808.836765][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  808.853401][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  810.121365][T19832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4484'.
[  810.154177][T19832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4484'.
[  810.416347][ T5691] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  810.568907][ T5691] usb 3-1: config 1 has an invalid interface number: 7 but max is 0
[  810.581183][ T5691] usb 3-1: config 1 has no interface number 0
[  810.587984][ T5691] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  810.602962][ T5691] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  810.613561][ T5691] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 8
[  810.623727][ T5691] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  810.635691][ T5691] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  810.648220][ T5691] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  810.658481][ T5691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  810.667872][ T5691] usb 3-1: Product: syz
[  810.672295][ T5691] usb 3-1: Manufacturer: syz
[  810.677803][ T5691] usb 3-1: SerialNumber: syz
[  810.698518][T19836] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  810.774650][T19836] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  811.231369][T19830] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  811.266955][T19830] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  812.315951][ T5691] usb 3-1: No status endpoint found
[  812.975043][T19840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4486'.
[  813.181398][T19840] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4486'.
[  813.447063][ T5691] usb 2-1: new full-speed USB device number 19 using dummy_hcd
[  813.466525][    C0] net_ratelimit: 22070 callbacks suppressed
[  813.466540][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  813.484765][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  813.497099][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  813.509659][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  813.522137][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  813.534629][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  813.546967][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  813.559551][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  813.572001][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  813.584314][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  813.728055][ T5691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  813.739660][ T5691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  813.763173][ T5691] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[  813.772727][ T5691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  813.782857][ T5691] usb 2-1: Product: syz
[  813.792882][ T5691] usb 2-1: Manufacturer: syz
[  813.807422][ T5691] usb 2-1: SerialNumber: syz
[  813.824274][ T5691] usb 2-1: config 0 descriptor??
[  814.092816][ T4941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  814.122682][ T4941] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  814.157791][ T4941] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  814.169439][ T5691] hub 2-1:0.0: bad descriptor, ignoring hub
[  814.169468][ T5691] hub 2-1:0.0: probe with driver hub failed with error -5
[  814.173622][ T5691] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input85
[  814.254011][ T4941] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  814.268549][ T4941] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  815.165125][T19848] bridge0: port 1(bridge_slave_0) entered blocking state
[  815.173958][T19848] bridge0: port 1(bridge_slave_0) entered disabled state
[  815.182619][T19848] bridge_slave_0: entered allmulticast mode
[  815.191586][T19848] bridge_slave_0: entered promiscuous mode
[  815.203073][T19848] bridge0: port 2(bridge_slave_1) entered blocking state
[  815.212804][T19848] bridge0: port 2(bridge_slave_1) entered disabled state
[  815.220769][T19848] bridge_slave_1: entered allmulticast mode
[  815.244345][T19848] bridge_slave_1: entered promiscuous mode
[  815.297829][T19848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  815.312893][T19848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  815.373572][T19848] team0: Port device team_slave_0 added
[  815.389543][T19848] team0: Port device team_slave_1 added
[  815.440162][T19848] batman_adv: batadv0: Adding interface: batadv_slave_0
[  815.449212][T19848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  815.483388][T19848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  815.497371][T19848] batman_adv: batadv0: Adding interface: batadv_slave_1
[  815.504684][T19848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  815.533091][T19848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  815.635060][T19848] hsr_slave_0: entered promiscuous mode
[  815.642352][T19848] hsr_slave_1: entered promiscuous mode
[  815.651024][T19848] debugfs: 'hsr0' already exists in 'hsr'
[  815.657539][T19848] Cannot create hsr debugfs directory
[  816.160794][T13486] usb 3-1: USB disconnect, device number 33
[  816.356537][ T4941] Bluetooth: hci1: command tx timeout
[  816.974549][T19848] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  817.008203][T19848] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  817.017014][T19848] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  817.211552][T19848] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  817.304857][T19848] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  817.335871][T19848] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  817.351298][T19848] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  817.423652][T19848] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  817.582395][T13494] usb 2-1: USB disconnect, device number 19
[  817.622711][T19848] 8021q: adding VLAN 0 to HW filter on device bond0
[  817.668531][T19848] 8021q: adding VLAN 0 to HW filter on device team0
[  817.685667][T13465] bridge0: port 1(bridge_slave_0) entered blocking state
[  817.692885][T13465] bridge0: port 1(bridge_slave_0) entered forwarding state
[  817.721512][T13465] bridge0: port 2(bridge_slave_1) entered blocking state
[  817.728775][T13465] bridge0: port 2(bridge_slave_1) entered forwarding state
[  817.871792][T19848] 8021q: adding VLAN 0 to HW filter on device batadv0
[  817.963096][T19848] veth0_vlan: entered promiscuous mode
[  817.978074][T19848] veth1_vlan: entered promiscuous mode
[  818.030088][T19848] veth0_macvtap: entered promiscuous mode
[  818.044774][T19848] veth1_macvtap: entered promiscuous mode
[  818.071532][T19848] batman_adv: batadv0: Interface activated: batadv_slave_0
[  818.091067][T19848] batman_adv: batadv0: Interface activated: batadv_slave_1
[  818.137853][T13459] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  818.436745][ T4941] Bluetooth: hci1: command tx timeout
[  818.476527][    C0] net_ratelimit: 18279 callbacks suppressed
[  818.476548][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  818.494995][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  818.507359][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  818.519932][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  818.532232][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  818.544652][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  818.556975][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  818.569437][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  818.581900][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  818.594342][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  819.171897][T13465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  819.193762][T13465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  819.206583][   T81] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  819.225648][   T81] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  819.258817][   T81] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  819.280148][   T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  819.300195][   T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  819.832141][T13494] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  819.996499][T13494] usb 6-1: Using ep0 maxpacket: 16
[  820.003746][T13494] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  820.014686][T13494] usb 6-1: config 0 has no interfaces?
[  820.021042][T13494] usb 6-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00
[  820.030702][T13494] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  820.053286][T13494] usb 6-1: config 0 descriptor??
[  820.516722][ T4941] Bluetooth: hci1: command tx timeout
[  820.995698][T13487] usb 6-1: USB disconnect, device number 2
[  821.804611][T19912] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4499'.
[  821.820535][T19912] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4499'.
[  822.077251][T13486] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  822.238163][T13486] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  822.250505][T13486] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  822.265279][T13486] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[  822.275068][T13486] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  822.290931][T13486] usb 6-1: Product: syz
[  822.295307][T13486] usb 6-1: Manufacturer: syz
[  822.303600][T13486] usb 6-1: SerialNumber: syz
[  822.312293][T13486] usb 6-1: config 0 descriptor??
[  822.328078][T13486] hub 6-1:0.0: bad descriptor, ignoring hub
[  822.334712][T13486] hub 6-1:0.0: probe with driver hub failed with error -5
[  822.347573][T13486] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input86
[  822.525307][T19922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4500'.
[  822.602939][ T4941] Bluetooth: hci1: command tx timeout
[  822.660072][T19922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4500'.
[  822.879150][T13487] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  822.916436][T13486] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  823.036372][T13487] usb 4-1: Using ep0 maxpacket: 16
[  823.043336][T13487] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  823.056803][T13487] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[  823.072870][T13487] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  823.087645][T13487] usb 4-1: Product: syz
[  823.092052][T13487] usb 4-1: Manufacturer: syz
[  823.099309][T13486] usb 2-1: config 1 has an invalid interface number: 7 but max is 0
[  823.108090][T13486] usb 2-1: config 1 has no interface number 0
[  823.114657][T13486] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  823.126724][T13487] usb 4-1: SerialNumber: syz
[  823.133909][T13486] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  823.153594][T13487] usb 4-1: config 0 descriptor??
[  823.185795][T13486] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 8
[  823.196607][T13486] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  823.208996][T13486] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  823.222272][T13486] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  823.231895][T13486] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  823.248877][T13486] usb 2-1: Product: syz
[  823.253193][T13486] usb 2-1: Manufacturer: syz
[  823.259553][T13486] usb 2-1: SerialNumber: syz
[  823.282888][T13487] pegasus_notetaker 4-1:0.0: Invalid number of endpoints
[  823.300608][T13487] pegasus_notetaker 4-1:0.0: probe with driver pegasus_notetaker failed with error -22
[  823.470171][T19926] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  823.486272][    C0] net_ratelimit: 17269 callbacks suppressed
[  823.486290][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  823.494514][T19929] loop4: detected capacity change from 0 to 6
[  823.504669][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  823.511251][T19926] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  823.522985][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  823.542113][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  823.554553][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  823.567043][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  823.579497][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  823.579954][T19929]  loop4:
[  823.591974][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  823.607130][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  823.619638][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  823.620347][T19929] loop4: partition table partially beyond EOD, truncated
[  823.827744][T19922] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  823.850475][T19922] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  823.933487][T13486] usb 2-1: No status endpoint found
[  826.183839][ T4941] Bluetooth: hci5: command 0x040f tx timeout
[  828.097075][    C0] sched: DL replenish lagged too much
[  828.496381][    C0] net_ratelimit: 10019 callbacks suppressed
[  828.496402][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  828.514839][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  828.527338][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  828.539851][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  828.552369][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  828.564963][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  828.577487][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  828.590071][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  828.602666][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  828.615140][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  833.506410][    C0] net_ratelimit: 9782 callbacks suppressed
[  833.506431][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  833.524921][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  833.537658][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  833.550181][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  833.562865][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  833.575860][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  833.588396][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  833.600877][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  833.613552][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  833.626034][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  837.640367][ T4991]  loop4:
[  837.643383][ T4991] loop4: partition table partially beyond EOD, truncated
[  838.516664][    C0] net_ratelimit: 10287 callbacks suppressed
[  838.516684][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  838.535171][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  838.547627][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  838.560076][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  838.572579][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  838.585101][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  838.597557][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  838.610097][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  838.622640][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  838.635189][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  843.526601][    C0] net_ratelimit: 10238 callbacks suppressed
[  843.526623][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  843.545134][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  843.557778][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  843.570223][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  843.582746][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  843.595288][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  843.607764][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  843.620245][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  843.632749][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  843.645316][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  848.536593][    C0] net_ratelimit: 10249 callbacks suppressed
[  848.536614][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  848.555083][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  848.567602][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  848.580064][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  848.592470][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  848.604911][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  848.617396][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  848.629850][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  848.642263][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  848.654788][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  853.546530][    C0] net_ratelimit: 10141 callbacks suppressed
[  853.546552][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  853.564979][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  853.577476][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  853.590010][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  853.602528][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  853.615000][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  853.627795][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  853.640325][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  853.652811][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  853.665262][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  858.556517][    C0] net_ratelimit: 10156 callbacks suppressed
[  858.556538][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  858.574995][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  858.587469][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  858.599921][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  858.612435][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  858.625016][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  858.637482][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  858.649942][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  858.662508][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  858.675053][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  863.566426][    C0] net_ratelimit: 10069 callbacks suppressed
[  863.566448][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  863.584975][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  863.597549][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  863.610009][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  863.622480][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  863.634980][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  863.647518][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  863.659997][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  863.672461][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  863.685048][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  868.576387][    C0] net_ratelimit: 10237 callbacks suppressed
[  868.576409][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  868.594804][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  868.607292][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  868.619837][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  868.632791][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  868.645249][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  868.657746][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  868.670357][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  868.682830][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  868.695630][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  870.867914][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  870.888168][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  873.586642][    C0] net_ratelimit: 10272 callbacks suppressed
[  873.586662][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  873.605125][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  873.617677][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  873.630103][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  873.642743][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  873.655309][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  873.667787][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  873.680239][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  873.692754][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  873.705366][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  878.596402][    C0] net_ratelimit: 10147 callbacks suppressed
[  878.596421][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  878.614842][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  878.627339][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  878.639830][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  878.652395][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  878.664943][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  878.677394][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  878.689881][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  878.702423][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  878.714915][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  883.606513][    C0] net_ratelimit: 10774 callbacks suppressed
[  883.606584][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  883.624956][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  883.637357][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  883.649817][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  883.662301][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  883.674785][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  883.687187][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  883.699698][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  883.712212][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  883.724678][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  888.616283][    C0] net_ratelimit: 10723 callbacks suppressed
[  888.616304][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  888.634676][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  888.647185][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  888.659778][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  888.672287][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  888.684777][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  888.697430][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  888.709985][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  888.722522][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  888.735074][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  893.626436][    C0] net_ratelimit: 10354 callbacks suppressed
[  893.626457][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  893.644803][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  893.657251][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  893.669847][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  893.682407][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  893.694830][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  893.707301][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  893.719815][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  893.732278][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  893.744669][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  898.636668][    C0] net_ratelimit: 10221 callbacks suppressed
[  898.636690][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  898.655080][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  898.667527][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  898.680173][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  898.692833][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  898.705429][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  898.717942][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  898.730433][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  898.743137][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  898.755641][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  903.648192][    C0] net_ratelimit: 10441 callbacks suppressed
[  903.648213][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  903.667256][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  903.679770][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  903.692213][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  903.704798][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  903.717286][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  903.729776][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  903.742354][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  903.754868][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  903.767397][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  908.656408][    C0] net_ratelimit: 10286 callbacks suppressed
[  908.656430][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  908.674982][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  908.687526][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  908.700024][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  908.712699][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  908.725229][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  908.737804][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  908.750244][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  908.762749][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  908.775311][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  913.666352][    C0] net_ratelimit: 10094 callbacks suppressed
[  913.666374][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  913.684809][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  913.697256][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  913.709748][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  913.722270][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  913.734823][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  913.747262][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  913.759763][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  913.772366][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  913.784880][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  918.676229][    C0] net_ratelimit: 10565 callbacks suppressed
[  918.676250][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  918.694699][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  918.707253][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  918.719780][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  918.732386][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  918.744944][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  918.758099][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  918.770634][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  918.783090][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  918.795608][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  923.686585][    C0] net_ratelimit: 10442 callbacks suppressed
[  923.686606][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  923.705056][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  923.717615][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  923.730086][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  923.742540][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  923.755026][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  923.767692][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  923.780170][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  923.792619][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  923.805164][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  928.696463][    C0] net_ratelimit: 10368 callbacks suppressed
[  928.696483][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  928.714875][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  928.727277][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  928.739815][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  928.752309][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  928.764983][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  928.777403][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  928.789858][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  928.802349][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  928.814881][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  930.876196][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  930.883172][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P19923/1:b..l P19926/1:b..l
[  930.893055][    C1] rcu: 	(detected by 1, t=10503 jiffies, g=151381, q=774 ncpus=2)
[  930.900881][    C1] task:syz.1.4500      state:R  running task     stack:28240 pid:19926 tgid:19914 ppid:14925  task_flags:0x40044c flags:0x00080002
[  930.916120][    C1] Call Trace:
[  930.919419][    C1]  <TASK>
[  930.922365][    C1]  __schedule+0x17d9/0x56c0
[  930.926911][    C1]  ? __pfx___schedule+0x10/0x10
[  930.931798][    C1]  preempt_schedule_irq+0x4d/0xa0
[  930.936832][    C1]  irqentry_exit+0x14f/0x8f0
[  930.941429][    C1]  ? trace_irq_disable+0x3b/0x140
[  930.946546][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  930.952541][    C1] RIP: 0010:is_module_text_address+0x18b/0x1e0
[  930.958709][    C1] Code: 90 0e 01 48 c7 c7 e0 1e ef 8b be 66 03 00 00 48 c7 c2 80 1f ef 8b e8 84 8f f2 ff 48 c7 c7 60 9c b5 8e 48 89 de e8 05 76 f2 ff <e8> d0 24 fc ff 89 e8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f 18 24 0a
[  930.978328][    C1] RSP: 0018:ffffc9000335f480 EFLAGS: 00000286
[  930.984407][    C1] RAX: d5ebd50161bb6a00 RBX: ffffffff81b07d9d RCX: 0000000000000046
[  930.992389][    C1] RDX: 0000000000000001 RSI: ffffffff8e4b347b RDI: ffffffff8c4bdd80
[  931.000382][    C1] RBP: 0000000000000000 R08: ffffffff81b07d9d R09: 0000000000000000
[  931.008367][    C1] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: ffff888033035d00
[  931.016350][    C1] R13: 1ffff11006606c5f R14: 00007f188939e019 R15: 1ffff9200066beaa
[  931.024347][    C1]  ? is_module_text_address+0x1d/0x1e0
[  931.029833][    C1]  ? is_module_text_address+0x1d/0x1e0
[  931.035323][    C1]  kernel_text_address+0x94/0xe0
[  931.040273][    C1]  __kernel_text_address+0xd/0x30
[  931.045317][    C1]  unwind_get_return_address+0x4d/0x90
[  931.050796][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  931.056990][    C1]  arch_stack_walk+0xfb/0x150
[  931.061750][    C1]  stack_trace_save+0xa9/0x100
[  931.066616][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  931.072084][    C1]  ? __lock_acquire+0x683/0x2cf0
[  931.077056][    C1]  save_stack+0x122/0x230
[  931.081406][    C1]  ? __pfx_save_stack+0x10/0x10
[  931.086278][    C1]  ? page_ext_get+0x22/0x2e0
[  931.090887][    C1]  ? __free_frozen_pages+0xc1e/0xd10
[  931.096176][    C1]  ? __slab_free+0x274/0x2c0
[  931.101035][    C1]  ? qlist_free_all+0x99/0x100
[  931.105821][    C1]  ? kasan_quarantine_reduce+0x148/0x160
[  931.111465][    C1]  ? __kasan_slab_alloc+0x22/0x80
[  931.116502][    C1]  ? kmem_cache_alloc_noprof+0x2a0/0x5f0
[  931.122151][    C1]  ? taskstats_exit+0x19e/0xe10
[  931.127008][    C1]  ? do_exit+0x6ad/0x2360
[  931.131352][    C1]  ? do_group_exit+0x22d/0x2f0
[  931.136118][    C1]  ? get_signal+0x121b/0x12c0
[  931.140802][    C1]  ? arch_do_signal_or_restart+0xbb/0x860
[  931.146541][    C1]  ? exit_to_user_mode_loop+0x104/0x730
[  931.152097][    C1]  ? do_syscall_64+0x353/0x580
[  931.156877][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  931.162968][    C1]  ? page_ext_put+0x97/0xc0
[  931.167486][    C1]  __reset_page_owner+0x71/0x1f0
[  931.172439][    C1]  __free_frozen_pages+0xc1e/0xd10
[  931.177563][    C1]  ? __free_slab+0x172/0x280
[  931.182165][    C1]  __slab_free+0x274/0x2c0
[  931.186608][    C1]  qlist_free_all+0x99/0x100
[  931.191210][    C1]  kasan_quarantine_reduce+0x148/0x160
[  931.196682][    C1]  __kasan_slab_alloc+0x22/0x80
[  931.201569][    C1]  kmem_cache_alloc_noprof+0x2a0/0x5f0
[  931.207039][    C1]  ? kmem_cache_alloc_noprof+0x150/0x5f0
[  931.212678][    C1]  ? taskstats_exit+0x19e/0xe10
[  931.217533][    C1]  ? taskstats_exit+0x19e/0xe10
[  931.222398][    C1]  taskstats_exit+0x19e/0xe10
[  931.227084][    C1]  ? acct_update_integrals+0x342/0x410
[  931.232586][    C1]  ? acct_update_integrals+0x38a/0x410
[  931.238152][    C1]  ? __pfx_taskstats_exit+0x10/0x10
[  931.243374][    C1]  ? seccomp_filter_release+0x18a/0x2d0
[  931.248937][    C1]  do_exit+0x6ad/0x2360
[  931.253129][    C1]  ? __pfx_do_exit+0x10/0x10
[  931.257735][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  931.262781][    C1]  do_group_exit+0x22d/0x2f0
[  931.267375][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  931.272596][    C1]  get_signal+0x121b/0x12c0
[  931.277126][    C1]  arch_do_signal_or_restart+0xbb/0x860
[  931.282683][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  931.288875][    C1]  exit_to_user_mode_loop+0x104/0x730
[  931.294257][    C1]  ? rcu_is_watching+0x15/0xb0
[  931.299118][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  931.305196][    C1]  do_syscall_64+0x353/0x580
[  931.309797][    C1]  ? clear_bhb_loop+0x40/0x90
[  931.314485][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  931.320424][    C1] RIP: 0033:0x7f188939e019
[  931.324850][    C1] RSP: 002b:00007f1886db00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  931.333286][    C1] RAX: fffffffffffffe00 RBX: 00007f1889626368 RCX: 00007f188939e019
[  931.341273][    C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1889626368
[  931.349259][    C1] RBP: 00007f1889626360 R08: 0000000000000000 R09: 0000000000000000
[  931.357329][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  931.365315][    C1] R13: 00007f18896263f8 R14: 00007f188974f960 R15: 00007f188974fa48
[  931.373325][    C1]  </TASK>
[  931.376352][    C1] task:syz.3.4502      state:R  running task     stack:25640 pid:19923 tgid:19923 ppid:14753  task_flags:0x40044c flags:0x00080002
[  931.389842][    C1] Call Trace:
[  931.393130][    C1]  <TASK>
[  931.396068][    C1]  __schedule+0x17d9/0x56c0
[  931.400601][    C1]  ? __pfx___schedule+0x10/0x10
[  931.405480][    C1]  preempt_schedule_irq+0x4d/0xa0
[  931.410518][    C1]  irqentry_exit+0x14f/0x8f0
[  931.415117][    C1]  ? trace_irq_disable+0x3b/0x140
[  931.420160][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  931.426173][    C1] RIP: 0010:unwind_next_frame+0x49a/0x2550
[  931.431982][    C1] Code: 0f 85 b4 19 00 00 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 bf 19 00 00 0f b6 43 01 83 e0 07 0f 84 7c 16 00 00 83 f8 01 <4c> 8b 6c 24 50 49 bc 00 00 00 00 00 fc ff df 4c 8b 7c 24 10 49 8d
[  931.451597][    C1] RSP: 0018:ffffc90003db7460 EFLAGS: 00000202
[  931.457684][    C1] RAX: 0000000000000002 RBX: ffffffff90f36d9c RCX: ffffffff9073fef4
[  931.465665][    C1] RDX: ffffffff90f36d98 RSI: ffffffff90f36d98 RDI: ffffffff8c4bdd20
[  931.473645][    C1] RBP: ffffffff81b20a18 R08: 000000000000000c R09: 0000000000000000
[  931.481627][    C1] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: dffffc0000000000
[  931.489607][    C1] R13: ffffffff90f36d9d R14: ffffc90003db7508 R15: ffffffff9073fef0
[  931.497598][    C1]  ? stack_trace_save+0xa8/0x100
[  931.502659][    C1]  ? stack_trace_save+0xa9/0x100
[  931.507610][    C1]  ? __unwind_start+0x514/0x660
[  931.512470][    C1]  ? unwind_next_frame+0x8f/0x2550
[  931.517590][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  931.523760][    C1]  arch_stack_walk+0x11b/0x150
[  931.528537][    C1]  ? stack_trace_save+0xa9/0x100
[  931.533490][    C1]  stack_trace_save+0xa9/0x100
[  931.538261][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  931.543643][    C1]  ? __lock_acquire+0x683/0x2cf0
[  931.548600][    C1]  save_stack+0x122/0x230
[  931.552942][    C1]  ? __pfx_save_stack+0x10/0x10
[  931.557801][    C1]  ? page_ext_get+0x22/0x2e0
[  931.562417][    C1]  ? page_ext_put+0x97/0xc0
[  931.566933][    C1]  __reset_page_owner+0x71/0x1f0
[  931.571887][    C1]  __free_frozen_pages+0xc1e/0xd10
[  931.577022][    C1]  ? __free_slab+0x172/0x280
[  931.581633][    C1]  __slab_free+0x274/0x2c0
[  931.586079][    C1]  qlist_free_all+0x99/0x100
[  931.590687][    C1]  kasan_quarantine_reduce+0x148/0x160
[  931.596171][    C1]  __kasan_slab_alloc+0x22/0x80
[  931.601160][    C1]  kmem_cache_alloc_noprof+0x2a0/0x5f0
[  931.606648][    C1]  ? kmem_cache_alloc_noprof+0x150/0x5f0
[  931.612327][    C1]  ? taskstats_exit+0x19e/0xe10
[  931.617188][    C1]  ? taskstats_exit+0x19e/0xe10
[  931.622055][    C1]  taskstats_exit+0x19e/0xe10
[  931.627086][    C1]  ? acct_update_integrals+0x342/0x410
[  931.632557][    C1]  ? acct_update_integrals+0x38a/0x410
[  931.638063][    C1]  ? __pfx_taskstats_exit+0x10/0x10
[  931.643280][    C1]  ? seccomp_filter_release+0x18a/0x2d0
[  931.648880][    C1]  do_exit+0x6ad/0x2360
[  931.653066][    C1]  ? __pfx_do_exit+0x10/0x10
[  931.657675][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  931.662716][    C1]  do_group_exit+0x22d/0x2f0
[  931.667325][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  931.672540][    C1]  get_signal+0x121b/0x12c0
[  931.677071][    C1]  arch_do_signal_or_restart+0xbb/0x860
[  931.682625][    C1]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  931.687836][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  931.694001][    C1]  ? irqentry_exit+0x218/0x8f0
[  931.698786][    C1]  ? __se_sys_clock_nanosleep+0x35b/0x3b0
[  931.704531][    C1]  exit_to_user_mode_loop+0x104/0x730
[  931.709922][    C1]  ? rcu_is_watching+0x15/0xb0
[  931.714696][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  931.720771][    C1]  do_syscall_64+0x353/0x580
[  931.725420][    C1]  ? clear_bhb_loop+0x40/0x90
[  931.730112][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  931.736011][    C1] RIP: 0033:0x7f6fe0d5e84e
[  931.740431][    C1] RSP: 002b:00007f6fe114fb28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
[  931.748857][    C1] RAX: fffffffffffffdfc RBX: 0000555586254500 RCX: 00007f6fe0d5e84e
[  931.756839][    C1] RDX: 00007f6fe114fb80 RSI: 0000000000000000 RDI: 0000000000000000
[  931.764822][    C1] RBP: 00007f6fe1027da0 R08: 0000000000000000 R09: 0000000000000000
[  931.772813][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000c9d47
[  931.780807][    C1] R13: 00007f6fe1025fac R14: 00000000000c918e R15: 00007f6fe114fcb0
[  931.788810][    C1]  </TASK>
[  931.791839][    C1] rcu: rcu_preempt kthread starved for 1984 jiffies! g151381 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  931.803039][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  931.813015][    C1] rcu: RCU grace-period kthread stack dump:
[  931.818911][    C1] task:rcu_preempt     state:R  running task     stack:28192 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[  931.832404][    C1] Call Trace:
[  931.835690][    C1]  <TASK>
[  931.838631][    C1]  __schedule+0x17d9/0x56c0
[  931.843172][    C1]  ? __pfx___schedule+0x10/0x10
[  931.848043][    C1]  ? schedule+0x90/0x2b0
[  931.852303][    C1]  schedule+0x164/0x2b0
[  931.856471][    C1]  schedule_timeout+0x152/0x2c0
[  931.861340][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  931.866735][    C1]  ? __pfx_process_timeout+0x10/0x10
[  931.872037][    C1]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  931.877854][    C1]  ? prepare_to_swait_event+0x322/0x350
[  931.883413][    C1]  rcu_gp_fqs_loop+0x30c/0x11f0
[  931.888301][    C1]  ? __pfx_rcu_watching_snap_recheck+0x10/0x10
[  931.894477][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  931.899831][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[  931.905144][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  931.910968][    C1]  rcu_gp_kthread+0x9e/0x2b0
[  931.915581][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  931.920793][    C1]  ? __kthread_parkme+0x71/0x1f0
[  931.925748][    C1]  ? __kthread_parkme+0x196/0x1f0
[  931.930791][    C1]  kthread+0x388/0x470
[  931.934876][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  931.940087][    C1]  ? __pfx_kthread+0x10/0x10
[  931.944692][    C1]  ret_from_fork+0x514/0xb70
[  931.949302][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  931.954425][    C1]  ? __switch_to+0xc89/0x1420
[  931.959331][    C1]  ? __pfx_kthread+0x10/0x10
[  931.963941][    C1]  ret_from_fork_asm+0x1a/0x30
[  931.968729][    C1]  </TASK>
[  931.971952][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  931.978271][    C1] Sending NMI from CPU 1 to CPUs 0:
[  931.983511][    C0] NMI backtrace for cpu 0
[  931.983535][    C0] CPU: 0 UID: 0 PID: 3227 Comm: kworker/R-bat_e Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  931.983557][    C0] Tainted: [L]=SOFTLOCKUP
[  931.983563][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  931.983574][    C0] Workqueue: bat_events batadv_dat_purge
[  931.983723][    C0] RIP: 0010:rt6_score_route+0x1/0x380
[  931.983784][    C0] Code: ff e8 f3 6a b7 f7 e9 12 ff ff ff 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <41> 57 41 56 41 55 41 54 53 89 cd 89 d3 41 89 f7 49 89 fe 49 bd 00
[  931.983797][    C0] RSP: 0018:ffffc90000007328 EFLAGS: 00000246
[  931.983811][    C0] RAX: ffffffff8a7f5bbb RBX: ffff88807ed658c8 RCX: 0000000000000003
[  931.983823][    C0] RDX: 000000000000001d RSI: 0000000000000001 RDI: ffff88807ed658c8
[  931.983833][    C0] RBP: 1ffff1100fdacb19 R08: ffffc90000007640 R09: ffffc90000007650
[  931.983845][    C0] R10: ffffc900000074a0 R11: fffff52000000e96 R12: 0000000000000003
[  931.983856][    C0] R13: ffff88807ed658c8 R14: 1ffff1100fdacb1b R15: 0000000000000001
[  931.983867][    C0] FS:  0000000000000000(0000) GS:ffff888124f4d000(0000) knlGS:0000000000000000
[  931.983880][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  931.983891][    C0] CR2: 00007f9f3be00218 CR3: 000000007c55e000 CR4: 00000000003526f0
[  931.983905][    C0] Call Trace:
[  931.983912][    C0]  <IRQ>
[  931.983919][    C0]  find_match+0x119/0xb40
[  931.983967][    C0]  __find_rr_leaf+0x243/0x740
[  931.983989][    C0]  ? __pfx___find_rr_leaf+0x10/0x10
[  931.984006][    C0]  ? __pfx_fib6_node_lookup+0x10/0x10
[  931.984029][    C0]  ? __lock_acquire+0x683/0x2cf0
[  931.984052][    C0]  fib6_table_lookup+0x3c6/0xae0
[  931.984073][    C0]  ? unwind_next_frame+0x8f/0x2550
[  931.984094][    C0]  ? ip6_pol_route+0x163/0x14d0
[  931.984115][    C0]  ? __pfx_fib6_table_lookup+0x10/0x10
[  931.984139][    C0]  ip6_pol_route+0x229/0x14d0
[  931.984157][    C0]  ? ip6_pol_route+0x163/0x14d0
[  931.984178][    C0]  ? __pfx_ip6_pol_route+0x10/0x10
[  931.984195][    C0]  ? ip6t_do_table+0x1d1/0x15b0
[  931.984270][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  931.984293][    C0]  fib6_rule_lookup+0x556/0x730
[  931.984336][    C0]  ? __pfx_ip6_pol_route_input+0x10/0x10
[  931.984355][    C0]  ? __pfx_fib6_rule_lookup+0x10/0x10
[  931.984378][    C0]  ? ip6t_do_table+0x1d1/0x15b0
[  931.984401][    C0]  ip6_route_input+0x78d/0xb20
[  931.984423][    C0]  ? __pfx_ip6_route_input+0x10/0x10
[  931.984447][    C0]  ? nf_nat_ipv6_in+0x200/0x2c0
[  931.984519][    C0]  ? ip6_rcv_finish_core+0x222/0x420
[  931.984536][    C0]  ip6_rcv_finish+0x141/0x280
[  931.984553][    C0]  NF_HOOK+0x336/0x3c0
[  931.984568][    C0]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  931.984582][    C0]  ? NF_HOOK+0x9e/0x3c0
[  931.984596][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  931.984612][    C0]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  931.984633][    C0]  process_backlog+0x774/0x1860
[  931.984679][    C0]  ? process_backlog+0x3c3/0x1860
[  931.984700][    C0]  __napi_poll+0xaa/0x330
[  931.984751][    C0]  net_rx_action+0x61d/0xf50
[  931.984771][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  931.984804][    C0]  handle_softirqs+0x225/0x840
[  931.984824][    C0]  ? do_softirq+0x76/0xd0
[  931.984843][    C0]  ? batadv_dat_purge+0x2d7/0x3c0
[  931.984863][    C0]  do_softirq+0x76/0xd0
[  931.984880][    C0]  </IRQ>
[  931.984885][    C0]  <TASK>
[  931.984891][    C0]  __local_bh_enable_ip+0xf8/0x130
[  931.984908][    C0]  batadv_dat_purge+0x2d7/0x3c0
[  931.984932][    C0]  ? process_scheduled_works+0xa20/0x14e0
[  931.984950][    C0]  process_scheduled_works+0xa8e/0x14e0
[  931.984980][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  931.984997][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  931.985018][    C0]  ? assign_work+0x3af/0x5d0
[  931.985037][    C0]  rescuer_thread+0x7b6/0x10b0
[  931.985059][    C0]  ? rescuer_thread+0xb8/0x10b0
[  931.985086][    C0]  kthread+0x388/0x470
[  931.985106][    C0]  ? __pfx_rescuer_thread+0x10/0x10
[  931.985125][    C0]  ? __pfx_kthread+0x10/0x10
[  931.985146][    C0]  ret_from_fork+0x514/0xb70
[  931.985168][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  931.985189][    C0]  ? __switch_to+0xc89/0x1420
[  931.985208][    C0]  ? __pfx_kthread+0x10/0x10
[  931.985229][    C0]  ret_from_fork_asm+0x1a/0x30
[  931.985252][    C0]  </TASK>
[  933.706559][    C0] net_ratelimit: 11438 callbacks suppressed
[  933.706581][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  933.725301][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  933.737742][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  933.750214][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  933.762858][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  933.775297][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  933.787688][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  933.800145][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  933.812827][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  933.825333][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  935.207473][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  935.227520][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  938.716691][    C0] net_ratelimit: 10477 callbacks suppressed
[  938.716713][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  938.735163][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  938.747781][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  938.760246][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  938.772822][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  938.785550][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)
[  938.798024][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  938.810480][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  938.823219][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  938.835760][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9a:9d:2a:01:bb, vlan:0)