last executing test programs:

18m40.108279821s ago: executing program 0 (id=1260):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18m39.831688979s ago: executing program 0 (id=1261):
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = userfaultfd(0x801)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0)
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000b80)={0xaa, 0xc1})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcd, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0xcbed, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
socket(0x24, 0x6, 0x1000)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12012000f1048108cd060202d4c34e01000109021b1901000000d40904150001da40df000905", @ANYRES64], 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000000)=@v={0x93, 0x5, 0x80, 0xc, @MIDI_NOTEON=@note=0x27, 0x8, 0x6})
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

18m37.404623019s ago: executing program 0 (id=1272):
unshare(0x2040400)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0x36, 0x0, 0x4)
unshare(0x700)
rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8)
epoll_create1(0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4008011)
io_uring_setup(0x6, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x9, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fcntl$notify(0xffffffffffffffff, 0x402, 0x29)
syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00')
r0 = socket$kcm(0xa, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = syz_pidfd_open(0x0, 0x0)
setns(r3, 0x64000000)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x0, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x4e20, 0x2, 0xcd}}, 0x44)
sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

18m37.316314539s ago: executing program 0 (id=1273):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x52bd5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
r4 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010811798080000000000010902"], 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r8=>0x0})
r9 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x6b, 0x7b, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x30, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x2, 0x4a}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x8482)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmmsg$inet(r1, &(0x7f0000010840)=[{{&(0x7f00000002c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @empty}}}, @ip_retopts={{0x10}}], 0x30}}], 0x1, 0x40000)
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x9c, 0x24, 0x8, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x5, 0x5}, {0xf, 0xffe0}, {0x1e, 0x6}}, [@TCA_STAB={0x5c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x7, 0xfff8, 0x9, 0x0, 0x8, 0x1ff, 0x5}}, {0xe, 0x2, [0x6, 0x0, 0xff60, 0x400, 0xb]}}, {{0x1c, 0x1, {0xf6, 0xfc, 0xf107, 0x1, 0x2, 0x5, 0xa3c, 0x5}}, {0xe, 0x2, [0x8d1, 0x1a, 0x5, 0x9, 0x5]}}]}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x401, 0x1, 0x1}}}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x811}, 0x24044846)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0/../file0/../file0\x00', 0x9801)
move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000440)='./file0\x00')
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc1}, 0x0)
r11 = io_uring_setup(0x601e, &(0x7f0000000580)={0x0, 0xba3a, 0x8, 0x2, 0x33e})
io_uring_register$IORING_REGISTER_FILES2(r11, 0xd, &(0x7f0000000140)={0x62, 0x1, 0x0, 0x0, &(0x7f00000001c0)}, 0x20)
r12 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r12, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00')

18m35.81578816s ago: executing program 0 (id=1282):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f000001a900)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="12", 0x1}], 0x1}}], 0x1, 0x2401c444)
close(r0)
accept(0xffffffffffffffff, 0x0, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000b)
socket$tipc(0x1e, 0x5, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$HIDIOCGUSAGE(r2, 0x40015b19, &(0x7f0000000000)={0x8001, 0xfffffffe, 0x7, 0xff, 0x1})
read$char_usb(r2, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000280)=0x655e, 0x4)
r4 = dup2(r3, r3)
write$tun(r4, &(0x7f0000000000)=ANY=[@ANYRESOCT=r3], 0x46)
ioctl$XFS_IOC_GETBMAPX(r4, 0xc0205838, &(0x7f0000000040)={0xdf10, 0xfffffffffffffffa, 0x1, 0xc000000, 0x7, 0x20, 0x1a})

18m35.576471416s ago: executing program 0 (id=1284):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0", 0x51)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0}, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000344000000"], 0x0, 0x0}, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f00000013c0)={0x1c, &(0x7f0000000300)={0x40, 0x16}, 0x0, 0x0})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x6)
connect$unix(r3, &(0x7f0000001c00)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r4, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004001}, 0x8000)
syz_usb_control_io(r2, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r2, &(0x7f00000002c0)={0x14, &(0x7f00000001c0)={0x20, 0x1, 0x4e, {0x4e, 0x2, "02cfd0920ce87bfc717279cfca99479cc215d90c03370648837d15f0d6c2e650ac6d4a3d43d357b4242856c193da48fe7b138467f708078a1046202671b0d3fbffff784bbab1a4731b991901"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1409}}}, &(0x7f0000000580)={0x44, &(0x7f0000000300)={0x0, 0x16, 0xaf, "c284cfa2f070481088764c3238d6d0431a455c9e20756461c5d53663fec6e87623243eb50ce5c283892b81980b0b567dd35ed396fb200d3059b9a8b77cb9fa6f3ec88ae3ef0c7258f818caaafa9cb8ab96e1fd3504ef8e1b393c9234981249f2de4494a11149272c77f8582df3afce57fb22f0dd82faaf9701d92315e36903edd274fa0b7846afdb9bc4ad4ba2cd8658731738422159308c41d672025c4fcb9eb5b4bbc305647d300f7a5664484d56"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000440)={0x20, 0x81, 0x2, "8f1b"}, &(0x7f0000000480)={0x20, 0x82, 0x2, "0dbb"}, &(0x7f00000004c0)={0x20, 0x83, 0x2, "69a6"}, &(0x7f0000000500)={0x20, 0x84, 0x2, "fa05"}, &(0x7f0000000540)={0x20, 0x85, 0x3, "f238b3"}})
lseek(r1, 0x1000001, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0)
syz_clone(0x648c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)

18m35.114770214s ago: executing program 32 (id=1284):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0", 0x51)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0}, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000344000000"], 0x0, 0x0}, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f00000013c0)={0x1c, &(0x7f0000000300)={0x40, 0x16}, 0x0, 0x0})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x6)
connect$unix(r3, &(0x7f0000001c00)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r4, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004001}, 0x8000)
syz_usb_control_io(r2, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r2, &(0x7f00000002c0)={0x14, &(0x7f00000001c0)={0x20, 0x1, 0x4e, {0x4e, 0x2, "02cfd0920ce87bfc717279cfca99479cc215d90c03370648837d15f0d6c2e650ac6d4a3d43d357b4242856c193da48fe7b138467f708078a1046202671b0d3fbffff784bbab1a4731b991901"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1409}}}, &(0x7f0000000580)={0x44, &(0x7f0000000300)={0x0, 0x16, 0xaf, "c284cfa2f070481088764c3238d6d0431a455c9e20756461c5d53663fec6e87623243eb50ce5c283892b81980b0b567dd35ed396fb200d3059b9a8b77cb9fa6f3ec88ae3ef0c7258f818caaafa9cb8ab96e1fd3504ef8e1b393c9234981249f2de4494a11149272c77f8582df3afce57fb22f0dd82faaf9701d92315e36903edd274fa0b7846afdb9bc4ad4ba2cd8658731738422159308c41d672025c4fcb9eb5b4bbc305647d300f7a5664484d56"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000440)={0x20, 0x81, 0x2, "8f1b"}, &(0x7f0000000480)={0x20, 0x82, 0x2, "0dbb"}, &(0x7f00000004c0)={0x20, 0x83, 0x2, "69a6"}, &(0x7f0000000500)={0x20, 0x84, 0x2, "fa05"}, &(0x7f0000000540)={0x20, 0x85, 0x3, "f238b3"}})
lseek(r1, 0x1000001, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0)
syz_clone(0x648c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)

17m5.620538226s ago: executing program 1 (id=1786):
r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYRES64], 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="900000005a000d030000000000000000040000806b00"], 0x90}], 0x1}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

17m4.020761584s ago: executing program 1 (id=1797):
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="e594361a49d44c8d020dcd96e051b5a67f18bb0bdb9303f0a9acba4f0d54cfb9f5b08b0694e8347d1f6c2d3332a1973389f65dadd6ad4a2ca1205b6309088c2ca6ef2434a5b1eae35625d37595380860edaa65c54a46a99b7be8ab8bb2f8d347e7c2cceeadebc0782f0f2349f262b160bcb5a79b320962e9e174e7a0707cd85b47f57c66056198a4198c030685a3069abc034f08688bd7f34f8292cb79ed6df0222d90e5a60699c4a3ccdf807b41f64c5f0816d847b7bc9d90be6f7a016416e60820c0c56131dca952bbe0068d6b28365fbbad0281c541323a0f4350dbbb74ab72d230d3", 0xe4)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="0300"], 0x9)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000002c0), 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @rand_addr=0x64010102}, @in6={0xa, 0x4e21, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x400}, @in6={0xa, 0x4e20, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10001}, @in6={0xa, 0x4e21, 0x99f, @rand_addr=' \x01\x00', 0x80000001}, @in6={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}], 0x80)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x49, 0x7fff0000}]})
shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000001000)=""/61)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x79, 0x9, 0xc, 0x18, @private0, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x700, 0x7800, 0x4, 0x40}})
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r4=>0x0})
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x4], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
unshare(0x26020480)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x405d, 0xb, 0x1, 0xffffffffffffffff, 0x3}, 0x50)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="280100001700010000000000000000007f0000010000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000ffffffff0000000000000000000000004e210000000000050000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00"], 0x128}, 0x1, 0x0, 0x0, 0x4048011}, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r9, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
ioctl$KVM_SET_GSI_ROUTING(r9, 0x4008ae6a, &(0x7f0000000240)={0x1, 0x0, [{0xcf2, 0x4, 0x0, 0x0, @sint={0xfad, 0x1000}}]})
close_range(r7, 0xffffffffffffffff, 0x0)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x19)
bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0xffffffff, @loopback, 0x7}}, 0x24)

17m3.880403904s ago: executing program 1 (id=1799):
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380102000", @ANYRES16=r4], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c)
r6 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r6, &(0x7f0000000580)={0xa, 0x4e23, 0x1002, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000040)="8171080de30ed9d7c3fca505cd6aa005", 0x10)
bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xf}, 0x1c)
splice(r5, 0x0, r2, 0x0, 0xfffffffffffffffb, 0x1)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x64, 0x0, 0x0)
prctl$PR_MCE_KILL(0x21, 0x1, 0x2)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d000905", @ANYRES16=<r10=>0xffffffffffffffff], 0x0)
syz_open_dev$mouse(&(0x7f0000000040), 0x1, 0x24800) (fail_nth: 9)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xf4, @private2, 0x19f4927}], 0x1c)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000440)=@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0xffffffff}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000003c0)="ceab4a9bc98ba0c4f669518341696468bb36e49b33b4b5472ce024f0c4724b2a58be9ba861c9d8c4dfa982315e7a9b81be95e81c3f0649959e86810d8034562ff8", 0x41}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000084000000070000007f", @ANYRES64=r10], 0x18, 0x40000c5}, 0x8050)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece)
readv(r5, &(0x7f0000000340)=[{&(0x7f0000000000)=""/33, 0x21}, {&(0x7f0000000180)=""/144, 0x90}, {&(0x7f0000000240)=""/205, 0xcd}], 0x3)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0xc0be8a297e9b01da}, 0x20000000)
userfaultfd(0x801)

17m2.564659002s ago: executing program 1 (id=1811):
r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x1, 0x8a}, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}, [@ldst={0x6}]}, 0x0, 0x8000005}, 0x94)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x88101)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x10)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r4, &(0x7f0000004200)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88)
writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
close(0x3)
r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000002c0)="4bf1e6e55e2b418e12e85e69b097e29f5b224b2218931bce7a1f58c7abf336a88a9ea214a9dc223679cc5167ade14bdc84845de9d2d928c49e886aabbff418d16cba19c48fc060441fa7d2111fd3b57670df4abe3b30", 0x56, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000200)={r7, r0, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={'sha3-256\x00'}})

17m2.391124223s ago: executing program 1 (id=1813):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gre0\x00', <r1=>0x0})
r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c01000010000100000000008ede3dfdfe8800000000000000000000000000010000000000000000000000000000000000000000000000010000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000000c0000000033000000fe8000000000000000000000000000bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000100000000000000000000000a0002008a000000000000001c00170000000000000000000000000000000000000000000400000048000100686d6163287368613235362d63652900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500210001"], 0x15c}}, 0x0)
ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2})
ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000001c0)={0xa, @sdr={0x50565559, 0x401}})
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x90, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r1, {0x1}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x5c, 0x3, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x27a, 0x7fff, 0x6, 0x4, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20041890}, 0x0)
r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f00000004c0)={0x7, @pix={0x8, 0x8, 0x4f565559, 0x1, 0x3, 0xd2c8, 0x9, 0x400, 0x1, 0x8}})
ioctl$FS_IOC_GETFSSYSFSPATH(r4, 0x80811501, &(0x7f00000000c0)={0x80})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = syz_usb_connect$midi(0x6, 0x82, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x582, 0x156, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x1, 0x1, 0x6, 0x90, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x30, 0xe, [@ms_header={0x7, 0x24, 0x1, 0x9, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x7, 0x3}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x1, 0xb}, @ms_header={0x7, 0x24, 0x1, 0x3, 0x7}, @midi_out_jack={0xd, 0x24, 0x3, 0x1, 0x7, 0x3, [{0xf4, 0x6}, {}, {0xb, 0x7}], 0x1}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0xb, 0x2}], [{{0x9, 0x5, 0xe, 0x0, 0x10, 0x40, 0x1, 0x7f, {0xe, 0x25, 0x1, 0xa, "dbd44cf08bf31d0338bb"}}}, {{0x9, 0x5, 0x6, 0xc, 0x200, 0x3, 0x7, 0x1f, {0x11, 0x25, 0x1, 0xd, "af6b2678f6b1efe77a6b88a0ad"}}}]}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x300, 0x2, 0x4, 0x1, 0xff, 0x2}, 0x2b, &(0x7f0000000400)={0x5, 0xf, 0x2b, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0xb, 0xa, 0x100}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x6, 0x49, 0x5, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "be90b0cc049d5b8b66ed43d64e227229"}]}, 0x5, [{0xac, &(0x7f0000000680)=@string={0xac, 0x3, "0b52305ca58ab08217c870c004e388dcdc572d1412858e95b8d3842c8f877928bfe6fbbcb3fefdb76bb5b7fadfbf5fd12a902fe8e1b8c7555cd19b6aafb22423add3de1620fce15d704e0f1542e48be378ca384dd1b95d117b28f96ce2dd6c593e7a1f725f224862dff269374dcedb1ca0987dfadc7529d9b438ae38f03f353be81e054114814474d802dc29c672a7153edc39f6dbb94f7e1da809d777c172bdfdd0def38107185625ad"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x459}}, {0x13, &(0x7f00000007c0)=@string={0x13, 0x3, "dde291900c2f7588f3a9e507a119219bc6"}}, {0x51, &(0x7f0000000940)=@string={0x51, 0x3, "92b8b38097cdec8992264e29fdf82e13afe85dd1234bc9799b2390e4c8a369072274b05bf6571bd711f21d4bb40cb1bd84d38031d5a171abe2b2e0cf8ea0784fea4dcd42df676f008a36ef5df94e9f"}}]})
syz_usb_control_io$printer(r6, &(0x7f0000000c00)={0x14, &(0x7f0000000a40)={0x0, 0x9, 0x7b, {0x7b, 0x23, "5c8097ca0ba480007939fc959b3821fc0da3e03d40d7707d05b5eb09225c562356cf9b6ebc637f4f7bdfa42aa04b886f9237cb1c5eaab3f9a6a5bd73a0793a7508dce60cb0b95c87decb02531685c8feb3158e5aed3047bdb2864026b7f7c5ac8dc91b74a8cb8301a93869e849ad93d7efdcf8e40d2df87d55"}}, &(0x7f0000000bc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x416}}}, &(0x7f0000000ec0)={0x34, &(0x7f0000000c40)={0x40, 0x11, 0x77, "038ae9d66534b96096134fcee3bb9253b62337fe183c9c7595c90748dcf6c812d61a5960d3802498a10bd71a48b74e6c71dd138ba7505f4a75eed0b104a9a93bf32c3982b6b1fb0ab3b805e592a4331d0a1ce1209bdfb882f1a834c7102b6cf171c754e31d9b0a51b33e1e1907b35bf984bef5f0319c45"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000d40)={0x20, 0x0, 0xea, {0xe8, "52f06e3e9029050133f7c487ea50792e60b300fdc906494315748db2c8e0801e8584d33f545e678007f7789d8217c661d5322fdf882d1ee6338775f72907da9e77657156669d2ad37ea7b4b0e06cdde3b7beccb16d64aa63d38ad5dccd8aab79e5f7db98448dc44c6013e6e0a8a83a0a603627645f33345bf30ae1a7ea20056ff23e61a43c3deb7a82485a24dfff12b01a6c68998753850acbda9895caa57c72f03f799f5b3bae5e1ad30109b1d3a8def1292e7018cc49d845882c60f3e52ce1cdfe67b34b32a1a8d595bf005ae30ed793948d9ac0e87a6e854d1824ac3502bb61095a1144d33ca8"}}, &(0x7f0000000e40)={0x20, 0x1, 0x1, 0x4}, &(0x7f0000000e80)={0x20, 0x0, 0x1}})
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYRES16=r2], 0xac}, 0x1, 0x0, 0x0, 0x8010}, 0x404c040)

17m1.92949411s ago: executing program 1 (id=1817):
r0 = getpgrp(0xffffffffffffffff)
sched_setattr(r0, 0x0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
socket$key(0xf, 0x3, 0x2)
bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
lsm_get_self_attr(0x64, &(0x7f00000001c0)={0x0, 0x0, 0xf9, 0xd9, ""/217}, &(0x7f00000002c0)=0xf9, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4)

17m1.348958322s ago: executing program 33 (id=1817):
r0 = getpgrp(0xffffffffffffffff)
sched_setattr(r0, 0x0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
socket$key(0xf, 0x3, 0x2)
bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
lsm_get_self_attr(0x64, &(0x7f00000001c0)={0x0, 0x0, 0xf9, 0xd9, ""/217}, &(0x7f00000002c0)=0xf9, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4)

15m43.922817194s ago: executing program 3 (id=2186):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x109})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
syz_usb_connect(0x2, 0x2d, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="04aa826db9e603f8a5"]}, {0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x409}}]})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r4 = socket(0x3, 0x803, 0xfffffffc)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
sendmsg$inet6(r4, &(0x7f0000000940)={&(0x7f0000000140)={0xa, 0xffc2, 0x4, @mcast1, 0x54c7}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000440)="7488066adca5d9c90e181c6e68a03f26fa354ab8a2a2e78b778d85e7fe006181e13ff4acc087028c787726948a1294ee1fba9f49d022f0f24c8dcf6ad3269e38793e9b2e3f687c3e8564f1b0f88e9a33ee1d67c71ecbb1a0bd0054a2bde038a48e418738304d0aa75fac8841f3100e23bae514c6e4492d56abdce294c307aab06a9d4563bbc6648226ce8696830e7a1a5369376c66a093b968ac874dae52e5fd91fdc5f42e90aadb3b020a3dfae4e877e83e0e39b4387d05da0b9f424ed7df542c0f1079b80136a80999e5bb0c92cb998db6323ff82bf295a67990", 0xdb}], 0x1, &(0x7f00000006c0)=[@rthdr={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0x2, 0x0, [@remote]}}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x2b, 0x2, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}, @hopopts={{0x110, 0x29, 0x36, {0x3a, 0x1e, '\x00', [@generic={0x8, 0xda, "04a4ddd9261ab66ef5415609455c86b0fc8e55f27d3647e65aab6900106b68c64ea0f0c2b9240692bccf7dae784e2bc69f0d1edbbf5bac95aee4b75f4b30d5209a7df219d0a45345353d4307320f91a220432d59be9ad1f92d021c96f35981e0e08517fa660811db3c4e830195c976edb50696610390a31de252adc5d61ac5b258223ef99bcc73a335f330cce471e2436a0f19e9d494a5bec4295bb158d0271576138b5a593d36facaff923157234b5006a4841831b0051da63147c4c1ee5f8ffe13c26782a91ecf9ba5795c5a9a31b324075cd9792ad48e3e4b"}, @enc_lim={0x4, 0x1, 0xff}, @calipso={0x7, 0x10, {0xb536d76c3e0f8b43, 0x2, 0x57, 0x6, [0x3d0a]}}]}}}, @hopopts={{0x30, 0x29, 0x36, {0x4, 0x2, '\x00', [@ra={0x5, 0x2, 0xfffa}, @hao={0xc9, 0x10, @loopback}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x4, 0x12, 0x1, 0x5, 0x0, [@mcast2, @private0, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @remote, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @private0]}}}], 0x268}, 0x4004000)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r5], 0x50}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r9], 0x50}}, 0x2)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'hsr0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r10, {}, {}, {0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa0904000003ffffff000705810200020007050202000200070583"], 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000002440)=ANY=[], 0xfda)

15m42.442174851s ago: executing program 3 (id=2196):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendto$inet6(r0, &(0x7f0000000380)="99c8a9f22ce2962253", 0x9, 0x3b44, 0x0, 0x500)

15m42.1798349s ago: executing program 3 (id=2197):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000200)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0], 0xfc9, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r3 = syz_clone(0x31200, 0x0, 0x0, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000540)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5>\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4)
ptrace(0x10, r3)
ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r3, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x2, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000002680)=[0x0], 0x1})
ioctl$TCXONC(r1, 0x540a, 0x0)
ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000))
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000001c0)=0x9)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x3)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001540)=""/74, 0x0, 0x5000})
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000016c0))
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/182, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001900))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
madvise(&(0x7f0000226000/0x800000)=nil, 0x800000, 0x19)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0xfdbde43b4cb8fb5e, 0x6, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x980920, 0x6, '\x00', @value64=0xa}})

15m41.384453293s ago: executing program 3 (id=2201):
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x50)
syz_usb_connect(0x4, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000980)=0xd)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7b, 0x6, 0x4d, 0x9, 0x1, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3a7, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x0, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x6, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x7f, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x10003, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x402, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0xdd, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x4, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x8, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0x8aaed, 0x4, 0x65], [0x9, 0x9, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0xfffe, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000980)=ANY=[], 0x0, 0x720, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f0000000180)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x2, 0x1, 0x4}, 0x10, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000200), &(0x7f0000000240)=[{0x2, 0x4, 0xb, 0x1}], 0x10, 0x2}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x48002)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4841)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x64}}, 0x4800)

15m40.796729781s ago: executing program 3 (id=2204):
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/249, 0xf9}], 0x1}, 0x0)
close(0xffffffffffffffff)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="a253f38ef45c5805a1f7209442f3c7816c9f1839dfafa7db73e40ff90900000000000000fb9013ecf316395d0386140380cd7f90790e1340b58000000000000047b5002b230d0aa7a2ff07e9d1c3c23f5014fd86b67be57ba7a643fa610de58dcea6035a66e4df2c9e7769341567fc5856dc07000000321254149c32f96a814325cb5ef9a7a8a8028078b3d99bf6f04222c7c021e8fac46cfca40bf640af89a098879e4216582ffd6d3e5a8c1eda8852bdc0b4bf285872448857e3b7681329264294965ea12c6e4bb575cb5d8eea49f4ca025c26f6e97edd53422a09e73c21c23b5eb6d5f9f3f4a0839e8b9ffe9ab485f55bb29c029bef43c8f9", 0xfa}], 0x1, 0x0, 0x0, 0x3}, 0x880)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000680)="f7790066baa0006eb86b42460f22c7d466470fe82000b8e20066ef0f2992902cbb000000e2b13a338c88d9000010292966f6440f386b410f7842288a0f920792070000000f01d9c4033921820f47a753fd", 0x4b}], 0x210, 0x5b, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1)
getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="48000000100037040100"/20, @ANYRES32=r5, @ANYBLOB="c30803000b2ebe262800128008000300e000000206000f0002000000340011004e230000"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmmsg$inet(r1, &(0x7f0000005cc0)=[{{&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000100)="694d2c983d8ce5e6bfdb5d0a664250", 0xf}, {&(0x7f0000000480)="a039b52a1a5c95345a4f82d94139d632c39479203f607a13a17e71cce3249c6e6fa5f0ef1711853b0e9b53cd091eb6f34f755f9ca3f8b1cce359ad460346a1c22b2aedc4399cafbc76afbe2746a4549a4b7433441a1e82107866e4186ed10c81a635feebffc6ec8340d4311dde3cda22e62eebfd66e58da3ba8aab85f5c5339aa676410409a2f3088e8f3d21432616a3cb83843b484ae6602abeb0cabb31ef58121316a8050836b7e7b5e6690f91ba727c6a924fd77d59d3af7ab47281c3635a3d1e996145e894dfdd9d2b76250937d608eb34ffc366baaed3b03be2dcc31d4fc2470d99", 0xe4}, {&(0x7f0000000580)="e32feb66262750009d103b4473c05a6deeeb3d15d6a052e25115f4081e3ca98e3969a6ecef77a7b182e4a71398847b4cab5f5a5e57aed93b144015da3ba14465a54408b738ebe94b9a623196eb528f6e0b3b54f239393807a526f340272014bf34ac07e4c82cc0629cff52ef025516bacbb17cc11c7ccca21008bf96e662df6c757e5a2211a1e11325167cb207952b12493ed7df5bfb0e27a32e65e29f450c254b95c203bbf13a0f8ff65309d3de32ad7576a4afd21e09", 0xb7}, {&(0x7f0000000640)="1f62a4b5cb18d7e339c50424a91f7c64a5bdd5dfd54f8a0a389f6d712df4bcc3d7819e9c100ed200191b356ce6d150982a0782503657a37412b4fda3a883ad848abfcc8456347f0f7742b85cdd023e6191e831a186b327b80f4d229ed16cfaea15b85d164b1772db1f16adc992e3b3c9cb758a71fcac699620627ae2ce7e5467d18c66b547c16196e6a769b855a419c3a2101c5716b200bc1cc64a8b89733546b2bf4b0263fe9af462d2b448a386333e647f260de0f01c3e1349351585a402d5b57d095eea4b141b3355025553fe66a482dfd646ddf30ef3f02605353d5083ca076cca191b6621e592a4e879b20276188e028598", 0xf4}, {&(0x7f0000000740)="a44308060292fd3bba", 0x9}, {&(0x7f0000000780)="6f8def242535ccf67772a4b24e27647cc337dc903ec85133d6312bc6b16391bd9bcc588f5f3c557ea94c4fdaebaed4e88329b4c95dab9e11fa9f8078c6da2f1024443e", 0x43}, {&(0x7f0000000800)="34f724b94b4e3009c608166bb75e3ec041feea4c361451773aee3ad83d9bdc9f785cb35844e9657d648fdb701ec7ed8f9197712ced20d1622cbb7306dc8a06c196878419a4873f9cd050cc70f69512d1c8832dd5a46761d13b97d00ffae1eb2342ed9a8b2684708b257fa56f51e9d70a3873072bf59b284782bcd09b1959c32b02c1dcc70889aae94d0185ab95aa6e798b04db91683e7b7fbd801bac823816aa2911ef80d8b2b460f2bf598727a275d7ccde", 0xb2}, {&(0x7f00000008c0)="296a59b52399572b8610890b34c6642efc8daae76c5a2a58a0a0e65249c31a83ac72e50dc65c2fad5aea60daf215e9564142646b27e9ad1597673e97518dd1ef7e40cd4e1af5a9744a8b6067904b0a2f77cbcfae0d42d2ba", 0x58}, {&(0x7f0000000940)="8552008b933f6e92ae7bd42e429b9703c465a70ac99bb90f4c19c48a6248d37c0cea89a81507c1e71b009fea421fe009c4fd7e427c864bd9e57df1caaa519cbbbf393007c62912ff6855a600ef050c548a25612f1306f94902dd1e8436b2f03845e1be0786119928e83ccbbce22d09eeb80105eadebe679ed1f4b97c05b07925a5e48f5b1b6f5a364f0349470c2b9016e2445980ab2ce08c9c1497cdac3f54dcf4b49a63b51e6474acf52358211b05488c1481a7b4978dea7fc3048a746a995abe21ba6b6604b20bb34557a53e74d4f5e8a89cc180272f52bb54a34f3da04b10650f", 0xe2}], 0x9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"/424], 0x1a8}}, {{&(0x7f0000000cc0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000002900)=[{&(0x7f0000000d00)="fa7e3b33fe74ca4dfcc718a4f2905e531fa14f0ab2d2a9ff57afef0964d98199046cab79558906114b0fa4e6a3c73149dd30c55df55a75802e1b6344e973867ffb3f2d04e05600f941f05b44a0d1a8798897c6d2814f92c6bf0e46a24be7de3fc17e1e35aa7baf0360cc64ce5d5d3b81abf605324f473d035680fd18e1c4d1a45443e530e18843016aa4ad65dc314028bcb846267c962d3092e02d86f88c5f0b6bf046f3469ce1866b77b2a6ef1e60ba839933", 0xb3}, {&(0x7f0000000dc0)="4789a7138667a68caee53c5e976f800382c83dbbdf0157ba464e0cb1f10d5cc20dedb50664f7df8c272d7d18d02e640621ebc195fbb82bd4689b31b00fb6d269262d225ed35bd1939985e758ae6821969953088e6d835ee067254acc4fb6314942b23319e1d9291a8b148af92450c149a24829ab638fd4e3f440360327eedad07311d27bc081ea747a153d5986bd90ce63f4418c7a900a37c6fbf093839282138e3cae9d0f6e960966a2b38b89b2607f075773a892165fe76d086eb488cf563ed4f4fef6d371406d0b657fdfd9603f7ace5976955d1c143a5ee1be532bf1", 0xde}, {&(0x7f0000000ec0)="af26fc5445c874facf687da06dd0078a7f95082326ac3648f24be13323d2564331e5895aea3c8b3afba4458e4443f8eb807a946334550687721f415e93176dd659c96343334dcbdc9bdf14c9138e973296f920faa9cad6766fbfdad1838f266d0e29feeabf5bc49d966983f6e34916b9937516316a210f33369c2ea95f2f952f05f46a9a17649cbbb4aa37e062959bbcf8472fce62da4594149db050e81fc5f96890c849a39006f25b0a037a", 0xac}, {&(0x7f0000000f80)="589fee4e61fc4273972e85c4144947712340a2448671c195ebc07a2cc781074c608b03c74201fff45d864303963b85097e5f0662b1f7f0e1807274192dde585d4f1f03a3dd763872b6e996453ccfbbb4fbfd74d9da468f9bb95a21eb570c482ef7eea08140f51671ed83672f5021bc62ce498edbaa6f0e8b7509706917de9e825aa3fd4a57b748770ce5f2a978de8c81fb410078ac44f826abdbb604723f1c5a6e41fe76c920648df49854253b45aabcc7c47726a6f23629e1e16005ce172071add885dca4daddbc7f202f9cd9eec2919f61a6fb7ed8f7cff57094349e2a62b25e6cc1d36bf1d1aaeb", 0xe9}, {&(0x7f0000001080)="443c25a38872ffac26adee0173122d6ddfb5ee40b0bbfd8c807477f8a1240b19b94d1727167bfec2a9338fdbf87e86342d35dfe1c52cce0fc8e45129ba358dc9e2f8cb49fe94a4e5a06b1c8a09e77f685457842752a80b6af185dae422b6769c0807afcc6f229bc425c7eab388f4421c03cc9e1ea83c89ef6ae47e5696aaeda47eda20d76ba68baff0d7fe7d13a10ff0e1b0a1c4b941f221f20a56", 0x9b}, {&(0x7f0000001900)="bdf9386d1d7276589ad1bb982554dd8cc5cc0ab7595bda72d75e94c17f5608692ee1f6a13dc80a943d52bb92945f5d5d16f5920b4d343b5ccc9a4d53287e1b2cc29329a06e64a29262e0c7e16518b82366bee11ce6ae1119f50a30d4df7e4115b2f2c7b597390b28d00407b9bdad46cadc2fafd2d357398292f956f084657132ecfef16fdc5c4fdab9e84bdc38148e0aa801fd0363d1ba8b912f2cca43c31295ad30935ccb0fe7b99668272c810ddd646d6d2b7793874246c373477bb1b19fa698d050731d7e90e270540d818ccd402cbaf04909f1076b5d70fcc0673a81e10db956654b3ec25e4b8110612c79691610d6b526862681636f6dceb0efcc5c0357a5a52c66ba2023c0a3a318e3ebd6ee07feead891cb6d927afc7747f40bdc3d73d2019bc56b54584f4bb1a5245c39b1295586ee3fcf34b6aa167e47d20382e2c48c66174f6d1b7dca3877095cde9e888c96d972c722c808a0dcba980f5972feaaccde9c6e9ee2ef1291a14e28fa8a5af8192532e310067a099e99256c46b1469bf017755a8e9b1cb0a938ec8c196546d138bb1612e08934d4b65ec22898b835bea781efbf94023261871007249a3934a6c94b5bf60e2a7ba88d025af8d76dd54300b1aa511b1cf942f2e921367c25c3cc1477853eb4ce398d6ef1c9857a2ef24b46743e613108836a1f1a30504333006842e68c452c03ef2c5b49f4b355349fa3d9b8adf2d0251507540e3acd7ad64483bff9fdb18e0cc82e2a9529f2c70e8d64a306f2875d3a8f2d3f213e32a793d0808fd5cd39e31491e13eb695237af2e49fced3600e163bda42590655464f1724f1b56d17b813275c6feb2b8260d871824586cf478f3a9921a2719852bd6436fec376d695f5c97854c7702662ce7f03f388d910c66fab1a9bb75c5a2bb9cba30e5d908322c28ecaf7e84bf78b150b35910965615b8476831b97b57e3f284051db9b7c899ed66da61c286bb7e4e6a2dc4ee7999101f3301a524cad94bb17a61e37b272b0847ea8549f8b3c48daa59bee57b0cb06e7619b03a8f375bacd029a08399a4c4377a133ec9415994be4741455c9ad99d543585414bc8695827576c133980c1105304179126bd87b9c89ec7e197ddc530f6d1a301eef38833817b6c0073a4755ed10e38fc997002aff8879b389a189d6f5200bfc425f12f2a0e20f8d9103ba54f459878f79aa48100af521a3526ec997e1d4d2d836e70013040e6d36c67980305e6013fdcc141d19b98c5e99a1a9d1c4129c004a21c7a078154bbf07302c480fc85096a462c5b235a32c2f3cae689bc4a7d290dd0b95306054536ab393c227e3d7297e4c7e23f8514d8d989a3ffba87919f73cb95db9aec9bae0de71fcd4680ccc7411faaa23f1e5d20002c8ecb927c9e70a1219c40548c428d5f40ae1bf906be118c7ead0d85f5138e266bacfc6e11c3c030ca4654d1b25a16f7fad48fc92f9f4cc5282d0bc4a88ef7a4de3977699bebb564c5e73555ec19cd2061142e69254d84e22e96aab5e2a4cbd91e4b35381bb934f41eb1233b71a5b50cbadb3f1e370633a4d0eeb6fbb5be65438432d34dc7302e629aca481ff564bd76ff8e7d62dc3949362dfa16512963df7d57bc32b1d8722e6be4e8cfa533e58eb33f16a2139a6914c8015db0306560e39c6b1ebcffa1c6fd667d17fa51eb88bea7b4661a01d09dc60e5b8397b805be2b42bdb36d848f72b6763186d209590a40af2ce9902727f0e0ec1b40e242ad52c885fe26585ae78d33b202c9562804b118ccca5d74a4aaaecaa98dd11ad503f503de0299ceb24f1c7668e4a06678ddd916023b7956a436aba1370b3c08db9d30988125bfb2f9524fae8fc6cd51c6ade4407216b1b49e949423affa0feff91a79b416df469f3b2983b3ae925925d2118f74e579a1d4da0c43334822d7f28cd03fecf642176618bb9b3bb8f61cb71043dd15d156bdc3a46e2a443603c177dfd9bdf37568975c3293c31afc380cfd9e94aadf3b7ddb60b800a97067588e68c2453c7d19ebc92f3f82fc69d48c274edf5a7391dc758b4a623ef76f666e17cc7b629aead8dceb42a38ffddae391c9f3a8e846950ebf254b709a7573e64302d8b394e1c02a493786ac6841b0f58e37cae9c4020eb8f900eae9476c969e083f14897247740c87a0d730ef27d7d87a472420ea592baf173ecc4cefc1a45b20d6efeb8da6b29fb62b33de35c62f6cdce6c6f5773b3e8f90f30633c61980ce2a690c6013cdf47d00e254312d1535454c4a646c3b97c8f4b4fb3f95f94b10325bafef1af59fb5e092660fe6adcc740d9e87b9b4d6e737d7cad1d095a8085053e5f1e15faf4b81e40ace275f80139f0a2d492763e996de54899700718028b53992d2c2e0435073fd76a3137c6135ad9f288bc9da67fa4937e52ae75635b6a14ac33313049dcfb7161f48c911a25d6a0a20b637b1d01011ea574a4e2eecc92408eda82b2d0cc7b3fccae1d713e2b8d168cf12a80c9913a50f30eb5b21158d09b2433e68205aa79e79d7b6008ca044d303b5f281000230ef386291b2b7cea536235c11ff39df05abe95274c35bbf9647e5e202d038f5ce55df8946525bcf26a23abdbf2964484fb12ca5e94dedc0f9db9387808101113c8abeca75870eeff7bec326672f68614f75db9e83ad8ea26fa404d2b218cce40b91f169e91a36924f038f39a76346e57f685d978dcb32d55688172137b88f43ffbda8a5bf6ccbe3a3c3991a0d3231edadadbdab18c229f543c75792b8a4d46fb845ed9f5b8d1fcfa48dc0772b089a0a54f08b4f4b3392e1717f97678a4366e1a3910dd3e2ed274be6936dcba886016fd3857a71a38ce1f1f7c55c15db46bfc7ebf331d82b99e7cd532039f727d4fd49063d80d8601ade1d8f6185d9921dc293fc8403f522183f740fab311b727de39aed09cc13b54532a5a998c7fd5fbae77074045b1eade55dc1338c9ae8bab6752ac5e8af170ff2caad801c307288a8fd664708ba2d80c2955a5797e3c29c0a03489539125fa1b67626b7c0390a4a8809c19cee8d1a6ac09d5056cad4dbc2ada673a69b482c9dc74ffcb1bbd065f09cea7213ff09409db1814c5614a2803da7dc5d386cbe8af9f099d128f90fd38e797dd9b6a262b8eabebb75157612f771c3aa7425a8d853af322aec43a22c5820dfef81323ccb6d1fe0eb9b41d5658948d9f2b27397abdc0b427d4adaf0c0a6e31c7f984e381f0182251d0aa721582ed8bb8a003bd979e4eba80b1d6ae248b5b1024cf7823e12bbbfb65094beca24c8fc96ab925b12a35cce33ba9cde09dbe743344e03acc7511661d4320bc9a27660187cb7bf3470cf4cf5c1c816a29c4bad90c75f98cfc5298a62310847b7325f7eeaa9039504c0d0602e1d72da2d5b4dd6439c0c3437cdabb41259752b5ceb2c4b0974670f6d864101ddb68023a83cace7ac0ba364c976249e7ef99676aefc799f9f64d52a3340a4f29e7b828b27f9ac33113ec908d7e7373401f8d0819fec1f66f2f6dabd5f8240f66669511b291a58d5003eb7a6061702c16de5d479efc2dbc3bb77c55ef99fc4492842b6422368f6ad31d82de2601c3d6b38c736111e641acdd924fa1d460bd337d3ac1a50d1feb410d3bd2b42562978c5720b67afab3b5963ce5b0c91e81d8d6dff52a7d2144621af1c53785f3368e69639f57fa1304bd5847d44a421992749049343c629c125b851b6d83493a27658fad6dd9f2b46dc9373829e0065c6509d89a5405e87a94d1bf18cad4cf02908c5f2886d9182856e76c0543736f94df3e15109450f2eb424d87bf5f0f4eb13b894fee73b87b3a0332557ae2126695d689d248149a71682ef7ef2388ccb2c32ed7e35c533d5da130bbc383d24876e41fa46d8ea782f8851c8f669fefcb867abdc9cabc6f3c9b7d5fde61b72a6a25e415e43a088bde29625c038dc6095f9d95e02e0620ab99f1c56c5f924450e25564f2e97375bd2a85f1a1e47993756fea0cfb8b4bde68f213fc6f4e635d47e2140eb3e8d28079ce7bb51c7838a43addc4edea37aad4edafdf9a779cf7a890f15fbe6ef34f1d8a7405a91f0f2c890ececf259a838cb29b04e7d4b2954910d30e8707d2c5b4492e1fb0a1d8f924475df8592a3e91c5d4005e50d41de060888384fa802dc658436430a7f9c5155b9f4924ae3c09f0a43353b40c8c13a84f0f8ada0395be2f58ab0bf523a5ffbe0c61efdb9f63e76f2ff6599815e48e25e599b3c21cffd135dac43380df33550e20fd44968bf2bedae69326fa38c738e03ffee660c15edfcde7a62471761f482e59217161b7bd465fcc2aa1f2491929f5fc83145c02d19f2f58eed8d44c705f3090a631e070d4d7662a9303c54484b29853a8012044e3310af1b2747aa4a4a2fc9f6649c243767fdfffb0dec16d78e3d9b4f02090cd5de92fca2fff52d1152ae170142a6e18608244a7dc90ec85ebeaccedbfd8b0a32fe3cd01c774401206c0f4a284e38733ea9f5f1cd400a91963576f350af72717da021470bbff7d7f953738d126c00877300f9629f79b5f44acb61d5c30ea8c3d41b09a3ad86fb5511ee898c3bc93d4152afa4dddc585fea9916e36f63542f537056dbf0984fb4113a9b64d3eb06e82c5ad8b315d609e4ca8361ac2136470b42a6b31d4ea7ae318e57a15c0a09f0e3412fde82ebc5b5fa0ac79529da83b34d8f68e4719a8e0c5135a771018188550c62031a9838bab2b35757c2b23b363eea7c48f7945f4d216fb4b601319384373889b02adfcc760ee0ff7048203b4c9d16fa6595bbae88a8f0723ca7b709fbe4fbe26ad8cf04f76c8f1173e74bd26c0f780d30a49f6ba640615dd27cf6460622fc3bc9ebb2eac69b9873d81552351ea67f796e7d371e096a37b5e35dc90146fe8bc140212ace95e6bde18f7322ee062171fc7e5245eb3b46ba00964bbe3a66afeb9b2d8c43d4cd5dd578a04b332a997cb1bdce7f0af970ce4359f828a937e532d9b207696329409e34c16318a16d5c1346803f273e374c29146456d4b75615d881ef0345cd5083d2ef0a5f92364cf2a7911cad02c40dac8518245ab375eff9816d33bdefd770f0179daf7e99df5b2cc476dc6f1668348bf2b0b68cb8a4c20f7f97a9983695fd91bcc4ec3834153171ea434e77ad094a3ebd2652f4032db24262b882decb827e58a7dd8204dbf78f4b31a5190c5dce4de274a1461776e056357a16755ab707489bd2a4b9990c0230c628373a6eea9ade120e35d2bdf7ef48a9bacab6e16c6d222be5710f3410f90803500b519fe31dcdbe9b03cf342d9a2430bd02f7f492acb3a43a1f18cf431a8a27f1aa1e995a5c504c116ef5d4af856b78c1efe067b460c8398b5fe98f7f2bf9e767a4475228b06ee938662e14e695b3d96caac9912889ddb1021d6f2fb8ba8a54ce9c55fa1ce96ae78f3800e8e92e72163ff8f3cc51d0a055fc6fa13b4e22e93418e4ed8a89e06fb0a428c84ad36dba5214f0c1a5122c4e4e60bd441828d9db090ab23e6cb5854d9bc34b2c9d843e1f22552b632cfa88df0028b7edf81deda1759ff221774056007aa9dd7503066d8fd457a3a833949688f095dc0918d9b226852fe66f6cef065469fb976abada9f8677fea1e7653ea700dd02fdb61aee332be5c0a5304c9d1af5db2c57bda6fb2ae4ecff42663a5ee8053a4dac87b68ffff633a8ca43ac93fe53041597f185b58910bd143d740a4c4512fbe485371b36e4a411e84b5e5daed26a3261313347587062f86328f4688ce746559719e5a147c49bd55b69192bd703c5247b02a3a", 0x1000}], 0x6}}, {{&(0x7f0000002980)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000002cc0)=[{&(0x7f00000029c0)="c2c03b7eec7edb762c74b516ea94667d9d486082c1dcaec56fdb3210de5759bd0ec40c9dda8a52fe8e359786762c51428df8effa38af9c5842a0609208add9abec3d130c6c371c865f0f82554185d12a17dfdd732e2c3a0014eb1561808595c1ed2619a545b2402ce9bd9128bb14c58b1bd9bb1a61cd98ea602ec98112ee7cf9ed00c016", 0x84}, {&(0x7f0000002a80)="9846e88d5ce0355f1b948a0859e9e5383fbdf1b63ada8ae6c99ae8a661692184ec408acca89db93c40ea6d625605a2e14fab3dc9a25b8cf30fd97f64f38e45e9c5ea51a572131c7433efa7f8e5eecaf3cbacac10e5fb3707544306073b2f3c4b8d7864aa5d159665e133b7c0558e8535dabc89aa80f3393c1e6c5782b12e45ee3143eae3dc827b2cc87d1977c89deb8556bd39f74dcce82d5d6f5de6d6fd0652d05075c9c6964138a7266a02a367862364872b10a7a84c1f4ccd359e3be4fe0e3d27d94ed88589bb683dd35e760cfb73e1", 0xd1}, {&(0x7f0000002b80)="e21b3c98850c45731f017d05e39f1be720a40d0943", 0x15}, {&(0x7f0000002bc0)="3bf451cd924eaea177348f564819b98a4cc585b36342b50886b5c5b7543dcff2e669c2e6a041d3d990e85f14e0f96fa161580cfcac451ef861d8b2db173073e6ecdca4a4be35a919d5055d4ac9db0dd5b5556b98b03f1184695cd137a0b8d1e6e3deadbc3db05a5f75a2ee7e2216226655f041cfbd9d5c0ac2aa77127706f155d62f559ff17bf9b84e38de11cde0321afbe132bfff1aa1b9ebd973519876fe6253f5058593f59519a225d5ece036c75a964c52d15f44e4dd1e61df1ca3e4768c6d088c4cda9fc4db2237359c", 0xcc}], 0x4, &(0x7f0000002d00)=ANY=[@ANYBLOB="98000000000000000000000007000000830b7bac1e0101ac1414aa072348ac1e0001ac1414bbe0000002ac1414aae0000002ac1414bb00000000ac1e01014444f1858bdbd212974300000000000000090a01010200000001ac14140e00000046ffffffff00000001640101020000004eac1414bb0000000800000000ffffffffac14220000000501440c5c73000000bd00000007830710"], 0x98}}, {{&(0x7f0000002dc0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, &(0x7f0000002e80)=[{&(0x7f0000002e00)="3de4441577cd822b18daf1f199decb6fe49a072cbf9908db872fad4860401e7e0c54c9d85569345fa9ecb2bca95419c53f4a22f1b89d17cf04e4c5b7dc8ed4d5698044729195f1f324aeb176872fb1e01d001fc856d5cb8b97a041ef377b3e30d94da74ce9a4df2a94b442", 0x6b}], 0x1, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000000000000000000000700000000940401000000003b14edbd78d1a41b41d21d2ac1be6af3d4793832d8356186094feb44c993146053f5d1f7cba848c59a71b8f69362a74df0751d1d7f5266179f9837ad9aca0859f6e3a6edbe81800964dc461341ad7bf14574623adf3908f4af2df40d0c4bfd56cf3f4bdc7fa4dd0085d14c9eb37857cef114082044ed42b9ef0de54cf0bef4444908ac5c8a62fb030aee787407f19ce53307dafb13f08eef"], 0x18}}, {{&(0x7f0000002f00)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000003300)=[{&(0x7f0000002f40)="e75b9068edafc6a64458ae3e957133f6e44c9376ac2b7f7a2486f0b16b9109840c7c6caf1f3c1d3e0664401402202de4ecbc365199aee78f485c0f2e08f4936051b57e5087d6ffcd9f9ebfe104814d7fd35c36d5c7aaa7b56e9628a8711f45992f639c737788951da7b3523df90a11f9de8c3673c17cc14da1e6af6d3bfcfebed09e551c7bca4310a91b3dbc1ffdee849e892ffdbcdb1617745067e03b51ffc3e211494694bef8985bcfca6bf7021fe0a6e99c8eee77236c1ee5e32d67f18702a67c0dc3a67537a3", 0xc8}, {&(0x7f0000003040)="b50253f1378e4209da8215b66c092c0647c4a020214b5187292057c6aad0f7a3fdca62ab6200c745c9819b0531e6afeb91ff9f612185195e3ebd47152e24d0a86d20", 0x42}, {&(0x7f00000030c0)="becfce30be4830c71dc612e50c023967f2958f08347e5645f2235209b96ff8b04a53ccc877057134e38c3524550bd4f1e04f9a2c553cf5f8c3d7cdb3", 0x3c}, {&(0x7f0000003100)="f27dd7fec4014bff1be35828eba1db641d0e6669476d212a209bdc0af1e5ba3870394c342aee3d5a6907729db9e19131487bcce22f52ca0f58a57ab1d50eb5e5f1577fe45843b98283baaa2550693d793ebec60abcab0f71fa6405911440e9a4bebb965328c2db5f4ea1cfeec7a63b8b3f7d696b08cbd3bc38e4eb670e4542e3789b85487da7417d6362dfa61e3d31003997cf6187e6d7de8fc1726165f1b052dccb9f6a4c696a7ab7626d0f7301af27623f8f9b1b3301e078c27ba0deb6ad50d8a8b5ca3e5bbe67de84f99c3305c0", 0xcf}, {&(0x7f0000003200)="390dfe0a0bef7db0c2a63c79c044fea2411621f3bc16184ca2c8438cc417c6dd33ffa45050944e98a75fd43d354f6eb3ebef9ffca8b9c392b2ce7b2bb022b74e0e3fec74c7f144739197bd5dd4d14969a1dd1573ec9c4fa78c8d7582ef3f44eda5fc53670b7b61cd4887a0d90e751e05b21d7bde", 0x74}, {&(0x7f0000003280)="b4b5a8bac9a11537a6d6d06b2f438721227a8c2ad2b6bd4d9af59bd16752c5e0918dad02338682d4215809cbb157f80601f40de7d1b7346acbb4dd2c858c205d1f9458a30b4401b317f1a2c348eb51267fa09bc61c2bb6", 0x57}], 0x6}}, {{&(0x7f0000003380)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000003400)=[{&(0x7f00000033c0)="ee14e5fe0b6103d5862cd80675208fce4cdb1d8a93576efe5da6a908d03daff755b67871b49261ac7cc6ae9f86f7f7f9fc7d1390", 0x34}], 0x1}}, {{&(0x7f0000003440)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000035c0)=[{&(0x7f0000003480)="3779b966e610f09f92a63826188d22fd814056817afd83385e739e56d5871229ace612d6dd943b20efa4f5ede0871c3efe34a48f0e0b8676a4c0963cc4def9aa1193ca318f72f99547e57a9f8998ba6e7359d8405fed036cddabae00556d9fdf73b8d4321d2f81696814", 0x6a}, {&(0x7f0000003500)="0fa59ad1b62f5e6a7a4a662d0536d4cbb4043c09f3927361bd9c7e93bd6cf7bc215583f8080cc100799fadee7802ffb036aee32ff794e4c6d7d0696658f0365833fc49e57dca6e0cd1a5f00403956a7565ce84772dd4f85459713d93855baf2fcb423da7da6aafa4a474f37e4201600d38b7e3e85d4f9052e9c5b4ee4ab3b64b7d9d3420b231f6c48b22e4ebd087308fc85e05", 0x93}], 0x2, &(0x7f0000003600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @rand_addr=0x64010102, @empty}}}], 0x20}}, {{&(0x7f0000003640)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000004980)=[{&(0x7f0000003680)="3e318320ce44f59e61ef0bc477ff8b5251846a4ef05bd7316f25af0eaf6219941a490a24213fd0b2c2", 0x29}, {&(0x7f00000036c0)="94de05f51a", 0x5}, {&(0x7f0000003700)="e27e313b3d220bfd417cbc985ebec3ed26d8064cd8a912fb1db3405c3fdc1c7197c4cffdfd95193651e2a14f910e99a873d2fb1108c302d7803e6d9119aff590e21aed4b110183fdb0e4611da9ea04846d8e48013f87fdee200562542ac26851ec997c7f8b32086e27dd2e0367782804ec90865ecfc2bbc1e2056a01a0ebc9f2b589e1077471190830d087d50deeffd271b199b25cc536766b2cc115e469757eacb0e64268c0334b66cd", 0xaa}, {&(0x7f00000037c0)="7c0b0358756427e900178726f457947b68f857453063bea7d3ec8e6465c115b88236a6c8f7f52c26d9c1d19ce741c4b3d188f11e2bea9ea6322cbbbccdb504c40517cbfa6d2186d0f61ca707ace02d252e0a821dcbf5da1c9f8a4795e409702c94", 0x61}, {&(0x7f0000003840)="f36ed0cee35a3215cf9fba199e154568245b3faa4c4868d0a4c5690826eef34f2c00f0eda18b0716d8ffdf4dc5b228b67f5872b5c8593e9c5e3718a3ac7a271f55148392f77b2386499ed09102c244e35a92b4deea36fd438da541c7e2969a6e1b1ae5e79fcb9d013782c9d51ea7876f66dbed8cd5f98f8c9709a70a947e3d547225609a32dd10c451260bce16fbc0d3eb5146a0d5c73627a2daa544dbfd5a45838050a9c1b169a49ac98605de467a0f2a1a552cec9681fc8cc2db0ba93df0ab9ea2a0522d2f9bbe2fa8febd92ede64b6d6ce9ab69da21ded59e25ad1120194407f09f8df1e5e307396aea2476370d9086900672a17d4d37cf0ae6288d215abb89d611d637cf01f4c59e8045cf87c8fde513d27110b1f597bcf8deeb9cbee3895dc3bd2eb611bf675cf716ee7274df4e265d6f169daf3a69306d1a2857ead46887311a621acdee1da15351b671575da5519052a59ef4bda043e2fd8f55f0e91deaa76a5df0e653b183eae41de3542d5f3e19187a01d51d7fa28613d86fc61b596b77e4b08eac7acefa2822570024605841bd37611e2f8ef5266ed0f5d29b684f1bec90ce9ec3e83b89f60467ad2ce9f3c1030b82b130d946d29d31ff2ee2320b9689ea18e7ad7986678e62c7d59cf27a8ca516126b355f6c4604b5edbc655f98e420c9afe2e0464da0ea828e228fcdc92b4a595fc13d4cb04458cb662f7a9083f4ad79078928a4428e63864f20e5668b1e487ee5c2c63366b6da56037b7550bff3113aab32e14edcd881acaf748edd0f73fc69f05b71cd8c1d60bc1c053e6f4d6fac2d653344b7e7495d924833d9079f5d624ebaec6263d3271280e60da6e75014215f3500d00a8c40fdfb9ba49a580d792952b7a659b6f877edf20a0cd6a359602f06b90608ecf57f82d3d98a987d9bb1dd2dac0acd49d80512cbcfd12744b56cc54f2fdd42b6d893f600d3b8177ec3e1cfcb7b049b0775e0cbbee6fd489b050ea7ebab4e4e3110c99b734fa7b55299e68315bf11773a10900f98f64513f0649fed4049ef7cfab09251d3cbe87c384ae92bc09e761807e928462f5e8b7cd4504a7bf31b112ae1e67aca5ea9ada98aba9d49d9659d0b2531046a6f2f8c1090052ebf9aab145d85620fb598e8f062c0be2cddbda38654c0237afd2fbdd08dd2e500138a5bd53e7806f70784325413cef5dd761fcee3807c86f1308620698d9590756f388589ee572871a7574f6dd5a3cc64e6926fe7f568c6851ee8985a8723b6d0375708c866c112f08edb657eec25cab6cf45a36940711c6299ab2ac35f0004cccc40487af9ebea2c57c83d262ecd9546be6aee249ae2faba908555c3a135686a4c2dbb61574d8b5fc5e8a23b2ba8da1e2622ec806bced496dc73e216c30fbd11ca34a36c8c453439b266991ba56b3222d74e5f787e71211f6247a56751cb53377af95f625e5390e02caddd8b7570965456fda54bea71b384acca8c8ce0b420438862c11316928dbf673145cc7f8a1dab45d106e173cacb67c4a3544d4ffaa5def58c9f83cca2600dfd8b524d9d57fd2f59724b9821efbc5fc26eb4ade496c3a3567da8f788c30bea777fa605d019b3d9f354fb4cbc550d02c7abd3c4be9597de9e91c55135d1404832ce5c27389696b33a27b27a95f3df72acaae1a3ed399477e43578e82028bb79f5e1de03cbfe5d671a872dabddcc12fdad3dd6e30e7fe1b7a5f46abf2e2722f8b62c29ef1caeae92bd03d3151850c47852cff579df84080924e028f46c604d5769b5fe7a935ec19a3e773e71b5644a47058237c1605ad7f771062ba12f5605172036ffbde514ad2302f5fdfa6ad4345b9e13ab26277a7e3d3f014cf37dfa3a4ff7fb7141de799ba4594773394e27229c585d7758bce42a0aec8ec182db245c1d3a908cd1869ae3d09f9403b78ab6caa63d5b17cf21eea1782275847679086987bd6c1b5d379f340d7dbc1bb31db9c7755aa70cb796d64773739f6959d11f64c39ab09b35857cc1759c41171a11584b3e77ef9eeafa1d96a93d95fcf0f39ceae7f7defef472e3160b96b319f964a719ebff154b6c995c74cd9fa0111b02053dba54fcabab87dbe3c74a15db5f27f5ad40e14f87b112d27fe5e9c5cc39d62b405254b74ee19ea93bd84fc849696689c3e70394795e7a982a8ddb87f1375ca091a20f42a9668ef6a19662602bc6842a10959d75f9a1f24e7ff951be565548f534f944404ed6ce0199a55f2c81b7c2529117c3d91134519b8a65d8fdb4007e8360d502f1791cc3ee0602594c073ff4fc44bf64e0f7dd9ddad25dc9fef6620b1b96f7541ae78c3fb843f776c7c06ee82d8c165149f9fc1258e3bc6f3ecf3246aa782ea79f738b42b3828d447980dc239d872966effdeb302a5bb6023cc4e4bd726649c9ca3d3c41f74cf01c892e1edfaffcad55ab8ce38a35876c883faaa1bc6f91916ba61b1c864d3568219bedce701008046528c169411eba815910661030673ddf0f3e76bf47a986ba0d9b40622cb59eecfd355b3c1b32211f0ec7b06a912202b8c8e198445cd8ff45150833cf036e9d3edfe526b7e56fad478bcc1f59eda622c7c2c7641550a1e03dfd25d36fa50c6d86c939b92d5bd70bbd858821ee1810a9fbcdc254a5921236c9dd166e6965c9ca65573ab2d9779be5780984ed3795f91464f6649eddf24afdd453c6f960364077350b00410e07bef582f9c2bb3d69227d8411c38bd775aefc3c04e3781e596847d08c1ef8306f6dbe6e1b05fc5c0180bac2b9f3c1848614fafb4a05f34f9a8819a3a5e1995f2be3706f65a000a8274937b9197109c382bf430428a3f3c85a84e5ec39775db1f2cec0a8078af4beedd4d4a3b4015e46e6039456c3712a78697ca5b5cfae2870dcde53c34f0a8c33ff179c95cbfc2acd1f313db7d327c11411ab0e02cd144e31a0d1a59fe6262335d54128f23b8a91ad93c837f85c672c464e9be70316497877e8cf87ca03c95fa99ae55fc13e171b58d797b05a86cff18777dbf7ac8f4620ce3dbda01151cf4ecb09f66bdaa801a041cf193247d8344b7161a68fb2daef06902c72444f93aa1c41556b3abc7659d70f0fa06355af7b7a7e90fa3a405d23f7dc730014d439b8e3f6a1ba3d49c2053bbc1e766f17ba2244f05946401fa3b1d05e5e5872c3f94167ff6a317f6ebe8c6ed8176edbe737250fe8d6b35f8903126d1c1b657bb243f8d53972d3b28d8cac03a065755b05228767175b75fd3a93b2ec8e7141b996928855e7eacfc66f7f0cea6a6829ce704d7e296ce3fbc4f14057dfb503a79ec6f77dc97d84a23c79a9e931d47ed539c73ad3f49346de468e1afcf4d3cc4d4a9108c3785dae8c7af6428d08c0206e899466432c8c5f38d15df79a54368af8b7be22363982aa7a93c08e288a7ca73c03b51a849e5239a6354bc0ceb986b17d60be14f88e3918836d51793e0556320daf41746719c14ec3f204f52f8732e71b5ee9ddd069928e39f50702b2c88aefaacaf1eaa82148c06c20958474dfb35804ee799ca859daea6dab3683418fc3a85b2dc58af2a29e40e2668a6eff9a75970df1d4a9f263780b5337714c8feae3ca18a17f95bb172fa1b9a43eab84dc720d23e4760b1ee469971537b72d543673a26b3d049c86d7f07004726b50186b164dd99834114d2750b61ab5de634a1b617447abc76aea4524026a8f75f1079a24a33f7e40522e92e2681a82fb8f7843dad660a40d02333be1da544149a46bfee59e7432d99ef2762ba3fbcd9c5922687467c8b08ae6e34b4a2db87d61d4dc592b4d4ddceadb3dba7493629970d6517b4c4ee875bc25413edcd4ff87839bf2b5ee26b9d7b20bd410b4a7ae85301b10875fca9875e4b8cf58e16e85e5854d228106488fbc1cc039732b3f2c46c89625b6aecc8a4cc6ade71abb807a20852689d2bb36ecabc06fa734f8097b9edce4450faa16fa62a04f2470f37345939595446c5ee4deecdb3779b2b9eadf036644e741fbe87d3b9f994f0f3db0d835da68feb295cc142f364604864222ef7231f7bff1828529c0d05a2035fd0416a4b9f1d06637c7eff9efbf4023b8f7b4f71b22f4a7ff99fe44a0c8ba46ed57665515ae7c07b41c90f73795581b26b0a0c3c0558fd5660e6de58058c75f5a2668ed0ef439d76b1b068fa808af61cfed6a31264a06b1d800871416bdd0d10052daf1b46dca25489a99797e7f9d9eec694ef6ca11a4b2d65db04d3df5376070ec780b7dca704712588156981af151025c014574add89f28424b44d6a05f8badd1747806974fab672c2c4860be3c20323eedcc99c32be004c8e52e1f28896883bcfb7f940c6c78f7c574e34071b9b6ff2d694c96475ece5b09aecfd78359c173250a7488db239a99ffd7f6d747f32afaab5b0eb81cf7c25bf1f9daba29e8a3c724887ae0309234888f76fd6ac2be9941503c87f048dbb4304f686f8faad770c5729bf3a3a0ff67b4237d754fbfac24de038e1d8269e5efa920599493bd6d498b2a220b14d9c1a62340a7a1f6cd7f181574dc4650580f9a4cb3c6cdf9924ed3633a7ce0232de52a54177fc767454fb2391bd4d5802db0a4fba83ea67cb1bb7e7940aa989b350f89514b8f8aec306c63046cba15649f32e4afdb080b3d7b663b7fbad9631a500703ed751f3520145bd31f106be54e58139cfa50a2e86ea1fd18f532c671678b791a06bda09839f3383d0f31412c9ba494cb428f3b599c0fc99b248413ee9ab9c96417eac6ca9010f684019f6cd30bad91d266234b9da4bf62aeaa74cbe03442eeb3f8479cba4a615ee1ad42c3655f26403d4b83f2164d8e33b10c86e4d11d34b53a980f3c44a6095d905aa57601378ae1fa50325e1c0e9fcfe9d4b6386986811c7abbbe4f90da9844af6b7b9d5403d3ca442b4d0077fb17037d1c2c19953721be46623cacb58d3ab606cb1831970217d5e5c3525b1f90218c3d099f70ea83fc3465c08ba0763cd4cde12f19046bee2b0a7698bf300fe2b48fc68a6c59c8099d779effb56bb113eddd3629eaec00ae2002e004748a36f3f1e55c26f9011f53187d5b3793ca20680c40ea82432990820c3e5077b60bdd8e7154a92a883cbef70beca723c3e5d3748d61cbf726ca879c7358f1a7622f9d6bef9ca4567518736a5b58f8fe936cac5ce0df95ed974065a46023f27cde76bce2d3cae19da8c15771cc9e3703bf673387074532df76d37b197b03104447df13c700cad0b66419fedd5b257afa2728356402c9c9942fc4f1857e43776bb5980ab9c33b0bd4f3f67e84960853d3a14a6b3ab9b044cd58b309dd13d5ef95cbab3c6064aa7c79670cd437027e8a0841c8abdf3c456a4198bdf35468ecde851a203434a91d580c51251944afd12eb6406026dd62cca53b66b2aa211838c451c683654361c14170a5ca102e934b56f7843cf17b43a31f77fbce814c04bc7804763946d2238aba2b2cdcc4c591968f9b0741f70dfbd45815e49ea15e2af09b832ccf234fdac9e186d08ae4d8a4774566c69850b1c6c3bbb4c15b66cb7df85348a07cdb4e5af9d5c8b409a8f11e7a29b01c76afb01b11da12ded55cfc0597e1c63f19034251a269b7f2656e34e2df1afb0a116f24be84cb70223725ac6e2d8c9e46c5ccf5c6b0733e6010f93474313cbf076fe26b17a4e84e985855a4c4d353d7c6b898f96e6bbdcab229d13e934e6efed10f5245bdf50421ef69445f18fccfbc675dd64aae261a217902437570e2a89cd4aafacc785988d4a9a628ed0ff3fc7bb7b85c3de0dfe8d154fbeacce05f9b00fe7c10", 0x1000}, {&(0x7f0000004840)="8c59a13dcd2703780ea953a3cd130880adbfe7e5517e80697d04a4ec761a9f05b9d33097caefd0072f4fcc1623ab9dc15fc46fada73fd6c9f050eedde3102d10f3cb73d13805da857cbaf0fc8c419723eab4b6e0af7e49d92fe612c1e4e78f447b18f1448bb42f6e", 0x68}, {&(0x7f00000048c0)="f9052104c43b634f9dcd68e8adbba4ac138d91a41d9990817a02e18cd4877d2ba77d5fc063da418895a28105672c1f0bf222acd45c9e0b7ec5b5595767ae1a35c352b636f942910fefca2143fcd7133ef9409f3ea14b349e2e434c41a392b5dde5d752108eab683bee469f8593f7f6e49dc1d91378bb4ae66b88c2b8e84d5d34de63be08842e7cca272abff562c79ec622f216ee25ad40855ed9fea1d0f466ac3bdd754976e1f3657675cfa68e804f71fe83095973c1467ddb3ab9", 0xbb}], 0x7, &(0x7f0000004a00)=ANY=[@ANYBLOB="140000000000000000000000010000000800000000000000110000000000000000000400010000000f000000000000001c000200000000000000000008000000", @ANYRES32=r5, @ANYBLOB="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"], 0x160}}, {{&(0x7f0000004b80)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, &(0x7f0000005c80)=[{&(0x7f0000004bc0)="7b75270c30d5645f1452c062e5af1f139b1933e4f31cad5ec822d663ab03445fd9d0a4c4f58050927682cbd4b6ad1cb8c682919673340d2b1da03fbfa5db247a0ed60f455ea5c2552149cda92fd2c048d41fc657e090784e51173b536b2c2cd58d2c4aa3bdf0670d30cd7c4c6daaf8a83ec38e80cdd0c021c215969fdce642c562d2c49606783203735bbe34d4d47d75c96e29b9d3e0aeda39dab89bedeffab3d9ca4444adcaf8b11e876242e2a01bf8313c30de5e67e4279235e10f38f663a20fdd181fcd8075a583e1b59f410feb6a5c788697fe5a02cde08e8eaea3de10dec5acac4c51902915b6d3c0a3495b21c36c2f846f215ca9ebbd7aa6d1830993ea712fa1a6ddae1da83c97e4dce12b4e355b41981a231ffa11a09ab09a60877f14794755115a3d928f512e984b325191c4ae4bcf27cd4ef412d9f35d068e220c0a50eb5bb2b6ab2c1f3716e91b3966dbe3e9bec904cbd5e8bf1b99629c69a76ddbffa872e89cb1fff9e6e79a3b1fbb5da9d5840ec372a2a601f3b205a9ffa86cd64e5e1c22883f1930c9b7cba1bc27a54cbe8485cc96fdd40c24744bba2b2c57ad5d3d3e8c212e66524554400b4246c13501f0469d88d046104cbb75c3615bf8ccc5cd22705a04110979a65c98e30c787a6ca0c38c8d959181c6ea4ea16ffb33ae8088bac3293f025b0b799bf0d4cf3aaf7b8cfab6e2286d28e356345c57166d520128e016f8aae36007185946ce77fe3c3f3f47ec22409fef6e11b6b0cc747488c2b3a0b47ba5cbea710af04c06ac974edbef46d5adc48b2a61aed86fdaffc7dbac5c931859fec2884e22b4aeb12a3607cd930a014b306bf9dce9381f07a723565911cbfad93035fd11dbfb484c89bb09f5338d6604490fc81bbd4b463f631a377979480444c3351d84bf86bc571c613258dff58f56966b36d00877717ce1a1b423cec9e3715953f656f11d7b8dec752ccc24941e1d997cb86a81a7ab386e1b4f614b93038df0de77dec908e36d5a04378f534df0401b25d31f1046397e25d2da4d3136ca04c09904dc851e2275ed70fc1da9428da3d81a3c36c41588e0cf83147ac0d1a781dbd98baf469916fc730f9e8e31063e7dddd27595e828923d311a0d19585e146d97e622d124b1f8bfb8ded100494a9e0f7e73ac7900b8932b168b5dfb873b9866d6da42fe215122cafbc2330a31cbb47503e98002f5f337b74514a7376f39e7af68d9a890c0c61a4b55dc7f98f22bee19d341d597c2755cd0cc9d34514a45e7a396d861f7b4097e97d028c98249a1165338d60e10e2c515de6326b21db392ac3b83b6a34dba24b0d757c58b72ecd294b95a186e90b88e8723fbc874d43f0c31d01c9263a005bcc7679517f1d3700e06a634f1d12ae472088bda315396ab75d6305a4bee8bebb103602472905ed3fdcdc7d9cdbd7928404a4fcd9bce3a5b3663bc0a2b5f9076cf57cfa2058404c05d5977c7ec2646250afb72f53fd46cb1a160438fe64c1cf2800b9eb5ac87aedde4ecaafe18ac0d1fc621f3f3665e59ba0d74de12da7f2614f08d6365c506eaf53d1ec1d3ffbe99327ea938374ec35beb48c45f5863f0985c3bc1afb68154e67e5b5c284f5848ba4770928ec0dd9f3239a6a794e5beb3e0880f7c08681a78239820f2ac2fc13910d023e37d5eacd4261562fa1415c02430c490763f146bf34527b5dddca77c928d86d92b58fbae1e9c3ee7abc5ef572a498c01db10de04bea861a6107ae0e5ad20ec4bfb2a82cd916b1c7452c9db527690b0a0c924ec0c89338b3bcc6c9c911cf7035c2ee502d8955f28b76f261ad023af96a4ce36c4f968f2ce7a53fc38c395e1382207c6ebf167cf97c4eb49553fcaef4f087856772dce28baa2e27b6962055d622bfe30708ffab8e4a7e9ac4302f5312c423c0e63f084089b48b04cf84e10443b9dd05de67940c6bb9dbef99b5eaf0432497a1d47d6ddf4612ac6a131cef9d8c0ee79f3c9c39bac4593c8f30e72296c6b40304a6d91dee97dd8b525089237b3981c3a9294c516ff5f3087c88771c05b62f2edde4091b706f2c9d8fdfe96c31a23fc48bb54bca2637f0f6445b64f0d5253a02581347b4610c72c007f07c4eeecbfe8d1a7ae135508ed484aa75342dc62296ae2cc524c4fdb0c33c78aa0e9625855c67f2d4b9e2a3dc537764f223fded71cb43386aa8d4b8231bd70c93f8960db3d1ec7c9ff39cea8ff004b6f8f9c639a9dff8a9ddddcc4d8de9d6b203b2769ae6257945287cac37a9e90d23dc758eef00f668b23a201eecdb6b26fc37a007b1d72769209aa322ae03eff05bb7858de8713936c72626a7e0124151586e5c2a5d50f2dbc705d1c428e96c26d55877eeaeb59cc8d2e9f51717891323dc70bbb8049338c3324b1cceb99f6f1b6c80087b84ba4267fa0589ab00b3d7df25ac8450af2d90c2b252c03eda34fb6293161ee2e1f55e5acfe3da8a221bedb38b49dfe0955c3e52fe55fd4ad7fb76fc1e63dbaa477fc3cf13ac22637ee29dff479698d53ad860ce741792772653e0647dd4bc51927e9cc0593993fe452f2a2141dccb5cc64b0470c2f34c9298a69dd82602169d2ecdd192ea6cebde22f4e107a2b553dbd4fe599290d6a6f48e14c31674672b2b81a4e2b7c805e11fe4eb56afd6ecee44ff24d3d4b8dfc3860168525d88a939daf12c140ad56031225f95a91fb3e7e0d3916a91b595864ca3a15c5105f6bc5b0b1f4de8783349d2c45fd30793dd7b88ddb4d1658fdfebe9a0956207bdf80c901edac8c6f9b971435d586e2a73eaf1610cbf4e87584661a98616ba9fb778db9774a3d3c542a73fc09f84ecd15575bff5ac7ef0ecfd876c2d855e8b487cf4727c76a7596f3309c773ebd2b576d95c978746e3d9336ce8500d826961eb0a87cea29e8b59f74eb28d3302e642f160446730edf3d2431885a503ca2646257e7ca6cda072005d6c941aa7bdaf1b66a5d8924105692d4afc0dcba24c6cf7898b7cd6e319fe6bac8667c59b94a541414bc0830d50a0ee0ce59c71f894ec3862bba20adacbb6ba681c4f61a48ba92d4f6ef1713f479ed308909ac90d2ba24f9a6018adae2a8d71534b8373528a219b331319a922e5e134c72d90aff60a6e38e03b6052fa77eebb3a27b9fffad68c0088f3e5981451e5f221e7945c93e161385e762b608f497df8855e8e7d098998680be825d505e4c596af8c4878f3e988f103b6bdfd9ea4520bc9bfd78c73351e71af14edb02a7119e01c918e26962d7b31d0e35955030bf136412d62720b0e46414110b70c1f51cc2c2cb99182cc0d37d1a58476634a22e3522d030c502f35d613f9a0c85c8762fca0634bc291558fa926077509a44c98752cec6e98303f112efae6d11215bc1de25f3a209dfa3cb1f885b5cf208cd49fcf4dae562f30704db41659a4986d57a116cb3b2b0f8bf44d2247056561181e6e056065f30d8697201093474d256c897328d713f4122a67d0aef4b1b77a34d4a48ad3fc9f3381bfdaf5c4e8b7185e97f99cc28ff3077d860c4ede6e119d2f63058e09fd0757d58ef3771a58125e1c4410b41fae1ad4cb10bae5f96df29470d01532ae1ee2d62b4d53cc9094e12236db5385c78b999bc12d18a7162f97218dcf0539d0e9d612c183ee9b95b5bbd4ba61c25a889e878f0c0811c8d608c9fc4e80c325817ec3e9521240fa19272b347c1fb923d04fb46f29d58db12e90fe1334c33ebc5be36d13367d38352fff541c80fb3071a899d4bea5b2a88319f57e9fc4a44777e99dfcadc10d1304e9e60a26616ac872026623fb22fa9683d994d65b660dc9a16427df45a749935888ecde07b21d878b506c73ceafc2f427aa1ec424088677eec55d7bb9adcf1d11e040723a7795859287b999113c26ac0358808ab1f32a5ea3f4dedf54bbf93f398e3d5f82cc66f1e896aa97c064f12133117a70cffc46c192175b319e37554256290c87abb766c15a09dbbf92cc35bb9caccc05341caeba0ecfef45999697a919200a152f35dfb5076bb87e32b6a2e526fa1bd12c5403dfcadfd71cf49895a089c4be2e9ef2235669d51dc74ced4bab420dcfd518c32061c4ed801730d26ee3ff60437eae4da5ed1ed8fd6193b953f87a061358a91f9cec66c2d60c56b9a408e9c43aac7abf16706394933f7f69ce44f4ba6e6c6d70945e1aaf1562842a58c0ba8d8a5d32d2d90a7a04bffa609b36f2b9500de682444a82b477bef4b40dc0f1ff0e8b30e9d01678d718e5fb75f66fb792d7bf60ff0f1754c330ede8c98179eac26d0d18f819943119ef2fde6b58f92b763ef39e67a13a6c625e89a82e678511b48a5e9fed497f6f98a60b6d5c0607f43707d086bc706bf1a546990f4152972b707553d453dc164b7c9eb2e6c31f92e6877731a734924b5dbf04631043b1aa29ff8f0c69fd6074c7ff68faabd815537b99f7c742af7f17660488b7e3e29a31083bd6eef21be426a63940772be86deb060a2ef7650c6d52dfbdf8bf10231797ff9e2fc1e8130ae1e764f54a55185edb6cdee29e26fb0b824c01e2687c9191aac86e1bd592d87d29b82e5a53748c69b819ef4b7bad82061185666d71d320edd36c12b8a41a777d74cc2b4e5c7d9a76a6441be48d2af59e179e62750583bc731964a188d1d5c269c799672964e90bb417fdb45743588f05d345a541be6585a4ec41a4630cfb408528c5cccec25857f15bacbbd35e729873c15e24f621c50b2b1329d4777a1b0e4205fe896eefaa3b67feaa83f10015c77e2aba405b6e1792bc4ecc64b4d6c4739b8423f469ac337534e2ed4b7a0fdc66342216df4a9a88e32d57a994a67f730a0640616fd0384aa01845cda4f7dc231ecaae2566189600c280170426043426aaec125a4b7676e1c6d60ccee9aa00ee4c26eaacb74c124efdadff55319d112d291e51ec111fa9b559dd3cfcc62df0ee65f8eefea5be718456eb5db77a22ca19fb27e3306e63cf058c84d64d7226115d3a0459eb8ef15aa3274e7f90184690f7da1c0e8b32f5a484fd8ac80e1f0ff54f4666c7e2387c9bf9136484c27b4ea4763b58005d5a653c2f00bc97a5a1b2499f3f9b07dd3d8bc3865618e34abb37043842beeca8771ae197cb7ae2b5f193e8791a25a6c93f6747a92ba542c117910a082f6bbf44a96029d9609bd7c50b58534e75ae07f6727e01ca9b0a46a7679a09ed25d5a3babceab7f69eeb218ea1752d3bf36607e5b7f8ef799d4743c64308cc200f25062ac4290f592055669e7b67ab68b8e649d15eae86caa371000c4df613fe4eb0eeea15a1f7ea544129995cf8dfb0ac30845664c9038c5f9ae568c3b5201cc29caf183f2cea59f231e157d67197c6875e07a1391d73f22d1474646d441e24682bebcee0d9566301f2ab5e72a66d9bf35c58006d9b723616a8432629e4a2ddcc701ee63c8bf12852db7e740de6fc367c5cdd76bacc385d1cd428ba6e55dcc10cb467332b99f96dfd0c6cff3f386209c65a4d4f1d8caeae1ad4ef844ed369bae2e1bf1df2a450536d43a307185af9990e02a1648667d5bf7e5cdd8c281853a3c3ae63c4b544d669bbf6a7027ab60ca260f733d8b0eebfc321a21506062b802b8df964815497a32ae19bf1c7b7432e93ae29ef46763240a2157f21db53523c1f044d1a3e3afad20c0f965e4b764dc27a3260c7ce34b03adb17abeabe3fcc7bd9c6ec91e436ad13b3a495589a609fe84ed770c21530d52dacea0946175c1a9842a299a84317a00f4ad839e35e1e6e225a4b52d8a31af3185410f157eceb93d386ba554869200750dc134395095", 0x1000}, {&(0x7f0000005bc0)="8c6ab6eb4a4ae104803a082f8a6c800e76e6f8d3bda89d1b4e1e311aae07fa316c5669fe634864d10ac6c9c7545d0303c1", 0x31}, {&(0x7f0000005c00)="044c2019c28d2e2fe943412b011aac3e79a8e9d73b7e2161e55ccd124e11e5ffbc9b286d67c06028f4e71a7834edb8ba14088cb3c82af3162498eee5f614d9faae3a2867b3e14681699eea49a5124c293f89c40ced0245", 0x57}], 0x3}}], 0x9, 0x20000080)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001240)={{{@in=@multicast2, @in6=@private1}}, {{@in6=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000040)=0xe8)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
accept4$unix(r1, &(0x7f0000000340)=@abs, &(0x7f00000020c0)=0xfffffffffffffe60, 0x40000)
socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000700), &(0x7f0000000740)=0xc)
mmap(&(0x7f000033e000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r6, 0x4b3e8000)
getresuid(&(0x7f0000004240), &(0x7f00000083c0), &(0x7f0000008400))
statx(0xffffffffffffffff, &(0x7f0000008440)='./file0\x00', 0x100, 0x1, &(0x7f0000008480))
openat$udambuf(0xffffffffffffff9c, &(0x7f0000008580), 0x2)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000085c0))
stat(&(0x7f0000001340)='./file0\x00', &(0x7f0000008640))

15m40.428669768s ago: executing program 3 (id=2207):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r1 = getpid()
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r2, 0x28) (async)
r3 = syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0xfffffffe, 0x800, 0x3, 0x800000c3}, &(0x7f0000000580)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0, &(0x7f0000000f40)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}})
io_uring_enter(r3, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) (async)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) (async)
r7 = syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0xfefffffe, 0x800, 0x3, 0x800000c5}, &(0x7f0000000580)=<r8=>0x0, &(0x7f0000000540)=<r9=>0x0, &(0x7f0000000f40)=<r10=>0x0)
syz_io_uring_submit(r8, r9, r10, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) (async)
io_uring_enter(r7, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) (async)
poll(&(0x7f00000001c0)=[{r2, 0x4}], 0x1, 0x40000400) (async, rerun: 64)
shutdown(r2, 0x0) (async, rerun: 64)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x1)
ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) (async, rerun: 64)
ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x806) (async, rerun: 64)
r13 = syz_pidfd_open(r1, 0x0)
ioctl$EXT4_IOC_MIGRATE(r13, 0xff09)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x5, 0x0, 0x0, <r14=>0xffffffffffffffff})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000002, 0x10, r14, 0x5c2e2000)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r15=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r15, 0x0, <r16=>0x0, 0x0, <r17=>0x0})
ioctl(r0, 0x6d7c2603, &(0x7f0000000300)="b0f77b58a180e48453ebb5844170e0186c9742a0fc9ce9392d80b53479c7913b5cecc9e73f4d49db89a2d478db3667f773f021af737a24d119b66cd7d39df3508a172228c1397241953cbd1310090146f9d7ec416d80cf8fda9dd21ec75afb600a6870645345ab115de86ae0f6f02a382f9f8170321722ef2353b4474c1bc071f90be45e98d5881cf2d8aec856d699a5d879033cfe05444792523fb0ab4da3fb1ceb94592df1886948860873c8115bd1be261372a185f9f9637c3f0d7c17f03d61334e78d2d7028301ef69fd619a7d6aaff42cc7cb10ea490eb0") (async, rerun: 64)
ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r17, r15, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64)
ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000002c0)={0x28, 0x2, r17, r15, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000040)}) (async)
ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000000)={0x8, r16}) (async, rerun: 64)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, r15, 0x0, 0x0, 0x0, 0x0, 0x1}) (rerun: 64)

15m25.360020981s ago: executing program 34 (id=2207):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r1 = getpid()
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r2, 0x28) (async)
r3 = syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0xfffffffe, 0x800, 0x3, 0x800000c3}, &(0x7f0000000580)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0, &(0x7f0000000f40)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}})
io_uring_enter(r3, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) (async)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) (async)
r7 = syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0xfefffffe, 0x800, 0x3, 0x800000c5}, &(0x7f0000000580)=<r8=>0x0, &(0x7f0000000540)=<r9=>0x0, &(0x7f0000000f40)=<r10=>0x0)
syz_io_uring_submit(r8, r9, r10, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) (async)
io_uring_enter(r7, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) (async)
poll(&(0x7f00000001c0)=[{r2, 0x4}], 0x1, 0x40000400) (async, rerun: 64)
shutdown(r2, 0x0) (async, rerun: 64)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x1)
ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) (async, rerun: 64)
ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x806) (async, rerun: 64)
r13 = syz_pidfd_open(r1, 0x0)
ioctl$EXT4_IOC_MIGRATE(r13, 0xff09)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x5, 0x0, 0x0, <r14=>0xffffffffffffffff})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000002, 0x10, r14, 0x5c2e2000)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r15=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r15, 0x0, <r16=>0x0, 0x0, <r17=>0x0})
ioctl(r0, 0x6d7c2603, &(0x7f0000000300)="b0f77b58a180e48453ebb5844170e0186c9742a0fc9ce9392d80b53479c7913b5cecc9e73f4d49db89a2d478db3667f773f021af737a24d119b66cd7d39df3508a172228c1397241953cbd1310090146f9d7ec416d80cf8fda9dd21ec75afb600a6870645345ab115de86ae0f6f02a382f9f8170321722ef2353b4474c1bc071f90be45e98d5881cf2d8aec856d699a5d879033cfe05444792523fb0ab4da3fb1ceb94592df1886948860873c8115bd1be261372a185f9f9637c3f0d7c17f03d61334e78d2d7028301ef69fd619a7d6aaff42cc7cb10ea490eb0") (async, rerun: 64)
ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r17, r15, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64)
ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000002c0)={0x28, 0x2, r17, r15, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000040)}) (async)
ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000000)={0x8, r16}) (async, rerun: 64)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, r15, 0x0, 0x0, 0x0, 0x0, 0x1}) (rerun: 64)

2m45.740507868s ago: executing program 7 (id=6278):
fanotify_init(0x200, 0x2)
r0 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1)
r1 = dup(r0)
dup(r1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4b291000)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000ffc000/0x1000)=nil], 0x0, &(0x7f0000000000), 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x11)
unshare(0x14000000)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfdef, 0xa00)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_readv(r4, &(0x7f0000000280)=[{&(0x7f0000010a00)=""/255, 0xff}], 0x1, &(0x7f0000000100), 0x0, 0x0)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
mmap(&(0x7f00001d1000/0x3000)=nil, 0x3000, 0x1800006, 0x11, 0xffffffffffffffff, 0xbc4cd000)
read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020)

2m43.056918556s ago: executing program 7 (id=6291):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x8, 0x7, 0xe2, 0x5}, {0x9, 0x7f, 0x3, 0x7ff}, {0x101, 0x9, 0x1, 0xffffffff}, {0xa, 0x5, 0xfd, 0xb7b7}, {0x100, 0x3, 0x7f, 0x2}]})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x44, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xfffffffd}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x200c8016}, 0x94)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x3, 0x1, 0x81}})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

2m39.809510425s ago: executing program 7 (id=6305):
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00"/11], 0x48)
socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

2m39.675626641s ago: executing program 7 (id=6308):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94)
r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002)
write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8)
write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feffe7d5b2a4f9810fc5c81195554cdc"], 0xc8)
dup3(r2, r1, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x4, @private1, 0xffffffff}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value, 0x8)

2m39.3681417s ago: executing program 7 (id=6311):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
read$ptp(r0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0xff})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r1)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)

2m38.311364439s ago: executing program 7 (id=6320):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x29, &(0x7f0000001600)={@broadcast, @multicast, @void, {@arp={0x806, @generic={0x3, 0x4, 0x6, 0x3, 0x9, @local, "6ea28c", @empty, "6bb61753"}}}}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="240000001a0001002dbd7000fbdbdf251c2080f7fc04000000f6ffff070001"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x80000)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xfe8, &(0x7f00000007c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800010}, 0x94)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baa00fe00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080000000000008500000007f0ff00b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$alg(r1, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='sched\x00')
writev(r2, &(0x7f0000000780)=[{&(0x7f0000000680)="b85962062ca3521af8cae213eb792cce6382bd999fdb100ab1ac337461d3d073299f4e7ac8895609dbb9c68039b411c060daac5a28e65cca166b83269dc875dc3acb74192e8563223ab25a9d41a26ac6e2b6faf7e3b1092bb53bca36c6d4c87bd19527f40ad98f763727a7d90f127fbcd15fcd4904e5a978faed55d1f938cecb14b977236110b6746b2461c6d32c9267cb717057909db286cfa666447e6d0320a119fb2c27cf2e991831e17d4619dd0b595edf21895e36cbec37672fcd38281e5ea6b40cdbb02ea10881230f20cac5d1c68a7dbe"}, {&(0x7f0000000440)="869bcf08646b93a293b593f4f5f69ce3c6defccd0f6d79fc5a2eb0d8282600a1bc04fdf8"}], 0x3)
pipe2(&(0x7f00000004c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x800)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000500)="f27e500f0bec2051fbd0c67f", 0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r7=>0x0})
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c05c1060001010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0)
r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301)
ioctl$USBDEVFS_CONNECTINFO(r8, 0x80045518, &(0x7f0000002a40))
nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0)
r9 = socket$key(0xf, 0x3, 0x2)
syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="b9ee020000b8c5000000ba000000000f30650fc79d00102cd30f01380fc7be8e4c0000c4e1835d846c55680000c4c17f112efd0f0054bb0336a4b9170800000f32", 0x41}], 0x1, 0x21, &(0x7f0000000480), 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0)
syz_create_resource$binfmt(&(0x7f0000000480)='./file0\x00')
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0)
sendmmsg(r9, &(0x7f0000000180), 0x3ef, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x70bd29, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0xa7e7}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r2)
r10 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0)
landlock_restrict_self(r10, 0x8)

2m23.265940024s ago: executing program 35 (id=6320):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x29, &(0x7f0000001600)={@broadcast, @multicast, @void, {@arp={0x806, @generic={0x3, 0x4, 0x6, 0x3, 0x9, @local, "6ea28c", @empty, "6bb61753"}}}}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="240000001a0001002dbd7000fbdbdf251c2080f7fc04000000f6ffff070001"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x80000)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xfe8, &(0x7f00000007c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800010}, 0x94)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baa00fe00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080000000000008500000007f0ff00b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$alg(r1, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='sched\x00')
writev(r2, &(0x7f0000000780)=[{&(0x7f0000000680)="b85962062ca3521af8cae213eb792cce6382bd999fdb100ab1ac337461d3d073299f4e7ac8895609dbb9c68039b411c060daac5a28e65cca166b83269dc875dc3acb74192e8563223ab25a9d41a26ac6e2b6faf7e3b1092bb53bca36c6d4c87bd19527f40ad98f763727a7d90f127fbcd15fcd4904e5a978faed55d1f938cecb14b977236110b6746b2461c6d32c9267cb717057909db286cfa666447e6d0320a119fb2c27cf2e991831e17d4619dd0b595edf21895e36cbec37672fcd38281e5ea6b40cdbb02ea10881230f20cac5d1c68a7dbe"}, {&(0x7f0000000440)="869bcf08646b93a293b593f4f5f69ce3c6defccd0f6d79fc5a2eb0d8282600a1bc04fdf8"}], 0x3)
pipe2(&(0x7f00000004c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x800)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000500)="f27e500f0bec2051fbd0c67f", 0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r7=>0x0})
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c05c1060001010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0)
r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301)
ioctl$USBDEVFS_CONNECTINFO(r8, 0x80045518, &(0x7f0000002a40))
nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0)
r9 = socket$key(0xf, 0x3, 0x2)
syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="b9ee020000b8c5000000ba000000000f30650fc79d00102cd30f01380fc7be8e4c0000c4e1835d846c55680000c4c17f112efd0f0054bb0336a4b9170800000f32", 0x41}], 0x1, 0x21, &(0x7f0000000480), 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0)
syz_create_resource$binfmt(&(0x7f0000000480)='./file0\x00')
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0)
sendmmsg(r9, &(0x7f0000000180), 0x3ef, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x70bd29, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0xa7e7}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r2)
r10 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0)
landlock_restrict_self(r10, 0x8)

7.712147471s ago: executing program 6 (id=7007):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/259], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
futex(0x0, 0x5, 0x1, 0x0, 0x0, 0x4ffffff)
syz_usb_connect$uac3(0x2, 0x80, &(0x7f00000000c0)=ANY=[@ANYBLOB="120150020000004044060f8040000102030109026e000301068040088b0001012630040904000000010130000a2401100a0000000000090401"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000040))
write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e"], 0xc)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)

5.215809019s ago: executing program 2 (id=7014):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) (async)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000dc0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x98, 0x2a0, 0x138, 0x2a0, 0x98, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x3a}, 0xff, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {0xff}, 0x1}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x138}}, {{@ip={@loopback, @remote, 0xffffff00, 0x0, 'macvtap0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x2, @multicast2}}}, {{@ip={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xff, 'veth0_to_bond\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0xff, 0x3, 0x6846b0d72b1eca1a}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x7fff, 0x7, [0x29, 0x26, 0x35, 0xc, 0x15, 0x33, 0x21, 0xf, 0x38, 0x21, 0xa, 0x32, 0x3, 0x1f, 0x14, 0x1b], 0x2, 0xa, 0x85}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'syzkaller0\x00', 'macvlan0\x00', {0xff}, {}, 0x8, 0x3}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0xf}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff000000, 'lo\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x4}, {0x0, 0x6, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) (async)
syz_usb_connect_ath9k(0x3, 0xb7, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45}}]}}, 0x0) (async)
mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000080)=0x6, 0x400, 0x4)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) (async)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) (async)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r5, {0x59, 0x6}}, './file0\x00'})
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x123482, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000ebff000000000000000000000000000000000000001c060000"], 0x50) (async)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0)
pread64(r8, &(0x7f0000000080)=""/181, 0xb5, 0x365)
r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETSTEERINGEBPF(r10, 0x800454e0, &(0x7f0000000200)=r9) (async)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r11 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r11, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x8100, 0x0, 0x1, 0x3, 0x6, @remote}, 0x14) (async)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000753000/0x1000)=nil, &(0x7f0000752000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000752000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000752000/0x4000)=nil, &(0x7f0000755000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000752000/0x3000)=nil, 0x0, 0x0, r6}, 0x68)
read$FUSE(r6, &(0x7f0000006380)={0x2020}, 0x2020)

5.214250637s ago: executing program 4 (id=7015):
r0 = socket$nl_route(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000080)="7c0000001800051105000000000000000a400000fe0400010000000014000b0020010db800d0000000000000000000011c00080008000200dc05000008000300e8030000080004000a00000008000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002", 0x79)

5.131584148s ago: executing program 4 (id=7016):
r0 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000540)={0x0, 0x0, 0x8, 0x0})

5.038655371s ago: executing program 4 (id=7017):
select(0x40, &(0x7f0000000040)={0x1, 0xf, 0x10001, 0x1, 0x4, 0x1, 0x3, 0x9}, 0x0, &(0x7f00000000c0)={0x9, 0x7ff, 0x9, 0xc, 0x10000, 0x3, 0x6, 0x3}, 0x0)

4.87720078s ago: executing program 4 (id=7019):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x4}, 0x28)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x20000885)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x67682, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x4}, 0x8)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x9}, 0x8)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0x26, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4266}, {}, {}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x2}, @ringbuf_query, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_fd={0x18, 0xa, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @alu={0x4, 0x1, 0x9, 0x7, 0x6, 0x50, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x9f110443f9717b1b, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x272a3, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000400)=[{0x3, 0x1, 0xa, 0x9}, {0x3, 0x5}, {0x5, 0x2, 0x6, 0x9}, {0x5, 0x1, 0xa}, {0x4, 0x4, 0xc, 0x2}, {0x5, 0x4, 0xb, 0x3}, {0x0, 0x2, 0x6}, {0x0, 0x3, 0x0, 0x9}], 0x10, 0x5}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@cgroup, 0xffffffffffffffff, 0x3a, 0x0, 0x0, @void, @value=r7}, 0x20)

4.53235569s ago: executing program 6 (id=7021):
mlockall(0x2)
r0 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
dup2(r1, 0xffffffffffffffff)
shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x5000)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x19)
write$binfmt_misc(r2, &(0x7f0000000dc0), 0x386)
shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0xffffffffffffcfff)

4.459862664s ago: executing program 4 (id=7022):
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
semop(0x0, &(0x7f0000001140)=[{0x2}, {0x4, 0xe038, 0x800}], 0x2)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141b42, 0xa)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000000c0)={r4})
splice(r3, 0x0, r2, 0x0, 0x1000, 0x800000000000000)
r5 = inotify_init1(0x80000)
r6 = inotify_add_watch(r5, &(0x7f0000000140)='./bus\x00', 0x400002a2)
splice(r0, 0x0, r4, 0x0, 0x80, 0x8)
write$tun(r1, &(0x7f0000000180)=ANY=[@ANYRES8=r4, @ANYRES16=r6, @ANYRES16=r1, @ANYRES16=r0, @ANYRES8=0x0], 0x107c)
capset(&(0x7f0000000040)={0x20080522}, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x280001, 0x0)
r7 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r7, 0xc0305710, &(0x7f00000001c0)={0x1, 0x7e, 0x22, 0x0, 0x407})
read$midi(r7, 0x0, 0x3b)
r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0)
write$binfmt_elf64(r4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x2df)
ioctl$SNDCTL_SEQ_RESET(r8, 0x5100)
ioctl$SNDCTL_SEQ_RESET(r8, 0x5100)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x4180, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102e98a9940720c0c003d0e0102030109022400010103c0040904"], &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0})
r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0)
fcntl$lock(r10, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x20000000000000})
fcntl$lock(r10, 0x6, 0x0)
fcntl$lock(r10, 0x7, 0x0)
ioctl$PTP_CLOCK_GETCAPS(r9, 0x43403d0e, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)

4.372718795s ago: executing program 6 (id=7023):
userfaultfd(0x80001)
unshare(0x4000400)
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x7, 0xfffffffd}]}, 0x10)
syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2)
socket(0x2, 0x800, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000100001060000000000000000000000000000000001000000010000000e00030076736f636b6d6f6e30000000140012800d00010076736f636b6d6f6e"], 0x44}}, 0x0)

4.174369112s ago: executing program 6 (id=7024):
socket(0x1e, 0x805, 0x0)
r0 = socket(0x840000000002, 0x3, 0x100)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x440, 0x2d8, 0x3a8, 0xffffffff, 0x190, 0x0, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "4d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0xc697}}}, @common=@unspec=@addrtype1={{0x28}, {0x91a, 0x0, 0xc}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0)
r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40058}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {}, 0x1})
io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)

4.101438156s ago: executing program 6 (id=7025):
r0 = syz_usb_connect_ath9k(0x3, 0xb7, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45}}]}}, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
syz_usb_connect(0x5, 0xda, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0xa0002f5})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50)
r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.log\x00', 0x650100, 0x40)
ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000140)=0x3)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
write$char_usb(r1, &(0x7f0000001300)='7', 0x1)

3.800444389s ago: executing program 8 (id=7026):
r0 = socket$nl_route(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000080)="7c0000001800051105000000000000000a400000fe0400010000000014000b0020010db800d0000000000000000000011c00080008000200dc05000008000300e8030000080004000a00000008000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002", 0x79)

3.777228374s ago: executing program 8 (id=7027):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
r2 = syz_open_procfs(0x0, &(0x7f0000001300)='net/ip6_tables_names\x00')
r3 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x34}}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800)
lseek(r2, 0x7fffffff, 0x1)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r1, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8})
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$MRT_ASSERT(r7, 0x0, 0xcf, &(0x7f0000000100)=0x1, 0x4)
listen(r7, 0x638)
setsockopt$inet_int(r7, 0x0, 0x1, &(0x7f0000000180)=0x1008006, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x6020400)
r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
r9 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x419, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf8, 0xb, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r9, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRES8=r5], 0x0}, 0x0)
syz_usb_control_io$hid(r9, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
unshare(0x26020480)
userfaultfd(0x80800)
fsmount(r8, 0x0, 0x0)
syz_usb_control_io(r9, &(0x7f0000000500)={0x2c, &(0x7f0000000240)={0x20, 0x3, 0x2, {0x2}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}, &(0x7f0000000300)={0x0, 0xf, 0x5b, {0x5, 0xf, 0x5b, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "9d3f20cbe818640281cc1c659a943b32"}, @generic={0x3, 0x10, 0xb}, @ss_container_id={0x14, 0x10, 0x4, 0xf1, "92d4051bdbb3ed2c1be3c9ce69fdde6b"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x7}, @ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x1ff, 0xee0f, 0x8, [0x3f30, 0xc0, 0x30, 0xff, 0x3fc0, 0xc00f]}]}}, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf9, 0x10, 0xc5, 0x8a, "912390be", "f8bffb36"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x0, 0x4, 0x73, 0x6, 0x2, 0x100}}}, &(0x7f0000000a00)={0x84, &(0x7f00000005c0)={0x0, 0x11, 0x6a, "f1279e6310f5dde8a5ac106c36a2c5e14d7f9b23935fa7cd6356a20d0d2214b2cb3c44496eacc984e854ba6df1d8d419da9f7706313461da3cac16f6b66528bd190c2bf9df4892e403079d90f35decbf2c53185e1d153d7f564dd4f2d73b80cc18100d7f6dbdfc8b63d9"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000700)=ANY=[@ANYBLOB="200004490004e0000000"], &(0x7f0000000740)={0x40, 0x7, 0x2, 0xa9d1}, &(0x7f0000000780)={0x40, 0x9, 0x1, 0xf1}, &(0x7f00000007c0)={0x40, 0xb, 0x2, '})'}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x78dc}, &(0x7f0000000840)={0x40, 0x13, 0x6}, &(0x7f0000000880)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "68cf"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x5ed7}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x9}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x2}})

3.150529752s ago: executing program 5 (id=7028):
open(0x0, 0x60840, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
gettid()
socketpair$unix(0x1, 0x1, 0x0, 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r1, 0x0, 0x23, 0x0, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00')
pread64(r2, &(0x7f0000000100)=""/253, 0xfd, 0x1)

2.240884572s ago: executing program 5 (id=7029):
r0 = socket$inet(0x2, 0x1, 0x100)
listen(r0, 0x9)
ppoll(&(0x7f0000000000)=[{r0, 0x8}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c)
select(0x40, &(0x7f0000000040)={0x1, 0xf, 0x10001, 0x1, 0x4, 0x1, 0x3, 0x9}, 0x0, &(0x7f00000000c0)={0x9, 0x7ff, 0x9, 0xc, 0x10000, 0x3, 0x6, 0x3}, 0x0)

2.076182141s ago: executing program 2 (id=7030):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) (async)
setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000240)={@empty, @local}, 0x8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c000000100001040064ffffff00000000000000", @ANYRES32=r2, @ANYBLOB="31000000bf3f9f8008000a00", @ANYRES32=0x0, @ANYBLOB="54001280110001006272696467655f736c617665000000003c00058008002200", @ANYRES32, @ANYBLOB="0800030040"], 0x7c}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) (async)
r3 = fanotify_init(0x200, 0x0) (async)
r4 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1)
r5 = dup(r4)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x20, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xb, 0x60}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000184}, 0x40040) (async)
fanotify_mark(r3, 0x1, 0x48000047, r5, 0x0) (async)
memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xdd\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x8d=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf\x00\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`n\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x0) (async, rerun: 64)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async)
connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async, rerun: 64)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (rerun: 64)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x304}, "2041f09a821e1e3d", "bc1219b53b562baafd2400170f311e6d", "152d5cb7", "c2035c44dee1dcca"}, 0x28) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r7, &(0x7f0000000340)=ANY=[], 0x141) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000004, 0x10012, r7, 0x0) (async, rerun: 64)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "a06adadb1e8816ec", "de0000006deed7f21d74bc440900", "9884f958", "fc4bd6b33a9b93ca"}, 0x28) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
recvfrom(r6, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0)
writev(r6, &(0x7f00000005c0)=[{&(0x7f0000000780)="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", 0x11c}, {&(0x7f0000000640)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c148f490311ff86da69fac2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912a45e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a4603d075596bb73ed09f8ed1075c800ce6812ad03417f7faf6516c9f1b13aa8dd4c306093aa57e7fa8f593a056b07f10a61c7df4113777e34dd0ac24d1af4789d858af093a4f431c1c1976c119541a65c816cf06f56db6d89b0f240ccca8b0806474274f00091c1b7b154492406ce87a9cd7c433ffb908140a92cf0c917c3d0e07cb994ed03667780c", 0x11e}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f0300e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd", 0xb5}, {&(0x7f0000000500)="de21cf2500000000000000", 0xb}, {&(0x7f00000015c0)="8fa68a274cab49b9c806172798e6a829701bb4eefee6919e0a30fa83a50170b6a3b499361f95ab6ff05f9001332b3a463b64282a924b0dcf6499c8c9b23d7290ab896ed6e2c7280dcda0336864e06d9570ea2cc78330859fa73080f5ddd3fd2b943287b312357816e9cfaa9e8941dd981f837506cabc6e016e507076819ff37d790c0b868166925649c9a74f4afc322ac971832fc3f12ba4dd3931c773134441bd46d9b10095eaabcfb846ac5fa9ea76f3547884091f073880656438f4406cf2051edb37139066dcaed45a544f5f92cccb1db0e2e503de3d4216d961dea1cbd9119a3f49b8bcdfe7078a7706296712eab5bd91b189f0140892b56c46912cc16dbe9fb469502eb67f36e8531dbfbed70615a836d32b5dabcf933201c97b29209e071433edb1b92ba47b514232654a36067c9b241737eb902ede1e18f99757339d2858bbe9c48484ec608e5fae534c4580d22fcd6ad28a786e0f5e675bc264ca03cf081038cb872e039100f94d25a7b5b9f2f18815e948aa65513c63a61e68c6a4ef4888980b54e3b7332112ee424e65172b2076528cd11cf63d7f4ff88c9eabf2c388bcb02beaa7e9c33cbe26149703fd3d511283739fa9638b1d6290a53b679227ee54d0fb232befdc92e59396c5bb818926e8a30a38a0aa358e1c818dbc27646fb4dc43168540cf724358d07124937cb3baa5365970e14240d727a8111d250202b39e8e3d6ff5e250eb09fdd83b8a129015567ae0f71a6b9166cd3718e3a83e711271f2ffd2d968e1153a38a8c5995e0046fb8f22613690852bbea407b417eff9fd86e685025cbad82174164c3529407c4a27af5c6fdd911a4a87b7365655d5275c5719151b4440752785ff416a8e3a1f83f70e1f5d2538348b839f4e965e586e8b28a8aa94b79bc4e23d97d159af010918721be419234850fbeac52bb5de10a199f6591ab4deea9670e8b3d9f9341cddef4f3fe1b08a4f1943329cfa12c3972fc50525b8ebb5923235bbecd182d486169cf51e8c69259a404c0867328943358e95ad690a9c8eea73ddde677ebfe6f0d5f2e3a03541291e09a30bcce4b66550c28c6ba6cc431bb0fa87848652fb9319577a38a8ad45a87647b523fe3e452d90306c4c690b47d3c840ebbb1d96abb0735b21f557f5de101b7fbb7618d9739fabf89b8fb34c02493d1bfc31e80b1a9fcdac8aaf0fd69a0aee6f456705420ea3e7df30b478dd12ee137a6d6747750e5d6a7e5d308276c0ebd77377f000216108954f5371a9c84a01a18a76bee8ea849ddaf492a35f943ac395b9dddbd5ee05f6d75ac40237a0690584d7afaa3e117135b1406e03c9e49223ee48feccab18a3fd0325ed281bc70fb41b4f13905744afcbb588b8daee6d635007cf96dbd9549726c4cf9e350072702058bb533a4bb598a06e5505e8393b2793cc6ac2d66a0529b2aa7991a30f8bdd2bec5ac7ca2064e7b3a2a2d510de4675a7a6ce5d1729c2b98dbb08ab4a33cbd83484092d48b9c4fac7b7b6191057a2acf109565c6d49d9be0f1f2838650cdc36ad835fd78be83c6df052659ed1e8242d45891442a54205311da1814b18ed7fcc7c5bd979434040cd2133fd35ab946ff87e807a48a4802a1e4cce7cef4f2f555029cdecadaf99c5c3bf65db4be3940bfedb87cc491ac59d027496d87a792961f1f59cb72df3280b1845722282745fa77dfa1fce5e67e09466475c0e988719e528d39815cdfe0d16a6de1d871cfc4778ed47e8a7d3b2dfeea2083a41b061848324fe15e90c2dac3303992fdc42ba1a1995b87154a618660094a942074c5e02ed1a11293c5276b06439468f99c9d184c0152c44308c64c432277fe367a7fac9c9fb08d9e18949e8ab9740a357fdc9d69df07375d011947b43072f554d63831af4319664e735c3eb08c0afe5120bd89b4d0654b6266aa4709ea2beb3dfd0449d2c3fde3f1098c9f73d994a741bb9f3c5322743c310fd7881856e5d529f4a9eb7dc43c0be6c36653b2cda92a7f07247450d666ca88863c6880d656eb8006bfe2f96543bf683fe3126e03ccf2120878a4fc46bdf64e11e323637ae0024a3d6fa52729591758c36a5ddeff1d1c5ba3e1bfedad1ff460f05ce276f1f3c2d70f9c6c5927a8fd15e65bc9c648b7dfccde510f5bf46bab8f2c5e21cb129dbf3f4df7a5a831f198f21fee429d73646eab00b1542941108592708fe8f53613d6b7dc1e4999374317b57c1e4a974fedd089c4295682d1a03d770b7639e80d25b0f428dfd3c46be492fc80b5c4913e476845a359dbe4187fd0027bd9fc814ba6a2877b61b637878f2af7ef18a085852456089efae8a13d3e6ac9d28c18cb1ca54522066edbf9e67ab4cf158b63c7b4d25146bafa14163cd4d171ad97f3ef93cfabae0557e237bbbe9cb80144b03f6fdb7d357d253235ddbde503829403657fdde516d3974091c40c6b9dd245f730458e1fd594f6b694af0150cbd31b6d0fb3bc04eb5096e704e039eecf4be9e93eb2f841878538ed1c46d015b1a792b599ed9225577460f72e6b4e271e5e6eeed34f69cfd76683e21d87e3ee8ed88df79901f9354823824fa6b67a91e2626161436327fc58879085d87db5dd94e09a0d24c7c381fb8fdc7198d2c2fece49e6496a119023852fca717d2ff2f9ed5e0715ddebd267ed0b8378ad852b03a539e6d03025b4a04f2483bdb79a4bd233ce3b6bd30d736ad0784b978861badc236e7106d23f26eac50e93d8ab012dc7c5d85d4f944aaa27378efc99572f932344cddc488ffa9210dc6b8f0cc29d07110362485eaa5b4b196a49c7080633c1befe802207ed0a172fa0b61fea6305f04d7b755a6e5e162aa8047f80647ad0bae8143226ce3aa8de3b0c0fc4e7cd6baab274fba47abf95ae88584778325250063855a4b9f0c966efa43dc0196d3dec619c490181c259b341b3fd370bab0b66af3cb1e9365cf6b62e44d939d36ffcc6badb924f44e86337360efbf4e3f9bd716adbc3f0ba6055ec9790504c9f3865f47e422b1c6ba16c07d0df618cc572b36ec8e519db90a499424a7d689e6fbcc9be1abd843512ec16540c6c7c6d6e2cf50ab2014e4208c2abb0ddfd2ef9dece79389f21d7a9985903f7f01b0394d268349fa410200000000000000fca815ad0b1c6ffa5af2eba6d9436ad298c4e11b68451c7ff001c02ddd3ceb153a865327845349e8b817aa8ed24924f49260f8209d0ddcacd016218e22320776162fe8396914fa22c85bc261661fa547c3063e20ca37c0862c3b9abd3da9b02e3f58d89be00003509bae9b82f60975c0687c500bb213a580f6e9f08b207d7c31748e3fda05a0cc76b1fdd563610a2bb09a57020d85026a57a178c38839b5b88cd8434d1f0308d872c7356a6445de801ff14c133bda3b42b9ca099fb3ee0d5c7a835f56ed30aa75d47cd97c329b682879290faee167334500d2fe596564f3e4064f41cf3469aaae846f1e84f3d8a7f42d98d0b6b67913c376d6bbde3027aa41b753ace165f88379981685f918ada5043800b5e0a0865dcda94df85fefa9348d6ec4e1ffbd940d023fbbd3b77d5db572981dbe40cbae9f010c1ea02718b1c4b7d0447c9d83d1afea58097a0467d6cdd47aef05f97dab63462f6ea61f4b611040b30e7cf60a499aa9d0bc50c08463f25a47d2dbc958fe1d1cf2399dcf1952987b6fcbc97bf73b12177c374c8fd56c8228fc796c958687104f4eb9d46ab80eeeeedb7096a67ee440ae92a65cbf6f81939e3d1050c67245036b5dcc13d577fbb4d9c3fbf2e2e61aa154074ae225c54e23289c4ef41a07a49a9d40f3103f4c9dfd4d750cc646adadd2e1fe24c74ce099d753d4c59d806a0b7f576ac37ac58a51a120f93162c43d16c1f7e5289c75f5f0a5b838d020040c9ce512ca35d08f42acd24cdbc2e6b1ac3c6809a5ed9e272155e9fa55349bc3ce0e3f2d1624dc60e2396b954587bbab275f38911e86b826b85730c6670a92a221cdcbf18ee0c44aecd12204b3049a1b5da1215a4cf88ecbe2d877ef975f4f661999d17d7d9ec14e0895ce25034dac4705d50ae42ca162778d0dcfc4e9180517be0daca5deb10773f93e2c61a5fe9b823218a97c35d0d7b436b2e1afb670b5a4c6dacd401afd1832c1dd96e8eba7734954070c6796cc80707441404cfe95fabf214bf03a6e4643ca559c2b8dcf1fa871114f3dc973a056c9afe7cd0ed4cbaf18298377e750869551632c1713bd8372e3f117a02edf0a68d2c01245459dbe78597ac1eec75064024c1f3c98260d34b611ba8fa4b2022babd44b76ea70c718df8268dba447038b1539f0499603cf2d79bcc49c35a8cf38892d982d153d72253a22ae68da65e84d6399e81a14ebf89ba446630814d9dcf8914acafc8603a5396167c5aa99814af62c1c39a6ba76ad2c6c51a6d56d89fbda5334e626540ef1b1ecad53247531fcdd661a48d28a6d48bac8ef70c888b00db57edceee94425df5161e1b1a1bec9c897e01867442ed8ba000b5f75832a8ec57ef0737994b95f40eac48f3c8da5db80e965fcdf3f0bbb4439a7123b59987f0fdac96bc7ce09c013562ff7c0cb23a882828e45a51f7e748db90c5eaacfdf3657d11a348f747ddd860387de41be3376a5dabf4296bc05282cb73fcd60c4a4148d9e872ae86e30b22db1ce5452ad9fe3", 0xce6}], 0x5) (async)
setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) (async)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async)
r8 = fsmount(0xffffffffffffffff, 0x0, 0x0)
fchdir(r8)
write$cgroup_pressure(r8, &(0x7f0000000200)={'full'}, 0x2f)

1.701682217s ago: executing program 2 (id=7031):
unshare(0x2040400)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0x36, 0x0, 0x4)
rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
io_uring_setup(0x6, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x9, 0xc1})
fcntl$notify(0xffffffffffffffff, 0x402, 0x29)
r0 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00')
r1 = socket$kcm(0xa, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = syz_pidfd_open(0x0, 0x0)
r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r0)
r6 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/protocols\x00')
preadv(r6, &(0x7f0000000000)=[{&(0x7f0000003900)=""/4104, 0x1008}], 0x1, 0x73, 0x0)
sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, r5, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_MS_ADDR6={0x14, 0xc, @loopback}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40800)
setns(r4, 0x64000000)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x0, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x4e20, 0x2, 0xcd}}, 0x44)
sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

1.642246951s ago: executing program 2 (id=7032):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0x26, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4266}, {}, {}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x2}, @ringbuf_query, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_fd={0x18, 0xa, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @alu={0x4, 0x1, 0x9, 0x7, 0x6, 0x50, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x9f110443f9717b1b, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x272a3, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000400)=[{0x3, 0x1, 0xa, 0x9}, {0x3, 0x5}, {0x5, 0x2, 0x6, 0x9}, {0x5, 0x1, 0xa}, {0x4, 0x4, 0xc, 0x2}, {0x5, 0x4, 0xb, 0x3}, {0x0, 0x2, 0x6}, {0x0, 0x3, 0x0, 0x9}], 0x10, 0x5}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@cgroup, 0xffffffffffffffff, 0x3a, 0x0, 0x0, @void, @value=r0}, 0x20)

1.556926545s ago: executing program 2 (id=7033):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0xe, "1a03e5090200030091000041392e00", <r3=>0xffffffffffffffff})
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x80800, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000280)={0x2, "fa02790d2a69a2610f0200000000000000110001000000c642000000677c00", <r6=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r3, <r7=>0xffffffffffffffff})
r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000240)={0x1b, "8a6035ceeae3ecc42317afad010000000000000400", <r9=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f00000003c0)={0x7, "34e64988e80e0000b56a0011b0d10000800000008f2700", <r10=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f00000000c0)={"0e337b42cc00d331ff0007000000000000001a00", r10, <r11=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f0000000040)={"130f2672af9ee0452321864922cd3bebd7f9cec5064e58445f1268334b4900", r11, <r12=>0xffffffffffffffff})
close(0x3)
ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000200)={"1dc523eadb68d660421f031b9b1946dae8a8564e59a6dad500", r12})
preadv(r1, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0)
ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000180))
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x87, @loopback, 0x4e21, 0x3, 'wrr\x00', 0xa, 0xfffd, 0x42}, 0x2c)
socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0)
r13 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r13, &(0x7f0000000140), 0x4924b68, 0x0)

1.420617259s ago: executing program 2 (id=7034):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_elf64(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x525)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r0, @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x2600c014)
socket(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x800, 0x0)
syz_usb_connect$uac3(0x0, 0x97, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000084406478040000102030109028500030105200f080b00020101300c090400000001013000000000000a000008000009040100000102300009040101010102300017240100070000000400030000000000000000060900090905010910000d09000a2525020000007f01000904020000010230000904020101010230000905820900040400080a252502000000056f05"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB='.']}]})
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x6, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x69b, 0x0, 0x40000010002, 0xffffffffffffffff, 0x8000000000000003, 0x7, 0xfffffe01}, 0x0)
pipe2$watch_queue(0x0, 0x80)
socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x6044}, 0x24004050)
r6 = socket$inet(0x2, 0x2, 0x7)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8)
preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000640)=0x9)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x4, 0x2)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)

1.306234548s ago: executing program 5 (id=7035):
r0 = socket(0x1e, 0x805, 0x0)
socket(0x840000000002, 0x3, 0x100)
connect$tipc(r0, &(0x7f0000000140)=@id={0x1e, 0x3, 0x3, {0x4e20}}, 0x10)
r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40058}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {}, 0x1})
io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)

1.23195205s ago: executing program 4 (id=7036):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5005, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf0, 0x7e, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfc}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000010)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16])
r2 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0)
ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000080)={0xe, {0x5, 0x4, 0x3, 0xa}})
socket$kcm(0x21, 0x2, 0xa)
ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/95)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000000180)=@ready={0x0, 0x0, 0x8, "07eb202b", {0x1, 0x3, 0x3ff, 0x3, 0x8}})

1.133974537s ago: executing program 5 (id=7037):
r0 = socket$nl_route(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000080)="7c0000001800051105000000000000000a400000fe0400010000000014000b0020010db800d0000000000000000000011c00080008000200dc05000008000300e8030000080004000a00000008000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002", 0x79)

1.05487689s ago: executing program 6 (id=7038):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000d40)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000080)=ANY=[], 0x0}, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r2, 0x5b02, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000004100070127bd7000fefdffff047c000008004280040008000c0009800600cc00800a0000180002"], 0x40}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x8088}, 0x2004c000)
r5 = dup2(r3, r3)
write$tun(r5, &(0x7f00000000c0)=ANY=[], 0x46)

1.051057285s ago: executing program 5 (id=7039):
open(0x0, 0x60840, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
gettid()
socketpair$unix(0x1, 0x1, 0x0, 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r1, 0x0, 0x23, 0x0, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00')
pread64(r2, &(0x7f0000000100)=""/253, 0xfd, 0x1)

646.582859ms ago: executing program 8 (id=7040):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="aa82305e753e9883bac0adde5ae95948dec178758edaa3fb58f8d7988f0eee100457ead16f76666a04e36fc2e8b33f3f956584b5b2485315e14f1cf7b45c29a486fb14b4eb9851df28"], 0x50}, 0x1, 0x0, 0x0, 0x2000c00c}, 0x20044084)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r2)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x3ff}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x399}]}, 0x24}}, 0x20040010)
r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000000)={0x210a, r2}, 0x0)
landlock_restrict_self(r4, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
close(r0)

496.959066ms ago: executing program 8 (id=7041):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x20000007, 0x8}, 0x50) (async)
r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1) (async)
syz_clone3(0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4, 0x82b) (async)
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4)

435.739253ms ago: executing program 8 (id=7042):
r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1b6)
pwrite64(r0, &(0x7f0000000100), 0x0, 0x1be)
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x3)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$FICLONE(r4, 0x40049409, 0xffffffffffffffff)
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r6 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1b6)
pwrite64(r6, &(0x7f0000000100), 0x0, 0x1be)
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000000)=0x3)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_int(r9, 0x29, 0x46, 0x0, 0x0)
sendto$inet6(r9, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xf5, @loopback={0x0, 0x7ffffffe}}, 0x1c)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x30}}, 0x0)
recvmmsg$unix(r7, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r11, 0x29, 0x41, 0x0, &(0x7f0000000080))
bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}, 0x3}}, 0x10)
close(0xffffffffffffffff)
r12 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r12, 0xc1205531, &(0x7f0000000340)={0x0, 0x4, 0x0, 0x8002, '\x00', '\x00', '\x00', 0x2, 0xfffffffe, 0x100, 0x0, "abd206a1ebd7cedfd17ebd65400ed41b"})
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x4)

77.452275ms ago: executing program 8 (id=7043):
r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000000))
r1 = socket(0xa, 0x3, 0x82)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
r2 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00')
r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff)
close(r3)
execveat$binfmt(0xffffffffffffff9c, r2, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000)
truncate(&(0x7f0000000000)='./file1\x00', 0x6ebd)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/config\x00')
preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000180)=""/87, 0x57}], 0x1, 0x8000e, 0x7)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x3a, 0x22, 0x0, 0x0)
unshare(0x4000400)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3f, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0xb, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x4, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x824, 0xe, 0x1, 0x2, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x9, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x2, 0x17, 0x2, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0xfffffffa, 0x3fc, 0x80, 0x0, 0x2, 0x6, 0x80000008, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0xf292, 0xfffffff3, 0x129432e6, 0xc9, 0x6, 0x7fff, 0x78, 0x3, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x31, 0x1, 0x312, 0x78, 0xea4, 0x2, 0x4, 0x7, 0x7fff, 0x6, 0x403, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xa, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x3, 0x47, 0x8000, 0x1, 0xfff, 0xffff, 0xfff, 0x4, 0x9, 0x3, 0x3, 0x7, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x2], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x6, 0x7ff7, 0x0, 0x1, 0x2, 0xd, 0x5, 0x405, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x3e, 0xd9, 0x3, 0x20000009, 0x4, 0x6d01, 0x4, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x87c, 0x1002, 0x8, 0x7, 0x1, 0x5, 0x6, 0x4, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x6, 0xbb33, 0x6, 0xb, 0x5, 0x893a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14a, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x1, 0x4, 0xc8, 0x1, 0x400, 0x2, 0x3, 0x7e, 0x800100, 0x9602, 0x7, 0x8af, 0x8, 0x6, 0xa26, 0x5, 0x5, 0x28, 0x30b1d693, 0xa1f, 0xf43, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
r5 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$key(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x15, 0x4, 0x9, 0xf, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_spirange={0x2, 0x10, 0x4d3, 0x4d3}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd2c}, @sadb_x_filter={0x5, 0x1a, @in=@multicast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x18, 0x10, 0x10}, @sadb_x_nat_t_type={0x1, 0x14, 0x7}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e21}, @sadb_sa={0x2, 0x1, 0x4d5, 0x1, 0x5, 0x90, 0x3}]}, 0x78}}, 0x40050)
unshare(0x0)

0s ago: executing program 5 (id=7044):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, <r1=>0x0})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r2, 0x107, 0x11, 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r1, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x14, r3})
close(0x3)

kernel console output (not intermixed with test programs):

IP: 0033:0x7f5c0699e159
[ 1358.821955][T28100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1358.821972][T28100] RSP: 002b:00007f5c07846028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[ 1358.821994][T28100] RAX: ffffffffffffffda RBX: 00007f5c06c25fa0 RCX: 00007f5c0699e159
[ 1358.822008][T28100] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000017
[ 1358.822021][T28100] RBP: 00007f5c07846090 R08: 0000200000000280 R09: 0000000000000000
[ 1358.822034][T28100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1358.822046][T28100] R13: 00007f5c06c26038 R14: 00007f5c06c25fa0 R15: 00007f5c06d4fa48
[ 1358.822075][T28100]  </TASK>
[ 1358.928852][ T2349] usb 3-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2
[ 1358.928879][ T2349] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-24xxx-01.fw
[ 1358.984812][ T4986] Dev loop5: unable to read RDB block 7
[ 1358.984844][ T4986]  loop5: AHDI p1 p2 p3
[ 1358.984865][ T4986] loop5: partition table partially beyond EOD, truncated
[ 1358.985136][ T4986] loop5: p1 start 1601398130 is beyond EOD, truncated
[ 1358.985157][ T4986] loop5: p2 start 1702059890 is beyond EOD, truncated
[ 1359.144835][  T943] usb 9-1: USB disconnect, device number 15
[ 1359.198947][T28105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1359.233815][T28105] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1359.271406][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1359.290173][T28105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1359.299951][T28105] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1359.959379][ T4986] Dev loop5: unable to read RDB block 7
[ 1359.959775][ T4986]  loop5: AHDI p1 p2 p3
[ 1359.959799][ T4986] loop5: partition table partially beyond EOD, truncated
[ 1359.960178][ T4986] loop5: p1 start 1601398130 is beyond EOD, truncated
[ 1359.960199][ T4986] loop5: p2 start 1702059890 is beyond EOD, truncated
[ 1360.153256][  T943] usb 3-1: USB disconnect, device number 73
[ 1360.195951][ T4986] Dev loop5: unable to read RDB block 7
[ 1360.197762][ T4986]  loop5: AHDI p1 p2 p3
[ 1360.197786][ T4986] loop5: partition table partially beyond EOD, truncated
[ 1360.197999][ T4986] loop5: p1 start 1601398130 is beyond EOD, truncated
[ 1360.198045][ T4986] loop5: p2 start 1702059890 is beyond EOD, truncated
[ 1360.311357][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1360.435147][ T4986] Dev loop5: unable to read RDB block 7
[ 1360.440997][ T4986]  loop5: AHDI p1 p2 p3
[ 1360.445370][ T4986] loop5: partition table partially beyond EOD, truncated
[ 1360.445567][ T4986] loop5: p1 start 1601398130 is beyond EOD, truncated
[ 1360.445589][ T4986] loop5: p2 start 1702059890 is beyond EOD, truncated
[ 1360.582496][T28118] xt_NFQUEUE: number of queues (65535) out of range (got 98302)
[ 1360.633571][ T4986] Dev loop5: unable to read RDB block 7
[ 1360.633633][ T4986]  loop5: AHDI p1 p2 p3
[ 1360.633686][ T4986] loop5: partition table partially beyond EOD, truncated
[ 1360.633911][ T4986] loop5: p1 start 1601398130 is beyond EOD, truncated
[ 1360.633929][ T4986] loop5: p2 start 1702059890 is beyond EOD, truncated
[ 1360.756905][ T9674] usb 5-1: USB disconnect, device number 111
[ 1360.842418][T28125] netlink: 'syz.5.6698': attribute type 3 has an invalid length.
[ 1360.864249][T28128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6699'.
[ 1360.946736][T28131] syzkaller0: entered allmulticast mode
[ 1360.954660][T28131] tipc: Started in network mode
[ 1360.960086][T28131] tipc: Node identity de089363d469, cluster identity 4711
[ 1360.968322][T28131] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1360.979033][T28131] tipc: Resetting bearer <eth:syzkaller0>
[ 1361.265182][ T4986] Dev loop5: unable to read RDB block 7
[ 1361.265235][ T4986]  loop5: AHDI p1 p2 p3
[ 1361.265289][ T4986] loop5: partition table partially beyond EOD, truncated
[ 1361.265490][ T4986] loop5: p1 start 1601398130 is beyond EOD, truncated
[ 1361.265522][ T4986] loop5: p2 start 1702059890 is beyond EOD, truncated
[ 1361.361345][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1361.599551][ T4986] Dev loop5: unable to read RDB block 7
[ 1361.599627][ T4986]  loop5: AHDI p1 p2 p3
[ 1361.599650][ T4986] loop5: partition table partially beyond EOD, truncated
[ 1361.599864][ T4986] loop5: p1 start 1601398130 is beyond EOD, truncated
[ 1361.599883][ T4986] loop5: p2 start 1702059890 is beyond EOD, truncated
[ 1361.690075][T28151] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6703'.
[ 1361.763838][ T1259] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.770283][ T1259] ieee802154 phy1 wpan1: encryption failed: -22
[ 1361.864419][T28141] tipc: Disabling bearer <eth:syzkaller0>
[ 1361.896895][   T30] audit: type=1326 audit(1788598659.310:8152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28156 comm="syz.2.6704" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde6799e159 code=0x7ffc0000
[ 1361.921981][   T30] audit: type=1326 audit(1788598659.330:8153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28156 comm="syz.2.6704" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde6799e159 code=0x7ffc0000
[ 1362.195565][ T4986] Dev loop5: unable to read RDB block 7
[ 1362.195622][ T4986]  loop5: AHDI p1 p2 p3
[ 1362.197240][ T4986] loop5: partition table partially beyond EOD, truncated
[ 1362.197452][ T4986] loop5: p1 start 1601398130 is beyond EOD, truncated
[ 1362.197470][ T4986] loop5: p2 start 1702059890 is beyond EOD, truncated
[ 1362.283162][T28161] FAULT_INJECTION: forcing a failure.
[ 1362.283162][T28161] name failslab, interval 1, probability 0, space 0, times 0
[ 1362.317560][T28161] CPU: 1 UID: 0 PID: 28161 Comm: syz.5.6706 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1362.317597][T28161] Tainted: [L]=SOFTLOCKUP
[ 1362.317605][T28161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1362.317616][T28161] Call Trace:
[ 1362.317625][T28161]  <TASK>
[ 1362.317634][T28161]  dump_stack_lvl+0xe8/0x150
[ 1362.317671][T28161]  should_fail_ex+0x410/0x560
[ 1362.317716][T28161]  should_failslab+0xa8/0x100
[ 1362.317741][T28161]  ? __anon_vma_prepare+0x10e/0x4d0
[ 1362.317771][T28161]  kmem_cache_alloc_noprof+0xa1/0x600
[ 1362.317798][T28161]  ? __anon_vma_prepare+0xc3/0x4d0
[ 1362.317823][T28161]  ? kmem_cache_alloc_noprof+0x156/0x600
[ 1362.317851][T28161]  ? __anon_vma_prepare+0x10e/0x4d0
[ 1362.317888][T28161]  __anon_vma_prepare+0x10e/0x4d0
[ 1362.317916][T28161]  ? __filemap_get_folio_mpol+0xd03/0x1000
[ 1362.317945][T28161]  __vmf_anon_prepare+0xe1/0x1b0
[ 1362.317972][T28161]  hugetlb_no_page+0x384/0x16f0
[ 1362.318012][T28161]  ? huge_pte_alloc+0x482/0x630
[ 1362.318036][T28161]  ? down_read+0x2be/0x330
[ 1362.318062][T28161]  hugetlb_fault+0x776/0x1440
[ 1362.318096][T28161]  ? __pfx_hugetlb_fault+0x10/0x10
[ 1362.318136][T28161]  ? mtree_range_walk+0x707/0x8b0
[ 1362.318159][T28161]  ? look_up_lock_class+0x57/0x110
[ 1362.318192][T28161]  handle_mm_fault+0x24fc/0x3750
[ 1362.318229][T28161]  ? handle_mm_fault+0xf1/0x3750
[ 1362.318247][T28161]  ? mt_find+0x186/0x630
[ 1362.318266][T28161]  ? __pfx_mt_find+0x10/0x10
[ 1362.318293][T28161]  ? __pfx_handle_mm_fault+0x10/0x10
[ 1362.318320][T28161]  ? rcu_is_watching+0x16/0xb0
[ 1362.318344][T28161]  ? __up_read+0x29c/0x930
[ 1362.318371][T28161]  ? __pfx___up_read+0x10/0x10
[ 1362.318389][T28161]  ? __get_user_pages+0x15be/0x2750
[ 1362.318407][T28161]  __get_user_pages+0x1675/0x2750
[ 1362.318459][T28161]  populate_vma_page_range+0x2be/0x3c0
[ 1362.318488][T28161]  ? __pfx_populate_vma_page_range+0x10/0x10
[ 1362.318515][T28161]  ? down_read+0x2be/0x330
[ 1362.318534][T28161]  __mm_populate+0x25f/0x390
[ 1362.318550][T28161]  ? __pfx___mm_populate+0x10/0x10
[ 1362.318570][T28161]  vm_mmap_pgoff+0x353/0x4e0
[ 1362.318594][T28161]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 1362.318629][T28161]  ? hugetlb_file_setup+0x42c/0x630
[ 1362.318789][T28161]  ksys_mmap_pgoff+0x57d/0x760
[ 1362.318822][T28161]  do_syscall_64+0x166/0x520
[ 1362.318848][T28161]  ? trace_irq_disable+0x3b/0x140
[ 1362.318860][T28161]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1362.318873][T28161]  ? clear_bhb_loop+0x70/0xc0
[ 1362.318888][T28161]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1362.318903][T28161] RIP: 0033:0x7f5c0699e159
[ 1362.318924][T28161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1362.318942][T28161] RSP: 002b:00007f5c07846028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1362.318967][T28161] RAX: ffffffffffffffda RBX: 00007f5c06c25fa0 RCX: 00007f5c0699e159
[ 1362.318982][T28161] RDX: 000000000000000b RSI: 0000000000800000 RDI: 0000200000000000
[ 1362.318996][T28161] RBP: 00007f5c07846090 R08: ffffffffffffffff R09: 0000000000000000
[ 1362.319007][T28161] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000002
[ 1362.319015][T28161] R13: 00007f5c06c26038 R14: 00007f5c06c25fa0 R15: 00007f5c06d4fa48
[ 1362.319035][T28161]  </TASK>
[ 1362.391882][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1362.636752][ T4986] Dev loop5: unable to read RDB block 7
[ 1362.636784][ T4986]  loop5: AHDI p1 p2 p3
[ 1362.636805][ T4986] loop5: partition table partially beyond EOD, truncated
[ 1362.637033][ T4986] loop5: p1 start 1601398130 is beyond EOD, truncated
[ 1362.637051][ T4986] loop5: p2 start 1702059890 is beyond EOD, truncated
[ 1362.718674][T28164] FAULT_INJECTION: forcing a failure.
[ 1362.718674][T28164] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1362.718731][T28164] CPU: 1 UID: 0 PID: 28164 Comm: syz.5.6708 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1362.718762][T28164] Tainted: [L]=SOFTLOCKUP
[ 1362.718770][T28164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1362.718784][T28164] Call Trace:
[ 1362.718794][T28164]  <TASK>
[ 1362.718804][T28164]  dump_stack_lvl+0xe8/0x150
[ 1362.718841][T28164]  should_fail_ex+0x410/0x560
[ 1362.718879][T28164]  _copy_to_user+0x31/0xb0
[ 1362.718907][T28164]  simple_read_from_buffer+0xe1/0x170
[ 1362.718943][T28164]  proc_fail_nth_read+0x1bb/0x230
[ 1362.718973][T28164]  ? common_file_perm+0x20e/0x2b0
[ 1362.718998][T28164]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1362.719031][T28164]  ? rw_verify_area+0x24a/0x4c0
[ 1362.719061][T28164]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1362.719087][T28164]  vfs_read+0x213/0xa80
[ 1362.719119][T28164]  ? __pfx___mutex_lock+0x10/0x10
[ 1362.719142][T28164]  ? __pfx_vfs_read+0x10/0x10
[ 1362.719171][T28164]  ? __fget_files+0x2a/0x420
[ 1362.719201][T28164]  ? __fget_files+0x3a2/0x420
[ 1362.719226][T28164]  ? __fget_files+0x2a/0x420
[ 1362.719261][T28164]  ksys_read+0x150/0x270
[ 1362.719293][T28164]  ? __pfx_ksys_read+0x10/0x10
[ 1362.719332][T28164]  do_syscall_64+0x166/0x520
[ 1362.719361][T28164]  ? trace_irq_disable+0x3b/0x140
[ 1362.719381][T28164]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1362.719402][T28164]  ? clear_bhb_loop+0x70/0xc0
[ 1362.719427][T28164]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1362.719447][T28164] RIP: 0033:0x7f5c0695e98e
[ 1362.719468][T28164] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1362.719486][T28164] RSP: 002b:00007f5c07845fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1362.719510][T28164] RAX: ffffffffffffffda RBX: 00007f5c078466c0 RCX: 00007f5c0695e98e
[ 1362.719526][T28164] RDX: 000000000000000f RSI: 00007f5c078460a0 RDI: 0000000000000004
[ 1362.719539][T28164] RBP: 00007f5c07846090 R08: 0000000000000000 R09: 0000000000000000
[ 1362.719551][T28164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1362.719581][T28164] R13: 00007f5c06c26038 R14: 00007f5c06c25fa0 R15: 00007f5c06d4fa48
[ 1362.719616][T28164]  </TASK>
[ 1363.052003][T28170] netlink: 300 bytes leftover after parsing attributes in process `syz.5.6710'.
[ 1363.063341][T28167] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6709'.
[ 1363.108617][ T4986] Dev loop5: unable to read RDB block 7
[ 1363.108681][ T4986]  loop5: AHDI p1 p2 p3
[ 1363.109111][ T4986] loop5: partition table partially beyond EOD, truncated
[ 1363.109349][ T4986] loop5: p1 start 1601398130 is beyond EOD, truncated
[ 1363.109367][ T4986] loop5: p2 start 1702059890 is beyond EOD, truncated
[ 1363.322419][T28165] binder: 28162:28165 ioctl c0306201 0 returned -14
[ 1363.405034][ T4986] Dev loop5: unable to read RDB block 7
[ 1363.410715][ T4986]  loop5: AHDI p1 p2 p3
[ 1363.416889][ T4986] loop5: partition table partially beyond EOD, truncated
[ 1363.417105][ T4986] loop5: p1 start 1601398130 is beyond EOD, truncated
[ 1363.417127][ T4986] loop5: p2 start 1702059890 is beyond EOD, truncated
[ 1363.431353][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1363.691617][ T4986] Dev loop5: unable to read RDB block 7
[ 1363.691716][ T4986]  loop5: AHDI p1 p2 p3
[ 1363.691739][ T4986] loop5: partition table partially beyond EOD, truncated
[ 1363.691947][ T4986] loop5: p1 start 1601398130 is beyond EOD, truncated
[ 1363.691966][ T4986] loop5: p2 start 1702059890 is beyond EOD, truncated
[ 1363.811262][   T44] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[ 1363.905499][T21360] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1363.925490][T21360] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1363.942794][ T9674] usb 6-1: USB disconnect, device number 104
[ 1363.942823][T21360] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1363.957060][T21360] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1363.970791][   T44] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1363.986658][T21360] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1364.063217][   T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1364.063267][   T44] usb 5-1: Product: syz
[ 1364.064043][   T44] usb 5-1: Manufacturer: syz
[ 1364.064067][   T44] usb 5-1: SerialNumber: syz
[ 1364.128356][   T25] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1364.471538][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1364.748167][T24650] bond0: (slave syz_tun): Removing an active aggregator
[ 1364.751112][T24650] bond0: (slave syz_tun): Releasing backup interface
[ 1364.886407][T28186] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1364.886672][T28186] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1364.886850][T28186] bridge_slave_0: entered allmulticast mode
[ 1364.889250][T28186] bridge_slave_0: entered promiscuous mode
[ 1364.893642][T28186] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1364.893984][T28186] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1364.894168][T28186] bridge_slave_1: entered allmulticast mode
[ 1364.896649][T28186] bridge_slave_1: entered promiscuous mode
[ 1364.954870][ T5623] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[ 1364.958529][T28186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1364.964256][T28186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1365.030470][T28186] team0: Port device team_slave_0 added
[ 1365.040324][T28186] team0: Port device team_slave_1 added
[ 1365.082165][T28186] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1365.082203][T28186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1365.082773][T28186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1365.085474][T28186] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1365.085488][T28186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1365.085513][T28186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1365.118303][ T5623] usb 9-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[ 1365.167025][ T5623] usb 9-1: config 1 has an invalid interface number: 7 but max is 0
[ 1365.167056][ T5623] usb 9-1: config 1 has no interface number 0
[ 1365.167161][ T5623] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8
[ 1365.177131][T28186] hsr_slave_0: entered promiscuous mode
[ 1365.178484][T28186] hsr_slave_1: entered promiscuous mode
[ 1365.184018][T28186] debugfs: 'hsr0' already exists in 'hsr'
[ 1365.184041][T28186] Cannot create hsr debugfs directory
[ 1365.214620][   T25] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 1365.214999][   T25] ath9k_htc: Failed to initialize the device
[ 1365.247682][ T5623] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1365.247711][ T5623] usb 9-1: Product: syz
[ 1365.247726][ T5623] usb 9-1: Manufacturer: syz
[ 1365.247741][ T5623] usb 9-1: SerialNumber: syz
[ 1365.310116][T28192] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1365.328789][ T5623] usb 9-1: Error in usbnet_get_endpoints (-22)
[ 1365.448854][   T25] usb 5-1: ath9k_htc: USB layer deinitialized
[ 1365.469022][ T9674] usb 5-1: USB disconnect, device number 112
[ 1365.511386][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1365.568373][T28201] tipc: Started in network mode
[ 1365.568466][T28201] tipc: Node identity 3e33880e639c, cluster identity 4711
[ 1365.568659][T28201] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1365.589175][T28201] tipc: Disabling bearer <eth:syzkaller0>
[ 1366.074431][T13870] Bluetooth: hci6: command tx timeout
[ 1366.229937][T28211] FAULT_INJECTION: forcing a failure.
[ 1366.229937][T28211] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1366.231390][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1366.247976][T28213] FAULT_INJECTION: forcing a failure.
[ 1366.247976][T28213] name failslab, interval 1, probability 0, space 0, times 0
[ 1366.248011][T28213] CPU: 0 UID: 0 PID: 28213 Comm: syz.6.6722 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1366.248042][T28213] Tainted: [L]=SOFTLOCKUP
[ 1366.248049][T28213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1366.248060][T28213] Call Trace:
[ 1366.248069][T28213]  <TASK>
[ 1366.248077][T28213]  dump_stack_lvl+0xe8/0x150
[ 1366.248108][T28213]  should_fail_ex+0x410/0x560
[ 1366.248148][T28213]  should_failslab+0xa8/0x100
[ 1366.248170][T28213]  ? skb_clone+0x212/0x3a0
[ 1366.248193][T28213]  kmem_cache_alloc_noprof+0xa1/0x600
[ 1366.248222][T28213]  ? skb_clone+0x212/0x3a0
[ 1366.248248][T28213]  skb_clone+0x212/0x3a0
[ 1366.248273][T28213]  __netlink_deliver_tap+0x413/0x860
[ 1366.248308][T28213]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1366.248332][T28213]  netlink_deliver_tap+0x19c/0x1b0
[ 1366.248357][T28213]  netlink_sendskb+0x68/0x140
[ 1366.248380][T28213]  netlink_rcv_skb+0x2a4/0x4a0
[ 1366.248404][T28213]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[ 1366.248428][T28213]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1366.248461][T28213]  ? bpf_lsm_capable+0x9/0x20
[ 1366.248485][T28213]  ? security_capable+0x7e/0x2c0
[ 1366.248512][T28213]  nfnetlink_rcv+0x2b9/0x28c0
[ 1366.248537][T28213]  ? __dev_queue_xmit+0x29b/0x3820
[ 1366.248562][T28213]  ? __local_bh_enable_ip+0xd6/0x140
[ 1366.248586][T28213]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1366.248612][T28213]  ? __dev_queue_xmit+0x29b/0x3820
[ 1366.248633][T28213]  ? __local_bh_enable_ip+0xd6/0x140
[ 1366.248654][T28213]  ? __dev_queue_xmit+0x29b/0x3820
[ 1366.248675][T28213]  ? __dev_queue_xmit+0x1edc/0x3820
[ 1366.248696][T28213]  ? do_syscall_64+0x166/0x520
[ 1366.248721][T28213]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1366.248751][T28213]  ? __dev_queue_xmit+0x29b/0x3820
[ 1366.248774][T28213]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1366.248801][T28213]  ? __pfx___dev_queue_xmit+0x10/0x10
[ 1366.248830][T28213]  ? ref_tracker_free+0x689/0x830
[ 1366.248853][T28213]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1366.248872][T28213]  ? __asan_memcpy+0x40/0x70
[ 1366.248896][T28213]  ? __skb_clone+0x5c/0x6c0
[ 1366.248921][T28213]  ? __skb_clone+0x449/0x6c0
[ 1366.248947][T28213]  ? skb_clone+0x246/0x3a0
[ 1366.248971][T28213]  ? __netlink_deliver_tap+0x811/0x860
[ 1366.248993][T28213]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1366.249022][T28213]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1366.249044][T28213]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1366.249072][T28213]  netlink_unicast+0x7bd/0x940
[ 1366.249104][T28213]  netlink_sendmsg+0x813/0xb40
[ 1366.249142][T28213]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1366.249174][T28213]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1366.249203][T28213]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1366.249225][T28213]  sock_sendmsg_nosec+0x13a/0x180
[ 1366.249252][T28213]  ____sys_sendmsg+0x54e/0x850
[ 1366.249279][T28213]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1366.249309][T28213]  ? import_iovec+0x73/0xa0
[ 1366.249333][T28213]  ___sys_sendmsg+0x2a5/0x360
[ 1366.249358][T28213]  ? __lock_acquire+0x6df/0x2e50
[ 1366.249382][T28213]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1366.249436][T28213]  ? __fget_files+0x2a/0x420
[ 1366.249459][T28213]  ? __fget_files+0x3a2/0x420
[ 1366.249492][T28213]  __x64_sys_sendmsg+0x1b1/0x290
[ 1366.249516][T28213]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1366.249558][T28213]  do_syscall_64+0x166/0x520
[ 1366.249584][T28213]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1366.249603][T28213]  ? clear_bhb_loop+0x70/0xc0
[ 1366.249626][T28213]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1366.249645][T28213] RIP: 0033:0x7fd564b9e159
[ 1366.249663][T28213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1366.249679][T28213] RSP: 002b:00007fd565afa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1366.249701][T28213] RAX: ffffffffffffffda RBX: 00007fd564e25fa0 RCX: 00007fd564b9e159
[ 1366.249714][T28213] RDX: 0000000014000884 RSI: 00002000000002c0 RDI: 0000000000000003
[ 1366.249727][T28213] RBP: 00007fd565afa090 R08: 0000000000000000 R09: 0000000000000000
[ 1366.249739][T28213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1366.249751][T28213] R13: 00007fd564e26038 R14: 00007fd564e25fa0 R15: 00007fd564f4fa48
[ 1366.249780][T28213]  </TASK>
[ 1366.323517][   T25] usb 5-1: new high-speed USB device number 113 using dummy_hcd
[ 1366.327002][T28211] CPU: 0 UID: 0 PID: 28211 Comm: syz.2.6721 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1366.327033][T28211] Tainted: [L]=SOFTLOCKUP
[ 1366.327041][T28211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1366.327053][T28211] Call Trace:
[ 1366.327065][T28211]  <TASK>
[ 1366.327075][T28211]  dump_stack_lvl+0xe8/0x150
[ 1366.327106][T28211]  should_fail_ex+0x410/0x560
[ 1366.327156][T28211]  _copy_from_user+0x2d/0xb0
[ 1366.327179][T28211]  kstrtouint_from_user+0xd6/0x180
[ 1366.327208][T28211]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 1366.327244][T28211]  ? lock_acquire+0x115/0x350
[ 1366.327268][T28211]  proc_fail_nth_write+0x8e/0x210
[ 1366.327296][T28211]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1366.327330][T28211]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1366.327356][T28211]  vfs_write+0x296/0xba0
[ 1366.327391][T28211]  ? __pfx_vfs_write+0x10/0x10
[ 1366.327418][T28211]  ? __fget_files+0x2a/0x420
[ 1366.327447][T28211]  ? __fget_files+0x3a2/0x420
[ 1366.327469][T28211]  ? __fget_files+0x2a/0x420
[ 1366.327501][T28211]  ksys_write+0x150/0x270
[ 1366.327530][T28211]  ? __pfx_ksys_write+0x10/0x10
[ 1366.327566][T28211]  do_syscall_64+0x166/0x520
[ 1366.327594][T28211]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1366.327614][T28211]  ? clear_bhb_loop+0x70/0xc0
[ 1366.327638][T28211]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1366.327658][T28211] RIP: 0033:0x7fde6795e98e
[ 1366.327676][T28211] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1366.327692][T28211] RSP: 002b:00007fde687a4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1366.327713][T28211] RAX: ffffffffffffffda RBX: 00007fde687a56c0 RCX: 00007fde6795e98e
[ 1366.327727][T28211] RDX: 0000000000000001 RSI: 00007fde687a50a0 RDI: 0000000000000006
[ 1366.327739][T28211] RBP: 00007fde687a5090 R08: 0000000000000000 R09: 0000000000000000
[ 1366.327751][T28211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1366.327762][T28211] R13: 00007fde67c26128 R14: 00007fde67c26090 R15: 00007fde67d4fa48
[ 1366.327793][T28211]  </TASK>
[ 1366.452290][   T25] usb 5-1: device descriptor read/64, error -71
[ 1366.553622][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1366.784171][   T25] usb 5-1: new high-speed USB device number 114 using dummy_hcd
[ 1366.924332][   T25] usb 5-1: device descriptor read/64, error -71
[ 1367.047560][   T25] usb usb5-port1: attempt power cycle
[ 1367.382611][   T25] usb 5-1: new high-speed USB device number 115 using dummy_hcd
[ 1367.408661][   T25] usb 5-1: device descriptor read/8, error -71
[ 1367.549711][T28227] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6727'.
[ 1367.549750][T28227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6727'.
[ 1367.591388][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1367.652516][   T25] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[ 1367.683127][   T25] usb 5-1: device descriptor read/8, error -71
[ 1367.745235][T28186] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1367.772891][T28186] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1367.775967][T28186] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1367.791589][   T25] usb usb5-port1: unable to enumerate USB device
[ 1367.799643][ T9674] usb 9-1: USB disconnect, device number 16
[ 1367.816867][T28186] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1367.829596][T28186] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1367.857704][T28186] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1367.872527][T28186] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1367.901827][T28186] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1368.151759][T13870] Bluetooth: hci6: command tx timeout
[ 1368.173147][T28186] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1368.229013][T28186] 8021q: adding VLAN 0 to HW filter on device team0
[ 1368.268362][T25375] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1368.268480][T25375] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1368.303438][T25372] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1368.303570][T25372] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1368.471798][T28186] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1368.592534][T28186] veth0_vlan: entered promiscuous mode
[ 1368.611163][T28186] veth1_vlan: entered promiscuous mode
[ 1368.632976][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1368.678783][T28186] veth0_macvtap: entered promiscuous mode
[ 1368.698198][T28186] veth1_macvtap: entered promiscuous mode
[ 1368.736171][T28186] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1368.765686][T28186] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1368.833222][T25381] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1368.867533][T25381] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1368.868328][T25368] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1368.868365][T25368] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1369.208185][T22794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1369.208230][T22794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1369.407120][T25381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1369.407205][T25381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1369.451970][T28244] loop3: detected capacity change from 0 to 7
[ 1369.453057][T28244] Dev loop3: unable to read RDB block 7
[ 1369.453131][T28244]  loop3: unable to read partition table
[ 1369.453366][T28244] loop3: partition table beyond EOD, truncated
[ 1369.453410][T28244] loop_reread_partitions: partition scan of loop3 (�被x������ ) failed (rc=-5)
[ 1369.671416][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1369.768906][T28252] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6734'.
[ 1370.011905][T28257] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1370.012714][T28257] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1370.033328][T28257] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1370.033549][T28257] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1370.033871][T28257] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1370.033994][T28257] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1370.034991][T28257] bridge0: entered promiscuous mode
[ 1370.035071][T28257] bridge0: entered allmulticast mode
[ 1370.181859][ T9674] usb 5-1: new high-speed USB device number 117 using dummy_hcd
[ 1370.231346][T13870] Bluetooth: hci6: command tx timeout
[ 1370.342190][ T9674] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[ 1370.343471][ T9674] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1370.343515][ T9674] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1370.461303][ T5623] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[ 1370.605684][ T9674] qmi_wwan 5-1:1.0: cdc-wdm0: USB WDM device
[ 1370.615175][ T9674] wwan wwan0: port wwan0qmi0 attached
[ 1370.631996][ T5623] usb 9-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40
[ 1370.643889][ T5623] usb 9-1: config 1 has an invalid interface number: 108 but max is 2
[ 1370.643935][ T5623] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1370.643972][ T5623] usb 9-1: config 1 has no interface number 2
[ 1370.644039][ T5623] usb 9-1: config 1 interface 108 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1370.644095][ T5623] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[ 1370.644127][ T5623] usb 9-1: config 1 interface 108 has no altsetting 0
[ 1370.644151][ T5623] usb 9-1: config 1 interface 1 has no altsetting 0
[ 1370.700956][T28269] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1370.700990][T28269] IPv6: NLM_F_CREATE should be set when creating new route
[ 1370.711463][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1370.736935][ T5623] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1370.736982][ T5623] usb 9-1: Product: syz
[ 1370.737015][ T5623] usb 9-1: Manufacturer: syz
[ 1370.737035][ T5623] usb 9-1: SerialNumber: syz
[ 1370.884229][ T9674] qmi_wwan 5-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.4-1, WWAN/QMI device, 46:93:38:36:13:38
[ 1371.447949][   T44] usb 5-1: USB disconnect, device number 117
[ 1371.467387][   T44] qmi_wwan 5-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.4-1, WWAN/QMI device
[ 1371.594355][   T44] wwan wwan0: port wwan0qmi0 disconnected
[ 1371.753982][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1372.225875][T28302] netlink: 72 bytes leftover after parsing attributes in process `syz.6.6750'.
[ 1372.311356][T13870] Bluetooth: hci6: command tx timeout
[ 1372.791397][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1373.371284][ T9681] usb 6-1: new high-speed USB device number 105 using dummy_hcd
[ 1373.542265][ T5623] usb 9-1: selecting invalid altsetting 0
[ 1373.542313][ T5623] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1373.542351][ T5623] usb 9-1: selecting invalid altsetting 0
[ 1373.542440][ T5623] usb 9-1: unit 4 not found!
[ 1373.604192][ T9681] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[ 1373.619567][ T9681] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 1373.619623][ T9681] usb 6-1: Product: syz
[ 1373.619666][ T9681] usb 6-1: SerialNumber: syz
[ 1373.640253][ T9681] usb 6-1: config 0 descriptor??
[ 1373.704960][T28325] syz_tun: entered allmulticast mode
[ 1373.727207][ T5623] usb 9-1: USB disconnect, device number 17
[ 1373.831239][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1373.974450][T23007] udevd[23007]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1373.974591][ T9681] usb 6-1: USB disconnect, device number 105
[ 1374.282526][T28321] syz_tun: left allmulticast mode
[ 1374.871366][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1375.212224][ T9681] usb 6-1: new high-speed USB device number 106 using dummy_hcd
[ 1375.363388][ T9681] usb 6-1: Using ep0 maxpacket: 16
[ 1375.377411][ T9681] usb 6-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00
[ 1375.388656][ T9681] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[ 1375.388744][ T9681] usb 6-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1375.388770][ T9681] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1375.388804][ T9681] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1375.438560][T28361] netlink: 11 bytes leftover after parsing attributes in process `syz.8.6764'.
[ 1375.450882][ T9681] usb 6-1: config 0 descriptor??
[ 1375.461911][T28355] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[ 1375.605438][T28365] netlink: 'syz.4.6765': attribute type 3 has an invalid length.
[ 1375.606087][T28365] sctp: [Deprecated]: syz.4.6765 (pid 28365) Use of int in max_burst socket option.
[ 1375.606087][T28365] Use struct sctp_assoc_value instead
[ 1375.911396][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1375.965537][ T9681] hid_parser_main: 4007 callbacks suppressed
[ 1375.972289][ T9681] samsung 0003:0419:0001.0058: unknown main item tag 0x0
[ 1375.972361][ T9681] samsung 0003:0419:0001.0058: unknown main item tag 0x0
[ 1375.972417][ T9681] samsung 0003:0419:0001.0058: unknown main item tag 0x0
[ 1375.972442][ T9681] samsung 0003:0419:0001.0058: unknown main item tag 0x0
[ 1375.972465][ T9681] samsung 0003:0419:0001.0058: unknown main item tag 0x0
[ 1375.972489][ T9681] samsung 0003:0419:0001.0058: unknown main item tag 0x0
[ 1375.972512][ T9681] samsung 0003:0419:0001.0058: unknown main item tag 0x0
[ 1375.972562][ T9681] samsung 0003:0419:0001.0058: unknown main item tag 0x0
[ 1375.972586][ T9681] samsung 0003:0419:0001.0058: unknown main item tag 0x0
[ 1375.972610][ T9681] samsung 0003:0419:0001.0058: unknown main item tag 0x0
[ 1376.127211][ T9681] samsung 0003:0419:0001.0058: hidraw0: USB HID v7f.fd Device [HID 0419:0001] on usb-dummy_hcd.5-1/input0
[ 1376.263042][T28373] IPv6: Can't replace route, no match found
[ 1376.403240][T28376] syz_tun: entered allmulticast mode
[ 1376.951370][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1377.035154][T28388] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1377.057531][T28388] tipc: Disabling bearer <eth:syzkaller0>
[ 1377.096241][T28371] syz_tun: left allmulticast mode
[ 1377.266541][T28390] FAULT_INJECTION: forcing a failure.
[ 1377.266541][T28390] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1377.266617][T28390] CPU: 0 UID: 0 PID: 28390 Comm: syz.6.6774 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1377.266651][T28390] Tainted: [L]=SOFTLOCKUP
[ 1377.266659][T28390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1377.266670][T28390] Call Trace:
[ 1377.266678][T28390]  <TASK>
[ 1377.266687][T28390]  dump_stack_lvl+0xe8/0x150
[ 1377.266724][T28390]  should_fail_ex+0x410/0x560
[ 1377.266762][T28390]  prepare_alloc_pages+0x223/0x600
[ 1377.266790][T28390]  __alloc_frozen_pages_noprof+0x185/0x5a0
[ 1377.266815][T28390]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1377.266840][T28390]  ? __pfx_policy_nodemask+0x10/0x10
[ 1377.266865][T28390]  ? try_to_migrate+0x33d/0x400
[ 1377.266885][T28390]  ? __pfx_try_to_migrate+0x10/0x10
[ 1377.266909][T28390]  alloc_pages_mpol+0x21e/0x390
[ 1377.266937][T28390]  folio_alloc_mpol_noprof+0x39/0x160
[ 1377.266962][T28390]  migrate_pages_batch+0xb1f/0x4f50
[ 1377.267008][T28390]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[ 1377.267035][T28390]  ? __pfx_migrate_pages_batch+0x10/0x10
[ 1377.267061][T28390]  ? walk_pgd_range+0x1cab/0x1dc0
[ 1377.267117][T28390]  ? __pfx_walk_pgd_range+0x10/0x10
[ 1377.267151][T28390]  migrate_pages+0x1b9f/0x2920
[ 1377.267177][T28390]  ? vma_migratable+0x2ea/0x3e0
[ 1377.267208][T28390]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[ 1377.267242][T28390]  ? __pfx_migrate_pages+0x10/0x10
[ 1377.267266][T28390]  ? mas_next_node+0xbd1/0xe50
[ 1377.267298][T28390]  ? lock_acquire+0x115/0x350
[ 1377.267347][T28390]  __se_sys_mbind+0xe82/0x10e0
[ 1377.267376][T28390]  ? __pfx___se_sys_mbind+0x10/0x10
[ 1377.267409][T28390]  ? fput+0xa0/0xd0
[ 1377.267432][T28390]  ? ksys_write+0x242/0x270
[ 1377.267460][T28390]  ? __pfx_ksys_write+0x10/0x10
[ 1377.267490][T28390]  ? __x64_sys_mbind+0x21/0xf0
[ 1377.267514][T28390]  do_syscall_64+0x166/0x520
[ 1377.267540][T28390]  ? trace_irq_disable+0x3b/0x140
[ 1377.267567][T28390]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1377.267588][T28390]  ? clear_bhb_loop+0x70/0xc0
[ 1377.267619][T28390]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1377.267639][T28390] RIP: 0033:0x7fd564b9e159
[ 1377.267660][T28390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1377.267677][T28390] RSP: 002b:00007fd565afa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 1377.267700][T28390] RAX: ffffffffffffffda RBX: 00007fd564e25fa0 RCX: 00007fd564b9e159
[ 1377.267715][T28390] RDX: 0000000000000000 RSI: 0100000000004000 RDI: 00002000005b4000
[ 1377.267729][T28390] RBP: 00007fd565afa090 R08: 0000000000000000 R09: 0000000000000002
[ 1377.267742][T28390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1377.267754][T28390] R13: 00007fd564e26038 R14: 00007fd564e25fa0 R15: 00007fd564f4fa48
[ 1377.267784][T28390]  </TASK>
[ 1377.625751][T28394] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1377.671113][T28394] netlink: 'syz.8.6776': attribute type 58 has an invalid length.
[ 1377.679434][T28394] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6776'.
[ 1377.822654][T28401] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6779'.
[ 1377.944330][   T25] usb 6-1: USB disconnect, device number 106
[ 1377.991454][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1378.282991][T28410] bridge1: entered promiscuous mode
[ 1378.289628][T28410] bridge1: entered allmulticast mode
[ 1378.311692][T28410] team0: Port device bridge1 added
[ 1378.401110][T28411] bridge0: port 3(team0) entered blocking state
[ 1378.415331][T28411] bridge0: port 3(team0) entered disabled state
[ 1378.415590][T28411] team0: entered allmulticast mode
[ 1378.415614][T28411] team_slave_0: entered allmulticast mode
[ 1378.415638][T28411] team_slave_1: entered allmulticast mode
[ 1378.429345][T28412] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6782'.
[ 1378.547725][T28411] team0: entered promiscuous mode
[ 1378.547808][T28411] team_slave_0: entered promiscuous mode
[ 1378.548023][T28411] team_slave_1: entered promiscuous mode
[ 1378.611781][T28411] bridge0: port 3(team0) entered blocking state
[ 1378.611914][T28411] bridge0: port 3(team0) entered forwarding state
[ 1378.841629][ T5700] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[ 1379.008784][ T5700] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[ 1379.009558][ T5700] usb 9-1: config 0 has no interfaces?
[ 1379.009592][ T5700] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1379.031434][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1379.060342][ T5700] usb 9-1: config 0 descriptor??
[ 1379.081659][T28418] netlink: 'syz.6.6784': attribute type 13 has an invalid length.
[ 1379.655670][T28402] netlink: 'syz.4.6777': attribute type 13 has an invalid length.
[ 1379.655703][T28402] netlink: 'syz.4.6777': attribute type 17 has an invalid length.
[ 1379.762337][T28414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1379.776628][T28414] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1379.810031][ T5700] usb 9-1: USB disconnect, device number 18
[ 1380.040865][T28402] input: syz1 as /devices/virtual/input/input181
[ 1380.071314][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1380.348838][   T30] audit: type=1804 audit(1788598677.760:8154): pid=28434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.6786" name="/newroot/136/file1" dev="fuse" ino=1 res=1 errno=0
[ 1380.377451][   T30] audit: type=1800 audit(1788598677.790:8155): pid=28437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6786" name="nullb0" dev="devtmpfs" ino=5947 res=0 errno=0
[ 1380.629440][T28438] nvme nvme0: failed to connect socket: -111
[ 1381.111304][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1381.127925][T28442] loop8: detected capacity change from 0 to 7
[ 1381.151322][T28442] Dev loop8: unable to read RDB block 7
[ 1381.157194][T28442]  loop8: unable to read partition table
[ 1381.163445][T28442] loop8: partition table beyond EOD, truncated
[ 1381.170841][T28442] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[ 1381.477655][T28446] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6790'.
[ 1382.072141][   T44] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[ 1382.151337][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1382.246030][   T44] usb 9-1: Using ep0 maxpacket: 16
[ 1382.253039][   T44] usb 9-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00
[ 1382.263702][   T44] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[ 1382.275245][   T44] usb 9-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1382.289708][   T44] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1382.296681][   T44] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1382.309568][   T44] usb 9-1: config 0 descriptor??
[ 1382.316500][T28452] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1382.430231][T28461] loop7: detected capacity change from 0 to 16384
[ 1382.746092][   T44] hid_parser_main: 469 callbacks suppressed
[ 1382.753898][   T44] samsung 0003:0419:0001.0059: unknown main item tag 0x0
[ 1382.753958][   T44] samsung 0003:0419:0001.0059: unknown main item tag 0x0
[ 1382.753990][   T44] samsung 0003:0419:0001.0059: unknown main item tag 0x0
[ 1382.754021][   T44] samsung 0003:0419:0001.0059: unknown main item tag 0x0
[ 1382.754050][   T44] samsung 0003:0419:0001.0059: unknown main item tag 0x0
[ 1382.754080][   T44] samsung 0003:0419:0001.0059: unknown main item tag 0x0
[ 1382.754109][   T44] samsung 0003:0419:0001.0059: unknown main item tag 0x0
[ 1382.754138][   T44] samsung 0003:0419:0001.0059: unknown main item tag 0x0
[ 1382.754168][   T44] samsung 0003:0419:0001.0059: unknown main item tag 0x0
[ 1382.754198][   T44] samsung 0003:0419:0001.0059: unknown main item tag 0x0
[ 1382.857811][   T44] samsung 0003:0419:0001.0059: hidraw0: USB HID v7f.fd Device [HID 0419:0001] on usb-dummy_hcd.8-1/input0
[ 1382.971257][   T25] usb 6-1: new high-speed USB device number 107 using dummy_hcd
[ 1383.073517][T28462] loop7: detected capacity change from 16384 to 16383
[ 1383.132425][   T25] usb 6-1: Using ep0 maxpacket: 8
[ 1383.191415][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1383.427041][   T25] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1383.427118][   T25] usb 6-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00
[ 1383.445560][   T25] usb 6-1: unable to read config index 0 descriptor/start: -71
[ 1383.445618][   T25] usb 6-1: can't read configurations, error -71
[ 1383.576716][   T44] usb 9-1: USB disconnect, device number 19
[ 1384.039770][T28479] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6801'.
[ 1384.231313][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1384.412832][   T44] usb 9-1: new full-speed USB device number 20 using dummy_hcd
[ 1384.585682][   T44] usb 9-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df
[ 1384.597332][   T44] usb 9-1: config 201 has an invalid interface number: 249 but max is 0
[ 1384.597379][   T44] usb 9-1: config 201 has no interface number 0
[ 1384.597449][   T44] usb 9-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81
[ 1384.597482][   T44] usb 9-1: config 201 interface 249 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[ 1384.597514][   T44] usb 9-1: config 201 interface 249 has no altsetting 0
[ 1384.649577][   T44] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1384.649650][   T44] usb 9-1: Product: syz
[ 1384.649684][   T44] usb 9-1: Manufacturer: syz
[ 1384.649704][   T44] usb 9-1: SerialNumber: syz
[ 1384.696432][T28486] FAULT_INJECTION: forcing a failure.
[ 1384.696432][T28486] name failslab, interval 1, probability 0, space 0, times 0
[ 1384.696494][T28486] CPU: 0 UID: 0 PID: 28486 Comm: syz.5.6803 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1384.696528][T28486] Tainted: [L]=SOFTLOCKUP
[ 1384.696536][T28486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1384.696548][T28486] Call Trace:
[ 1384.696558][T28486]  <TASK>
[ 1384.696567][T28486]  dump_stack_lvl+0xe8/0x150
[ 1384.696601][T28486]  should_fail_ex+0x410/0x560
[ 1384.696636][T28486]  should_failslab+0xa8/0x100
[ 1384.696659][T28486]  ? __kvm_mmu_topup_memory_cache+0x1b2/0x600
[ 1384.696688][T28486]  kmem_cache_alloc_noprof+0xa1/0x600
[ 1384.696714][T28486]  ? __kvm_mmu_topup_memory_cache+0x1b2/0x600
[ 1384.696741][T28486]  ? kmem_cache_alloc_noprof+0x156/0x600
[ 1384.696767][T28486]  ? __kvm_mmu_topup_memory_cache+0x1b2/0x600
[ 1384.696801][T28486]  __kvm_mmu_topup_memory_cache+0x1b2/0x600
[ 1384.696840][T28486]  mmu_topup_memory_caches+0x21/0x170
[ 1384.696874][T28486]  kvm_mmu_load+0x9d/0x21e0
[ 1384.696898][T28486]  ? kvm_msr_allowed+0x9a/0x490
[ 1384.696918][T28486]  ? kvm_msr_allowed+0x9a/0x490
[ 1384.696939][T28486]  ? kvm_msr_allowed+0x9a/0x490
[ 1384.696958][T28486]  ? kvm_msr_allowed+0x3f4/0x490
[ 1384.696978][T28486]  ? kvm_msr_allowed+0x9a/0x490
[ 1384.696998][T28486]  ? kvm_apic_has_interrupt+0x740/0x770
[ 1384.697034][T28486]  vcpu_run+0x4f68/0x79b0
[ 1384.697093][T28486]  ? update_se+0x90/0x1020
[ 1384.697155][T28486]  ? __pfx_vcpu_run+0x10/0x10
[ 1384.697183][T28486]  ? lock_acquire+0x115/0x350
[ 1384.697220][T28486]  kvm_arch_vcpu_ioctl_run+0xe87/0x19c0
[ 1384.697253][T28486]  ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0
[ 1384.697283][T28486]  ? kvm_vcpu_ioctl+0xe8f/0xfd0
[ 1384.697309][T28486]  kvm_vcpu_ioctl+0xa61/0xfd0
[ 1384.697337][T28486]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1384.697356][T28486]  ? hook_file_ioctl+0x1f2/0x600
[ 1384.697398][T28486]  ? __fget_files+0x2a/0x420
[ 1384.697427][T28486]  ? __fget_files+0x2a/0x420
[ 1384.697450][T28486]  ? __fget_files+0x3a2/0x420
[ 1384.697474][T28486]  ? __fget_files+0x2a/0x420
[ 1384.697502][T28486]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1384.697529][T28486]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1384.697551][T28486]  __se_sys_ioctl+0xfc/0x170
[ 1384.697574][T28486]  do_syscall_64+0x166/0x520
[ 1384.697601][T28486]  ? trace_irq_disable+0x3b/0x140
[ 1384.697620][T28486]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1384.697640][T28486]  ? clear_bhb_loop+0x70/0xc0
[ 1384.697665][T28486]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1384.697685][T28486] RIP: 0033:0x7f413059e159
[ 1384.697705][T28486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1384.697722][T28486] RSP: 002b:00007f41313ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1384.697745][T28486] RAX: ffffffffffffffda RBX: 00007f4130825fa0 RCX: 00007f413059e159
[ 1384.697760][T28486] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000082
[ 1384.697773][T28486] RBP: 00007f41313ed090 R08: 0000000000000000 R09: 0000000000000000
[ 1384.697787][T28486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1384.697799][T28486] R13: 00007f4130826038 R14: 00007f4130825fa0 R15: 00007f413094fa48
[ 1384.697831][T28486]  </TASK>
[ 1385.052561][   T44] ath6kl: Failed to submit usb control message: -71
[ 1385.059330][   T44] ath6kl: unable to send the bmi data to the device: -71
[ 1385.067442][   T44] ath6kl: Unable to send get target info: -71
[ 1385.074692][   T44] ath6kl: Failed to init ath6kl core: -71
[ 1385.114666][   T44] ath6kl_usb 9-1:201.249: probe with driver ath6kl_usb failed with error -71
[ 1385.142056][   T44] usb 9-1: USB disconnect, device number 20
[ 1385.271354][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1385.456144][T28492] netlink: 1320 bytes leftover after parsing attributes in process `syz.4.6805'.
[ 1385.922654][ T5700] usb 6-1: new high-speed USB device number 109 using dummy_hcd
[ 1386.073386][ T5700] usb 6-1: Using ep0 maxpacket: 32
[ 1386.074707][ T5700] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[ 1386.076063][ T5700] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[ 1386.076091][ T5700] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 1386.076143][ T5700] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[ 1386.076165][ T5700] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[ 1386.076189][ T5700] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[ 1386.086583][ T5700] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1386.086609][ T5700] usb 6-1: Product: syz
[ 1386.086623][ T5700] usb 6-1: Manufacturer: syz
[ 1386.086637][ T5700] usb 6-1: SerialNumber: syz
[ 1386.095573][ T5700] usb 6-1: config 0 descriptor??
[ 1386.262820][T17540] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[ 1386.311331][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1386.413529][T17540] usb 9-1: Using ep0 maxpacket: 16
[ 1386.415867][T17540] usb 9-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00
[ 1386.417210][T17540] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[ 1386.417240][T17540] usb 9-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1386.417264][T17540] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1386.417302][T17540] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1386.429912][T17540] usb 9-1: config 0 descriptor??
[ 1386.433397][T28503] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 1386.520565][ T5700] iforce 6-1:0.0: usb_submit_urb failed: -32
[ 1386.520665][ T5700] input input182: Device does not respond to id packet M
[ 1386.525257][ T5700] iforce 6-1:0.0: usb_submit_urb failed: -32
[ 1386.525315][ T5700] input input182: Device does not respond to id packet P
[ 1386.527182][ T5700] iforce 6-1:0.0: usb_submit_urb failed: -32
[ 1386.527232][ T5700] input input182: Device does not respond to id packet B
[ 1386.534363][ T5700] iforce 6-1:0.0: usb_submit_urb failed: -32
[ 1386.534446][ T5700] input input182: Device does not respond to id packet N
[ 1386.538551][ T5700] iforce 6-1:0.0: usb_submit_urb failed: -32
[ 1386.540570][ T5700] iforce 6-1:0.0: usb_submit_urb failed: -71
[ 1386.544722][ T5700] iforce 6-1:0.0: usb_submit_urb failed: -71
[ 1386.546967][ T5700] iforce 6-1:0.0: usb_submit_urb failed: -71
[ 1386.573598][ T5700] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input182
[ 1386.584299][T28511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6812'.
[ 1386.584325][T28511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6812'.
[ 1386.620056][ T5700] usb 6-1: USB disconnect, device number 109
[ 1386.753883][T28513] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1386.903026][T28518] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6814'.
[ 1386.918200][T17540] samsung 0003:0419:0001.005A: hidraw0: USB HID v7f.fd Device [HID 0419:0001] on usb-dummy_hcd.8-1/input0
[ 1387.037550][T28518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1387.038921][T28518] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1387.351596][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1387.471261][T17540] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[ 1387.541795][ T5623] usb 6-1: new high-speed USB device number 110 using dummy_hcd
[ 1387.583929][ T5700] usb 9-1: USB disconnect, device number 21
[ 1387.624193][T17540] usb 5-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00
[ 1387.647892][T17540] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1387.656390][T17540] usb 5-1: Product: syz
[ 1387.661068][T17540] usb 5-1: Manufacturer: syz
[ 1387.668075][T17540] usb 5-1: SerialNumber: syz
[ 1387.692208][T17540] ums_eneub6250 5-1:1.0: USB Mass Storage device detected
[ 1387.696535][T28531] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6820'.
[ 1387.719389][ T5623] usb 6-1: Using ep0 maxpacket: 16
[ 1387.722446][ T5623] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1387.724031][ T5623] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1387.724059][ T5623] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1387.726512][ T5623] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1387.726536][ T5623] usb 6-1: Product: syz
[ 1387.726549][ T5623] usb 6-1: Manufacturer: syz
[ 1387.726564][ T5623] usb 6-1: SerialNumber: syz
[ 1387.736395][ T5623] usb 6-1: config 0 descriptor??
[ 1387.740858][ T5623] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1387.740889][ T5623] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class)
[ 1387.906917][T28527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6818'.
[ 1387.906968][T28527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6818'.
[ 1387.927558][   T25] usb 5-1: USB disconnect, device number 118
[ 1388.386593][T28529] bond1: option xmit_hash_policy: invalid value (14)
[ 1388.393531][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1388.395829][T28529] bond1 (unregistering): Released all slaves
[ 1388.417088][ T5623] em28xx 6-1:0.0: unknown em28xx chip ID (69)
[ 1388.629872][ T5623] em28xx 6-1:0.0: Config register raw data: 0x45
[ 1388.835555][ T5623] usb 6-1: USB disconnect, device number 110
[ 1388.837717][ T5623] em28xx 6-1:0.0: Disconnecting em28xx
[ 1388.856927][ T5623] em28xx: Freeing device
[ 1389.431238][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1389.821796][ T5623] usb 6-1: new high-speed USB device number 111 using dummy_hcd
[ 1389.972639][ T5623] usb 6-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82
[ 1389.973800][ T5623] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 1389.973830][ T5623] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[ 1389.973874][ T5623] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1389.976820][ T5623] usb 6-1: config 0 descriptor??
[ 1389.980260][ T5623] smsusb:smsusb_probe: board id=8, interface number 0
[ 1389.980817][ T5623] smsusb:smsusb_probe: Device initialized with return code -19
[ 1390.161250][ T9674] usb 9-1: new high-speed USB device number 22 using dummy_hcd
[ 1390.171307][   T25] usb 5-1: new high-speed USB device number 119 using dummy_hcd
[ 1390.187121][ T5623] usb 6-1: USB disconnect, device number 111
[ 1390.311430][ T9674] usb 9-1: Using ep0 maxpacket: 16
[ 1390.317513][ T9674] usb 9-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00
[ 1390.319356][ T9674] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[ 1390.319387][ T9674] usb 9-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1390.319439][ T9674] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1390.319472][ T9674] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1390.324788][ T9674] usb 9-1: config 0 descriptor??
[ 1390.325715][T28563] raw-gadget.5 gadget.8: fail, usb_ep_enable returned -22
[ 1390.339005][   T25] usb 5-1: Using ep0 maxpacket: 32
[ 1390.361665][   T25] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1390.361716][   T25] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1390.362697][   T25] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 17955, setting to 1024
[ 1390.362735][   T25] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 28, changing to 7
[ 1390.364819][   T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1390.364841][   T25] usb 5-1: Product: syz
[ 1390.364855][   T25] usb 5-1: Manufacturer: syz
[ 1390.364868][   T25] usb 5-1: SerialNumber: syz
[ 1390.471231][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1390.655169][T28565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6831'.
[ 1390.669641][   T25] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1390.671954][   T25] usb 5-1: 2:1 : unsupported sample bitwidth 10 in 255 bytes
[ 1390.721966][   T25] usb 5-1: USB disconnect, device number 119
[ 1390.748020][ T9674] hid_parser_main: 948 callbacks suppressed
[ 1390.754303][ T9674] samsung 0003:0419:0001.005B: unknown main item tag 0x0
[ 1390.763608][ T9674] samsung 0003:0419:0001.005B: unknown main item tag 0x0
[ 1390.771208][ T9674] samsung 0003:0419:0001.005B: unknown main item tag 0x0
[ 1390.771261][ T9674] samsung 0003:0419:0001.005B: unknown main item tag 0x0
[ 1390.771291][ T9674] samsung 0003:0419:0001.005B: unknown main item tag 0x0
[ 1390.771376][ T9674] samsung 0003:0419:0001.005B: unknown main item tag 0x0
[ 1390.771408][ T9674] samsung 0003:0419:0001.005B: unknown main item tag 0x0
[ 1390.771435][ T9674] samsung 0003:0419:0001.005B: unknown main item tag 0x0
[ 1390.771467][ T9674] samsung 0003:0419:0001.005B: unknown main item tag 0x0
[ 1390.771519][ T9674] samsung 0003:0419:0001.005B: unknown main item tag 0x0
[ 1390.848083][ T9674] samsung 0003:0419:0001.005B: hidraw0: USB HID v7f.fd Device [HID 0419:0001] on usb-dummy_hcd.8-1/input0
[ 1390.851810][T23007] udevd[23007]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1391.181819][T16333] usb 6-1: new high-speed USB device number 112 using dummy_hcd
[ 1391.332406][T16333] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1391.333522][T16333] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1391.333563][T16333] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1391.333587][T16333] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1391.333609][T16333] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1391.334568][T16333] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1391.334590][T16333] usb 6-1: Manufacturer: syz
[ 1391.337638][T16333] usb 6-1: config 0 descriptor??
[ 1391.511263][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1391.536029][   T25] usb 9-1: USB disconnect, device number 22
[ 1391.580579][   T30] audit: type=1326 audit(1788598688.990:8156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28581 comm="syz.4.6835" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe47139e159 code=0x7ffc0000
[ 1391.607555][   T30] audit: type=1326 audit(1788598689.020:8157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28581 comm="syz.4.6835" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe47139e159 code=0x7ffc0000
[ 1391.613867][   T30] audit: type=1326 audit(1788598689.030:8158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28581 comm="syz.4.6835" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe47139e159 code=0x7ffc0000
[ 1391.614790][   T30] audit: type=1326 audit(1788598689.030:8159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28581 comm="syz.4.6835" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe47139e159 code=0x7ffc0000
[ 1391.617253][   T30] audit: type=1326 audit(1788598689.030:8160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28581 comm="syz.4.6835" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fe47139e159 code=0x7ffc0000
[ 1391.617323][   T30] audit: type=1326 audit(1788598689.030:8161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28581 comm="syz.4.6835" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe47139e159 code=0x7ffc0000
[ 1391.617370][   T30] audit: type=1326 audit(1788598689.030:8162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28581 comm="syz.4.6835" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe47139e159 code=0x7ffc0000
[ 1391.617911][   T30] audit: type=1326 audit(1788598689.030:8163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28581 comm="syz.4.6835" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe47139e159 code=0x7ffc0000
[ 1391.618174][   T30] audit: type=1326 audit(1788598689.030:8164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28581 comm="syz.4.6835" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe47139e159 code=0x7ffc0000
[ 1391.618460][   T30] audit: type=1326 audit(1788598689.030:8165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28581 comm="syz.4.6835" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe47139e159 code=0x7ffc0000
[ 1391.842838][T16333] appleir 0003:05AC:8243.005C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[ 1392.162752][   T25] usb 6-1: USB disconnect, device number 112
[ 1392.171272][T16333] usb 9-1: new high-speed USB device number 23 using dummy_hcd
[ 1392.321288][T16333] usb 9-1: Using ep0 maxpacket: 16
[ 1392.324279][T16333] usb 9-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=c8.70
[ 1392.328062][T16333] usb 9-1: config 0 has an invalid interface number: 154 but max is 0
[ 1392.328087][T16333] usb 9-1: config 0 has no interface number 0
[ 1392.328115][T16333] usb 9-1: config 0 interface 154 has no altsetting 0
[ 1392.339571][T16333] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1392.339598][T16333] usb 9-1: Product: syz
[ 1392.339612][T16333] usb 9-1: Manufacturer: syz
[ 1392.339626][T16333] usb 9-1: SerialNumber: syz
[ 1392.349830][T16333] usb 9-1: config 0 descriptor??
[ 1392.551323][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1392.559336][T16333] ldusb 9-1:0.154: Interrupt in endpoint not found
[ 1392.597839][T16333] usb 9-1: USB disconnect, device number 23
[ 1393.261653][T16333] usb 6-1: new high-speed USB device number 113 using dummy_hcd
[ 1393.333850][T28609] FAULT_INJECTION: forcing a failure.
[ 1393.333850][T28609] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1393.333917][T28609] CPU: 1 UID: 0 PID: 28609 Comm: syz.8.6843 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1393.333945][T28609] Tainted: [L]=SOFTLOCKUP
[ 1393.333953][T28609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1393.333964][T28609] Call Trace:
[ 1393.333972][T28609]  <TASK>
[ 1393.333980][T28609]  dump_stack_lvl+0xe8/0x150
[ 1393.334013][T28609]  should_fail_ex+0x410/0x560
[ 1393.334047][T28609]  _copy_to_user+0x31/0xb0
[ 1393.334074][T28609]  simple_read_from_buffer+0xe1/0x170
[ 1393.334106][T28609]  proc_fail_nth_read+0x1bb/0x230
[ 1393.334134][T28609]  ? common_file_perm+0x20e/0x2b0
[ 1393.334159][T28609]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1393.334191][T28609]  ? rw_verify_area+0x24a/0x4c0
[ 1393.334219][T28609]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1393.334247][T28609]  vfs_read+0x213/0xa80
[ 1393.334278][T28609]  ? __pfx___mutex_lock+0x10/0x10
[ 1393.334308][T28609]  ? __pfx_vfs_read+0x10/0x10
[ 1393.334336][T28609]  ? __fget_files+0x2a/0x420
[ 1393.334366][T28609]  ? __fget_files+0x3a2/0x420
[ 1393.334390][T28609]  ? __fget_files+0x2a/0x420
[ 1393.334423][T28609]  ksys_read+0x150/0x270
[ 1393.334452][T28609]  ? __pfx_ksys_read+0x10/0x10
[ 1393.334477][T28609]  ? __pfx_v4l2_ioctl+0x10/0x10
[ 1393.334515][T28609]  do_syscall_64+0x166/0x520
[ 1393.334541][T28609]  ? trace_irq_disable+0x3b/0x140
[ 1393.334561][T28609]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1393.334586][T28609]  ? clear_bhb_loop+0x70/0xc0
[ 1393.334611][T28609]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1393.334631][T28609] RIP: 0033:0x7f735335e98e
[ 1393.334651][T28609] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1393.334668][T28609] RSP: 002b:00007f7354264fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1393.334690][T28609] RAX: ffffffffffffffda RBX: 00007f73542656c0 RCX: 00007f735335e98e
[ 1393.334705][T28609] RDX: 000000000000000f RSI: 00007f73542650a0 RDI: 0000000000000007
[ 1393.334719][T28609] RBP: 00007f7354265090 R08: 0000000000000000 R09: 0000000000000000
[ 1393.334733][T28609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1393.334746][T28609] R13: 00007f7353626038 R14: 00007f7353625fa0 R15: 00007f735374fa48
[ 1393.334777][T28609]  </TASK>
[ 1393.411231][T16333] usb 6-1: Using ep0 maxpacket: 16
[ 1393.412300][T16333] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1393.413899][T16333] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1393.417819][T16333] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1393.417843][T16333] usb 6-1: Product: syz
[ 1393.417857][T16333] usb 6-1: Manufacturer: syz
[ 1393.417871][T16333] usb 6-1: SerialNumber: syz
[ 1393.436594][T16333] usb 6-1: config 0 descriptor??
[ 1393.455146][T16333] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1393.455180][T16333] em28xx 6-1:0.0: DVB interface 0 found: bulk
[ 1393.598998][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1394.071426][ T9674] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[ 1394.122265][T16333] em28xx 6-1:0.0: chip ID is em2765
[ 1394.235440][ T9674] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[ 1394.246506][ T9674] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[ 1394.246551][ T9674] usb 5-1: config 0 has no interface number 0
[ 1394.246629][ T9674] usb 5-1: config 0 interface 51 altsetting 72 has 0 endpoint descriptors, different from the interface descriptor's value: 7
[ 1394.246663][ T9674] usb 5-1: config 0 interface 51 has no altsetting 0
[ 1394.246705][ T9674] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1394.294487][ T9674] usb 5-1: config 0 descriptor??
[ 1394.433454][T16333] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1394.433526][T16333] em28xx 6-1:0.0: board has no eeprom
[ 1394.491347][T16333] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1394.491405][T16333] em28xx 6-1:0.0: dvb set to bulk mode.
[ 1394.500575][T16333] usb 6-1: USB disconnect, device number 113
[ 1394.508117][T16333] em28xx 6-1:0.0: Disconnecting em28xx
[ 1394.508188][ T5623] em28xx 6-1:0.0: Binding DVB extension
[ 1394.622206][ T5623] em28xx 6-1:0.0: Registering input extension
[ 1394.626035][T16333] em28xx 6-1:0.0: Closing input extension
[ 1394.634773][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1394.648775][T28622] netlink: 'syz.6.6848': attribute type 6 has an invalid length.
[ 1394.709706][T16333] em28xx: Freeing device
[ 1394.736996][ T9674] usb 5-1: string descriptor 0 read error: -71
[ 1394.737738][ T9674] hub 5-1:0.51: bad descriptor, ignoring hub
[ 1394.737827][ T9674] hub 5-1:0.51: probe with driver hub failed with error -5
[ 1394.763266][ T9674] usb 5-1: Cannot read MAC address
[ 1394.769064][ T9674] MOSCHIP usb-ethernet driver 5-1:0.51: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[ 1394.803470][ T9674] usb 5-1: USB disconnect, device number 120
[ 1395.484495][ T5700] logitech-hidpp-device 0005:046D:B012.005D: hidraw0: BLUETOOTH HID v0.03 Device [syz0] on syz1
[ 1395.622151][ T9674] usb 9-1: new full-speed USB device number 24 using dummy_hcd
[ 1395.638966][T28643] sctp: [Deprecated]: syz.2.6856 (pid 28643) Use of int in max_burst socket option deprecated.
[ 1395.638966][T28643] Use struct sctp_assoc_value instead
[ 1395.671794][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1395.743051][T28640] fido_id[28640]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1395.790927][ T9674] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1395.802259][ T9674] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[ 1395.802352][ T9674] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1395.834080][ T9674] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1395.834164][ T9674] usb 9-1: Product: syz
[ 1395.834200][ T9674] usb 9-1: Manufacturer: syz
[ 1395.834221][ T9674] usb 9-1: SerialNumber: syz
[ 1395.860631][ T9674] usb 9-1: config 0 descriptor??
[ 1395.880305][ T9674] usb 9-1: selecting invalid altsetting 0
[ 1395.891678][T16333] usb 5-1: new high-speed USB device number 121 using dummy_hcd
[ 1396.043969][T16333] usb 5-1: Using ep0 maxpacket: 32
[ 1396.047735][T16333] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1396.052938][T16333] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[ 1396.052963][T16333] usb 5-1: config 0 has no interface number 0
[ 1396.076519][T16333] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1396.076572][T16333] usb 5-1: Product: syz
[ 1396.076606][T16333] usb 5-1: Manufacturer: syz
[ 1396.076620][T16333] usb 5-1: SerialNumber: syz
[ 1396.104635][T16333] usb 5-1: config 0 descriptor??
[ 1396.165853][ T5623] usb 9-1: USB disconnect, device number 24
[ 1396.297789][T28651] vivid-000: disconnect
[ 1396.711212][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1396.769540][T28647] vivid-000: reconnect
[ 1397.053519][T28663] trusted_key: encrypted_key: master key parameter '' is invalid
[ 1397.077657][T28662] trusted_key: encrypted_key: keylen parameter is missing
[ 1397.255944][T16333] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[ 1397.256005][T16333] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1397.258216][T16333] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[ 1397.258473][T16333] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[ 1397.274498][T16333] usb 5-1: USB disconnect, device number 121
[ 1397.751220][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1398.080599][T28679] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6863'.
[ 1398.337686][T28686] tipc: Cannot configure node identity twice
[ 1398.455459][T28686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6866'.
[ 1398.706517][T28689] netlink: 'syz.6.6867': attribute type 1 has an invalid length.
[ 1398.741780][T16333] usb 6-1: new high-speed USB device number 114 using dummy_hcd
[ 1398.801213][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1398.893355][T16333] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1398.904577][T16333] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1398.914980][T16333] usb 6-1: config 0 descriptor??
[ 1398.934450][T16333] cp210x 6-1:0.0: cp210x converter detected
[ 1399.357972][T16333] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32
[ 1399.417493][T16333] usb 6-1: cp210x converter now attached to ttyUSB0
[ 1399.465675][T28704] FAULT_INJECTION: forcing a failure.
[ 1399.465675][T28704] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1399.465733][T28704] CPU: 1 UID: 0 PID: 28704 Comm: syz.2.6873 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1399.465762][T28704] Tainted: [L]=SOFTLOCKUP
[ 1399.465769][T28704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1399.465780][T28704] Call Trace:
[ 1399.465788][T28704]  <TASK>
[ 1399.465797][T28704]  dump_stack_lvl+0xe8/0x150
[ 1399.465834][T28704]  should_fail_ex+0x410/0x560
[ 1399.465868][T28704]  _copy_to_user+0x31/0xb0
[ 1399.465891][T28704]  simple_read_from_buffer+0xe1/0x170
[ 1399.465923][T28704]  proc_fail_nth_read+0x1bb/0x230
[ 1399.465948][T28704]  ? common_file_perm+0x20e/0x2b0
[ 1399.465971][T28704]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1399.466001][T28704]  ? rw_verify_area+0x24a/0x4c0
[ 1399.466028][T28704]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1399.466054][T28704]  vfs_read+0x213/0xa80
[ 1399.466084][T28704]  ? __pfx___mutex_lock+0x10/0x10
[ 1399.466104][T28704]  ? __pfx_vfs_read+0x10/0x10
[ 1399.466131][T28704]  ? __fget_files+0x2a/0x420
[ 1399.466159][T28704]  ? __fget_files+0x3a2/0x420
[ 1399.466182][T28704]  ? __fget_files+0x2a/0x420
[ 1399.466213][T28704]  ksys_read+0x150/0x270
[ 1399.466250][T28704]  ? __pfx_ksys_read+0x10/0x10
[ 1399.466285][T28704]  do_syscall_64+0x166/0x520
[ 1399.466311][T28704]  ? trace_irq_disable+0x3b/0x140
[ 1399.466330][T28704]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1399.466350][T28704]  ? clear_bhb_loop+0x70/0xc0
[ 1399.466373][T28704]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1399.466392][T28704] RIP: 0033:0x7fde6795e98e
[ 1399.466410][T28704] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1399.466426][T28704] RSP: 002b:00007fde687c5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1399.466448][T28704] RAX: ffffffffffffffda RBX: 00007fde687c66c0 RCX: 00007fde6795e98e
[ 1399.466462][T28704] RDX: 000000000000000f RSI: 00007fde687c60a0 RDI: 0000000000000003
[ 1399.466475][T28704] RBP: 00007fde687c6090 R08: 0000000000000000 R09: 0000000000000000
[ 1399.466487][T28704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1399.466499][T28704] R13: 00007fde67c26038 R14: 00007fde67c25fa0 R15: 00007fde67d4fa48
[ 1399.466530][T28704]  </TASK>
[ 1399.701549][ T5623] usb 6-1: USB disconnect, device number 114
[ 1399.724698][ T5623] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1399.746591][ T5623] cp210x 6-1:0.0: device disconnected
[ 1399.831204][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1400.389514][T28727] Invalid argument reading file caps for ./file0
[ 1400.427216][T28727] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1400.735606][   T30] kauditd_printk_skb: 160 callbacks suppressed
[ 1400.735657][   T30] audit: type=1800 audit(1788598698.150:8326): pid=28733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6885" name="/" dev="fuse" ino=1 res=0 errno=0
[ 1400.767679][T28733] Invalid logical block size (14)
[ 1400.881225][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1401.301193][T28754] FAULT_INJECTION: forcing a failure.
[ 1401.301193][T28754] name failslab, interval 1, probability 0, space 0, times 0
[ 1401.315988][T28754] CPU: 1 UID: 0 PID: 28754 Comm: syz.5.6892 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1401.316026][T28754] Tainted: [L]=SOFTLOCKUP
[ 1401.316035][T28754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1401.316048][T28754] Call Trace:
[ 1401.316057][T28754]  <TASK>
[ 1401.316067][T28754]  dump_stack_lvl+0xe8/0x150
[ 1401.316105][T28754]  should_fail_ex+0x410/0x560
[ 1401.316143][T28754]  should_failslab+0xa8/0x100
[ 1401.316168][T28754]  ? __kvm_mmu_topup_memory_cache+0x1b2/0x600
[ 1401.316201][T28754]  kmem_cache_alloc_noprof+0xa1/0x600
[ 1401.316230][T28754]  ? __kvm_mmu_topup_memory_cache+0x1b2/0x600
[ 1401.316269][T28754]  ? kmem_cache_alloc_noprof+0x156/0x600
[ 1401.316299][T28754]  ? __kvm_mmu_topup_memory_cache+0x1b2/0x600
[ 1401.316337][T28754]  __kvm_mmu_topup_memory_cache+0x1b2/0x600
[ 1401.316380][T28754]  mmu_topup_memory_caches+0x21/0x170
[ 1401.316405][T28754]  kvm_mmu_load+0x9d/0x21e0
[ 1401.316431][T28754]  ? kvm_msr_allowed+0x9a/0x490
[ 1401.316452][T28754]  ? kvm_msr_allowed+0x9a/0x490
[ 1401.316474][T28754]  ? kvm_msr_allowed+0x9a/0x490
[ 1401.316492][T28754]  ? kvm_msr_allowed+0x3f4/0x490
[ 1401.316512][T28754]  ? kvm_msr_allowed+0x9a/0x490
[ 1401.316533][T28754]  ? kvm_apic_has_interrupt+0x740/0x770
[ 1401.316574][T28754]  vcpu_run+0x4f68/0x79b0
[ 1401.316640][T28754]  ? update_se+0x90/0x1020
[ 1401.316707][T28754]  ? __pfx_vcpu_run+0x10/0x10
[ 1401.316736][T28754]  ? lock_acquire+0x115/0x350
[ 1401.316775][T28754]  kvm_arch_vcpu_ioctl_run+0xe87/0x19c0
[ 1401.316810][T28754]  ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0
[ 1401.316844][T28754]  ? kvm_vcpu_ioctl+0xe8f/0xfd0
[ 1401.316872][T28754]  kvm_vcpu_ioctl+0xa61/0xfd0
[ 1401.316903][T28754]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1401.316923][T28754]  ? hook_file_ioctl+0x1f2/0x600
[ 1401.316965][T28754]  ? __fget_files+0x2a/0x420
[ 1401.316996][T28754]  ? __fget_files+0x2a/0x420
[ 1401.317022][T28754]  ? __fget_files+0x3a2/0x420
[ 1401.317046][T28754]  ? __fget_files+0x2a/0x420
[ 1401.317075][T28754]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1401.317103][T28754]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1401.317126][T28754]  __se_sys_ioctl+0xfc/0x170
[ 1401.317152][T28754]  do_syscall_64+0x166/0x520
[ 1401.317182][T28754]  ? trace_irq_disable+0x3b/0x140
[ 1401.317203][T28754]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1401.317224][T28754]  ? clear_bhb_loop+0x70/0xc0
[ 1401.317258][T28754]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1401.317279][T28754] RIP: 0033:0x7f413059e159
[ 1401.317301][T28754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1401.317321][T28754] RSP: 002b:00007f41313ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1401.317346][T28754] RAX: ffffffffffffffda RBX: 00007f4130825fa0 RCX: 00007f413059e159
[ 1401.317362][T28754] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000084
[ 1401.317375][T28754] RBP: 00007f41313ed090 R08: 0000000000000000 R09: 0000000000000000
[ 1401.317389][T28754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1401.317402][T28754] R13: 00007f4130826038 R14: 00007f4130825fa0 R15: 00007f413094fa48
[ 1401.317441][T28754]  </TASK>
[ 1401.433335][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1401.681485][T28758] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1401.699767][T28761] FAULT_INJECTION: forcing a failure.
[ 1401.699767][T28761] name failslab, interval 1, probability 0, space 0, times 0
[ 1401.712923][T28761] CPU: 0 UID: 0 PID: 28761 Comm: syz.5.6894 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1401.712960][T28761] Tainted: [L]=SOFTLOCKUP
[ 1401.712969][T28761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1401.712982][T28761] Call Trace:
[ 1401.712996][T28761]  <TASK>
[ 1401.713007][T28761]  dump_stack_lvl+0xe8/0x150
[ 1401.713044][T28761]  should_fail_ex+0x410/0x560
[ 1401.713083][T28761]  should_failslab+0xa8/0x100
[ 1401.713112][T28761]  __kmalloc_noprof+0xfe/0x720
[ 1401.713145][T28761]  ? tomoyo_encode+0x2ad/0x570
[ 1401.713169][T28761]  ? tomoyo_encode+0x2ad/0x570
[ 1401.713201][T28761]  tomoyo_encode+0x2ad/0x570
[ 1401.713232][T28761]  tomoyo_realpath_from_path+0x5fa/0x640
[ 1401.713268][T28761]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1401.713301][T28761]  tomoyo_path_number_perm+0x246/0x5f0
[ 1401.713336][T28761]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1401.713371][T28761]  ? sb_end_write+0xe8/0x190
[ 1401.713396][T28761]  ? vfs_write+0x9ce/0xba0
[ 1401.713432][T28761]  ? hook_file_ioctl+0x1f2/0x600
[ 1401.713482][T28761]  ? ksys_write+0x1fc/0x270
[ 1401.713520][T28761]  security_file_ioctl+0xc3/0x2a0
[ 1401.713554][T28761]  __se_sys_ioctl+0x47/0x170
[ 1401.713579][T28761]  do_syscall_64+0x166/0x520
[ 1401.713611][T28761]  ? trace_irq_disable+0x3b/0x140
[ 1401.713633][T28761]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1401.713655][T28761]  ? clear_bhb_loop+0x70/0xc0
[ 1401.713682][T28761]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1401.713704][T28761] RIP: 0033:0x7f413059e159
[ 1401.713725][T28761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1401.713744][T28761] RSP: 002b:00007f41313ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1401.713769][T28761] RAX: ffffffffffffffda RBX: 00007f4130825fa0 RCX: 00007f413059e159
[ 1401.713785][T28761] RDX: 0000000000000000 RSI: 0000000000004142 RDI: 0000000000000003
[ 1401.713800][T28761] RBP: 00007f41313ed090 R08: 0000000000000000 R09: 0000000000000000
[ 1401.713821][T28761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1401.713834][T28761] R13: 00007f4130826038 R14: 00007f4130825fa0 R15: 00007f413094fa48
[ 1401.713868][T28761]  </TASK>
[ 1401.775831][T28761] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1401.916926][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1402.251254][T16333] usb 5-1: new full-speed USB device number 122 using dummy_hcd
[ 1402.351272][ T5623] usb 9-1: new high-speed USB device number 25 using dummy_hcd
[ 1402.391762][T16333] usb 5-1: device descriptor read/64, error -71
[ 1402.502177][ T5623] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1402.506655][ T5623] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1402.506686][ T5623] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1402.506707][ T5623] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1402.506746][ T5623] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1402.522506][ T5623] usb 9-1: config 0 descriptor??
[ 1402.631971][T16333] usb 5-1: new full-speed USB device number 123 using dummy_hcd
[ 1402.762869][T16333] usb 5-1: device descriptor read/64, error -71
[ 1402.873981][T16333] usb usb5-port1: attempt power cycle
[ 1402.951222][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1403.001296][ T5623] hid_parser_main: 470 callbacks suppressed
[ 1403.001361][ T5623] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 1403.001405][ T5623] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 1403.001430][ T5623] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 1403.001452][ T5623] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 1403.001475][ T5623] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 1403.001499][ T5623] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 1403.001522][ T5623] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 1403.001546][ T5623] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 1403.001569][ T5623] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 1403.001593][ T5623] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0
[ 1403.040031][ T5623] plantronics 0003:047F:FFFF.005E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[ 1403.232304][T16333] usb 5-1: new full-speed USB device number 124 using dummy_hcd
[ 1403.252505][T16333] usb 5-1: device descriptor read/8, error -71
[ 1403.491297][T16333] usb 5-1: new full-speed USB device number 125 using dummy_hcd
[ 1403.512167][T16333] usb 5-1: device descriptor read/8, error -71
[ 1403.622536][T16333] usb usb5-port1: unable to enumerate USB device
[ 1403.831537][ T9674] usb 6-1: new low-speed USB device number 115 using dummy_hcd
[ 1404.001254][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1404.002347][ T9674] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1404.003500][ T9674] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1404.003522][ T9674] usb 6-1: config 0 has no interface number 0
[ 1404.003561][ T9674] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1404.003614][ T9674] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1404.003652][ T9674] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1404.009775][ T9674] usb 6-1: config 0 descriptor??
[ 1404.010707][T28794] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1404.042104][ T9674] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1
[ 1404.273423][ T9674] usb 6-1: USB disconnect, device number 115
[ 1404.755902][T28811] syz_tun: entered promiscuous mode
[ 1404.763885][T28811] vlan0: entered promiscuous mode
[ 1404.763920][T28811] veth0_to_bridge: entered promiscuous mode
[ 1405.031230][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1405.138951][ T9674] usb 9-1: USB disconnect, device number 25
[ 1405.321466][ T9681] usb 6-1: new high-speed USB device number 116 using dummy_hcd
[ 1405.471272][ T9681] usb 6-1: Using ep0 maxpacket: 32
[ 1405.477475][ T9681] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1405.490890][ T9681] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1405.490975][ T9681] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1405.491034][ T9681] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1405.496426][ T9681] usb 6-1: config 0 descriptor??
[ 1405.526406][ T9681] hub 6-1:0.0: USB hub found
[ 1405.661780][T16333] usb 5-1: new high-speed USB device number 126 using dummy_hcd
[ 1405.719460][ T9681] hub 6-1:0.0: 1 port detected
[ 1405.768119][T28834] fuse: Bad value for 'user_id'
[ 1405.768149][T28834] fuse: Bad value for 'user_id'
[ 1405.811893][T16333] usb 5-1: Using ep0 maxpacket: 16
[ 1405.812627][T16333] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1405.813633][T16333] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1405.813683][T16333] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1405.816287][T16333] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1405.816313][T16333] usb 5-1: Product: syz
[ 1405.816327][T16333] usb 5-1: Manufacturer: syz
[ 1405.816340][T16333] usb 5-1: SerialNumber: syz
[ 1405.827819][T16333] usb 5-1: config 0 descriptor??
[ 1405.835637][T16333] appledisplay 5-1:0.0: Could not find int-in endpoint
[ 1405.838335][T16333] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1405.878556][ T5700] usb 9-1: new high-speed USB device number 26 using dummy_hcd
[ 1405.920369][T28818] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1405.920400][T28818] IPv6: NLM_F_CREATE should be set when creating new route
[ 1405.922591][ T9681] hub 6-1:0.0: config failed, can't get hub status (err -71)
[ 1405.932149][ T9681] usbhid 6-1:0.0: can't add hid device: -71
[ 1405.932282][ T9681] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1405.961924][ T9681] usb 6-1: USB disconnect, device number 116
[ 1406.034818][T28828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1406.036566][T28828] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1406.039956][ T9674] usb 5-1: USB disconnect, device number 126
[ 1406.081199][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1406.083324][ T5700] usb 9-1: Using ep0 maxpacket: 32
[ 1406.085545][ T5700] usb 9-1: New USB device found, idVendor=0951, idProduct=0008, bcdDevice=4f.64
[ 1406.086702][ T5700] usb 9-1: config 45 has an invalid interface number: 106 but max is 3
[ 1406.086726][ T5700] usb 9-1: config 45 has an invalid descriptor of length 0, skipping remainder of the config
[ 1406.086770][ T5700] usb 9-1: config 45 has 1 interface, different from the descriptor's value: 4
[ 1406.086791][ T5700] usb 9-1: config 45 has no interface number 0
[ 1406.086830][ T5700] usb 9-1: config 45 interface 106 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 16
[ 1406.086856][ T5700] usb 9-1: config 45 interface 106 has no altsetting 0
[ 1406.089475][ T5700] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1406.089497][ T5700] usb 9-1: Product: ࡡ
[ 1406.089511][ T5700] usb 9-1: Manufacturer: ㅹ㷑좇
[ 1406.089552][ T5700] usb 9-1: SerialNumber: ࠦ콐觞☨솦좪䏓ぉ鮊檠㼴檛 遉
[ 1406.304162][T28832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1406.312679][T28832] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1406.321940][T28832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1406.327022][T28832] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1406.568434][T28839] openvswitch: netlink: IP tunnel dst address not specified
[ 1406.672076][T28841] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6920'.
[ 1406.675007][T28843] FAULT_INJECTION: forcing a failure.
[ 1406.675007][T28843] name failslab, interval 1, probability 0, space 0, times 0
[ 1406.675082][T28843] CPU: 0 UID: 0 PID: 28843 Comm: syz.5.6921 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1406.675109][T28843] Tainted: [L]=SOFTLOCKUP
[ 1406.675117][T28843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1406.675129][T28843] Call Trace:
[ 1406.675137][T28843]  <TASK>
[ 1406.675146][T28843]  dump_stack_lvl+0xe8/0x150
[ 1406.675178][T28843]  should_fail_ex+0x410/0x560
[ 1406.675214][T28843]  ? __alloc_skb+0x1db/0x7a0
[ 1406.675238][T28843]  should_failslab+0xa8/0x100
[ 1406.675263][T28843]  ? __alloc_skb+0x1db/0x7a0
[ 1406.675281][T28843]  kmem_cache_alloc_node_noprof+0xa1/0x610
[ 1406.675309][T28843]  ? __alloc_skb+0x18d/0x7a0
[ 1406.675329][T28843]  ? __alloc_skb+0x1db/0x7a0
[ 1406.675355][T28843]  __alloc_skb+0x1db/0x7a0
[ 1406.675379][T28843]  alloc_skb_with_frags+0xc6/0x760
[ 1406.675401][T28843]  ? __lock_acquire+0x6df/0x2e50
[ 1406.675425][T28843]  ? __lock_acquire+0x6df/0x2e50
[ 1406.675448][T28843]  sock_alloc_send_pskb+0x878/0x990
[ 1406.675478][T28843]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 1406.675509][T28843]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[ 1406.675538][T28843]  ? dev_get_by_index+0x22/0x2d0
[ 1406.675563][T28843]  ? dev_get_by_index+0x22/0x2d0
[ 1406.675601][T28843]  packet_sendmsg+0x31bb/0x4f80
[ 1406.675643][T28843]  ? __pfx_aa_label_sk_perm+0x10/0x10
[ 1406.675670][T28843]  ? __lock_acquire+0x6df/0x2e50
[ 1406.675700][T28843]  ? __lock_acquire+0x6df/0x2e50
[ 1406.675725][T28843]  ? kstrtouint+0x6e/0xe0
[ 1406.675757][T28843]  ? __pfx_packet_sendmsg+0x10/0x10
[ 1406.675782][T28843]  ? aa_sk_perm+0x713/0x900
[ 1406.675807][T28843]  ? lockdep_unlock+0x60/0xd0
[ 1406.675834][T28843]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1406.675856][T28843]  ? aa_sock_msg_perm+0x144/0x210
[ 1406.675883][T28843]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1406.675912][T28843]  ? __pfx_packet_sendmsg+0x10/0x10
[ 1406.675938][T28843]  sock_sendmsg_nosec+0x13a/0x180
[ 1406.675967][T28843]  __sys_sendto+0x408/0x5a0
[ 1406.675988][T28843]  ? ksys_write+0x1e6/0x270
[ 1406.676017][T28843]  ? __pfx___sys_sendto+0x10/0x10
[ 1406.676035][T28843]  ? __mutex_unlock_slowpath+0x731/0x900
[ 1406.676089][T28843]  ? __pfx_ksys_write+0x10/0x10
[ 1406.676120][T28843]  __x64_sys_sendto+0xde/0x100
[ 1406.676144][T28843]  do_syscall_64+0x166/0x520
[ 1406.676172][T28843]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1406.676192][T28843]  ? clear_bhb_loop+0x70/0xc0
[ 1406.676216][T28843]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1406.676236][T28843] RIP: 0033:0x7f413059e159
[ 1406.676256][T28843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1406.676273][T28843] RSP: 002b:00007f41313ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1406.676296][T28843] RAX: ffffffffffffffda RBX: 00007f4130825fa0 RCX: 00007f413059e159
[ 1406.676311][T28843] RDX: 000000000000000e RSI: 0000200000000840 RDI: 0000000000000004
[ 1406.676324][T28843] RBP: 00007f41313ed090 R08: 00002000000007c0 R09: 0000000000000014
[ 1406.676338][T28843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1406.676351][T28843] R13: 00007f4130826038 R14: 00007f4130825fa0 R15: 00007f413094fa48
[ 1406.676382][T28843]  </TASK>
[ 1406.676849][T28841] netlink: 332 bytes leftover after parsing attributes in process `syz.4.6920'.
[ 1406.995630][ T5700] kaweth 9-1:45.106: couldn't find required endpoints
[ 1407.039253][ T5700] usb 9-1: USB disconnect, device number 26
[ 1407.121236][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1407.473674][T28862] FAULT_INJECTION: forcing a failure.
[ 1407.473674][T28862] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1407.473744][T28862] CPU: 1 UID: 0 PID: 28862 Comm: syz.8.6928 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1407.473773][T28862] Tainted: [L]=SOFTLOCKUP
[ 1407.473781][T28862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1407.473794][T28862] Call Trace:
[ 1407.473804][T28862]  <TASK>
[ 1407.473813][T28862]  dump_stack_lvl+0xe8/0x150
[ 1407.473849][T28862]  should_fail_ex+0x410/0x560
[ 1407.473888][T28862]  _copy_from_iter+0x1d3/0x1660
[ 1407.473927][T28862]  ? _copy_from_iter+0x21b/0x1660
[ 1407.473966][T28862]  ? __pfx__copy_from_iter+0x10/0x10
[ 1407.474004][T28862]  ? __pfx__copy_from_iter+0x10/0x10
[ 1407.474044][T28862]  copy_page_from_iter+0x219/0x2d0
[ 1407.474082][T28862]  skb_copy_datagram_from_iter+0x2f4/0x720
[ 1407.474121][T28862]  tun_get_user+0xc7f/0x44d0
[ 1407.474178][T28862]  ? aa_file_perm+0x4ed/0x15f0
[ 1407.474203][T28862]  ? __pfx_tun_get_user+0x10/0x10
[ 1407.474236][T28862]  ? __lock_acquire+0x6df/0x2e50
[ 1407.474262][T28862]  ? kstrtoull+0x137/0x1d0
[ 1407.474300][T28862]  ? ref_tracker_alloc+0x341/0x4b0
[ 1407.474321][T28862]  ? lock_acquire+0x115/0x350
[ 1407.474343][T28862]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 1407.474369][T28862]  ? lock_acquire+0x115/0x350
[ 1407.474390][T28862]  ? tun_get+0x1c/0x2f0
[ 1407.474427][T28862]  ? tun_get+0x1c/0x2f0
[ 1407.474457][T28862]  ? tun_get+0x1c/0x2f0
[ 1407.474491][T28862]  tun_chr_write_iter+0x113/0x200
[ 1407.474525][T28862]  vfs_write+0x612/0xba0
[ 1407.474565][T28862]  ? __pfx_vfs_write+0x10/0x10
[ 1407.474605][T28862]  ? __fget_files+0x2a/0x420
[ 1407.474641][T28862]  ksys_write+0x150/0x270
[ 1407.474675][T28862]  ? __pfx_ksys_write+0x10/0x10
[ 1407.474725][T28862]  do_syscall_64+0x166/0x520
[ 1407.474755][T28862]  ? trace_irq_disable+0x3b/0x140
[ 1407.474776][T28862]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1407.474799][T28862]  ? clear_bhb_loop+0x70/0xc0
[ 1407.474825][T28862]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1407.474847][T28862] RIP: 0033:0x7f735335e98e
[ 1407.474867][T28862] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1407.474886][T28862] RSP: 002b:00007f7354264fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1407.474909][T28862] RAX: ffffffffffffffda RBX: 00007f73542656c0 RCX: 00007f735335e98e
[ 1407.474924][T28862] RDX: 000000000000fdef RSI: 00002000000006c0 RDI: 00000000000000c8
[ 1407.474938][T28862] RBP: 00007f7354265090 R08: 0000000000000000 R09: 0000000000000000
[ 1407.474953][T28862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1407.474965][T28862] R13: 00007f7353626038 R14: 00007f7353625fa0 R15: 00007f735374fa48
[ 1407.474998][T28862]  </TASK>
[ 1407.808050][T28872] nvme_fabrics: unknown parameter or missing value '#!  	����1���R��?��&n��%������~���[6=
p͊yz\U�j@5N�f�W�rs�)�q��' in ctrl creation request
[ 1407.834468][T17540] usb 5-1: new high-speed USB device number 127 using dummy_hcd
[ 1407.981315][T17540] usb 5-1: Using ep0 maxpacket: 32
[ 1407.982801][T17540] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1407.984512][T17540] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[ 1407.984534][T17540] usb 5-1: config 0 has no interface number 0
[ 1407.987316][T17540] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1407.987337][T17540] usb 5-1: Product: syz
[ 1407.987351][T17540] usb 5-1: Manufacturer: syz
[ 1407.987391][T17540] usb 5-1: SerialNumber: syz
[ 1407.990960][T17540] usb 5-1: config 0 descriptor??
[ 1408.151332][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1408.211419][ T5700] usb 9-1: new high-speed USB device number 27 using dummy_hcd
[ 1408.391182][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[ 1408.392955][ T5700] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 1408.421260][ T5700] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11
[ 1408.421328][ T5700] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 59391, setting to 1024
[ 1408.421428][ T5700] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1408.441060][ T5700] usb 9-1: config 0 descriptor??
[ 1408.459752][T28880] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22
[ 1408.731697][T17540] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[ 1408.731788][T17540] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1408.741591][T17540] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[ 1408.741919][T17540] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[ 1408.793595][T17540] usb 5-1: USB disconnect, device number 127
[ 1409.133679][ T5700] ath6kl: Failed to submit usb control message: -71
[ 1409.133754][ T5700] ath6kl: unable to send the bmi data to the device: -71
[ 1409.133781][ T5700] ath6kl: Unable to send get target info: -71
[ 1409.147529][ T5700] ath6kl: Failed to init ath6kl core: -71
[ 1409.170786][ T5700] ath6kl_usb 9-1:0.0: probe with driver ath6kl_usb failed with error -71
[ 1409.183121][ T5700] usb 9-1: USB disconnect, device number 27
[ 1409.201205][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1409.927394][T28904] ip6gretap0: entered promiscuous mode
[ 1410.231221][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1410.264473][T28910] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6942'.
[ 1410.264553][T28910] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6942'.
[ 1410.294679][T28909] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1410.295431][T28909] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1410.571485][   T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 1410.701738][T25381] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1410.717887][T25380] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1410.718018][T25380] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1410.718051][T25380] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1410.736628][T28915] syzkaller0: entered promiscuous mode
[ 1410.736651][T28915] syzkaller0: entered allmulticast mode
[ 1410.750139][   T25] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1410.777122][   T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1410.777172][   T25] usb 5-1: Product: syz
[ 1410.777205][   T25] usb 5-1: Manufacturer: syz
[ 1410.777225][   T25] usb 5-1: SerialNumber: syz
[ 1410.849589][   T44] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1411.209132][T28928] FAULT_INJECTION: forcing a failure.
[ 1411.209132][T28928] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1411.209196][T28928] CPU: 0 UID: 0 PID: 28928 Comm: syz.5.6948 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1411.209225][T28928] Tainted: [L]=SOFTLOCKUP
[ 1411.209237][T28928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1411.209249][T28928] Call Trace:
[ 1411.209258][T28928]  <TASK>
[ 1411.209265][T28928]  dump_stack_lvl+0xe8/0x150
[ 1411.209297][T28928]  should_fail_ex+0x410/0x560
[ 1411.209330][T28928]  _copy_from_iter+0x1d3/0x1660
[ 1411.209359][T28928]  ? __alloc_skb+0x27a/0x7a0
[ 1411.209380][T28928]  ? __alloc_skb+0x27a/0x7a0
[ 1411.209400][T28928]  ? __alloc_skb+0x27a/0x7a0
[ 1411.209418][T28928]  ? __pfx__copy_from_iter+0x10/0x10
[ 1411.209444][T28928]  ? kmem_cache_alloc_node_noprof+0x1f9/0x610
[ 1411.209470][T28928]  ? __alloc_skb+0x27a/0x7a0
[ 1411.209502][T28928]  ? __alloc_skb+0x27a/0x7a0
[ 1411.209526][T28928]  ? netlink_sendmsg+0x650/0xb40
[ 1411.209552][T28928]  ? skb_put+0x112/0x210
[ 1411.209574][T28928]  netlink_sendmsg+0x6c0/0xb40
[ 1411.209605][T28928]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1411.209636][T28928]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1411.209666][T28928]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1411.209688][T28928]  sock_sendmsg_nosec+0x13a/0x180
[ 1411.209716][T28928]  ____sys_sendmsg+0x54e/0x850
[ 1411.209743][T28928]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1411.209772][T28928]  ? import_iovec+0x73/0xa0
[ 1411.209795][T28928]  ___sys_sendmsg+0x2a5/0x360
[ 1411.209815][T28928]  ? __lock_acquire+0x6df/0x2e50
[ 1411.209838][T28928]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1411.209890][T28928]  ? __fget_files+0x2a/0x420
[ 1411.209913][T28928]  ? __fget_files+0x3a2/0x420
[ 1411.209946][T28928]  __x64_sys_sendmsg+0x1b1/0x290
[ 1411.209969][T28928]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1411.210009][T28928]  do_syscall_64+0x166/0x520
[ 1411.210035][T28928]  ? trace_irq_disable+0x3b/0x140
[ 1411.210054][T28928]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1411.210091][T28928]  ? clear_bhb_loop+0x70/0xc0
[ 1411.210113][T28928]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1411.210132][T28928] RIP: 0033:0x7f413059e159
[ 1411.210151][T28928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1411.210167][T28928] RSP: 002b:00007f41313ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1411.210189][T28928] RAX: ffffffffffffffda RBX: 00007f4130825fa0 RCX: 00007f413059e159
[ 1411.210204][T28928] RDX: 0000000000040840 RSI: 00002000000002c0 RDI: 0000000000000003
[ 1411.210217][T28928] RBP: 00007f41313ed090 R08: 0000000000000000 R09: 0000000000000000
[ 1411.210229][T28928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1411.210241][T28928] R13: 00007f4130826038 R14: 00007f4130825fa0 R15: 00007f413094fa48
[ 1411.210270][T28928]  </TASK>
[ 1411.281332][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1411.706875][   T25] usb 5-1: USB disconnect, device number 2
[ 1411.737608][T28942] fuse: Bad value for 'fd'
[ 1411.864808][T28947] FAULT_INJECTION: forcing a failure.
[ 1411.864808][T28947] name failslab, interval 1, probability 0, space 0, times 0
[ 1411.864864][T28947] CPU: 1 UID: 0 PID: 28947 Comm: syz.8.6957 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1411.864892][T28947] Tainted: [L]=SOFTLOCKUP
[ 1411.864900][T28947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1411.864913][T28947] Call Trace:
[ 1411.864921][T28947]  <TASK>
[ 1411.864930][T28947]  dump_stack_lvl+0xe8/0x150
[ 1411.864965][T28947]  should_fail_ex+0x410/0x560
[ 1411.865000][T28947]  should_failslab+0xa8/0x100
[ 1411.865024][T28947]  ? prepare_creds+0x30/0x820
[ 1411.865047][T28947]  kmem_cache_alloc_noprof+0xa1/0x600
[ 1411.865076][T28947]  ? alloc_task_exec_state+0x27/0x2e0
[ 1411.865097][T28947]  ? prepare_creds+0x30/0x820
[ 1411.865118][T28947]  ? kmem_cache_alloc_noprof+0x156/0x600
[ 1411.865149][T28947]  prepare_creds+0x30/0x820
[ 1411.865175][T28947]  copy_creds+0x109/0x9f0
[ 1411.865202][T28947]  copy_process+0xd1f/0x43e0
[ 1411.865227][T28947]  ? _parse_integer_limit+0x18f/0x1e0
[ 1411.865267][T28947]  ? kstrtouint+0x6e/0xe0
[ 1411.865296][T28947]  ? lock_acquire+0x115/0x350
[ 1411.865316][T28947]  ? get_pid_task+0x20/0x1f0
[ 1411.865340][T28947]  ? __pfx_copy_process+0x10/0x10
[ 1411.865367][T28947]  ? get_pid_task+0x20/0x1f0
[ 1411.865384][T28947]  ? get_pid_task+0x20/0x1f0
[ 1411.865409][T28947]  kernel_clone+0x2d7/0x940
[ 1411.865443][T28947]  ? __pfx_kernel_clone+0x10/0x10
[ 1411.865496][T28947]  __x64_sys_clone+0x1b6/0x230
[ 1411.865527][T28947]  ? __pfx___x64_sys_clone+0x10/0x10
[ 1411.865570][T28947]  ? __pfx_ksys_write+0x10/0x10
[ 1411.865609][T28947]  do_syscall_64+0x166/0x520
[ 1411.865639][T28947]  ? trace_irq_disable+0x3b/0x140
[ 1411.865659][T28947]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1411.865679][T28947]  ? clear_bhb_loop+0x70/0xc0
[ 1411.865708][T28947]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1411.865728][T28947] RIP: 0033:0x7f735339e159
[ 1411.865747][T28947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1411.865765][T28947] RSP: 002b:00007f7354264fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[ 1411.865788][T28947] RAX: ffffffffffffffda RBX: 00007f7353625fa0 RCX: 00007f735339e159
[ 1411.865803][T28947] RDX: 0000200000019100 RSI: 0000000000000000 RDI: 0000000004001000
[ 1411.865817][T28947] RBP: 00007f7354265090 R08: 0000200000019180 R09: 0000200000019180
[ 1411.865831][T28947] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[ 1411.865845][T28947] R13: 00007f7353626038 R14: 00007f7353625fa0 R15: 00007f735374fa48
[ 1411.865877][T28947]  </TASK>
[ 1411.949964][   T44] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 1411.950170][   T44] ath9k_htc: Failed to initialize the device
[ 1411.986333][   T25] usb 5-1: ath9k_htc: USB layer deinitialized
[ 1412.321461][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1412.480547][T28950] bond0: (slave bond_slave_1): Releasing backup interface
[ 1412.881290][   T25] usb 6-1: new full-speed USB device number 117 using dummy_hcd
[ 1413.033533][   T25] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1413.045133][   T25] usb 6-1: not running at top speed; connect to a high speed hub
[ 1413.046718][   T25] usb 6-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40
[ 1413.065879][   T25] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1413.065925][   T25] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1413.093862][   T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1413.093911][   T25] usb 6-1: Product: syz
[ 1413.093943][   T25] usb 6-1: Manufacturer: syz
[ 1413.093964][   T25] usb 6-1: SerialNumber: syz
[ 1413.223258][ T9681] usb 9-1: new full-speed USB device number 28 using dummy_hcd
[ 1413.351344][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1413.383284][   T25] usb 6-1: Audio class v2/v3 interfaces need an interface association
[ 1413.388924][ T9681] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1413.389615][ T9681] usb 9-1: not running at top speed; connect to a high speed hub
[ 1413.389645][ T9681] usb 9-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40
[ 1413.390870][ T9681] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1413.390892][ T9681] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1413.390980][ T9681] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4
[ 1413.394906][ T9681] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1413.394938][ T9681] usb 9-1: Product: syz
[ 1413.394976][ T9681] usb 9-1: Manufacturer: syz
[ 1413.394990][ T9681] usb 9-1: SerialNumber: syz
[ 1413.461420][ T5700] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 1413.503143][T28982] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1413.560616][   T25] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1413.579437][   T25] usb 6-1: selecting invalid altsetting 1
[ 1413.579475][   T25] snd-usb-us122l 6-1:1.1: usb_set_interface error
[ 1413.593515][   T25] snd-usb-us122l 6-1:1.1: probe with driver snd-usb-us122l failed with error -22
[ 1413.608229][   T25] usb 6-1: USB disconnect, device number 117
[ 1413.622630][ T5700] usb 5-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01
[ 1413.634165][ T5700] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 1413.634229][ T5700] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1413.634254][ T5700] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1413.634292][ T5700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1413.656501][T28981] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[ 1413.775540][T23007] udevd[23007]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1414.227291][ T9681] usb 9-1: 1:1 : no or invalid class specific endpoint descriptor
[ 1414.227348][ T9681] usb 9-1: 1:1 : unknown format tag 0x3 is detected.  processed as MPEG.
[ 1414.227402][ T9681] usb 9-1: found format II with max.bitrate = 5, frame size=14
[ 1414.227421][ T9681] usb 9-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[ 1414.232428][ T9681] usb 9-1: 0:2 : does not exist
[ 1414.307948][   T25] usb 5-1: USB disconnect, device number 3
[ 1414.315693][T13870] Bluetooth: hci3: Reading Intel version command failed (-71)
[ 1414.401341][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1414.498332][ T9681] usb 9-1: USB disconnect, device number 28
[ 1414.646964][T23007] udevd[23007]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1415.198792][T29012] syz_tun: entered allmulticast mode
[ 1415.441350][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1415.758319][T29017] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1415.852510][T29002] syz_tun: left allmulticast mode
[ 1416.481342][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1417.520027][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1417.694144][T29047] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[ 1417.694144][T29047] The task syz.4.6987 (29047) triggered the difference, watch for misbehavior.
[ 1417.791786][T29050] IPVS: length: 248 != 24
[ 1417.800824][T29051] FAULT_INJECTION: forcing a failure.
[ 1417.800824][T29051] name failslab, interval 1, probability 0, space 0, times 0
[ 1417.800891][T29051] CPU: 0 UID: 0 PID: 29051 Comm: syz.8.6989 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1417.800923][T29051] Tainted: [L]=SOFTLOCKUP
[ 1417.800930][T29051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1417.800950][T29051] Call Trace:
[ 1417.800958][T29051]  <TASK>
[ 1417.800967][T29051]  dump_stack_lvl+0xe8/0x150
[ 1417.801000][T29051]  should_fail_ex+0x410/0x560
[ 1417.801032][T29051]  ? __alloc_skb+0x1db/0x7a0
[ 1417.801051][T29051]  should_failslab+0xa8/0x100
[ 1417.801075][T29051]  ? __alloc_skb+0x1db/0x7a0
[ 1417.801092][T29051]  kmem_cache_alloc_node_noprof+0xa1/0x610
[ 1417.801119][T29051]  ? __alloc_skb+0x18d/0x7a0
[ 1417.801137][T29051]  ? __alloc_skb+0x1db/0x7a0
[ 1417.801161][T29051]  __alloc_skb+0x1db/0x7a0
[ 1417.801183][T29051]  netlink_sendmsg+0x5d4/0xb40
[ 1417.801216][T29051]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1417.801247][T29051]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1417.801276][T29051]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1417.801298][T29051]  sock_sendmsg_nosec+0x13a/0x180
[ 1417.801325][T29051]  ____sys_sendmsg+0x54e/0x850
[ 1417.801351][T29051]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1417.801380][T29051]  ? import_iovec+0x73/0xa0
[ 1417.801404][T29051]  ___sys_sendmsg+0x2a5/0x360
[ 1417.801423][T29051]  ? __lock_acquire+0x6df/0x2e50
[ 1417.801446][T29051]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1417.801498][T29051]  ? __fget_files+0x2a/0x420
[ 1417.801520][T29051]  ? __fget_files+0x3a2/0x420
[ 1417.801553][T29051]  __x64_sys_sendmsg+0x1b1/0x290
[ 1417.801576][T29051]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1417.801617][T29051]  do_syscall_64+0x166/0x520
[ 1417.801643][T29051]  ? trace_irq_disable+0x3b/0x140
[ 1417.801660][T29051]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1417.801679][T29051]  ? clear_bhb_loop+0x70/0xc0
[ 1417.801702][T29051]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1417.801721][T29051] RIP: 0033:0x7f735339e159
[ 1417.801739][T29051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1417.801755][T29051] RSP: 002b:00007f7354265028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1417.801776][T29051] RAX: ffffffffffffffda RBX: 00007f7353625fa0 RCX: 00007f735339e159
[ 1417.801790][T29051] RDX: 00000000040800d0 RSI: 0000200000000180 RDI: 0000000000000003
[ 1417.801803][T29051] RBP: 00007f7354265090 R08: 0000000000000000 R09: 0000000000000000
[ 1417.801815][T29051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1417.801827][T29051] R13: 00007f7353626038 R14: 00007f7353625fa0 R15: 00007f735374fa48
[ 1417.801856][T29051]  </TASK>
[ 1417.982952][ T5700] usb 5-1: new low-speed USB device number 4 using dummy_hcd
[ 1418.144145][ T5700] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1418.145735][ T5700] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1418.145786][ T5700] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1418.145827][ T5700] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1418.145866][ T5700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1418.167941][ T5700] hub 5-1:1.0: bad descriptor, ignoring hub
[ 1418.167969][ T5700] hub 5-1:1.0: probe with driver hub failed with error -5
[ 1418.175717][ T5700] cdc_wdm 5-1:1.0: skipping garbage
[ 1418.175736][ T5700] cdc_wdm 5-1:1.0: skipping garbage
[ 1418.175757][ T5700] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1418.268932][T29059] binder: BINDER_SET_CONTEXT_MGR already set
[ 1418.269019][T29059] binder: 29054:29059 ioctl 4018620d 200000000040 returned -16
[ 1418.551260][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1419.591388][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1420.131252][ T5623] usb 6-1: new high-speed USB device number 118 using dummy_hcd
[ 1420.281822][ T5623] usb 6-1: Using ep0 maxpacket: 8
[ 1420.284065][ T5623] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4
[ 1420.286693][ T5623] usb 6-1: config index 0 descriptor too short (expected 6427, got 27)
[ 1420.286719][ T5623] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1420.286737][ T5623] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1420.294478][ T5623] usb 6-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0
[ 1420.294504][ T5623] usb 6-1: Product: syz
[ 1420.294518][ T5623] usb 6-1: Manufacturer: syz
[ 1420.299195][ T5623] usb 6-1: config 0 descriptor??
[ 1420.355341][T29094] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7004'.
[ 1420.631332][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1420.661671][ T5700] usb 5-1: USB disconnect, device number 4
[ 1421.622286][ T5623] usb 9-1: new high-speed USB device number 29 using dummy_hcd
[ 1421.671207][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1421.753402][ T5623] usb 9-1: device descriptor read/64, error -71
[ 1421.991391][ T5623] usb 9-1: new high-speed USB device number 30 using dummy_hcd
[ 1422.121308][ T5623] usb 9-1: device descriptor read/64, error -71
[ 1422.232429][ T5623] usb usb9-port1: attempt power cycle
[ 1422.572495][ T5623] usb 9-1: new high-speed USB device number 31 using dummy_hcd
[ 1422.601923][ T5623] usb 9-1: device descriptor read/8, error -71
[ 1422.711327][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1422.776533][   T25] usb 6-1: USB disconnect, device number 118
[ 1422.853728][ T5623] usb 9-1: new high-speed USB device number 32 using dummy_hcd
[ 1422.875779][ T5623] usb 9-1: device descriptor read/8, error -71
[ 1422.983864][ T5623] usb usb9-port1: unable to enumerate USB device
[ 1423.112826][T29133] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1423.197974][ T1259] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.198351][ T1259] ieee802154 phy1 wpan1: encryption failed: -22
[ 1423.236473][ T2349] pvrusb2: request_firmware fatal error with code=-110
[ 1423.245247][ T2349] pvrusb2: Failure uploading firmware1
[ 1423.250849][ T2349] pvrusb2: Device initialization was not successful.
[ 1423.253934][ T2349] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1423.253948][ T2349] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1423.279581][  T943] pvrusb2: Device being rendered inoperable
[ 1423.489427][T29144] syzkaller0: entered promiscuous mode
[ 1423.489478][T29144] syzkaller0: entered allmulticast mode
[ 1423.612410][  T943] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[ 1423.761374][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1423.768674][ T9681] usb 6-1: new high-speed USB device number 119 using dummy_hcd
[ 1423.777386][  T943] usb 3-1: device descriptor read/64, error -71
[ 1423.818399][   T30] audit: type=1800 audit(1788598721.230:8327): pid=29148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.7021" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0
[ 1423.952678][ T9681] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1423.955367][ T9681] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1423.955392][ T9681] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1423.955409][ T9681] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1423.955429][ T9681] usb 6-1: config 1 has no interface number 0
[ 1423.955484][ T9681] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30
[ 1423.955518][ T9681] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32
[ 1423.959722][ T9681] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1423.959747][ T9681] usb 6-1: Product: syz
[ 1423.959761][ T9681] usb 6-1: Manufacturer: syz
[ 1423.959775][ T9681] usb 6-1: SerialNumber: syz
[ 1424.022114][  T943] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[ 1424.114690][T29159] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[ 1424.151417][  T943] usb 3-1: device descriptor read/64, error -71
[ 1424.262029][  T943] usb usb3-port1: attempt power cycle
[ 1424.381310][ T5700] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[ 1424.477160][T17540] usb 6-1: USB disconnect, device number 119
[ 1424.545019][ T5700] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1424.553656][ T5700] usb 5-1: not running at top speed; connect to a high speed hub
[ 1424.553696][ T5700] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= e.3d
[ 1424.570974][ T5700] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1424.577420][ T5700] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1424.577447][ T5700] usb 5-1: Product: syz
[ 1424.577461][ T5700] usb 5-1: Manufacturer: syz
[ 1424.577475][ T5700] usb 5-1: SerialNumber: syz
[ 1424.633734][  T943] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[ 1424.652511][  T943] usb 3-1: device descriptor read/8, error -71
[ 1424.801193][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1424.801478][T17540] usb 9-1: new high-speed USB device number 33 using dummy_hcd
[ 1424.911413][  T943] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[ 1424.941921][  T943] usb 3-1: device descriptor read/8, error -71
[ 1424.963089][T17540] usb 9-1: Using ep0 maxpacket: 16
[ 1424.964035][T17540] usb 9-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00
[ 1424.965441][T17540] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[ 1424.965470][T17540] usb 9-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1424.965523][T17540] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1424.965741][T17540] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1424.994721][T17540] usb 9-1: config 0 descriptor??
[ 1425.000250][T29167] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22
[ 1425.061658][  T943] usb usb3-port1: unable to enumerate USB device
[ 1425.217486][T29170] syz_tun: entered allmulticast mode
[ 1425.413156][T17540] hid_parser_main: 5 callbacks suppressed
[ 1425.413202][T17540] samsung 0003:0419:0001.005F: unknown main item tag 0x0
[ 1425.413242][T17540] samsung 0003:0419:0001.005F: unknown main item tag 0x0
[ 1425.415055][T17540] samsung 0003:0419:0001.005F: unknown main item tag 0x0
[ 1425.415089][T17540] samsung 0003:0419:0001.005F: unknown main item tag 0x0
[ 1425.415114][T17540] samsung 0003:0419:0001.005F: unknown main item tag 0x0
[ 1425.415137][T17540] samsung 0003:0419:0001.005F: unknown main item tag 0x0
[ 1425.415188][T17540] samsung 0003:0419:0001.005F: unknown main item tag 0x0
[ 1425.415212][T17540] samsung 0003:0419:0001.005F: unknown main item tag 0x0
[ 1425.415235][T17540] samsung 0003:0419:0001.005F: unknown main item tag 0x0
[ 1425.415258][T17540] samsung 0003:0419:0001.005F: unknown main item tag 0x0
[ 1425.429473][T17540] samsung 0003:0419:0001.005F: hidraw0: USB HID v7f.fd Device [HID 0419:0001] on usb-dummy_hcd.8-1/input0
[ 1425.831279][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1425.998909][T29168] syz_tun: left allmulticast mode
[ 1426.802634][T29187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1426.802664][T29187] IPv6: NLM_F_CREATE should be set when creating new route
[ 1426.881478][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1426.960579][ T5700] peak_usb 5-1:1.0 can0: sending cmd f=0x6 n=0x1 failure: -22
[ 1426.970559][ T5700] peak_usb 5-1:1.0: unable to read PCAN-USB serial number (err -22)
[ 1427.042307][ T5700] peak_usb 5-1:1.0: probe with driver peak_usb failed with error -22
[ 1427.068391][ T5700] usb 5-1: USB disconnect, device number 5
[ 1427.143389][T16333] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[ 1427.301673][T16333] usb 3-1: Using ep0 maxpacket: 8
[ 1427.309799][T16333] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1427.309866][T29201] syz_tun: entered allmulticast mode
[ 1427.323580][T16333] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40
[ 1427.335658][T16333] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1427.346033][T16333] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1427.358802][T16333] usb 3-1: language id specifier not provided by device, defaulting to English
[ 1427.370671][T16333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1427.370726][T16333] usb 3-1: Product: syz
[ 1427.370748][T16333] usb 3-1: Manufacturer: syz
[ 1427.370769][T16333] usb 3-1: SerialNumber: syz
[ 1427.371600][ T5700] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[ 1427.523128][ T5700] usb 5-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00
[ 1427.524524][ T5700] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1427.524568][ T5700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1427.529008][ T5700] usb 5-1: config 0 descriptor??
[ 1427.589982][T17540] usb 9-1: USB disconnect, device number 33
[ 1427.911256][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1427.995854][ T5700] input: HID 0458:5005 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5005.0060/input/input184
[ 1428.081781][T29197] syz_tun: left allmulticast mode
[ 1428.097653][ T5700] input: HID 0458:5005 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5005.0060/input/input185
[ 1428.194947][ T5700] kye 0003:0458:5005.0060: input,hiddev0,hidraw0: USB HID v7f.fd Device [HID 0458:5005] on usb-dummy_hcd.4-1/input0
[ 1428.248888][T29192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1428.263526][T29192] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1428.319116][   T31] INFO: task kworker/0:4:24631 blocked for more than 143 seconds.
[ 1428.319166][   T31]       Tainted: G             L      syzkaller #0
[ 1428.319180][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1428.319190][   T31] task:kworker/0:4     state:D stack:21056 pid:24631 tgid:24631 ppid:2      task_flags:0x4208060 flags:0x00080000
[ 1428.319279][   T31] Workqueue: usb_hub_wq hub_event
[ 1428.319414][   T31] Call Trace:
[ 1428.319423][   T31]  <TASK>
[ 1428.319436][   T31]  __schedule+0x17db/0x58f0
[ 1428.319467][   T31]  ? __lock_acquire+0x6df/0x2e50
[ 1428.319512][   T31]  ? __pfx___schedule+0x10/0x10
[ 1428.319565][   T31]  ? lock_acquire+0x115/0x350
[ 1428.319594][   T31]  ? schedule+0x90/0x2b0
[ 1428.319623][   T31]  schedule+0x164/0x2b0
[ 1428.319650][   T31]  schedule_timeout+0xc0/0x2c0
[ 1428.319675][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[ 1428.319732][   T31]  ? wait_for_completion+0x272/0x5e0
[ 1428.319776][   T31]  ? wait_for_completion+0x272/0x5e0
[ 1428.319803][   T31]  wait_for_completion+0x2ca/0x5e0
[ 1428.319872][   T31]  ? __pfx_wait_for_completion+0x10/0x10
[ 1428.319913][   T31]  port100_get_command_type_mask+0x1df/0x3a0
[ 1428.320016][   T31]  ? pcpu_alloc+0x10/0x310
[ 1428.320041][   T31]  ? __pfx_port100_get_command_type_mask+0x10/0x10
[ 1428.320081][   T31]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1428.320111][   T31]  port100_probe+0x694/0xba0
[ 1428.320170][   T31]  ? __pfx_port100_probe+0x10/0x10
[ 1428.320197][   T31]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1428.320222][   T31]  ? __pm_runtime_set_status+0x994/0xc80
[ 1428.320311][   T31]  usb_probe_interface+0x788/0xe50
[ 1428.320364][   T31]  ? __pfx_usb_probe_interface+0x10/0x10
[ 1428.320390][   T31]  ? sysfs_do_create_link_sd+0xe0/0x110
[ 1428.320450][   T31]  ? driver_sysfs_add+0x1fe/0x210
[ 1428.320492][   T31]  ? __pfx_usb_probe_interface+0x10/0x10
[ 1428.320512][   T31]  really_probe+0x254/0xae0
[ 1428.320538][   T31]  __driver_probe_device+0x1e8/0x360
[ 1428.320587][   T31]  driver_probe_device+0x4f/0x240
[ 1428.320611][   T31]  __device_attach_driver+0x270/0x410
[ 1428.320637][   T31]  bus_for_each_drv+0x258/0x2f0
[ 1428.320663][   T31]  ? __pfx___device_attach_driver+0x10/0x10
[ 1428.336435][   T31]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 1428.336474][   T31]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1428.336506][   T31]  __device_attach+0x2c4/0x450
[ 1428.336529][   T31]  ? __pfx___device_attach+0x10/0x10
[ 1428.336576][   T31]  ? do_raw_spin_unlock+0xf5/0x200
[ 1428.336606][   T31]  ? _raw_spin_unlock+0x28/0x50
[ 1428.336634][   T31]  device_initial_probe+0xa1/0xd0
[ 1428.336655][   T31]  bus_probe_device+0x12a/0x220
[ 1428.336683][   T31]  device_add+0x7d7/0xb80
[ 1428.336744][   T31]  usb_set_configuration+0x1ad8/0x2180
[ 1428.336800][   T31]  usb_generic_driver_probe+0x8d/0x150
[ 1428.336919][   T31]  usb_probe_device+0x1c3/0x3b0
[ 1428.336945][   T31]  ? __pfx_usb_probe_device+0x10/0x10
[ 1428.336964][   T31]  really_probe+0x254/0xae0
[ 1428.336989][   T31]  __driver_probe_device+0x1e8/0x360
[ 1428.337013][   T31]  driver_probe_device+0x4f/0x240
[ 1428.337066][   T31]  __device_attach_driver+0x270/0x410
[ 1428.337093][   T31]  bus_for_each_drv+0x258/0x2f0
[ 1428.337118][   T31]  ? __pfx___device_attach_driver+0x10/0x10
[ 1428.337139][   T31]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 1428.337166][   T31]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1428.337226][   T31]  __device_attach+0x2c4/0x450
[ 1428.337248][   T31]  ? __pfx___device_attach+0x10/0x10
[ 1428.337269][   T31]  ? do_raw_spin_unlock+0xf5/0x200
[ 1428.337296][   T31]  ? _raw_spin_unlock+0x28/0x50
[ 1428.337324][   T31]  device_initial_probe+0xa1/0xd0
[ 1428.337376][   T31]  bus_probe_device+0x12a/0x220
[ 1428.337404][   T31]  device_add+0x7d7/0xb80
[ 1428.337434][   T31]  usb_new_device+0x9aa/0x1690
[ 1428.337470][   T31]  ? __pfx_usb_new_device+0x10/0x10
[ 1428.337529][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1428.337557][   T31]  hub_event+0x28e8/0x4d30
[ 1428.337625][   T31]  ? __pfx_hub_event+0x10/0x10
[ 1428.337682][   T31]  ? rcu_is_watching+0x16/0xb0
[ 1428.337708][   T31]  ? process_scheduled_works+0x97a/0x1630
[ 1428.337735][   T31]  process_scheduled_works+0xc3d/0x1630
[ 1428.337826][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1428.337857][   T31]  ? assign_work+0x3cf/0x5d0
[ 1428.337886][   T31]  worker_thread+0xa47/0xfb0
[ 1428.337966][   T31]  kthread+0x38b/0x480
[ 1428.337986][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 1428.338009][   T31]  ? __pfx_kthread+0x10/0x10
[ 1428.338029][   T31]  ret_from_fork+0x514/0xb70
[ 1428.338052][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1428.338105][   T31]  ? __switch_to+0xc89/0x1420
[ 1428.349560][   T31]  ? __pfx_kthread+0x10/0x10
[ 1428.349597][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1428.349683][   T31]  </TASK>
[ 1428.349712][   T31] INFO: task syz.7.6320:26871 blocked for more than 143 seconds.
[ 1428.349733][   T31]       Tainted: G             L      syzkaller #0
[ 1428.349745][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1428.349765][   T31] task:syz.7.6320      state:D stack:25992 pid:26871 tgid:26870 ppid:23110  task_flags:0x400040 flags:0x00080006
[ 1428.349864][   T31] Call Trace:
[ 1428.349872][   T31]  <TASK>
[ 1428.349886][   T31]  __schedule+0x17db/0x58f0
[ 1428.349932][   T31]  ? __lock_acquire+0x6df/0x2e50
[ 1428.349997][   T31]  ? __pfx___schedule+0x10/0x10
[ 1428.350033][   T31]  ? schedule+0x90/0x2b0
[ 1428.350062][   T31]  schedule+0x164/0x2b0
[ 1428.350089][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1428.350145][   T31]  __mutex_lock+0x7c1/0x1550
[ 1428.350169][   T31]  ? __mutex_lock+0x5d4/0x1550
[ 1428.350191][   T31]  ? usbdev_open+0x151/0x770
[ 1428.350310][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1428.350331][   T31]  ? bus_find_device+0x27d/0x2d0
[ 1428.350358][   T31]  ? __pfx_bus_find_device+0x10/0x10
[ 1428.350382][   T31]  ? usbdev_open+0xa7/0x770
[ 1428.350402][   T31]  ? usbdev_open+0xa7/0x770
[ 1428.350461][   T31]  usbdev_open+0x151/0x770
[ 1428.350491][   T31]  ? __pfx_usbdev_open+0x10/0x10
[ 1428.350518][   T31]  ? do_raw_spin_unlock+0xf5/0x200
[ 1428.350547][   T31]  chrdev_open+0x4d9/0x600
[ 1428.350601][   T31]  ? __pfx_chrdev_open+0x10/0x10
[ 1428.350624][   T31]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[ 1428.350650][   T31]  ? __pfx_chrdev_open+0x10/0x10
[ 1428.350670][   T31]  do_dentry_open+0x816/0x1380
[ 1428.350703][   T31]  vfs_open+0x3b/0x340
[ 1428.350758][   T31]  ? path_openat+0x1428/0x1d60
[ 1428.350789][   T31]  path_openat+0x1443/0x1d60
[ 1428.350836][   T31]  do_file_open+0x23e/0x4a0
[ 1428.350899][   T31]  ? __pfx_do_file_open+0x10/0x10
[ 1428.350949][   T31]  ? _raw_spin_unlock+0x28/0x50
[ 1428.350973][   T31]  ? alloc_fd+0x651/0x6c0
[ 1428.351007][   T31]  do_sys_openat2+0x115/0x200
[ 1428.351055][   T31]  ? __se_sys_futex+0x3a8/0x450
[ 1428.351081][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1428.365381][   T31]  ? rcu_is_watching+0x16/0xb0
[ 1428.365453][   T31]  __x64_sys_openat+0x138/0x170
[ 1428.365483][   T31]  do_syscall_64+0x166/0x520
[ 1428.365511][   T31]  ? trace_irq_disable+0x3b/0x140
[ 1428.365529][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1428.365550][   T31]  ? clear_bhb_loop+0x70/0xc0
[ 1428.365604][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1428.365625][   T31] RIP: 0033:0x7f668215e98e
[ 1428.365643][   T31] RSP: 002b:00007f6683078b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1428.365666][   T31] RAX: ffffffffffffffda RBX: 00007f66830796c0 RCX: 00007f668215e98e
[ 1428.365681][   T31] RDX: 0000000000101301 RSI: 00007f6683078c00 RDI: ffffffffffffff9c
[ 1428.365695][   T31] RBP: 00007f6683078c00 R08: 0000000000000000 R09: 0000000000000000
[ 1428.365708][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 1428.365756][   T31] R13: 00007f6682426038 R14: 00007f6682425fa0 R15: 00007f668254fa48
[ 1428.365788][   T31]  </TASK>
[ 1428.365820][   T31] 
[ 1428.365820][   T31] Showing all locks held in the system:
[ 1428.365830][   T31] locks held by pr/ttyS0/16: 2, last CPU#1:
[ 1428.365951][   T31]  #0: ffffffff8ec362b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60
[ 1428.366025][   T31]  #1: ffffffff9ad33098 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0
[ 1428.366135][   T31] locks held by khungtaskd/31: 1, last CPU#0:
[ 1428.366149][   T31]  #0: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1428.366231][   T31] locks held by udevd/4986: 1, last CPU#0:
[ 1428.369029][   T31]  #0: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __d_lookup+0x66/0x790
[ 1428.369083][   T31] locks held by getty/5374: 2, on CPU#1:
[ 1428.369097][   T31]  #0: ffff8880293a60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1428.369183][   T31]  #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[ 1428.369243][   T31] locks held by kworker/1:2/16333: 4, on CPU#1:
[ 1428.369259][   T31]  #0: ffff88802328e140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1428.369347][   T31]  #1: ffffc9000558fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1428.369401][   T31]  #2: ffff888029fff1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30
[ 1428.369483][   T31]  #3: ffff88804ec221d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[ 1428.369536][   T31] locks held by udevd/22894: 4, on CPU#1:
[ 1428.369551][   T31]  #0: ffff88804e667bd8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0
[ 1428.369632][   T31]  #1: ffff8880569aa080 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420
[ 1428.369769][   T31]  #2: ffff888057544a58 (kn->active#30){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420
[ 1428.380840][   T31]  #3: ffff88801b1d81d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0
[ 1428.380894][   T31] locks held by udevd/23007: 4, on CPU#0:
[ 1428.380909][   T31]  #0: ffff88802c591638 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0
[ 1428.380986][   T31]  #1: ffff888078218480 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420
[ 1428.381043][   T31]  #2: ffff88807143fd28 (kn->active#30){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420
[ 1428.381882][   T31]  #3: ffff88804ec221d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0
[ 1428.381941][   T31] locks held by kworker/0:4/24631: 5, on CPU#0:
[ 1428.381957][   T31]  #0: ffff88802328e140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1428.382042][   T31]  #1: ffffc900033a7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1428.382096][   T31]  #2: ffff88802a1bc1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30
[ 1428.382144][   T31]  #3: ffff88801b1d81d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[ 1428.382223][   T31]  #4: ffff8880294c41a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[ 1428.382277][   T31] locks held by syz.7.6320/26871: 1, on CPU#1:
[ 1428.382291][   T31]  #0: ffff88802a1bc1d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770
[ 1428.382375][   T31] locks held by syz-executor/27075: 4, last CPU#0:
[ 1428.382390][   T31]  #0: ffffffff8ee35c10 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480
[ 1428.382442][   T31]  #1: ffff88807f24dcf8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0
[ 1428.385107][   T31]  #2: ffff888053e65cf8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0
[ 1428.385171][   T31]  #3: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[ 1428.385262][   T31] locks held by syz-executor/28186: 4, last CPU#0:
[ 1428.385280][   T31]  #0: ffffffff8ee35c10 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480
[ 1428.385335][   T31]  #1: ffff88807e31f678 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0
[ 1428.385423][   T31]  #2: ffff88801b09f678 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0
[ 1428.385482][   T31]  #3: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[ 1428.390876][   T31] locks held by syz.4.7036/29191: 3, on CPU#0:
[ 1428.395918][   T31]  #0: ffff888034f6f110 (&evdev->mutex){+.+.}-{4:4}, at: evdev_release+0x6f8/0x7f0
[ 1428.396016][   T31]  #1: ffff8880359b82b8 (&dev->mutex#2){+.+.}-{4:4}, at: input_close_device+0x4c/0x290
[ 1428.396074][   T31]  #2: ffffffff8ed62aa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[ 1428.396187][   T31] locks held by fido_id/29213: 2, last CPU#0:
[ 1428.396202][   T31]  #0: ffff88801b09c378 (&mm->mmap_lock){++++}-{4:4}, at: setup_arg_pages+0x30e/0xbd0
[ 1428.396256][   T31]  #1: ffffffff8eeabc70 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[ 1428.396335][   T31] 
[ 1428.396342][   T31] =============================================
[ 1428.396342][   T31] 
[ 1428.396353][   T31] NMI backtrace for cpu 0
[ 1428.396368][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1428.396395][   T31] Tainted: [L]=SOFTLOCKUP
[ 1428.396402][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1428.396415][   T31] Call Trace:
[ 1428.396424][   T31]  <TASK>
[ 1428.396432][   T31]  dump_stack_lvl+0xe8/0x150
[ 1428.396468][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[ 1428.396494][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1428.396525][   T31]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[ 1428.396553][   T31]  sys_info+0x135/0x170
[ 1428.396575][   T31]  watchdog+0xfd7/0x1030
[ 1428.396603][   T31]  ? watchdog+0x1c7/0x1030
[ 1428.396629][   T31]  kthread+0x38b/0x480
[ 1428.396650][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1428.396666][   T31]  ? __pfx_kthread+0x10/0x10
[ 1428.396687][   T31]  ret_from_fork+0x514/0xb70
[ 1428.396711][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1428.396740][   T31]  ? __switch_to+0xc89/0x1420
[ 1428.396777][   T31]  ? __pfx_kthread+0x10/0x10
[ 1428.396794][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1428.396828][   T31]  </TASK>
[ 1428.396863][   T31] Sending NMI from CPU 0 to CPUs 1:
[ 1428.396890][    C1] NMI backtrace for cpu 1
[ 1428.396907][    C1] CPU: 1 UID: 0 PID: 44 Comm: kworker/1:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1428.396933][    C1] Tainted: [L]=SOFTLOCKUP
[ 1428.396940][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1428.396952][    C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker
[ 1428.396975][    C1] RIP: 0010:__lock_acquire+0x19ed/0x2e50
[ 1428.397000][    C1] Code: 14 25 ff 0f 00 00 39 05 1d 02 f7 12 73 06 89 05 15 02 f7 12 48 8b 02 49 89 d8 4c 39 e8 0f 84 30 fe ff ff 4c 89 78 30 48 8b 00 <4c> 39 e8 75 f4 49 89 d8 e9 1c fe ff ff 48 c7 c7 d0 a7 c2 8e 4c 89
[ 1428.397017][    C1] RSP: 0018:ffffc90000b47480 EFLAGS: 00000002
[ 1428.397033][    C1] RAX: ffffffff973107b8 RBX: 0000000000000111 RCX: 0000000000000002
[ 1428.397047][    C1] RDX: ffffffff971e5578 RSI: ffff888021ec6a38 RDI: ffff888021ec5dc0
[ 1428.397061][    C1] RBP: 0a3a5601b62e9771 R08: 0000000000000111 R09: 0000000000000020
[ 1428.397075][    C1] R10: 0000000000000000 R11: ffffffff81a38c10 R12: 0000000000000001
[ 1428.397087][    C1] R13: ffffffff943b8d48 R14: ffff888021ec6a38 R15: ffffc90000b47510
[ 1428.397101][    C1] FS:  0000000000000000(0000) GS:ffff888124dd8000(0000) knlGS:0000000000000000
[ 1428.397116][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1428.397130][    C1] CR2: 000056367076d8e0 CR3: 00000000236a0000 CR4: 00000000003526f0
[ 1428.397151][    C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[ 1428.397164][    C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1428.397177][    C1] Call Trace:
[ 1428.397184][    C1]  <TASK>
[ 1428.397202][    C1]  lock_acquire+0x115/0x350
[ 1428.397220][    C1]  ? ktime_get+0x45/0x220
[ 1428.397242][    C1]  ? ktime_get+0x45/0x220
[ 1428.397266][    C1]  seqcount_lockdep_reader_access+0x55/0x100
[ 1428.397287][    C1]  ? ktime_get+0x45/0x220
[ 1428.397303][    C1]  ktime_get+0x45/0x220
[ 1428.397321][    C1]  clockevents_program_event+0x290/0x630
[ 1428.397346][    C1]  ? __pfx_clockevents_program_event+0x10/0x10
[ 1428.397372][    C1]  ? tick_program_event+0x8f/0x120
[ 1428.397390][    C1]  __hrtimer_rearm_deferred+0x36c/0x4b0
[ 1428.397418][    C1]  irqentry_exit+0x8d3/0x910
[ 1428.397446][    C1]  ? trace_irq_disable+0x3b/0x140
[ 1428.397466][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1428.397486][    C1] RIP: 0010:send4+0x4ed/0xec0
[ 1428.397503][    C1] Code: 10 4c 8b 6c 24 20 48 81 7c 24 08 01 f0 ff ff 0f 83 b0 00 00 00 48 85 db 0f 84 ca 00 00 00 e8 8a 66 1f fb 8b 94 24 c8 00 00 00 <48> 89 df 48 8b 74 24 08 e8 76 1d 25 03 e9 b1 00 00 00 e8 6c 66 1f
[ 1428.397519][    C1] RSP: 0018:ffffc90000b478c0 EFLAGS: 00000293
[ 1428.397535][    C1] RAX: ffffffff86a85496 RBX: ffff88802a1b0b38 RCX: ffff888021ec5dc0
[ 1428.397549][    C1] RDX: 000000000100007f RSI: 0000000000000001 RDI: 0000000000000001
[ 1428.397563][    C1] RBP: ffffc90000b47a18 R08: ffffc90000b4780f R09: 0000000000000000
[ 1428.397577][    C1] R10: ffffc90000b47800 R11: fffff52000168f02 R12: ffff88804af01100
[ 1428.397591][    C1] R13: 1ffff92000168f28 R14: ffff88807e82bb40 R15: dffffc0000000000
[ 1428.397608][    C1]  ? send4+0x4e6/0xec0
[ 1428.397629][    C1]  ? send4+0x217/0xec0
[ 1428.397646][    C1]  ? __pfx_send4+0x10/0x10
[ 1428.397671][    C1]  wg_socket_send_skb_to_peer+0xd1/0x1d0
[ 1428.397691][    C1]  wg_packet_tx_worker+0x1c8/0x7e0
[ 1428.397712][    C1]  ? rcu_is_watching+0x16/0xb0
[ 1428.397735][    C1]  ? process_scheduled_works+0x97a/0x1630
[ 1428.397758][    C1]  process_scheduled_works+0xc3d/0x1630
[ 1428.397790][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1428.397815][    C1]  ? assign_work+0x3cf/0x5d0
[ 1428.397839][    C1]  worker_thread+0xa47/0xfb0
[ 1428.397875][    C1]  kthread+0x38b/0x480
[ 1428.397892][    C1]  ? __pfx_worker_thread+0x10/0x10
[ 1428.397914][    C1]  ? __pfx_kthread+0x10/0x10
[ 1428.397932][    C1]  ret_from_fork+0x514/0xb70
[ 1428.397950][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1428.397976][    C1]  ? __switch_to+0xc89/0x1420
[ 1428.398004][    C1]  ? __pfx_kthread+0x10/0x10
[ 1428.398021][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1428.398053][    C1]  </TASK>
[ 1428.410758][ T5700] usb 5-1: USB disconnect, device number 6
[ 1428.424819][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1430.028202][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1430.038885][   T31] Tainted: [L]=SOFTLOCKUP
[ 1430.043214][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1430.053269][   T31] Call Trace:
[ 1430.056565][   T31]  <TASK>
[ 1430.059525][   T31]  vpanic+0x56d/0xa60
[ 1430.063562][   T31]  ? __pfx___schedule+0x10/0x10
[ 1430.068455][   T31]  ? __pfx_vpanic+0x10/0x10
[ 1430.072983][   T31]  panic+0xc5/0xd0
[ 1430.076726][   T31]  ? __pfx_panic+0x10/0x10
[ 1430.081165][   T31]  ? preempt_schedule_common+0x7f/0xd0
[ 1430.086644][   T31]  ? preempt_schedule_thunk+0x16/0x40
[ 1430.092029][   T31]  ? nmi_trigger_cpumask_backtrace+0x31a/0x390
[ 1430.098195][   T31]  ? nmi_trigger_cpumask_backtrace+0x31f/0x390
[ 1430.104360][   T31]  watchdog+0x1030/0x1030
[ 1430.108704][   T31]  ? watchdog+0x1c7/0x1030
[ 1430.113138][   T31]  kthread+0x38b/0x480
[ 1430.117236][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1430.121925][   T31]  ? __pfx_kthread+0x10/0x10
[ 1430.126520][   T31]  ret_from_fork+0x514/0xb70
[ 1430.131116][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1430.136246][   T31]  ? __switch_to+0xc89/0x1420
[ 1430.140937][   T31]  ? __pfx_kthread+0x10/0x10
[ 1430.145540][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1430.150328][   T31]  </TASK>
[ 1430.153508][   T31] Kernel Offset: disabled
[ 1430.157830][   T31] Rebooting in 86400 seconds..