last executing test programs:

9m10.960362032s ago: executing program 1 (id=1020):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}, 0x1, 0x500}, 0x0)

9m10.848376611s ago: executing program 1 (id=1021):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x80, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000020000001400128009000100766574680000000004000280080020000b"], 0x3c}}, 0x0)

9m10.766496239s ago: executing program 1 (id=1022):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000002c0))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0x990, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0xff, 0xc0, 0x10, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x2a, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0xff, 0x401, 0x6, 0x6, 0x2, 0x3, 0x5, 0x7f, 0x80}, @feature_unit={0xd, 0x24, 0x7, 0x2, 0x2, [0x8, 0x10]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x40, 0xd4, 0x4, {0xa, 0x25, 0x25, 0x6, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x210, 0xfa, 0xa, 0x2, {0xa, 0x25, 0x25, 0x0, 0x5, 0x9}}}}}}}}]}}, 0x0)
socket(0x400000000010, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)={0x20, r4, 0x1, 0x0, 0xffffffff, {{}, {@void, @val={0xc, 0x99, {0x2001, 0x56}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000065}, 0x4008000)
sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r4, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xc}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}]}, 0x54}}, 0x40000)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xa, 0x80000000, 0x1}, 0x50)
setns(0xc9, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x200040, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000100, @loopback, 0xfffffffe}, 0x1c)
sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r6, 0x2)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000800)=ANY=[@ANYBLOB="00110200000036"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

9m9.088373439s ago: executing program 1 (id=1031):
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000180)={0x0, 0xf, 0xb, 0x1000, 0x3, "5acf05007c9b74df"})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil})
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x10001, 0x6, 0x60000, 0x1000, &(0x7f0000ffe000/0x1000)=nil})
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80)
write$cgroup_int(r3, &(0x7f0000000040)=0x800000000001e8, 0x12)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, 0x0)
write$UHID_INPUT(r3, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901)
pipe2(&(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x3, &(0x7f0000000000)={0x0, 0x10, 0x1, @thr={0x0, 0x0}}, 0x0)
ptrace(0x10, r8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000)
ptrace$setregs(0x1a, r8, 0xc, &(0x7f0000000000))
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r7, {0x1}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'})
syz_open_dev$dvb_dvr(&(0x7f0000000040), 0x0, 0x1)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f00000008c0)={<r9=>0x0, 0xff}, &(0x7f0000000900)=0x8)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000940)={r9, 0xe}, 0x8)

9m8.708837961s ago: executing program 1 (id=1033):
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x5c, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x74, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400000000101090262000101000000090400001202060000052406000005240000000d24010000000006241af7ff230c24130017e56b9ecbee"], 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_misc(r2, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072020001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900000000060000000000000000e2001e25b9bb47bc00", [0x8, 0xffffffff9673e35a]}})

9m8.436115015s ago: executing program 1 (id=1035):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r0=>0x0})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r0, @ANYBLOB="8249e900800005001c00378009000100626f6e64000000000c0002800500100006000000050027"], 0x44}, 0x1, 0x0, 0x0, 0xcc00}, 0x8000)

9m8.09218905s ago: executing program 32 (id=1035):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r0=>0x0})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r0, @ANYBLOB="8249e900800005001c00378009000100626f6e64000000000c0002800500100006000000050027"], 0x44}, 0x1, 0x0, 0x0, 0xcc00}, 0x8000)

3m42.626400275s ago: executing program 4 (id=2641):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000000079a200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

3m42.35768081s ago: executing program 4 (id=2644):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x4, 0x0, 0xfffffffffffffdf2)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYRES64, @ANYRESHEX=r2, @ANYRES32=0x0, @ANYRES8=r1, @ANYRESOCT=r4], 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r5 = fanotify_init(0x200, 0x0)
fanotify_mark(r5, 0x132, 0x40001002, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe})
connect$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x41)
sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x10, 0x4}}}}}]}}]}}, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x2400c000)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f00850000007a0000009600000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x8, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
open(&(0x7f00009e1000)='./file0\x00', 0x160c40, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r7, 0xffffffffffffffff, 0x0)
fsopen(&(0x7f0000000000)='nfs\x00', 0x0)
userfaultfd(0x801)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[])

3m38.85748133s ago: executing program 4 (id=2654):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x409c9, 0x0, 0x0, 'queue1\x00', 0x200001})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x4, 0x1f000000, 0x7}, 0x76e0})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}})

3m38.554226146s ago: executing program 4 (id=2656):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x110)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
listen(r2, 0x1005)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x1, './file1\x00'}, 0xfffffffffffffcd6)
setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f00000000c0)=0x3, 0x4)
ioctl$int_in(r3, 0x5421, &(0x7f0000000080)=0x1)
connect$unix(r3, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f00000000c0)='./file1\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00')
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x1, 0x7ffc0002}]})
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x513000, 0x1000, 0x0, 0x1}, 0x20)
r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}})
r5 = add_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000140)="47181f988989f25fff7f0000", 0xc, 0xffffffffffffffff)
keyctl$chown(0x4, r5, 0x0, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
r6 = syz_usb_connect(0x2, 0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002ff000040cd06310100010102030109023c00010100a0320904000006ff00000007050102400000070502024000000705040240000007050602400000070581034000010705880240"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3)
write$uinput_user_dev(r1, &(0x7f0000000540)={'syz1\x00', {0x6, 0x7fff, 0xb25, 0xb}, 0x6, [0x9, 0x8, 0x5, 0x6, 0x6, 0x3, 0xafc, 0x32, 0xebc0, 0x9, 0x6ff5, 0x9f5, 0x5, 0x1000000, 0x0, 0x6, 0x8001, 0x6, 0x4a4c, 0x3, 0xfffffffd, 0x9, 0x10, 0x8001, 0x5, 0x2, 0xd4a, 0xffefe87a, 0x1, 0x8, 0x9, 0xc, 0x8, 0x9, 0x0, 0xe, 0xf9c6, 0x3ff, 0x3ff, 0x4, 0xd, 0xff, 0x8, 0x9, 0x80000001, 0x83f5, 0x0, 0x2, 0xfe0, 0x7ff, 0x8, 0x3, 0x10004, 0x2, 0xa49, 0x1df, 0xffff, 0x0, 0x2, 0x9, 0xf, 0x901, 0x200, 0x9a0], [0x3, 0x8, 0x6, 0xd, 0xfffff800, 0xad10, 0x6, 0x13a0, 0x86, 0x7fff, 0x101, 0x8, 0x5, 0x1, 0x2, 0xffff, 0x4, 0x4a, 0xf, 0xfffff32a, 0xfffffff7, 0x4c4, 0x400, 0x7f, 0x10000, 0x7, 0x4, 0x8, 0x30, 0x9, 0x1, 0x3, 0x4c6fbc51, 0x10001, 0xd35, 0xa, 0x63, 0x0, 0x1, 0x200, 0x20, 0x9, 0x0, 0x3ec8d8d2, 0x0, 0x3, 0x3, 0x2, 0x8, 0x6, 0xe51, 0x1, 0x7, 0x8, 0x3, 0x2, 0x0, 0x62, 0x7, 0x6, 0x4, 0x2006, 0xfff, 0x4], [0x1, 0x9, 0x6, 0x10000, 0x4, 0x8, 0xffffffff, 0xfd, 0x20, 0x8, 0x9, 0x74, 0x283, 0x2, 0x4d, 0x6, 0x4, 0x3ff, 0x10000, 0x5, 0x40, 0x4, 0x8, 0xfffffffc, 0x7, 0x2, 0x80008001, 0x9, 0xfffffffe, 0xffff, 0x5, 0x7, 0x1, 0x9, 0x4, 0xfff, 0x3, 0x0, 0x5, 0x80000001, 0x53c2, 0x4, 0x4, 0x4, 0x80, 0x50, 0x3, 0xc, 0x8, 0x5, 0x4, 0x400, 0x3, 0x5, 0x86, 0x6, 0x400000, 0xb, 0x4, 0x0, 0x420, 0xfe6c, 0x2, 0x9], [0x3, 0x9, 0xffffffff, 0x2, 0x66, 0xffff, 0x401, 0x6, 0x8, 0x3, 0x101, 0x4, 0x9, 0x7, 0xce, 0x2, 0x8001, 0x1, 0x9e2, 0x6, 0x601000, 0x9, 0x5, 0xd, 0x1, 0x446, 0x800, 0x3, 0x0, 0x3, 0x2, 0x375, 0xfffffff1, 0x5, 0x5, 0x4, 0x7fff, 0x4, 0x3a6, 0x3, 0x2005, 0xe, 0xee6, 0x800, 0x7, 0x3, 0x1, 0x7, 0x3, 0xa, 0xc, 0x3, 0x1, 0x1, 0x3, 0x296, 0x6, 0xb, 0xf, 0x8, 0x4, 0x7, 0xd, 0x400]}, 0x45c)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
syz_usb_ep_write(r6, 0x88, 0x1b, &(0x7f0000000580)="02c0e5db37065ae2a1e12a5d97536f0ec800ce5f58753f01a2da60")

3m37.644614824s ago: executing program 4 (id=2660):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001400)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000001340, 0x0, 0x0, 0x200000001370, 0x2000000013a0], 0x0, 0x0, &(0x7f0000001340)=ANY=[]}, 0x78)

3m36.926076559s ago: executing program 4 (id=2664):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000640)={0x1, 0x100, 0x1, 0x9, 0xffffffff, 0x7, 0x2, 0x8, 0x0, 0x4000003, 0x21f, 0x1, 0x9, 0x2})
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) (async)
syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) (async)
ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000640)={0x1, 0x100, 0x1, 0x9, 0xffffffff, 0x7, 0x2, 0x8, 0x0, 0x4000003, 0x21f, 0x1, 0x9, 0x2}) (async)

3m36.628026866s ago: executing program 33 (id=2664):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000640)={0x1, 0x100, 0x1, 0x9, 0xffffffff, 0x7, 0x2, 0x8, 0x0, 0x4000003, 0x21f, 0x1, 0x9, 0x2})
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) (async)
syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) (async)
ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000640)={0x1, 0x100, 0x1, 0x9, 0xffffffff, 0x7, 0x2, 0x8, 0x0, 0x4000003, 0x21f, 0x1, 0x9, 0x2}) (async)

14.549769115s ago: executing program 6 (id=3220):
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000440)={0x190, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0xe0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xd8, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'syz'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x545}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'syz'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ',]&:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/nvram\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'asymmetric\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x9c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x98, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x834e}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc466}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf4f5}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'keyring\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-)\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'keyring\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x0, 0xff, 0x6}, 0xfe}, 0x18)
sendmsg(r0, &(0x7f0000003d00)={&(0x7f00000005c0)=@can, 0x80, &(0x7f0000002a00)=[{0x0}, {&(0x7f00000006c0)="8e9c", 0x2}], 0x2}, 0x48004)

14.383724922s ago: executing program 6 (id=3222):
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x4, 0x9, 0x4}, 0x2, 0x401a, &(0x7f00000021c0)={{0x6, 0x2, 0x5, 0x40}}, 0x3317, 0x0, 0x8}}) (fail_nth: 8)

13.995673304s ago: executing program 6 (id=3223):
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x3, 0x6, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000040)=""/208, 0xd0}], 0x1, 0x2a, 0xd)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xf, 0x1e}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7f, 0xd036d87fd37a00c5, 0x2}}}}]}, 0x40}}, 0x4000010)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={'\x00', 0x3, 0x1, 0x8, 0xfffffffc, 0x3f1, "9f2b4c6a52c99c0019e5c6cd0278d4", "2646d837", "783155da", "28e2ca55", ["145ddf7017ae84188bc58f65", "bc9ba2555f14495a90dd9aa5", "3aacb396cd4160340def9944", "199e2dc3f5340cf16c8d4c93"]})
r3 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000008c211082200000000000109022d000100003005090400000b03000200092109800a01222c0009058103ff0310"], 0x0)
r4 = socket$kcm(0x21, 0x2, 0x2)
r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r6 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000180)={0x8})
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="00000100000004"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r7, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000340)={0x20, 0x17, 0xd, "99ac615ab60fad8fe4d7ad3eaf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0xf, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r7, &(0x7f00000002c0)={0x14, &(0x7f0000000200)={0x0, 0x2, 0x66, {0x66, 0xb, "db534bafd2effd9d341c00fd3866cae94553c27bc1bf2f12013a73aaf6863379d12bb07d9310e24682b3bf2d6d831acf2ea0bb1839180e9971fc713ecd4581108565086f45c1d7c48f9e922f51643052f0bb50316d991f054ee33e4da8a9d409b63153ca"}}, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000580)={0x44, &(0x7f0000000300)={0x0, 0x31, 0x60, "42ed0de98375ff185db609d61adee9213408ad95e7b954868c209550094599d7c9f3d110b9cfe1432b5ea78935d84b68ad22d7c9e401876dd8f5446b54cb1da2cd893823f0a2a39be80d73ef87a0f87e0557aea384ada27709156f670b4d1990"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x40, 0x9, 0xfffffff0, 0x2, 0xff, 0x7, 0x3, 0x4ce, 0xc26d, 0xdf4f, 0x5, 0x5}}, &(0x7f0000000440)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000480)={0x20, 0x83, 0x2}, &(0x7f00000004c0)={0x20, 0x87, 0x2, 0x9}, &(0x7f0000000500)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io(r3, &(0x7f0000000000)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="40212c0000002c23e6e6da6e41eaddfb0a8a34d2dd23ee248c36105a7e746fb1400590136b7103bd"], 0x0, 0x0, 0x0, 0x0}, 0x0)

13.981682887s ago: executing program 5 (id=3225):
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd", 0x1a}], 0x1}, 0x40004)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1f0000003a000100fa"], 0x20}}, 0x4008094)

13.779546003s ago: executing program 5 (id=3228):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) (async)
r1 = geteuid()
ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000300)={{r0}, 0x3, &(0x7f0000000080)=[0x1, 0x7b41, 0x0], 0x2, 0x1})
statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x100, 0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}) (async)
r4 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000000000/0x4000)=nil)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0xfffffffffffffffd, 0x3, 0x80, 0xe6b4, 0x101, 0xfffffffffffffffa, 0x2, 0x8, 0x2, 0xb, 0x700000000000000, 0x6, 0xffff, 0xfffffffffffffffe, 0x7, 0x7fffffff, 0x5, 0x26, 0x2, 0x4ba138a5, 0x6, 0x8, 0x2, 0x4, 0x20000000009, 0x401, 0x1fd, 0x3, 0x0, 0x7, 0x5, 0x400005, 0x2, 0x501, 0x43, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x80, 0x0, 0xfffffffffffffffc, 0x20008, 0x1ff, 0x0, 0x6, 0x8000000000000001, 0xffffffbffffffff9, 0x2000100000000, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x4, 0x94f, 0x7, 0x7fffffffffffffff, 0xa, 0xfffffffffffffffe, 0xd, 0x11, 0xa, 0x5, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x38c, 0x7, 0x7, 0x7, 0xfffffffffffffffc, 0xa, 0xffffffffffffffff, 0x355, 0xdac, 0xe90, 0x7, 0x4c5d, 0xa7, 0xba00, 0x3, 0x7ff, 0x81, 0x1, 0x100, 0x4, 0xe, 0xfffffffffffffffc, 0x80000001, 0x800000000000005, 0x21, 0x8, 0xfffffffffffffffd, 0x10000, 0x3, 0x1e4b, 0x2, 0x79, 0xf, 0x10000, 0xf, 0x10000000002, 0x3, 0x3, 0xfffffffffffffff9, 0x0, 0x4, 0xa, 0x6518, 0x8, 0x2, 0x100000001, 0x80, 0x3, 0xd, 0x4, 0xb, 0x9, 0x1, 0x401, 0x1, 0x2, 0x7, 0xea7, 0x2000000000000001]}) (async)
ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f00000000c0)={0x29}) (async)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) (async)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="2ef26f0f3566b842000f00d8b805000000b9a00000000f01c166baf80cb8b7351187ef66bafc0cb000ee0fde460b0f0130670f01c28fe868cfe20a", 0x3b}], 0x1, 0x11, 0x0, 0x0) (async)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x81, 0x3, 0x2, '\x00', 0x2})
ioctl$KVM_RUN(r10, 0xae80, 0x0) (async)
r11 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
write$UHID_CREATE2(r11, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x5, 0x57e, 0x306, 0x3, 0xfffffffc, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0x135) (async)
write$UHID_INPUT2(r11, &(0x7f0000000080)={0xc, {0x3, ' \x00\x00'}}, 0x9)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002980)={0x1a24, 0x2d, 0x9, 0x70bd2d, 0x0, {0x4}, [@nested={0x1a0f, 0x151, 0x0, 0x1, [@generic="7d1a2ece67ded0357665448fb292ccab8b4a7c1b989d80d5565c47b730cf56cceb99f4151468b70d18029e3d2b47a2f14896fa39e2126d7c0288f6976776b792633b77307f4679e979435652a22be37a2221b24628f825b4bcdf35b6e42a0253fe77243558b2227fe9324f8689b6fa5ea939b2940b98a7c4060e766042aa092ae446dda6b03af614e0a35a1889d9ad772e547c", @nested={0xd3, 0x22, 0x0, 0x1, [@generic="d455d4e504720b29a6c95822759d96584b784650bb4e1167c44817d24b2d9bb3e8ec40d94b3d83f63f3ec4252d033bc6192c97794a11452fc25a54212a4fa2b68472774bf78760601d3ce498abd61ea1efc914900c741799f18d5b6994d5b00199bca81f4aa204299e", @generic="e2391b29cd6afc80938ead499e4de326db7b7c54bc3173a4c064bb51d970fd980315debe1bbaf5a0a6ac942e2eb8ebf35c9a4c", @generic="be80f24753ef9b147f60615e6d0676d83630e05062a9034c0007891a799acecfb23e5efa5a3640836d008cf32cdecf5a74c7d0"]}, @generic="61f63ffb66adec6811af39fff96a6d261322fa80a57b95e2e2435e9e31dbc5556b5d2b1168422714e3b003597116bdd676367e551838bcc63935dbeb78f8e123ad242b0f05c61292a4f48ed4dbc748c3313b3d2fd6014fc89e6a8b4b8db4700013a0eac6e0f2c3ec25e9457d15da0c289a3daee8edaadb0004934bad07d4ce34488879956d9636238e695b8773bd00fbbf2b348f379b0fbe339ca14a35daa387a7542bb8bf", @nested={0x16ef, 0xf8, 0x0, 0x1, [@typed={0x8, 0xd0, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x208, 0x15b, 0x0, 0x1, [@nested={0x7a, 0x9f, 0x0, 0x1, [@generic="fb8a87eb7c7ab0e94bbd836db491d346e0bf33ecb3346c17c15eb356c1cd4e973f7aa70fed96f8f999fcdeaf8775fae04cca0401d9f55c2afd796e16e01f3209f4bfdae222afa51e793e1efc4a9182ae06a24d66d65e45d9ecc2a1e6ed7e6b19778c723f26", @generic="ef6184b07b6ed5193aef89c1b8a0ac3784"]}, @generic="2661dfb9320d1eae5aee01b2a1c2919b201aa46d9d6f57ab829bbffd2c08ead1e9babae30a71070c591c2b78e15056a3b30d69d5dd03a6bc331cd6f039b00f0b597ff3e10f3c245ae8de7c3b38a51ddb0b7d069aa53e5829dd8be9658d01f7736039ecf9429013986df465306ad902f534fbdb85821fa2af19aa7c90fd25b42cc43fd97d5953f1afcb04ead73f45d60ba2a29ff87edc8609cdf518c8af2529479f73a86a6180a4a82882469522e4474630d411c50f7a0e68fb6b501f5769", @generic="4e9bcbf0aaa55a98d35104fa9275d2a50c419e7571ba3354d4af3c1ecbfd8c2c06d34e36ea930fc824bd6cc30864c04870e44e06a28f4233604a3ab39ab6181f01bf601a176864c9908a07be37022f3a76e4c911599c9640251dcb1e05dafbe62c3e412b4721d09d3b64a3f9eca0b905b270eda18b634f5f49b83ff841b1b511ba83410b0ee4f71edd1f23f041392a84f34ec2934e9b1fb51f1f00a939321108ea4c610f6c0e1ffed928ba37bd59f8b1e4302c3707b5419ca9bb7e5d01534c07792a9de0d740cdfebc60"]}, @nested={0x13f6, 0xe4, 0x0, 0x1, [@typed={0x14, 0x6c, 0x0, 0x0, @ipv6=@local}, @nested={0x8, 0xfe, 0x0, 0x1, [@typed={0x4, 0xec}]}, @generic="aa4f2bdbd3500f6e476e88f471d6d97ca7290046ab58844d4a7672fa53a3e995b3fa3e1b46b3548a0e25c80bff4d5781a520c3d7ea7fa269bccd958f7bef3a69569240bf9d276be730971d80ece3bdb0e189a2a92bd7842b1f5aba6c549408defb83ed6c522383fab7a46ffea848a91f115eb76293e3934f107484edb392cbd155b78257c9e179d49056ff3f5f079c077f9daea02c4b82b692f2fc2f545291c73d1b2d02a86a2be13100109326664bb3f193", @generic="22e537327965d3a244068abeb63dd122612667c8805b6db47237a259558503c64928d6b7e2bee37c193c6d92ec1984a766c338885af2faa306a7576625307731281cafdcde50684fe9b621661c458a0994496bba48afc6698c752607c388e7a10c85ea59bf6669181efb058bacef13d94f4c1221263dbabe84df27c48afb8ee4e41ee0d69bd9380b13ee4247861286c41068e7e6d2a8a2b7162ce851", @nested={0x5e, 0x104, 0x0, 0x1, [@typed={0x14, 0xdd, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1e}}, @typed={0x8, 0x6c, 0x0, 0x0, @u32=0xbf7}, @nested={0x4, 0xc9}, @generic="994735e9958d041e0d7298dce0ddf263c654de6f82176d4f860710970b60a9cadb59594a4a5b73772c39f3a693e34e3ce72b2e6153b4", @nested={0x4, 0xe4}]}, @nested={0x107, 0x10a, 0x0, 0x1, [@typed={0x4, 0xe9}, @typed={0x8, 0x108, 0x0, 0x0, @fd=r11}, @nested={0x4, 0x111}, @generic="9303ed37e4680342238c71b6745fc39a6aeda9e3e4190dc3fb94fe97dc0cf43366bc102e763224fbaadf8a1714c95bc2cb4b371fc242d83bb9c76bef6ad49b709645025d7b88bfee519fb25ea158ebdf9c2f0b10dd90c53ea0ab1730f67ea052c31c7ac1fc5adec890b82c3a9b705c27923a57f471b3c1fa3781a30028470fa9f65b4f29f14d7691d826f6a8d40aa0f546b6733864cec09ef05e2ecc2d52d9988e6bd2e733c978ca34edd93c7be174aa2f8c63b38f208098a2091ac16d64499361491534da65606c77a92f9dd3751e8a449a8652bf14d949ff620b19c683e9ca0d1aae3a8c8209e4ed8e574c826d198efaffcd"]}, @nested={0x111e, 0xb0, 0x0, 0x1, [@generic="cdd78ae124297044f19919b1742a84e2af5974a7a29590196d661db29a365ffed682076d68812b8d1a8ccc2eddf34f3cde522fcd65715290f1c9749584b54b7db61deaae982995a76740cb948a5333d6ea2f06ce5439fbcfb8158438eb3cb0391a27ca1975e5aa427006dc8a49b4543b3e1402f55f9cb413e7f37da99e2e9b158a8cdaec92b48e05d6c5fd58e896e6ecb02d094c3c51b012f4ff9349950533805eaeff3456a087444bed57028801e802cb1af96c730b39a7644847c172f2eaffade27a8023036361a76106a4f455b630604a0cd922ccb6d7a21e4e0daf41e64bf8397f3c36cb6ddf94eb849973e7c2c766ce9b13b53704d3a426ba6e11cf54cce5a6cd6ab3c020c9c5665253b34384e212c5eebff2217a32336984a7e20c756d50ec740d11556541ebd577fde2017f95393fe6a99c4e3dbf6f14e520862f14b38a95177d813fcec59c48c749491451fc18f1adc6e75f8b0b58aa780fb17ee737c321146fd2965c87416e89e4fc86a79de2fe0ce42739e13f4108e2e87e7c1a114c6c8b341a5a46949dff07460461f9e64da94f1cc4cd6d5571c530d1f3592d2cef0ea9920c2aa350c552a1eb3475a1638c6f8b90f99541335c7ce4d5a2dbc4047d8d16544a3c9bf2d49fe3b71e9a842557a2542d411e3ae504a88a4eb49d4b117f893c5950b4a4ddcd4af358ada5889dbf319e4efcd5bbcc0d6018d7730c762d994e01648c806cf2ade1a29be3bcffe02f9935eeea4c6329e387d4b79c47a5cdf7469f541f5f992361d13cf9c66d500ff3a2ab89e65a55c84c059cfae6ad0f994473cc68b2813bcc17bb97523a15291480ba67e9aa580e46274af5caf350901ed3a3d3d1ef57a37da5725cec393661979038c9b60562afcaee5f21241a5c847e20e96c746653c7fbcb0d36bfdbcdb8f8637c39f1a66dea385e12948cfc50deaf033858e7465a75d5963d5aba25272f175cf6ddfdcb08f95b65498b8c27e5aebc8b56890176a4d8b13938062d89f61602197f8276f0ff4f82e6524882e6b9af0fb1318ee6e2cf2311aa020072e49b89fc3f88d678ab01c798dc6094885ee125e74cbf65f4ee831907b96462a1d85c0e414793bb7570c628d13af4a2148ecebcacc3a91959f14eae0a8aea2cc80d527705180420c220d6363c41afdeeb3bacb9484973dee2545439e9b3d19e10e2a8747667df8781a0b755e0f2d22aa9228fe10fba4d251ba9ca22d3ac7a9ea80e7733a2e3c262c6f36989d7e62a1a3ff9afa3b1840545da0b6aa49ba0665c042599f2bdbd069308c2a4133610b12dbdeef080428d7af9bb3074328780255bdda04d4cf7a1b1fe3f46d266ce7f0e4c0b390d5ef3397065af9328903bcaef2d8813ce8391bb973ab03b57e319ba1b2084a9a408636ea5b49dd03794ed81ed994de4dfa0fdb9004e53b44f2595d6dad4f4cc11c8790be81ae2a34e518ceb7e4bc8fe0044b156d74f5f8a2fb676839d3a057c9d608bce5ee706b10bb9fc701eacc1ae12f3134e17d75b772c33b3b21538e1655864f78f545e7076c5b3038634088b90c34a7979e7c1dbb710204749cca9111c58d60ec5694414010daa02c1946e0d65216f11a8ef3c10680cf3065b80313af0b3452be9831681258d8ceba82224e0ac4abe9754308f2c356032f1a03d6143b235333631896f468afe702af2a80368d3180400fdf564a3143ebb5ad175f04f2e316b209a7482ed97ea4f0b40dcfb86429aa4ef2c03266a1243f37f9aeb1348e4984ca47a270ca0040253af26f1dbfc52629d6bdfa8965a0abb6ff2ff1679959dc38ea43512e795ad2a25bbd23095f91bfc29246fe9e5e6ea9daab7d5760a72aeacbdcf08dfd9c50463e1f0ae8acac4fc939f7a0b51d4d706008d9f4eb9a1927a5e22a445ddfeb92b9b3ddeb5b3881d7cef55a38065cd09713d5d90631abd666db6aa9638dfdbb05ed117d9acab6e826e2b991ea180deb4da29dee5f664a9fcdc21ce32bac2482d5e16177ef087493e8d67b95e2f094537575bc9ce9b870e5f8d6693070a3312e4806f4ae6c33f4d43ec27ab9b15b90b10fedfde62fc1c5126f7b427bf4e22100e6d361267d4701efec662d34fe3fc3a765721c136365b1bf535e64b29f571de32d5b7df94e5f6f039e2d6550aaa0e30ce441739636054aecaedd2a52be6d964c6ce3d42ef175bf41ae2eaba2f5534522e6714f8a4ca1e3cce077aef6395d499790f7bd874a703fe1e41313d78674290141de77d9b0ccf0e746904f60e1fbfeea50e9aee0f8ce70785711b5cdca59430b309513013b88aa7542f4568618b9b487158c3c9490eaee3bb67b168016e883f66e015479b77e7b0ea1fceb7687d888690bf94264f04a325580fcf351d4a911dc05992caca932968ae97f15f48b38e7abbfc0b5e4f03a4139f23d7e00deecc0ec9f4a1b793b36c516a9cc235700559ce0d1da8e1a0f76b2ab74867c5cfae8a32791b613d6de805aa0eb10c8dbcd2f97e5f03e30d6a585a3bc83ff47da059849d139308a880d14639a26e160c87941a54bacdb4422b0b64bd81e2f2d3a2204b7c79048997146508aa224b4e0a54a3d821e918b71f3980c6a47f69ab691b66bb3eabbc02fa7260ba4ce3b68ed6b8a073e394177097a48ce7cc61d7066fd5b6b519f9607e8ced25067ca54900bf92ee8d29dedd2e0c02444e83c2505869d74a7081330e037b9fc019219268248170e0474d43cac206f52542acac7dbe49c2b952608c904d337409a535a0b631747bfb484b495b9770807d1b46e59eed94dfae8098ebf85a9bc26ac10b8055ce6e19ecca7d6d9a0c7a633f21efbf9536e0d6f1e40ea937fc8dd805a06706d9169a8092f7b7918f32df2ef4324438756b6abdc51830d5bbccb2a8f167b9c92ed2fc88d36b681e83ddee6cbf1f8a26c91ab22241a02b5399ab173f475d8ab53609b122c53159eab016f16c84830671841e9ded51de4e780bdaed56949cbcda65b5d55e8d44ee13639c97df6950f42eba0c9981c6d04128ac50d3f7f93bb1b9347c3156ae1b7be837a36ea44819205f8f033014c640bb90f2d5d3d721811d8a3d40bcffabe3ea91aee67722a2bf3763c4a59de8b3715c6a2b475e12c534b715b173cc6881a8f76e267f5cbf5c102ba7bb130d1a0f2cfb549a8cab290a246f752a064e207af6f1f0afc2a3aa714e7c7231becfdca12c315d82e2a8f24bf00c0e8e4d9e5e5f7774cd3d5d4b917b2bf876d60e34e412afb7112359fc73575de0dc2ad4b31d4c40d42de11a1cb54c0506dda00fe0ea54e1355dbf3a71a2d8118926e8fe8ab77c0fad48fb7b4b0faa7214d21cfcd95facf8aa754bed83da722f91b87e12db70e7cf3d515c184546b0cf64fbcee3552ee32b58821c0b1c6826a3f36245c7942e9b1b8a0eddef7bdf5bb6bd94ab081e52a12b948071ceb7d3acf33c6bad9a58d4ede729d347120e549ec5008636a65b23bbea8fa794a859d8ddefa2eef29a5d3d5b970673dbc2ecebfa91958e1b2049831e9ba158edb36c82c5d9b674a87ba5fba7380ad883a78fef778ee7c0ce94de9891fc2a00f32b6163c393e0e596b22fb024ee6ffb2088d7cd35f79d89cdd70f58b0bf04051b70d25537b1cbafa84a8a2f2c5df913a894d97a8e9e427fc9bfb4629ee42bcd877cdc867658855cab0f28ccb5d14ed06a3a9eb0c4c7d01f5cc9d57b9b8ab8e445885351af1278ede9b67c6b5764893aa72a1b780cb6670723e8d0a18918a4f91d0fc137ad6a9892ceca6b299a4b49dc5f0b77dc88b0c9bc7cf7e9d5cec66e24baf42fc33ce66cf49d5d2ae484fb154496633b3b57b264c08a4b88a9b23b6035ad3568a2f05aa0663c0b05e968a9fef2432b88c229d11d5cfa8b1b240d9dbfb3c3aebae527ac4aca0a4d77f89f9a83d8fb5b57b59ce6394577d8906b3c62c9fdae567fb070941924008a938a7c7b8ed8e66b4d0422fbf7a48a349ae22180599b437f9b9c02ec0c4efd9a409100a82e2b8478302e66625887c2b564995b27b293a054bde49efe136d8618df2e5890d4db8f2a264ed4f3cab61a7aebc9f8e72fd1b2122deaa0d0d65f6cfb2734f31058f541901acf7ca8884efc1d9b8f1b0f76ad94a49d72d5ed9392dcd6061ce15d45861339c40e3cb34739a2aeb5c00acfa90916d0ad50ee11d7b1bb07ae66e47b0f6a9f0604da3551b888f077bdd6dc2f7061311a3dad6be96ae2d365bc6f78f08cbd4df27b197254566e49923ae914c02b1afe6093ae651c3463238fb9b74098ac9ca23f8e169ce540f6d2299f1823331af5a7b32f03a9d852e6dfcfac7d5365351110bdaa1d76711b4fcb5cad4e740b22228140442af3c5e9e93fe871f67927f3345e2f6a952e987a286f461d5f2ca2001bdef1fbf6081cd6000268b10bd26600363a2f43357286bee20264b1702b8390c806f18eeae1b5d96169492b0fb868e3505a8ae062e13d5aa3377c53d7f3f715746614e5518047583099874dc7ec14221e416e1e2c10186c5c519038a5000d2bcd02efc03b66c10ff248ca7b6b9259a01344b5817218bf31347b90834af09d5f54f2f357b4ecad3fa13f6de3143b6569178c4d934963d2f08dcba30745881de9a9cc0e2a28830be72538b5bbd5345e9d8b25763d1b5f2ed9b05a0d64887eaebd6691d202cafc08d9dd54fc0d24133978b158e2ef87b50d99dc3268795eb8b39be34678609b7816d7585bd14516f873fd664d09026dfc1121e4755a0c7f9339dab7e31815924179628575e63fbdf9b07bfc7735a697dc41614ed892d3ed6e9b63ae8cb9e0b4ca8babbe6d96ee2decb95c773454f5b1e5d85a6395042c4c90120427cff527e24eee8b573d770e547f212399ec96424bb3d9cf1be6fd20a9ef9fa8c372ff52bd2a2486f27530bf9135d5e8baf7293d942f30782a6d34937452c12a5225719f2143ee1e9e30a2c4775a4993a1e50dc2d35d75fc3bbfdbfcfe23b113febc2abf6937f664cc64d2bfe8a3cea3fce3911c66dbca4589d3ee75c6a5dd68b45cd3c62b2d36e094b8097349038e185d6d95ac371cb491ca5411d2ea53839baacc95905a7020f06d42eed7f14f4471e8d6c191d2efce8520ea96ba5ad7248efbc6e1b7688a307445732f114c173fd57df6712eb177817035ae15fe62f013a523b0a6384f702e28411e85102653a4ac746c37d75625e5db771a1be563380fdcddb7787ee876cfc1994b07faa673834662573a8a557bc916fa9d5bd63bf7803d018ae78c4b688ad9d1839809f30fefd5e3f2b634c443e906895626a1eb15c69defab86141f4a0891e27498444bdd361285dc05d3815e9d92551b837ab86f70bdf9b5cb5e431bb5a696c30da2e91346d0546cda56d082a353b65c9d78bff6ce9ba6eca3cd8227ebbd8e534f59081f45f1ac69dd45dfea5f6b5b253c5364e763e30b50c44a98e55b56d13738260d50bd9b27f75fdff32d60aebc104a34600f39ee3df700e915ded6f3bdd5a56befb874afb37103fc169763e1ce52d8b78ffbd5a5674ff83c2bb9505fc431bc3a129c69c4fd069f2dee5d090b5aa997e4c8daee87f2ecccd24f6dfc3d37496031ddd6357529e7b9e57bf997b436f358868edf4d3b2a7b6ccccccede4e8ce1dc18cfeb737db436317f688cc9d9b2645686778f739e629cd36bfe50efa8741f45538ea4713dd143a137f9f7a46c27e6a0e5d45de15de17a03e8216feaf4d0cd29d8fad99209aa8ff817121cead08c94e4b69289bc094353bf9781f50895c8e71c2fae94de8993cf2a38fdb3a0162bc2e6c3acc94a97161d09ff89ce08fd9bfeeab3ae", @typed={0xe6, 0x18, 0x0, 0x0, @binary="9716ac343649bf63bc5751b7c816ea922d128fd032d72eb236d2cf1467c5df2360c7ac4b6c10cd21280c87382f2a4d77f899d7c522ba1d143212fdfb3058e04a1ab4d504a78d963713919396f99e0f4e764e498189330d4bd75eb47e9fc21df21d27cd04ba080264313c0a9f2170ab6ddd276605a59ecdb4ca319caa1d434d3e13fda2df3f09e391962d5a6f81ef97b40bf838747dd91c3ce70a9a742990e32b66c28f04a88b9d804ff44ac289adc9b93db82ee1465858a443b41b055864ea86e5922ba464cf7a169394921c437f9df6bc54259dd7c6825f9ffcf98884db6bfc91ec"}, @generic="ce3519e34a820645828bc40732a1e2dccf731cf08a5e26605e191f79a2221e6c73ba947756b35cb3785a234e1e4a908fb828"]}]}, @nested={0x4, 0x137}, @generic="4a33970f3175fbc9feb22a57c330beabe7114086e306b7070c42795c1b27986ea1c904a9523b7cd5ecf08656a32be847f853e899e95cd4d945b9ad527959b3549acca2a77fde5d19ab27582908eaa3ac7cf3635199f5cb521dfcaf84c11ca6adad43ee91afa0b929b74ef4209a74897495b1476bd30c74bce0570577b0309fa41f75386746c46a55dc3047997a7fa438cc1e8a66a6df4ba1626105eca100365211eff7b1ee69f34bfd2bcda2bc0247c517cc7a9de9900fc71480cae59e4551f5eedb3ac21cf0428ed9328c", @typed={0x14, 0xb3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @typed={0x8, 0x45, 0x0, 0x0, @uid=r1}, @nested={0x5c, 0xf1, 0x0, 0x1, [@generic="5cc1bb5a0cdd64ba28a05901eaaa05ab55865dd62ef7b9", @nested={0x4, 0x1daf}, @generic="58919a20bdd5b5cde930a11fbf3d2a26aa9b228cce3ba22347a3923511046d632f81aecc1b8b6fb585e7e561cb", @typed={0x8, 0xe1, 0x0, 0x0, @uid=r2}, @typed={0x8, 0x1111, 0x0, 0x0, @uid=r3}]}, @generic="e4f3c5f5f41b30f22aeef61bec8ffdb8d58d400f9deb8a92c7eeb5524ecc8e0085f51e719282c9fb30773e59656163f1c11ac2a5b11f4edf8380ab94684a3025f01ea565f26f7eca8338ee93052bf6a7ff8d176083b0be1e684d23f10dd8517291556d3e5866e7b91068f6b27b7cd56163e06493e6b522905d9813385de00b30948010d2af26e20b31db21507bc909af037bb2290e6f9c604f7d55aeaeac7c", @nested={0x4, 0x46}, @typed={0x8, 0x146, 0x0, 0x0, @u32=0x7}]}]}, 0x1a24}, 0x1, 0x0, 0x0, 0x42804}, 0x4)

11.924308692s ago: executing program 6 (id=3234):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001200)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRES64], 0x68}, 0x1, 0x0, 0x0, 0x2400c4c1}, 0x0)
r0 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000fc0)={0x0, @in={{0x2, 0x4e20, @empty}}, 0xd5b, 0x521}, &(0x7f0000001080)=0x90) (async)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000fc0)={0x0, @in={{0x2, 0x4e20, @empty}}, 0xd5b, 0x521}, &(0x7f0000001080)=0x90)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x1314c1, 0x0) (async)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x1314c1, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7ff, 0x6576, 0x109})
syz_emit_ethernet(0x0, 0x0, 0x0) (async)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_usb_connect$midi(0x5, 0x31, 0x0, 0x0) (async)
syz_usb_connect$midi(0x5, 0x31, 0x0, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x11, r2, 0xd1d15000)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
io_uring_setup(0x2e00, &(0x7f0000000180)={0x0, 0x87f1, 0x40000, 0x3, 0x17b}) (async)
r5 = io_uring_setup(0x2e00, &(0x7f0000000180)={0x0, 0x87f1, 0x40000, 0x3, 0x17b})
io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r5, 0x1e, &(0x7f0000000200)={r3, 0x3, 0xf9a000, 0x6a, 0xfffffff8}, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000335c98df0000000000000000000000ffff1dff00000000000000000000000000000000ff00000000000000000000000009b300000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) (async)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000335c98df0000000000000000000000ffff1dff00000000000000000000000000000000ff00000000000000000000000009b300000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r7, 0x4020aed2, &(0x7f0000000200)={0x10000, 0x1000000, 0x8})
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f0000000340)={0x70000, 0x1108000}) (async)
ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f0000000340)={0x70000, 0x1108000})
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
r10 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r10, 0x4020565a, &(0x7f0000000400)={0x5, 0x2})
ioctl$VIDIOC_S_INPUT(r10, 0xc0045627, &(0x7f00000000c0)=0x2) (async)
ioctl$VIDIOC_S_INPUT(r10, 0xc0045627, &(0x7f00000000c0)=0x2)

6.711555361s ago: executing program 0 (id=3255):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)={0x2, 0x0, [{0x1000, 0x55, &(0x7f0000002540)=""/85}, {0x0, 0xffffffa2, &(0x7f00000025c0)=""/82}]})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/182, &(0x7f0000000140)=""/92})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1})
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x40110)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc4}})
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000001700)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000007eaf11bc4758e18c6d5d6c92d4000000000000000000000000000000000000000000000000000000000000000000000001fffffe00000000000000001111fb7fdb7900000000000000000000000000000000000000000000000000000000000000000000000000000000000001828705588ef6a9c3bca10000000100000002000002ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000200"/295], 0x110)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port0\x00', 0xb0, 0x70404, 0x0, 0xffffffff, 0x6da, 0x0, 0x0, 0x0, 0x4, 0x87})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0)
eventfd2(0xe5c, 0x80000)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x103080)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000140)=0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000380)={0x0, 0x9dc8, 0x0, 0x0, 0xf})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2)
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x3, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000400))
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r5)

6.710735937s ago: executing program 0 (id=3256):
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x18, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4000c014)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000002c0)={0x3, 0x1ff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtaction={0x14, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x1b, 0x18, 0x5, 0x402, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$packet(0x11, 0x3, 0x300)
rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00')
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r6=>0x0})
sendto$packet(r5, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x8100, r6, 0x1, 0x3, 0x6, @remote}, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x18, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4000c014) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
close(r1) (async)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async)
ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000002c0)={0x3, 0x1ff}) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtaction={0x14, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x1b, 0x18, 0x5, 0x402, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
socket$packet(0x11, 0x3, 0x300) (async)
rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) (async)
sendto$packet(r5, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x8100, r6, 0x1, 0x3, 0x6, @remote}, 0x14) (async)

6.404594606s ago: executing program 0 (id=3257):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r2 = dup(r1)
r3 = landlock_create_ruleset(&(0x7f0000000140)={0x10009, 0x3, 0x1, 0x0, 0x0, 0x3}, 0x30, 0x0)
landlock_restrict_self(r3, 0xb)
landlock_restrict_self(r3, 0x0)
socket$unix(0x1, 0x2, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b)
r4 = socket$unix(0x1, 0x2, 0x0)
accept$unix(0xffffffffffffffff, &(0x7f0000000200), &(0x7f00000002c0)=0x6e)
connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xa0380, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io(r7, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r7, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="20014000000020"], 0x0})
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x6, 0xc000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x528, 0x98, 0x98, 0x98, 0x98, 0x98, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xff, 'macvlan0\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x2, 0x71}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x23}, 0x0, 0xffffffff, 'vlan1\x00', 'nr0\x00', {0xff}}, 0x0, 0x1c0, 0x1e8, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'batadv0\x00', {0x100, 0x401, 0x14, 0x3, 0x9, 0x7, 0xaad, 0x78, 0x20}, {0x9}}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x11, 0x3}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xc, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x588)
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
write$UHID_INPUT(r2, &(0x7f0000001180)={0x8, {"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", 0x1000}}, 0x1006)
r10 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r10, 0x7a9, 0x0)

5.706091368s ago: executing program 3 (id=3260):
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd", 0x1a}], 0x1}, 0x40004)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1f0000003a000100faff070004"], 0x20}}, 0x4008094)

5.532946301s ago: executing program 3 (id=3261):
unshare(0x22020600)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00')
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0)
ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x5)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0xf1ba, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
close(0x5)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff)
symlinkat(&(0x7f0000002000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r3)
r4 = add_key(&(0x7f0000000500)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55)
execve(&(0x7f0000000400)='./file1\x00', 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab?P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb8\x10\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\x03\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7vC\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']})
r5 = io_uring_setup(0x3ac5, &(0x7f0000000040)={0x0, 0x200037b9, 0x0, 0x3, 0xcb})
io_uring_enter(r5, 0x5a9b, 0xbe06, 0x16, 0x0, 0x0)
memfd_create(&(0x7f00000003c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\x97\xb0[\xf2\x84j\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xb6\xe4\xce31\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3d\xa7\x05Y\xab\xf3\x9c\xf9\xa9\x0fa\xc2<PR\xac\xce\xa2\x95\xd64Je\x00\x885\xc4n\x88\xabw\x01[]\xbe\xb5s\fQh\b\xe0T`\xd7\xd2)F\x7fh\x9b\xd3\x825\x1e}\xf3\x89\xcb\xedYr\x94\fP\xe4\xe7qq;\x8a)8\xb4\xac\x9f\xd2\x16\x00\xbc\x7fg6\x9fb\xe8\xe3\xcb}`z\x82\xebq*\x06}\nH\xe5\xa8(0m\x7fN\x0e\xe4S:Gw\x8f\xb0\x04\xf4\xe4p\xa8W\x13\xf6\xeb\xef\n\xb6\xf4\xd3\xec', 0x1)
execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)
r6 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10)
move_pages(0x0, 0x4, &(0x7f0000000000)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil], 0x0, &(0x7f0000000200), 0x0)
execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000640)={[&(0x7f00000002c0)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m', &(0x7f0000000540)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}, 0x0)

4.555126925s ago: executing program 3 (id=3263):
r0 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00')
write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x0, 0xd1, 0x1}}, 0xa)
madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb)
r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRES64=0x0], 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$uac2(r1, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x20, 0xb, 0xc, "bc9b005cea75a07265d245b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000240)={0x20, 0x17, 0x28, "b0738096dfe33c940c44a1e9b96aa2405428973c093f35562a2c76adb13aea8a2449a205c2c7db8b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

4.410828825s ago: executing program 0 (id=3264):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{0x10, 0x0, [0xaba3, 0xf, 0x8, 0x9, 0x9, 0x9, 0x1, 0x8, 0x1, 0x0, 0x1, 0x1, 0x6, 0xfffffff2, 0x8001, 0xd1e]}], r1, 0x1, 0x1, 0x48}}, 0x20)
r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904", @ANYRESOCT=r1], 0x0)
r3 = socket$kcm(0x2, 0xa, 0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x19, 0x19, &(0x7f0000000580)=@raw=[@map_idx={0x18, 0x9, 0x5, 0x0, 0xa}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffff}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x3}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf6}}, @jmp={0x5, 0x0, 0x4, 0x0, 0x1, 0xffffffffffffffff, 0x1}, @jmp={0x5, 0x1, 0x4, 0x6, 0x3, 0x2, 0x10}], &(0x7f0000000680)='syzkaller\x00', 0x7fffffff, 0x0, &(0x7f00000006c0), 0x41100, 0x8, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x1, 0xf, 0x5, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000780)=[{0x1, 0x5, 0x5, 0x7}, {0x4, 0x3, 0xb, 0x2}], 0x10, 0xffff7fff}, 0x94)
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
sendmsg$kcm(r5, &(0x7f0000000100)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008a0)
sendmsg$kcm(r5, &(0x7f0000000180)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75d51900000000000000004000005040500002b24ec10064b6f2f0000f299a032ef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x4000000)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @generic={0x0, 0x7, 0x2, 0xe, 0xbf2}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f0000000280)='GPL\x00', 0x1, 0xba, &(0x7f00000002c0)=""/186, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0xd, 0x5, 0x80000000}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000004c0)=[{0x2, 0x2, 0x6, 0xa}]}, 0x94)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r8=>0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r9, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=<r11=>r10, @ANYBLOB="010025bdf000fddbdf2506000000200001800800030006000000140002007665746830"], 0x34}, 0x1, 0x0, 0x0, 0x8094}, 0x90)
sendmsg$nl_route(r7, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002a80)=ANY=[@ANYBLOB="440000001000110400"/20, @ANYRES16=r8, @ANYBLOB="0300000000000000140012800c0001006d6163766c616e000400418008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRESDEC=r5, @ANYRESOCT=r11], 0x44}}, 0x800)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup, 0xe, 0x0, 0xfffffff4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000002980)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002980), &(0x7f0000000340)=[0x0, 0x0, 0x0], <r12=>0x0}, 0xfffffffffffffd9c)
r13 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00')
preadv(r13, &(0x7f0000000580)=[{&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f0000000200)=""/202, 0xca}, {&(0x7f0000000000)=""/19, 0x13}, {&(0x7f0000000040)=""/22, 0x16}, {&(0x7f0000000080)=""/47, 0x2f}], 0x5, 0x1fe, 0x12)
r14 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=r13, @ANYRES32, @ANYBLOB='6\x00\x00\x00\b\x00\x00\x00', @ANYBLOB="ee60b85b30702b3d0017dc383b6cea583c07cdeb4b858cc30364e5692eb3c7aee8f5f6dcb0c1f7bfcecc3af9e67306cadfb83087e200951f3ea97e8149ce1aeaed728389e185653695ece09d692652f1b09cb6242b0a2651919927fba7bf9485440b4328ce", @ANYRES32=r14, @ANYBLOB, @ANYRES64=r12], 0x20)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000006c0)={0x8, <r15=>0x0}, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@fallback=r5, r6, 0x5, 0x20, 0x0, @void, @void, @void, @value=r15, r12}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{0xffffffffffffffff, <r16=>0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)='%-5lx  \x00'}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={0xffffffffffffffff, 0xe0, &(0x7f0000000b40)={0x0, <r17=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000980)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f00000009c0)=[0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb1, &(0x7f0000000a40)=[{}, {}], 0x10, 0x10, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0xe4, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000880)={@map=r16, r4, 0x28, 0x20, 0x0, @void, @void, @void, @value=r17, r12}, 0x20)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})
syz_usb_control_io(r2, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)=ANY=[@ANYRES16=r3, @ANYRESHEX=r3, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="40170d0000000560b833179f11134dd6"], 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0})

3.481048344s ago: executing program 5 (id=3266):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1f0000003a0001"], 0x20}}, 0x4008094)

3.13709507s ago: executing program 5 (id=3267):
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x5c, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x74, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400000000101090262000101000000090400001202060000052406000005240000000d24010000000006241af7ff230c24130017e56b9ecbee"], 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_misc(r2, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001ffefffff0000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900000000060000000000000000e2001e25b9bb47bc00", [0x8, 0xffffffff9673e35a]}})

2.95281366s ago: executing program 6 (id=3268):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000020303000000000000008e000200000f0800010001"], 0x1c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = inotify_init()
r3 = io_uring_setup(0x20d3, &(0x7f0000000000)={0x0, 0x5fa0, 0x8, 0x0, 0x2ff})
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
sendfile(r6, r6, &(0x7f0000000000)=0x2eb4, 0x2000007ff)
ioctl$RTC_PLL_GET(r6, 0x80207011, &(0x7f0000000180))
syz_usb_control_io$hid(r5, 0x0, &(0x7f00000008c0)={0x2c, &(0x7f0000000680)={0x20, 0xc, 0x2, "a5ad"}, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x6}})
syz_usb_control_io$lan78xx(r5, 0x0, &(0x7f0000000080)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x8, &(0x7f0000000080)=[{0xffff, 0x0, 0x1, 0x5}, {0xd, 0x7f, 0xe, 0x5}, {0x8000, 0x5, 0x0, 0x5}, {0x0, 0x8, 0x80, 0x2}, {0x7fff, 0x5, 0x2, 0x2}, {0x7, 0x3, 0x6, 0xa4}, {0x8f, 0x2, 0x3, 0x7}, {0x0, 0x3, 0x3, 0xa8e}]})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4)
io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', <r7=>0x0})
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="94d827850b706970000020801100026fe2f2adb56d65570bb193675ca78cf6dff96d8f6c75e1fa8205b8163c65a6a0c8e6d0bfdba38de74a5f80ef8fe4e5c2bada4aecb5bec1bc31c2504f63d8e95650fc87003c93828587dc6615d691f2fe39b068cdf33f2c9df093c71fae4f0f94c3dbc669e600"/131, @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054)

2.90271163s ago: executing program 2 (id=3269):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x400, 0x0)
ioctl$SNDCTL_TMR_TIMEBASE(r0, 0xc0045401, 0x0) (async)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x0, &(0x7f0000000080), &(0x7f00000000c0)='GPL\x00', 0x7ff, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000180)=[{0x3, 0x3, 0xa, 0x3}, {0x3, 0x2, 0x8}, {0x3, 0x4, 0x1, 0x9}, {0x1, 0x4, 0xb, 0xb}, {0x2, 0x3, 0x0, 0xb}], 0x10, 0xbf}, 0x94)
fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000040))
r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) (async)
r3 = io_uring_setup(0x5b2a, &(0x7f00000002c0)={0x0, 0xff2b, 0x400, 0x0, 0x270})
io_uring_setup(0x236d, &(0x7f0000000340)={0x0, 0xcf02, 0x80, 0x1, 0x150, 0x0, r3}) (async)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000080000bf0570f3"}, 0x4000c, 0x3}) (async)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000000)={0x2, 0x1, 0x3, 0x2, 0x4})

2.802331032s ago: executing program 2 (id=3270):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c000280050021"], 0x4c}}, 0x0)

2.681138328s ago: executing program 0 (id=3271):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x6, 0x1, 0x4000000fffe})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r2], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
socket$alg(0x26, 0x5, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r5 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb})
r6 = socket$inet(0x2, 0x80001, 0x84)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x4, {0x0, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x200000}}}})
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
io_uring_enter(r5, 0x2219, 0x7721, 0x56, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="400000001000010001000000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="00000000100d01002000128009000100766c616e00000000100002800c000200200000001f"], 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x8, 0x4, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x8040, 0x20, 0x0, 0x7}})
fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001fa03000000000004000000000000001000ac036477259f080700000000002000000000000000"], 0x24, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)

2.447553963s ago: executing program 2 (id=3272):
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
fremovexattr(r0, &(0x7f0000000000)=@random={'user.', '\x00'})
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x84)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000100)={0x0, @src_change})
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1cc5)
read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020)
setsockopt$inet6_buf(r0, 0x29, 0xcc, &(0x7f0000002200)="27b1f0393b2213b8c492b2680410022e014f9f9c70a300237db8ae85fca83215d31251598d0381baeefdd12bd6c8d349465b8eab09a18ad45b3c750e2aaf999b7f9d53b2e6b65ddaef2c50685e82db0df820a0ec3ee0d93095192762ea539e9bf82e180ee0692e72702cf99e3f6795914e32eb5ba79ded08d3592da97b250a674295077d5a626a3e31fa8aab5a9f9d91c85a64a11385f14416b2bbfa06500dbc64b6e625fd2db029b559b05b98e21ef1351475aa8f7f70c25595be7dc8138b929e2d9907047b79cb02bf7664", 0xcc)
getdents64(r0, &(0x7f0000002300)=""/116, 0x74)
ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000002380)={0x8, 0x2})
ioctl$DVB_DEMUX_DMX_QUERYBUF(0xffffffffffffffff, 0xc0186f3d, &(0x7f00000023c0)={0x80000000, 0x3, 0xac12, 0x1, 0x4, 0x2})
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000002480)={'ip6_vti0\x00', &(0x7f0000002400)={'ip6gre0\x00', <r2=>0x0, 0x4, 0x3, 0x4, 0x7, 0x30, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x40, 0x10, 0x9, 0x8}})
ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000024c0)={@private1, 0x71, r2})
r3 = add_key$user(&(0x7f0000002500), &(0x7f0000002540)={'syz', 0x0}, &(0x7f0000002580)="0381890f430e1f7814be1f7f6f0b8f19d4e468ff7225c0a7a22bb08ab3eb0bec023cdbea333e1c13666c1b48e71fadc32d544dd2254da5fe9b2a6328813a3e2b47c8dba9e5769f6072b1cc464b2605b24c31d82f397cca8c8670d6e75d277c98d55e46fd1843a94127728154bce68d9cba570fbba28d59bd4cac18e61ff31623b08b02ba4e7cdfc4e3931d592f8eeaeda01616d362f16b5d06953d28b15931a930faafb6e3cb4a0e8ae6ded359b398ced933a973409f102ae9f4c522d27d679b48bd4059e2447fa4852a47eac27d264103e398fd1df988dca4d843f51bdc66edaf", 0xe1, 0xfffffffffffffffd)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r0, 0x61)
syz_emit_ethernet(0x28, &(0x7f0000002680)={@remote, @local, @void, {@llc={0x4, {@snap={0x1, 0x0, "16af", "7eecf9", 0xd, "65283d3379e2760e93a8da0a0f3417dcb9"}}}}}, 0x0)
keyctl$invalidate(0x15, r3)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f00000026c0)={0x5692a17dc971a38b, 0x2, 0x3, {0xffff0001, 0x0, 0x943, 0x9}})
socket$nl_rdma(0x10, 0x3, 0x14)
r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000002700), 0x102, 0x0)
ioctl$KDDELIO(r4, 0x4b35, 0x400)
ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000002740)={0x0, 0x1a000, 0x1})
r5 = request_key(&(0x7f0000002800)='encrypted\x00', &(0x7f0000002840)={'syz', 0x2}, &(0x7f0000002880)='@\x00', 0xfffffffffffffffa)
keyctl$search(0xa, r3, &(0x7f0000002780)='asymmetric\x00', &(0x7f00000027c0)={'syz', 0x1}, r5)
syz_genetlink_get_family_id$ethtool(&(0x7f00000028c0), r0)
preadv(r1, &(0x7f0000002f40)=[{&(0x7f0000002900)=""/237, 0xed}, {&(0x7f0000002a00)=""/51, 0x33}, {&(0x7f0000002a40)=""/236, 0xec}, {&(0x7f0000002b40)=""/200, 0xc8}, {&(0x7f0000002c40)=""/251, 0xfb}, {&(0x7f0000002d40)=""/216, 0xd8}, {&(0x7f0000002e40)=""/219, 0xdb}], 0x7, 0x7, 0x8001)
keyctl$negate(0xd, r3, 0x8, r5)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000003040)=@mangle={'mangle\x00', 0x1f, 0x6, 0x568, 0x0, 0x130, 0x0, 0x2f8, 0x0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x6, &(0x7f0000002fc0), {[{{@ip={@empty, @loopback, 0x0, 0xff, 'batadv_slave_1\x00', 'wg1\x00', {}, {}, 0x5c, 0x3, 0x4d}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@socket0={{0x20}}, @common=@set={{0x40}, {{0x0, [0x2, 0x0, 0x1, 0x2, 0x4, 0xcdd9d4b7c1303add], 0x0, 0x4}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x1, 0x0, 0x6, 0x3, 0x6], 0x6, 0x3}, {0x1, [0x0, 0x4, 0x6, 0x1, 0x2, 0x3], 0x1, 0x4}}}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x2, 0x4, 0x3, 0x7, 0x4, 0x1], 0x5, 0x2}}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xb2}}}, {{@ip={@multicast1, @private=0xa010100, 0xff000000, 0xffffffff, 'pimreg0\x00', 'wg2\x00', {0xb781cc05376dbbe1}, {}, 0x32, 0x1, 0x76}, 0x0, 0xc8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}, @common=@ah={{0x30}, {[0x2, 0xffff]}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x794}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xf}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x54, 0x3}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2e}, @broadcast, 0xffffff00, 0xff000000, 'team_slave_0\x00', 'gre0\x00', {}, {0xff}, 0x22, 0x2, 0x4}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@unspec=@cpu={{0x28}, {0x8, 0xfccc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xbb6, 0x0, @remote, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5c8)
ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000003640)=@arm64={0x10, 0x81, 0xe0, '\x00', 0x1})
openat$nvram(0xffffffffffffff9c, &(0x7f0000003680), 0x80, 0x0)

2.257638232s ago: executing program 2 (id=3273):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)={0x2, 0x0, [{0x1000, 0x55, &(0x7f0000002540)=""/85}, {0x0, 0xffffffa2, &(0x7f00000025c0)=""/82}]})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/182, &(0x7f0000000140)=""/92})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1})
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x40110)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc4}})
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000001700)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000007eaf11bc4758e18c6d5d6c92d40000000000000000000000000000000000000000000000000000000000000000a400000000000000000000000000001111fb7fdb7900000000000000000000000000000000000000000000000000000000000000000000000000000000000001828705588ef6a9c3bca10000000100000002000002ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000200"/295], 0x110)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port0\x00', 0xb0, 0x70404, 0x0, 0xffffffff, 0x6da, 0x0, 0x0, 0x0, 0x4, 0x87})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0)
eventfd2(0xe5c, 0x80000)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x103080)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000140)=0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000380)={0x0, 0x9dc8, 0x0, 0x0, 0xf})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2)
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x3, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000400))
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r5)

2.052514988s ago: executing program 2 (id=3274):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000006800010400000000000000000200000000000000080001000100000008000500", @ANYRES32=0x1, @ANYBLOB="671df1ccead9cccb1e65fa6a31b9ef56f41010925d8e1fe3827366f04d1016de8fd95ad39ac458a07537b4c28a9cbb0fdfb723e12d07459926b67fc62edc00496b43c623e9dd68f450ab4aef30d0c83b5ca820abe8bbfd044b880bea39a91a538fe942cfffe4d32734dabfb6f29d8c4f592c55b025ef5bf3042f2c0000ba6f524dd4ffc5d6594f97ba6bfcb7d2e108d07fce68640b461aae77e75afbb9a098634852aedeb0f4287f2485a87153b99a343b845be701a506a4b49a913c77fb8dcbae5fc913237aa7d81311d95493679d64c673557334fb56438418da13ea8bfd343c401f2c61c4722cb6"], 0x38}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x4)
r2 = socket$rxrpc(0x21, 0x2, 0x2)
listen(r2, 0x5)
setsockopt$inet_opts(r1, 0x0, 0x12, &(0x7f0000000400)="89", 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x19, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e17d070000000000000000fec000000000008006060000008879e66485201a0023ca83747357a52759000400000000f2e0fc370000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x48, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x4}]}]}, 0x48}}, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
r3 = epoll_create1(0x0)
pidfd_getfd(0xffffffffffffffff, r3, 0x0)
getpid()
sendmsg$nl_route(r0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x1, 0x70bd29, 0x259fdbfd, {0x0, 0x0, 0x0, 0x0, 0x21120, 0x68591}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000804)

1.721111392s ago: executing program 5 (id=3275):
open(&(0x7f0000000380)='./file0\x00', 0x360842, 0x0)
r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x400400, 0x0)
socket$packet(0x11, 0x3, 0x300)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000002700)=""/73, 0x0, 0x60000})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680))
r2 = eventfd2(0x1, 0x1)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/198, 0x0, 0x8000000})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r3 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0x40000, 0x1, 0x33c})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3, 0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1)
r5 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x1)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r5, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x42002, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0)
request_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)

1.520427654s ago: executing program 0 (id=3276):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0200, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000000))
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0x8)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
syz_emit_ethernet(0x3c, &(0x7f0000000080)={@link_local, @broadcast, @void, {@llc={0x4, {@snap={0xab, 0xff, "9b6f", '\x00\v\x00', 0xf3fb, "348a05a6f275aee9c5b00a586fdbd8f21346971c2a901cec8360741c5c09d7c01700000000"}}}}}, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00')
preadv(r3, &(0x7f0000000500)=[{&(0x7f0000000680)=""/122, 0x7a}, {&(0x7f0000000180)=""/54, 0x36}], 0x2, 0x3, 0x20)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000140)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x400}})
ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000700)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x7, 0xffff, 0x0, 0x0, 0xe})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000090000000000000004000000180000000080f654000000000000000057000000fcffffff95"], &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x61, '\x00', r7, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x1ff, '\x00', @p_u32=0x0}})
write$binfmt_script(r6, &(0x7f0000000880)={'#! ', './file1', [{0x20, '/dev/loop#\x00'}], 0xa, "1cc0024e868c5e5976e645a73168e79cacc09ae543063b091a6a9490602e3069ade4f8af40d1d393192d0446ed9cd732748250e0d139a39ff488184b93a348fb63235a686c1cf2ecd88b1791781e5bb179582e4034261b1a7401f516e46a2951270b1045dcb3daf6dd25f875e6ea8865148c142ee039cbe7dbda353eacc4bfb6306e599bec6a67954a387f24d45e2d1c8085f69f8dfebe10ab0f9a638f62a3f97c5a407c5f591fcde02017f3f54e568b343851f2774f13ace647954708e69083d901bd220e4989526e754da03e8c91b1fb238c95ac78e507b9e95cd6165efa7ef25cd7854fc68f8e1adf918925ebe5abab0b376252ffedad6b81f4e921f4dc18e5f71b51a3eae386e4f89511ed298ee701732d91556feef809ae94c11b6c76f167d6e4d644d1742387018a522b23ed9dce56ebc57f5fb9c5cac8a7d6f6af9d2f2f1dcf8cae2bba7a25eb6162f7925c3b8cfe96cdcdc1fd69509a067207f6cb135a7e95ebda71b7005aa8363903ec18dac3f514a3c7240fb90845b4f801ce67c4c2ed6bae0555b3f1e4023e8f8d60c987904a4bba54c6c1e0deb9a49e995642d0270e97780346c466aca3d3c0bf1f547c8d7e92f4fac7cfde99ab7532ba0e5146eeef2cd39126f9556205c75f0acc8a5ea9d25fc0a4cb5605d6556c02159fd4ae07c9159a88493334f6a69e54f629f6ed92a8ea0c0e426001fa8cfa223e4d5341b8490e35a5df38166bd14e4168fb59a102e72cd82dc43de72353d7b708330728005ed8a150aa3d36ff497b40694769a1d06ba238b130ba100bf35321ac36f701a5d9c5baaf9d57508198e5f940ce102951e9cd17596cedb4cdf36960d54bd478fc8e4d1c592b1b744f954138daee9377d3f463d8f1157bd26bee3997683356c6bfbba554749bb729e60c8ca195d901dc4613"}, 0x2a9)
pwritev(r6, 0x0, 0x0, 0x8002, 0x1)
r8 = syz_open_procfs(0x0, &(0x7f0000000280)='schedstat\x00')
pread64(r8, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r8, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x40085}, 0xc841)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r9=>0xffffffffffffffff}, './file0\x00'})
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r9, 0x29, 0x37, &(0x7f0000000080)={0x0, 0x0, '\x00', [@pad1]}, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)={0x38, r5, 0x10ada85e65c25359, 0x0, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x69}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x84a0}, 0x5ef768c147daa5b0)
ioctl$int_in(r2, 0x5452, &(0x7f0000002480)=0x3)

1.340723232s ago: executing program 3 (id=3277):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x4, 0x4, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18210000", @ANYRES32=r0, @ANYBLOB="000000ffffff9500711000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.304763323s ago: executing program 5 (id=3278):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000080ffffff8110180000000000ce050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0xfffffee3, 0x10, &(0x7f0000000000), 0xfffffffffffffe4c}, 0x48)
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"])
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)={0x51, 0x0, 0x560c, {0x803, 0x5d4}, {0xfffa, 0x2}, @period={0x58, 0x2, 0x4, 0x71, 0x9ee, {0x4, 0xb, 0xfffb, 0xb}, 0x0, 0x0}})

1.021555263s ago: executing program 3 (id=3279):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@deltclass={0x24, 0x29, 0x8, 0x70b525, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x4, 0xb}, {0x3, 0x10}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x80000)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newlink={0x54, 0x10, 0x401, 0x70bd2a, 0x800, {0x0, 0x0, 0x0, 0x0, 0x38099, 0x4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24008400}, 0x4000040)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r2, 0x32b, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000005f80), r3)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000006000)={&(0x7f0000005fc0)={0x20, r4, 0x305, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x8800)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xa0102}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="00000300804f19722be08e3d0e963db2507a04003e4f7026a49a5bbf90b2b5a4fa31bcfc90c7f8a6d6a3e99bcd1924f1c5fca28a5404f59774f93733", @ANYRES16=r4, @ANYBLOB="00042abd7000fedbdf250100000008003a000600000005002a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x2c00c055}, 0x8000)
sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8804)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

699.754932ms ago: executing program 2 (id=3280):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x800000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000c00)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_START(r2, 0x4142, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0xc1, 0x0, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000000)={0x1, @pix={0x0, 0x0, 0x3132564e, 0x7, 0x9, 0xfffffffe, 0x2, 0xffffff81, 0x0, 0x0, 0x1, 0x4}})
r5 = socket$tipc(0x1e, 0x2, 0x0)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000800), 0x101400)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r6, 0x40045402, &(0x7f0000000840))
io_setup(0x6, &(0x7f0000000540)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r5, 0x0}])
ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f00000005c0)={0xb6, 0x0, 0x80055e})
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"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"})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_XCRS(r3, 0x4188aea7, &(0x7f0000000640)={0x6, 0x80000000, [{0x0, 0x0, 0x63c}, {0x1, 0x0, 0xf}, {0x7, 0x0, 0x800}, {0x10001, 0x0, 0x40}, {0xaf, 0x0, 0x10001}, {0xebcd, 0x0, 0x9}, {0x5, 0x0, 0x8}, {0x8, 0x0, 0x800}, {0x80, 0x0, 0x7}, {0x4, 0x0, 0x1}, {0x4, 0x0, 0x5}, {0xfffffffd, 0x0, 0x3}, {0x1e86097d, 0x0, 0x1800}, {0x40, 0x0, 0x7}, {0x101, 0x0, 0x9}, {0x800, 0x0, 0xfffffffffffffffe}]})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x800000, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) (async)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000c00)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) (async)
ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) (async)
ioctl$SNDRV_PCM_IOCTL_START(r2, 0x4142, 0x0) (async)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0xc1, 0x0, 0x0) (async)
syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) (async)
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000000)={0x1, @pix={0x0, 0x0, 0x3132564e, 0x7, 0x9, 0xfffffffe, 0x2, 0xffffff81, 0x0, 0x0, 0x1, 0x4}}) (async)
socket$tipc(0x1e, 0x2, 0x0) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000800), 0x101400) (async)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r6, 0x40045402, &(0x7f0000000840)) (async)
io_setup(0x6, &(0x7f0000000540)) (async)
io_submit(r7, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r5, 0x0}]) (async)
ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f00000005c0)={0xb6, 0x0, 0x80055e}) (async)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"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"}) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_SET_XCRS(r3, 0x4188aea7, &(0x7f0000000640)={0x6, 0x80000000, [{0x0, 0x0, 0x63c}, {0x1, 0x0, 0xf}, {0x7, 0x0, 0x800}, {0x10001, 0x0, 0x40}, {0xaf, 0x0, 0x10001}, {0xebcd, 0x0, 0x9}, {0x5, 0x0, 0x8}, {0x8, 0x0, 0x800}, {0x80, 0x0, 0x7}, {0x4, 0x0, 0x1}, {0x4, 0x0, 0x5}, {0xfffffffd, 0x0, 0x3}, {0x1e86097d, 0x0, 0x1800}, {0x40, 0x0, 0x7}, {0x101, 0x0, 0x9}, {0x800, 0x0, 0xfffffffffffffffe}]}) (async)

407.785937ms ago: executing program 3 (id=3281):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r4 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r4, &(0x7f0000000440)="bad386ddc7180869ab2b83b48ae15386fe9a03", 0x13, 0x24004095, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x14)

0s ago: executing program 6 (id=3282):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xa2)
socket$netlink(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000300)=@mmap={0x1, 0x2, 0x4, 0x0, 0x81, {}, {0x5, 0x8, 0x8, 0x5, 0x5, 0x8, "0adb3fb8"}, 0x2, 0x1, {}, 0x3ff})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x48c, 0x0, 0xfffffffffffffffb}]})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x2, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0)
unshare(0x8040480)
ptrace(0x10, 0x1)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x2048}, {0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x40}, {}], 0x4, 0x1)
r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000400)={0x5, 0x2})
ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x2)
getpid()
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r7, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r5, @ANYRESHEX=0x0, @ANYRESDEC=r7, @ANYRESDEC=r2], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xde9, r8, 0x20}, 0x38)

kernel console output (not intermixed with test programs):

alid maxpacket 0
[  732.934176][ T5677] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  732.979821][ T5677] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  732.979961][ T5677] usb 6-1: Manufacturer: syz
[  733.030614][ T5677] usb 6-1: config 0 descriptor??
[  733.470480][ T5677] rc_core: IR keymap rc-hauppauge not found
[  733.470528][ T5677] Registered IR keymap rc-empty
[  733.470734][ T5677] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  733.496346][ T5677] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  733.511478][ T5677] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  733.530128][ T5677] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input101
[  733.556513][ T5677] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  733.581925][ T5677] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  733.601793][ T5677] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  733.621177][ T5677] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  733.641343][ T5677] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  733.660581][ T5677] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  733.680436][ T5677] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  733.700755][ T5677] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  733.720936][ T5677] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  733.740537][ T5677] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  733.764770][ T5677] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  733.765627][ T5677] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  733.861031][ T5677] usb 6-1: USB disconnect, device number 117
[  734.036959][T16143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3002'.
[  734.333751][ T5700] usb 3-1: 1:0 : does not exist
[  734.344376][ T5700] usb 3-1: 2:1 : incorrect wMaxPacketSize for BADD profile
[  734.347044][ T5700] usb 3-1: 1:3 : does not exist
[  734.347250][ T5700] usb 3-1: incorrect wMaxPacketSize 0x210 for BADD profile
[  734.531836][ T5700] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22
[  734.560498][ T5700] usb 3-1: USB disconnect, device number 58
[  734.613386][ T5677] usb 7-1: USB disconnect, device number 12
[  734.625773][ T5622] udevd[5622]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  734.997887][T16145] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  735.007941][T16145] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  735.009418][T16145] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  735.009869][T16145] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  735.026765][T16145] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  735.027317][T16145] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  735.048116][T16145] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  735.300663][ T5693] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  735.320732][   T31] usb 6-1: new high-speed USB device number 118 using dummy_hcd
[  735.453659][ T5693] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  735.468737][ T5693] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  735.468820][ T5693] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  735.497639][ T5693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  735.506114][ T5693] usb 3-1: SerialNumber: syz
[  735.516076][   T31] usb 6-1: unable to get BOS descriptor or descriptor too short
[  735.523985][   T31] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  735.541422][   T31] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  735.541473][   T31] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  735.566613][   T31] usb 6-1: string descriptor 0 read error: -22
[  735.566798][   T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  735.574661][ T5693] cdc_ether 3-1:1.0: missing cdc ether descriptor
[  735.609037][   T31] usb 6-1: selecting invalid altsetting 1
[  735.616363][   T31] usb 6-1: unit 3 not found!
[  735.835055][T16148] loop4: detected capacity change from 0 to 7
[  735.880342][   T31] usb 6-1: unit 0 not found!
[  735.890422][T16148] Dev loop4: unable to read RDB block 7
[  735.890488][T16148]  loop4: AHDI p1 p2 p3
[  735.890517][T16148] loop4: partition table partially beyond EOD, truncated
[  735.891149][T16148] loop4: p1 size 825635125 extends beyond EOD, truncated
[  735.958868][T16148] loop4: p3 start 335544320 is beyond EOD, truncated
[  735.967708][ T5677] usb 3-1: USB disconnect, device number 59
[  736.091231][T16150] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3005'.
[  736.118517][T16150] batadv0: entered promiscuous mode
[  736.124968][T16150] macvtap0: entered promiscuous mode
[  736.132744][T16150] 8021q: adding VLAN 0 to HW filter on device macvtap0
[  736.166993][T16150] batadv0: left promiscuous mode
[  736.260849][ T5616] Bluetooth: hci0: command 0x0406 tx timeout
[  736.350542][ T5622] udevd[5622]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  736.367677][ T5627] udevd[5627]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  736.455092][ T5693] usb 6-1: USB disconnect, device number 118
[  736.975083][T16182] loop6: detected capacity change from 0 to 524288000
[  737.034922][T16182] Invalid logical block size (255)
[  737.060482][ T5616] Bluetooth: hci1: command 0x0c1a tx timeout
[  737.060539][ T5616] Bluetooth: hci5: command 0x0c1a tx timeout
[  737.060587][ T5616] Bluetooth: hci3: command 0x0406 tx timeout
[  737.060632][ T5616] Bluetooth: hci2: command 0x0c1a tx timeout
[  737.182488][   T31] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  737.360614][ T5693] usb 6-1: new high-speed USB device number 119 using dummy_hcd
[  737.369911][   T31] usb 3-1: Using ep0 maxpacket: 16
[  737.370676][   T31] usb 3-1: New USB device found, idVendor=12d1, idProduct=6f7a, bcdDevice=85.50
[  737.372053][   T31] usb 3-1: config 0 has no interfaces?
[  737.382066][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  737.382146][   T31] usb 3-1: Product: syz
[  737.382190][   T31] usb 3-1: Manufacturer: syz
[  737.382239][   T31] usb 3-1: SerialNumber: syz
[  737.396908][   T31] usb 3-1: config 0 descriptor??
[  737.490860][ T5607] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  737.521520][ T5693] usb 6-1: Using ep0 maxpacket: 16
[  737.523152][ T5693] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  737.528774][ T5693] usb 6-1: config index 0 descriptor too short (expected 65, got 36)
[  737.528910][ T5693] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  737.528983][ T5693] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  737.529056][ T5693] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  737.529131][ T5693] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  737.529239][ T5693] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  737.613613][ T5693] usb 6-1: config 0 descriptor??
[  737.620396][ T5677] usb 3-1: USB disconnect, device number 60
[  737.627750][T16184] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  737.658706][ T5693] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input103
[  737.672054][ T5607] usb 7-1: Using ep0 maxpacket: 32
[  737.678702][ T5607] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  737.689074][ T5607] usb 7-1: config 0 has an invalid interface number: 188 but max is 0
[  737.689104][ T5607] usb 7-1: config 0 has no interface number 0
[  737.689156][ T5607] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  737.699468][ T5607] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  737.699549][ T5607] usb 7-1: Product: syz
[  737.699591][ T5607] usb 7-1: Manufacturer: syz
[  737.699638][ T5607] usb 7-1: SerialNumber: syz
[  737.750432][ T5607] usb 7-1: config 0 descriptor??
[  737.755650][T16186] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[  737.853200][T16184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  737.866262][T16184] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  737.987247][T16186] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[  738.392373][ T5607] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  738.394365][ T5607] asix 7-1:0.188: probe with driver asix failed with error -61
[  739.098430][T16205] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3023'.
[  739.140670][ T5618] Bluetooth: hci2: command 0x0c1a tx timeout
[  739.408558][T16212] nvme_fabrics: unknown parameter or missing value '#!  	»›�¦1ÝÖæ³R¹Û?¾Ó&nâ¶õ%²ßõƒºë“~ˆÜì[6=
pÍŠyz\UÔj@5NãfåWÎrs„)ìq²‰' in ctrl creation request
[  739.634410][T16216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3025'.
[  739.636351][T16216] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3025'.
[  740.085990][T16219] loop6: detected capacity change from 0 to 524288000
[  740.151013][T16219] Invalid logical block size (255)
[  740.160682][ T5677] usb 6-1: USB disconnect, device number 119
[  740.462845][T16226] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3028'.
[  740.554392][T16228] FAULT_INJECTION: forcing a failure.
[  740.554392][T16228] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  740.554483][T16228] CPU: 0 UID: 0 PID: 16228 Comm: syz.0.3029 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  740.554517][T16228] Tainted: [L]=SOFTLOCKUP
[  740.554527][T16228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  740.554542][T16228] Call Trace:
[  740.554552][T16228]  <TASK>
[  740.554563][T16228]  dump_stack_lvl+0xe8/0x150
[  740.554602][T16228]  should_fail_ex+0x410/0x560
[  740.554641][T16228]  prepare_alloc_pages+0x223/0x600
[  740.554685][T16228]  __alloc_frozen_pages_noprof+0x185/0x5a0
[  740.554714][T16228]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  740.554743][T16228]  ? __pfx_policy_nodemask+0x10/0x10
[  740.554776][T16228]  ? mfill_atomic_install_pte+0x775/0x890
[  740.554815][T16228]  alloc_pages_mpol+0x21e/0x390
[  740.554848][T16228]  folio_alloc_mpol_noprof+0x39/0x160
[  740.554878][T16228]  shmem_mfill_folio_alloc+0x196/0x370
[  740.554910][T16228]  ? __pfx_shmem_mfill_folio_alloc+0x10/0x10
[  740.554936][T16228]  __mfill_atomic_pte+0xe0/0x610
[  740.554973][T16228]  mfill_atomic_pte_zeropage+0x3a7/0x640
[  740.555013][T16228]  ? __pfx_mfill_atomic_pte_zeropage+0x10/0x10
[  740.555052][T16228]  ? mm_alloc_pmd+0x246/0x400
[  740.555090][T16228]  userfaultfd_zeropage+0x674/0xfa0
[  740.555125][T16228]  ? __pfx_userfaultfd_zeropage+0x10/0x10
[  740.555160][T16228]  userfaultfd_ioctl+0x483/0x560
[  740.555184][T16228]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  740.555205][T16228]  ? ksys_write+0x1fc/0x270
[  740.555233][T16228]  ? bpf_lsm_file_ioctl+0x9/0x20
[  740.555255][T16228]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  740.555277][T16228]  __se_sys_ioctl+0xfc/0x170
[  740.555295][T16228]  do_syscall_64+0x166/0x520
[  740.555318][T16228]  ? trace_irq_disable+0x3b/0x140
[  740.555338][T16228]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  740.555355][T16228]  ? clear_bhb_loop+0x70/0xc0
[  740.555375][T16228]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  740.555391][T16228] RIP: 0033:0x7f6f2739e159
[  740.555407][T16228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  740.555422][T16228] RSP: 002b:00007f6f2824c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  740.555440][T16228] RAX: ffffffffffffffda RBX: 00007f6f27625fa0 RCX: 00007f6f2739e159
[  740.555453][T16228] RDX: 0000200000000000 RSI: 00000000c020aa04 RDI: 0000000000000003
[  740.555464][T16228] RBP: 00007f6f2824c090 R08: 0000000000000000 R09: 0000000000000000
[  740.555474][T16228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  740.555484][T16228] R13: 00007f6f27626038 R14: 00007f6f27625fa0 R15: 00007f6f2774fa48
[  740.555509][T16228]  </TASK>
[  740.870768][ T5693] usb 7-1: USB disconnect, device number 13
[  740.880069][T16230] netlink: 'syz.0.3029': attribute type 4 has an invalid length.
[  740.929897][T16231] netlink: 'syz.0.3029': attribute type 4 has an invalid length.
[  740.973685][T16226] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  741.041435][T16226] bond1 (unregistering): Released all slaves
[  741.220822][ T5618] Bluetooth: hci2: command 0x0c1a tx timeout
[  741.241262][ T5607] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  741.413988][ T5607] usb 1-1: New USB device found, idVendor=0582, idProduct=0156, bcdDevice= 0.40
[  741.418485][ T5607] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  741.418590][ T5607] usb 1-1: config 1 has no interface number 0
[  741.418708][ T5607] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  741.418802][ T5607] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  741.418892][ T5607] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7
[  741.499651][ T5607] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  741.499699][ T5607] usb 1-1: Product: syz
[  741.500695][ T5607] usb 1-1: Manufacturer: syz
[  741.500723][ T5607] usb 1-1: SerialNumber: syz
[  741.802718][T16230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  741.823342][T16230] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  743.456830][ T5607] usb 1-1: 1:0 : does not exist
[  743.456890][ T5607] usb 1-1: 2:1 : incorrect wMaxPacketSize for BADD profile
[  743.461529][ T5607] usb 1-1: 1:3 : does not exist
[  743.461748][ T5607] usb 1-1: incorrect wMaxPacketSize 0x210 for BADD profile
[  743.518988][ T5607] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22
[  743.531220][ T5607] usb 1-1: USB disconnect, device number 56
[  743.551378][ T5622] udevd[5622]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  747.147360][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  747.147454][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  793.231870][T16075] cxacru 4-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?)
[  808.583332][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  808.583423][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  810.579357][T16273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  810.588384][T16273] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  810.592863][T16273] sch_tbf: burst 1520 is lower than device lo mtu (65550) !
[  810.614122][T16269] loop6: detected capacity change from 0 to 524288000
[  810.673785][T16281] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3041'.
[  810.683284][T16269] Invalid logical block size (255)
[  810.732485][ T5700] usb 4-1: new full-speed USB device number 24 using dummy_hcd
[  810.871706][ T5700] usb 4-1: device descriptor read/64, error -71
[  810.928428][T16281] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  810.951327][T16281] bond1 (unregistering): Released all slaves
[  811.121473][ T5700] usb 4-1: new full-speed USB device number 25 using dummy_hcd
[  811.146791][ T5693] usb 7-1: new full-speed USB device number 14 using dummy_hcd
[  811.260393][ T5700] usb 4-1: device descriptor read/64, error -71
[  811.294579][ T5693] usb 7-1: device descriptor read/64, error -71
[  811.370807][ T5700] usb usb4-port1: attempt power cycle
[  811.540496][ T5693] usb 7-1: new full-speed USB device number 15 using dummy_hcd
[  811.560083][T16299] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  811.670471][ T5693] usb 7-1: device descriptor read/64, error -71
[  811.720403][ T5700] usb 4-1: new full-speed USB device number 26 using dummy_hcd
[  811.741126][ T5700] usb 4-1: device descriptor read/8, error -71
[  811.781330][ T5693] usb usb7-port1: attempt power cycle
[  811.987905][ T5700] usb 4-1: new full-speed USB device number 27 using dummy_hcd
[  812.012872][ T5700] usb 4-1: device descriptor read/8, error -71
[  812.120387][ T5693] usb 7-1: new full-speed USB device number 16 using dummy_hcd
[  812.131043][ T5700] usb usb4-port1: unable to enumerate USB device
[  812.141146][ T5693] usb 7-1: device descriptor read/8, error -71
[  812.235989][T16312] FAULT_INJECTION: forcing a failure.
[  812.235989][T16312] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  812.236074][T16312] CPU: 0 UID: 0 PID: 16312 Comm: syz.2.3050 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  812.236108][T16312] Tainted: [L]=SOFTLOCKUP
[  812.236119][T16312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  812.236134][T16312] Call Trace:
[  812.236151][T16312]  <TASK>
[  812.236163][T16312]  dump_stack_lvl+0xe8/0x150
[  812.236276][T16312]  should_fail_ex+0x410/0x560
[  812.236429][T16312]  prepare_alloc_pages+0x223/0x600
[  812.236548][T16312]  __alloc_frozen_pages_noprof+0x185/0x5a0
[  812.236643][T16312]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  812.236718][T16312]  ? __pfx_policy_nodemask+0x10/0x10
[  812.237156][T16312]  ? mfill_atomic_install_pte+0x775/0x890
[  812.237276][T16312]  alloc_pages_mpol+0x21e/0x390
[  812.237315][T16312]  folio_alloc_mpol_noprof+0x39/0x160
[  812.237571][T16312]  shmem_mfill_folio_alloc+0x196/0x370
[  812.237692][T16312]  ? __pfx_shmem_mfill_folio_alloc+0x10/0x10
[  812.237779][T16312]  __mfill_atomic_pte+0xe0/0x610
[  812.237924][T16312]  mfill_atomic_pte_zeropage+0x3a7/0x640
[  812.238043][T16312]  ? __pfx_mfill_atomic_pte_zeropage+0x10/0x10
[  812.238157][T16312]  ? mm_alloc_pmd+0x246/0x400
[  812.238296][T16312]  userfaultfd_zeropage+0x674/0xfa0
[  812.238419][T16312]  ? __pfx_userfaultfd_zeropage+0x10/0x10
[  812.238594][T16312]  userfaultfd_ioctl+0x483/0x560
[  812.238719][T16312]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  812.238800][T16312]  ? ksys_write+0x1fc/0x270
[  812.238934][T16312]  ? bpf_lsm_file_ioctl+0x9/0x20
[  812.239032][T16312]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  812.239121][T16312]  __se_sys_ioctl+0xfc/0x170
[  812.239199][T16312]  do_syscall_64+0x166/0x520
[  812.239300][T16312]  ? trace_irq_disable+0x3b/0x140
[  812.239367][T16312]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  812.239440][T16312]  ? clear_bhb_loop+0x70/0xc0
[  812.239519][T16312]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  812.239585][T16312] RIP: 0033:0x7fac9739e159
[  812.239651][T16312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  812.239708][T16312] RSP: 002b:00007fac9821e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  812.239787][T16312] RAX: ffffffffffffffda RBX: 00007fac97625fa0 RCX: 00007fac9739e159
[  812.239842][T16312] RDX: 0000200000000000 RSI: 00000000c020aa04 RDI: 0000000000000003
[  812.239896][T16312] RBP: 00007fac9821e090 R08: 0000000000000000 R09: 0000000000000000
[  812.239942][T16312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  812.239985][T16312] R13: 00007fac97626038 R14: 00007fac97625fa0 R15: 00007fac9774fa48
[  812.240096][T16312]  </TASK>
[  812.415046][ T5693] usb 7-1: new full-speed USB device number 17 using dummy_hcd
[  812.559022][T16312] netlink: 'syz.2.3050': attribute type 4 has an invalid length.
[  812.559643][ T5693] usb 7-1: device descriptor read/8, error -71
[  812.662288][ T5693] usb usb7-port1: unable to enumerate USB device
[  812.890498][T15511] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  813.043688][T15511] usb 3-1: New USB device found, idVendor=0582, idProduct=0156, bcdDevice= 0.40
[  813.049735][T15511] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  813.049827][T15511] usb 3-1: config 1 has no interface number 0
[  813.049958][T15511] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  813.050058][T15511] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  813.050164][T15511] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7
[  813.117557][T15511] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  813.117667][T15511] usb 3-1: Product: syz
[  813.117719][T15511] usb 3-1: Manufacturer: syz
[  813.117781][T15511] usb 3-1: SerialNumber: syz
[  813.420416][T16313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  813.420924][T16313] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  813.472869][T16319] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3051'.
[  814.002087][ T5693] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  814.161893][ T5693] usb 4-1: Using ep0 maxpacket: 8
[  814.168646][ T5693] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  814.183298][ T5693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  814.183361][ T5693] usb 4-1: Product: syz
[  814.194031][ T5693] usb 4-1: Manufacturer: syz
[  814.194055][ T5693] usb 4-1: SerialNumber: syz
[  814.215553][ T5693] usb 4-1: config 0 descriptor??
[  814.456413][ T5693] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  815.073485][T16345] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  815.270163][T15511] usb 3-1: 1:0 : does not exist
[  815.270222][T15511] usb 3-1: 2:1 : incorrect wMaxPacketSize for BADD profile
[  815.274937][T15511] usb 3-1: 1:3 : does not exist
[  815.275138][T15511] usb 3-1: incorrect wMaxPacketSize 0x210 for BADD profile
[  815.487124][T15511] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22
[  815.516257][T15511] usb 3-1: USB disconnect, device number 61
[  815.599574][T16276] udevd[16276]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  815.757414][ T5616] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  815.783155][ T5616] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  815.796346][ T5616] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  815.806483][ T5616] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  815.819496][ T5616] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  815.901836][T16359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  815.902482][T16359] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  816.207804][T16365] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad)
[  816.214925][T16365] PKCS7: Only support pkcs7_signedData type
[  817.426852][T16382] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3069'.
[  817.437995][T16383] FAULT_INJECTION: forcing a failure.
[  817.437995][T16383] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  817.438038][T16383] CPU: 0 UID: 0 PID: 16383 Comm: syz.6.3070 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  817.438070][T16383] Tainted: [L]=SOFTLOCKUP
[  817.438078][T16383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  817.438093][T16383] Call Trace:
[  817.438103][T16383]  <TASK>
[  817.438113][T16383]  dump_stack_lvl+0xe8/0x150
[  817.438154][T16383]  should_fail_ex+0x410/0x560
[  817.438194][T16383]  prepare_alloc_pages+0x223/0x600
[  817.438239][T16383]  __alloc_frozen_pages_noprof+0x185/0x5a0
[  817.438268][T16383]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  817.438297][T16383]  ? __pfx_policy_nodemask+0x10/0x10
[  817.438329][T16383]  ? mfill_atomic_install_pte+0x775/0x890
[  817.438369][T16383]  alloc_pages_mpol+0x21e/0x390
[  817.438408][T16383]  folio_alloc_mpol_noprof+0x39/0x160
[  817.438446][T16383]  shmem_mfill_folio_alloc+0x196/0x370
[  817.438501][T16383]  ? __pfx_shmem_mfill_folio_alloc+0x10/0x10
[  817.438586][T16383]  __mfill_atomic_pte+0xe0/0x610
[  817.438701][T16383]  mfill_atomic_pte_zeropage+0x3a7/0x640
[  817.438800][T16383]  ? __pfx_mfill_atomic_pte_zeropage+0x10/0x10
[  817.438905][T16383]  ? mm_alloc_pmd+0x246/0x400
[  817.438987][T16383]  userfaultfd_zeropage+0x674/0xfa0
[  817.439112][T16383]  ? __pfx_userfaultfd_zeropage+0x10/0x10
[  817.439241][T16383]  userfaultfd_ioctl+0x483/0x560
[  817.439324][T16383]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  817.439388][T16383]  ? ksys_write+0x1fc/0x270
[  817.439501][T16383]  ? bpf_lsm_file_ioctl+0x9/0x20
[  817.439576][T16383]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  817.439657][T16383]  __se_sys_ioctl+0xfc/0x170
[  817.439720][T16383]  do_syscall_64+0x166/0x520
[  817.439795][T16383]  ? trace_irq_disable+0x3b/0x140
[  817.439854][T16383]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  817.439938][T16383]  ? clear_bhb_loop+0x70/0xc0
[  817.440021][T16383]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  817.440089][T16383] RIP: 0033:0x7f2d1999e159
[  817.440150][T16383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  817.440202][T16383] RSP: 002b:00007f2d1a8e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  817.440266][T16383] RAX: ffffffffffffffda RBX: 00007f2d19c25fa0 RCX: 00007f2d1999e159
[  817.440318][T16383] RDX: 0000200000000000 RSI: 00000000c020aa04 RDI: 0000000000000003
[  817.440359][T16383] RBP: 00007f2d1a8e9090 R08: 0000000000000000 R09: 0000000000000000
[  817.440399][T16383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  817.440440][T16383] R13: 00007f2d19c26038 R14: 00007f2d19c25fa0 R15: 00007f2d19d4fa48
[  817.440525][T16383]  </TASK>
[  817.693564][T16383] netlink: 'syz.6.3070': attribute type 4 has an invalid length.
[  817.751819][T15511] usb 6-1: new high-speed USB device number 120 using dummy_hcd
[  817.912337][T15511] usb 6-1: Using ep0 maxpacket: 16
[  817.916966][T15511] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  817.940923][ T5618] Bluetooth: hci4: command tx timeout
[  817.946910][T15511] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  817.949151][T15511] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  817.949225][T15511] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4
[  817.949291][T15511] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 36866, setting to 1024
[  817.949363][T15511] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[  817.949426][T15511] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  817.958433][T15511] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  817.958463][T15511] usb 6-1: SerialNumber: syz
[  818.036612][T16382] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  818.044197][T16382] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  818.087637][ T5700] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  818.162678][ T5693] usb write operation failed. (-71)
[  818.176895][ T5693] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  818.189874][ T5693] dvbdev: DVB: registering new adapter (Terratec H7)
[  818.196935][ T5693] usb 4-1: media controller created
[  818.205317][ T5693] usb read operation failed. (-71)
[  818.216074][ T5693] usb write operation failed. (-71)
[  818.230126][ T5693] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  818.242476][ T5693] usb 4-1: USB disconnect, device number 28
[  818.255446][ T5700] usb 7-1: New USB device found, idVendor=0582, idProduct=0156, bcdDevice= 0.40
[  818.285435][ T5700] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  818.285514][ T5700] usb 7-1: config 1 has no interface number 0
[  818.285759][ T5700] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  818.285923][ T5700] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  818.286087][ T5700] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7
[  818.326132][ T5700] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  818.326202][ T5700] usb 7-1: Product: syz
[  818.326302][ T5700] usb 7-1: Manufacturer: syz
[  818.326380][ T5700] usb 7-1: SerialNumber: syz
[  818.529874][T16382] loop4: detected capacity change from 0 to 7
[  818.630452][T16396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3071'.
[  818.640687][T16396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3071'.
[  818.664184][T16384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  818.677001][T16384] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  818.709275][T16382] Dev loop4: unable to read RDB block 7
[  818.711442][T16382]  loop4: unable to read partition table
[  818.712572][T16382] loop4: partition table beyond EOD, truncated
[  818.718484][T16382] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰üg¾CêjÌ–ã¢P=×!MX‹ºÐ	œëÜ%õ«`Éæ�˜Èµ4FLQkÝŠ5) failed (rc=-5)
[  818.737776][T16364] bridge0: port 1(bridge_slave_0) entered blocking state
[  818.746422][T16364] bridge0: port 1(bridge_slave_0) entered disabled state
[  818.764931][T16364] bridge_slave_0: entered allmulticast mode
[  818.792290][T15511] cdc_acm 6-1:1.0: ttyACM0: USB ACM device
[  818.805680][T16364] bridge_slave_0: entered promiscuous mode
[  818.849285][T16364] bridge0: port 2(bridge_slave_1) entered blocking state
[  818.849677][T16364] bridge0: port 2(bridge_slave_1) entered disabled state
[  818.866300][T16364] bridge_slave_1: entered allmulticast mode
[  818.890094][T16364] bridge_slave_1: entered promiscuous mode
[  818.909897][T15511] usb 6-1: USB disconnect, device number 120
[  819.141630][T16364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  819.174419][T16364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  819.258295][T16403] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  819.347198][T16403] kvm: pic: non byte read
[  819.348007][T16403] kvm: pic: level sensitive irq not supported
[  819.354348][T16403] kvm: pic: non byte read
[  819.359207][T16403] kvm: pic: level sensitive irq not supported
[  819.359538][T16403] kvm: pic: non byte read
[  819.449264][T16407] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  819.585569][T16364] team0: Port device team_slave_0 added
[  819.613509][T16364] team0: Port device team_slave_1 added
[  819.727870][T16364] batman_adv: batadv0: Adding interface: batadv_slave_0
[  819.729670][T16364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  819.729731][T16364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  819.785330][T16364] batman_adv: batadv0: Adding interface: batadv_slave_1
[  819.793276][T16364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  819.821171][T16364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  819.902765][T16364] hsr_slave_0: entered promiscuous mode
[  819.911199][T16364] hsr_slave_1: entered promiscuous mode
[  819.923506][T16364] debugfs: 'hsr0' already exists in 'hsr'
[  819.932576][T16364] Cannot create hsr debugfs directory
[  820.020482][ T5618] Bluetooth: hci4: command tx timeout
[  820.320838][T15511] usb 4-1: new full-speed USB device number 29 using dummy_hcd
[  820.417929][ T5700] usb 7-1: 1:0 : does not exist
[  820.418005][ T5700] usb 7-1: 2:1 : incorrect wMaxPacketSize for BADD profile
[  820.429869][ T5700] usb 7-1: 1:3 : does not exist
[  820.430037][ T5700] usb 7-1: incorrect wMaxPacketSize 0x210 for BADD profile
[  820.540483][T15511] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  820.561714][T15511] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  820.561800][T15511] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x77, changing to 0x7
[  820.561856][T15511] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10
[  820.561935][T15511] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  820.562004][T15511] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  820.562114][T15511] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  820.562179][T15511] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  820.616828][T15511] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  820.616924][T15511] usb 4-1: Manufacturer: syz
[  820.675824][T15511] usb 4-1: config 0 descriptor??
[  820.690390][ T5693] usb 6-1: new high-speed USB device number 121 using dummy_hcd
[  820.699106][T15511] mceusb 4-1:0.0: mceusb_dev_probe: device setup failed!
[  820.699156][T15511] mceusb 4-1:0.0: probe with driver mceusb failed with error -12
[  820.770440][ T5607] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  820.828687][ T5700] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -22
[  820.853918][ T5700] usb 7-1: USB disconnect, device number 18
[  820.862369][ T5693] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  820.875672][ T5693] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  820.886653][ T5693] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  820.905461][   T31] usb 4-1: USB disconnect, device number 29
[  820.915483][ T5693] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  820.924491][ T5693] usb 6-1: SerialNumber: syz
[  820.930370][ T5607] usb 1-1: Using ep0 maxpacket: 16
[  820.942322][ T5607] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  820.955142][ T5607] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  820.955186][ T5607] usb 1-1: config 0 has no interface number 0
[  820.955242][ T5607] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  820.955272][ T5607] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  820.955312][ T5607] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  821.032768][ T5607] usb 1-1: config 0 descriptor??
[  821.070121][T16364] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  821.070195][T16364] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  821.077849][T16364] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  821.124142][T16394] udevd[16394]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  821.240447][ T5700] usb 7-1: new full-speed USB device number 19 using dummy_hcd
[  821.279162][T16427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  821.291304][T16427] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  821.318755][T16364] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  821.318826][T16364] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  821.318862][T16364] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  821.375119][ T5693] usb 6-1: 0:2 : does not exist
[  821.380569][ T5693] usb 6-1: unit 5: unexpected type 0x09
[  821.394962][ T5700] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  821.396178][ T5700] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  821.396232][ T5700] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  821.396261][ T5700] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  821.396311][ T5700] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  821.427838][ T5700] usb 7-1: config 0 descriptor??
[  821.467216][T16429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  821.477924][T10549] IPVS: starting estimator thread 0...
[  821.495934][T16429] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  821.526775][ T5693] usb 6-1: USB disconnect, device number 121
[  821.599548][T16442] IPVS: using max 25 ests per chain, 60000 per kthread
[  821.627068][T16394] udevd[16394]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  821.739261][T16445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3083'.
[  821.739318][T16445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3083'.
[  821.773814][T16364] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  821.773886][T16364] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  821.773945][T16364] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  821.847280][ T5607] uclogic 0003:28BD:0071.0019: failed retrieving string descriptor #100: -71
[  821.861743][ T5607] uclogic 0003:28BD:0071.0019: failed retrieving pen parameters: -71
[  821.861812][ T5607] uclogic 0003:28BD:0071.0019: pen probing failed: -71
[  821.861843][ T5607] uclogic 0003:28BD:0071.0019: failed probing parameters: -71
[  821.861961][ T5607] uclogic 0003:28BD:0071.0019: probe with driver uclogic failed with error -71
[  821.913296][ T5607] usb 1-1: USB disconnect, device number 57
[  822.101566][ T5618] Bluetooth: hci4: command tx timeout
[  822.112069][T16451] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3085'.
[  822.152352][ T5700] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  822.187033][T16364] netdevsim netdevsim2  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  822.187097][T16364] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  822.187148][T16364] netdevsim netdevsim2  (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  822.294209][T16452] netlink: 'syz.5.3085': attribute type 1 has an invalid length.
[  822.302695][T16457] netlink: 'syz.5.3085': attribute type 1 has an invalid length.
[  822.618807][T16452] 8021q: adding VLAN 0 to HW filter on device bond1
[  822.809452][T16458] bond1: (slave geneve2): making interface the new active one
[  822.963331][T16458] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  822.981603][ T5761] usb 1-1: new full-speed USB device number 58 using dummy_hcd
[  823.082679][T16472] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3088'.
[  823.104678][ T5700] usb 7-1: USB disconnect, device number 19
[  823.211950][ T5761] usb 1-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00
[  823.215971][ T5761] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  823.216101][ T5761] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  823.216175][ T5761] usb 1-1: config 0 interface 0 has no altsetting 0
[  823.216279][ T5761] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  823.306468][ T5761] usb 1-1: config 0 descriptor??
[  824.125211][ T5761] hid (null): unknown global tag 0xe
[  824.147419][ T5761] magicmouse 0003:05AC:0324.001B: unknown global tag 0xe
[  824.147506][ T5761] magicmouse 0003:05AC:0324.001B: item 0 1 1 14 parsing failed
[  824.159168][ T5761] magicmouse 0003:05AC:0324.001B: magicmouse hid parse failed
[  824.159289][ T5761] magicmouse 0003:05AC:0324.001B: probe with driver magicmouse failed with error -22
[  824.180894][ T5618] Bluetooth: hci4: command tx timeout
[  824.412270][ T5761] usb 1-1: USB disconnect, device number 58
[  824.592159][T16364] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  824.609446][T16364] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  824.641431][T16364] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  824.671035][T16364] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  824.686520][T16364] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  824.706859][T16364] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  824.716640][T16364] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  824.734764][T16364] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  824.915273][T16364] 8021q: adding VLAN 0 to HW filter on device bond0
[  824.944701][T16364] 8021q: adding VLAN 0 to HW filter on device team0
[  824.963332][ T6678] bridge0: port 1(bridge_slave_0) entered blocking state
[  824.963704][ T6678] bridge0: port 1(bridge_slave_0) entered forwarding state
[  824.998194][ T6678] bridge0: port 2(bridge_slave_1) entered blocking state
[  824.998318][ T6678] bridge0: port 2(bridge_slave_1) entered forwarding state
[  825.116022][T16508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3094'.
[  825.126015][T16508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3094'.
[  825.268463][T16364] 8021q: adding VLAN 0 to HW filter on device batadv0
[  825.327059][T16512] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3096'.
[  825.428977][T16515] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  825.510928][T16512] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  825.549088][T16512] bond1 (unregistering): Released all slaves
[  825.727714][T16518] syz.3.3098: vmalloc error: size 4096, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  825.727850][T16518] CPU: 0 UID: 0 PID: 16518 Comm: syz.3.3098 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  825.727882][T16518] Tainted: [L]=SOFTLOCKUP
[  825.727891][T16518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  825.727906][T16518] Call Trace:
[  825.727918][T16518]  <TASK>
[  825.727929][T16518]  dump_stack_lvl+0xe8/0x150
[  825.727968][T16518]  warn_alloc+0x24d/0x270
[  825.728010][T16518]  ? __pfx_warn_alloc+0x10/0x10
[  825.728051][T16518]  ? alloc_pages_mpol+0x256/0x390
[  825.728114][T16518]  __vmalloc_node_range_noprof+0x11a9/0x1540
[  825.728178][T16518]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  825.728222][T16518]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  825.728248][T16518]  __vmalloc_noprof+0xd2/0x120
[  825.728279][T16518]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  825.728308][T16518]  bpf_prog_alloc_no_stats+0x47/0x560
[  825.728334][T16518]  ? bpf_prog_alloc+0x2a/0x1a0
[  825.728360][T16518]  bpf_prog_alloc+0x3c/0x1a0
[  825.728387][T16518]  bpf_prog_create_from_user+0xa7/0x440
[  825.728570][T16518]  ? __pfx_seccomp_check_filter+0x10/0x10
[  825.728658][T16518]  do_seccomp+0x793/0xdc0
[  825.728742][T16518]  ? __se_sys_futex+0x3a8/0x450
[  825.728835][T16518]  ? __pfx_do_seccomp+0x10/0x10
[  825.729091][T16518]  ? rcu_is_watching+0x16/0xb0
[  825.729163][T16518]  do_syscall_64+0x166/0x520
[  825.729257][T16518]  ? trace_irq_disable+0x3b/0x140
[  825.729321][T16518]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  825.729395][T16518]  ? clear_bhb_loop+0x70/0xc0
[  825.729588][T16518]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  825.729681][T16518] RIP: 0033:0x7f3bf179e159
[  825.729744][T16518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  825.729796][T16518] RSP: 002b:00007f3bef9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d
[  825.729859][T16518] RAX: ffffffffffffffda RBX: 00007f3bf1a25fa0 RCX: 00007f3bf179e159
[  825.729896][T16518] RDX: 0000200000000000 RSI: 0000000000000000 RDI: 0000000000000001
[  825.729930][T16518] RBP: 00007f3bf1835024 R08: 0000000000000000 R09: 0000000000000000
[  825.729970][T16518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  825.729991][T16518] R13: 00007f3bf1a26038 R14: 00007f3bf1a25fa0 R15: 00007f3bf1b4fa48
[  825.730075][T16518]  </TASK>
[  825.855780][T16518] Mem-Info:
[  825.855799][T16518] active_anon:8829 inactive_anon:6060 isolated_anon:0
[  825.855799][T16518]  active_file:7868 inactive_file:8731 isolated_file:0
[  825.855799][T16518]  unevictable:0 dirty:180 writeback:0
[  825.855799][T16518]  slab_reclaimable:10162 slab_unreclaimable:103210
[  825.855799][T16518]  mapped:30515 shmem:8608 pagetables:1640
[  825.855799][T16518]  sec_pagetables:0 bounce:0
[  825.855799][T16518]  kernel_misc_reclaimable:0
[  825.855799][T16518]  free:1325808 free_pcp:9912 free_cma:0
[  825.855860][T16518] Node 0 active_anon:35316kB inactive_anon:24240kB active_file:31472kB inactive_file:34692kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122028kB dirty:720kB writeback:0kB shmem:34432kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13440kB pagetables:6432kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  825.856081][T16518] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:232kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  825.856148][T16518] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  825.856214][T16518] lowmem_reserve[]: 0 2487 2487 2487 2487
[  825.856255][T16518] Node 0 DMA32 free:1344152kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:35316kB inactive_anon:24240kB active_file:31472kB inactive_file:34692kB unevictable:0kB writepending:720kB zspages:3276kB present:3129332kB managed:2546820kB mlocked:0kB bounce:0kB free_pcp:39648kB local_pcp:18312kB free_cma:0kB
[  825.856324][T16518] lowmem_reserve[]: 0 0 0 0 0
[  825.856439][T16518] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  825.856627][T16518] lowmem_reserve[]: 0 0 0 0 0
[  825.856747][T16518] Node 1 Normal free:3943720kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:232kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  825.856906][T16518] lowmem_reserve[]: 0 0 0 0 0
[  825.857004][T16518] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  825.876915][T16518] Node 0 DMA32: 3597*4kB (UME) 3576*8kB (UME) 2864*16kB (UME) 2852*32kB (UME) 1274*64kB (UME) 617*128kB (UME) 246*256kB (UME) 71*512kB (UME) 29*1024kB (UME) 7*2048kB (UME) 210*4096kB (UM) = 1344116kB
[  825.877397][T16518] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  825.885536][T16518] Node 1 Normal: 4*4kB (U) 7*8kB (UM) 16*16kB (UM) 7*32kB (U) 6*64kB (U) 3*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 5*2048kB (UM) 959*4096kB (UM) = 3943720kB
[  825.897665][T16518] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  825.897750][T16518] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  825.897801][T16518] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  825.897852][T16518] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  825.897908][T16518] 25257 total pagecache pages
[  825.897931][T16518] 54 pages in swap cache
[  825.897953][T16518] Free swap  = 66908kB
[  825.897974][T16518] Total swap = 124996kB
[  825.898006][T16518] 2097051 pages RAM
[  825.898027][T16518] 0 pages HighMem/MovableOnly
[  825.898048][T16518] 428730 pages reserved
[  825.898069][T16518] 0 pages cma reserved
[  826.567605][T16364] veth0_vlan: entered promiscuous mode
[  826.620092][T16364] veth1_vlan: entered promiscuous mode
[  826.802176][T16364] veth0_macvtap: entered promiscuous mode
[  826.834984][T16364] veth1_macvtap: entered promiscuous mode
[  826.939764][T16364] batman_adv: batadv0: Interface activated: batadv_slave_0
[  826.954864][T16529] FAULT_INJECTION: forcing a failure.
[  826.954864][T16529] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  826.956277][T16529] CPU: 1 UID: 0 PID: 16529 Comm: syz.0.3102 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  826.956362][T16529] Tainted: [L]=SOFTLOCKUP
[  826.956391][T16529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  826.956425][T16529] Call Trace:
[  826.956469][T16529]  <TASK>
[  826.956493][T16529]  dump_stack_lvl+0xe8/0x150
[  826.956598][T16529]  should_fail_ex+0x410/0x560
[  826.956700][T16529]  prepare_alloc_pages+0x223/0x600
[  826.956815][T16529]  __alloc_frozen_pages_noprof+0x185/0x5a0
[  826.956889][T16529]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  826.956962][T16529]  ? __pfx_policy_nodemask+0x10/0x10
[  826.957052][T16529]  ? mfill_atomic_install_pte+0x775/0x890
[  826.957171][T16529]  alloc_pages_mpol+0x21e/0x390
[  826.957287][T16529]  folio_alloc_mpol_noprof+0x39/0x160
[  826.957365][T16529]  shmem_mfill_folio_alloc+0x196/0x370
[  826.957457][T16529]  ? __pfx_shmem_mfill_folio_alloc+0x10/0x10
[  826.957530][T16529]  __mfill_atomic_pte+0xe0/0x610
[  826.957644][T16529]  mfill_atomic_pte_zeropage+0x3a7/0x640
[  826.957749][T16529]  ? __pfx_mfill_atomic_pte_zeropage+0x10/0x10
[  826.957861][T16529]  ? mm_alloc_pmd+0x246/0x400
[  826.957954][T16529]  userfaultfd_zeropage+0x674/0xfa0
[  826.958074][T16529]  ? __pfx_userfaultfd_zeropage+0x10/0x10
[  826.958198][T16529]  userfaultfd_ioctl+0x483/0x560
[  826.958270][T16529]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  826.958330][T16529]  ? ksys_write+0x1fc/0x270
[  826.958425][T16529]  ? bpf_lsm_file_ioctl+0x9/0x20
[  826.958508][T16529]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  826.958582][T16529]  __se_sys_ioctl+0xfc/0x170
[  826.958638][T16529]  do_syscall_64+0x166/0x520
[  826.958719][T16529]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  826.958793][T16529]  ? clear_bhb_loop+0x70/0xc0
[  826.958882][T16529]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  826.958950][T16529] RIP: 0033:0x7f6f2739e159
[  826.959010][T16529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  826.959063][T16529] RSP: 002b:00007f6f2824c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  826.959125][T16529] RAX: ffffffffffffffda RBX: 00007f6f27625fa0 RCX: 00007f6f2739e159
[  826.959168][T16529] RDX: 0000200000000000 RSI: 00000000c020aa04 RDI: 0000000000000003
[  826.959210][T16529] RBP: 00007f6f2824c090 R08: 0000000000000000 R09: 0000000000000000
[  826.959250][T16529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  826.959277][T16529] R13: 00007f6f27626038 R14: 00007f6f27625fa0 R15: 00007f6f2774fa48
[  826.959369][T16529]  </TASK>
[  827.004195][ T5607] usb 7-1: new low-speed USB device number 20 using dummy_hcd
[  827.212693][ T5607] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  827.218384][ T5607] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8
[  827.218568][ T5607] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt
[  827.218635][ T5607] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt
[  827.259219][T16364] batman_adv: batadv0: Interface activated: batadv_slave_1
[  827.304608][T16534] netlink: 'syz.0.3102': attribute type 4 has an invalid length.
[  827.312651][ T5607] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  827.312683][ T5607] usb 7-1: Product: М
[  827.312698][ T5607] usb 7-1: Manufacturer: à ’
[  827.312713][ T5607] usb 7-1: SerialNumber: 㪾짧쪌ꪭ廆ⲃ濙⑑Ѕ䩱幷�ﮌ�䔱膨ઔ쳈궜柔瘻鬼廹⺤븫厺嫯Ɯ뒬ꂈ䷰틭惠�匀⌫㟬㥅耆਄׽ꚬ泳⽘섯�癦�蘅ནﶫ悫ᗮ
[  827.369173][T16537] netlink: 'syz.0.3102': attribute type 4 has an invalid length.
[  827.378001][T16524] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  827.524816][ T6679] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  827.566616][   T83] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  827.584651][T10549] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  827.587971][T10549] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  827.705115][ T5607] cdc_ncm 7-1:1.0: bind() failure
[  827.722383][ T5693] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  827.742667][ T5607] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[  827.742738][ T5607] cdc_ncm 7-1:1.1: bind() failure
[  827.780892][ T5607] usb 7-1: USB disconnect, device number 20
[  827.884044][ T5693] usb 1-1: New USB device found, idVendor=0582, idProduct=0156, bcdDevice= 0.40
[  827.892757][ T5693] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  827.892841][ T5693] usb 1-1: config 1 has no interface number 0
[  827.892953][ T5693] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  827.893036][ T5693] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  827.893132][ T5693] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7
[  827.895966][ T6677] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  827.896088][ T6677] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  827.944820][ T5693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  827.944919][ T5693] usb 1-1: Product: syz
[  827.944968][ T5693] usb 1-1: Manufacturer: syz
[  827.945016][ T5693] usb 1-1: SerialNumber: syz
[  828.080191][ T6677] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  828.088440][ T6677] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  828.265136][T16534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  828.279441][T16534] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  828.298546][T16548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3106'.
[  828.308628][T16548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3106'.
[  828.609757][T16559] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3111'.
[  829.411887][T16582] [U] 
[  829.411901][T16582] [U] K{‘
[  829.419599][T16582] [U] ät Ž1ÊàŠªFìÇÄfËŠî`GÊJç˜Ügö毹¬¡—þÈoÕñ/ümCç
[  829.419701][T16582] [U] tžØ–/,�~ˆÄœ­‹jõÿÊ}8îÊþ'o1�Ü"™7-î‚JQœK—¤Wºïqé5c%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚íè¼`+³û(·â¿!(éûéz'àtXln»I®gÅj– °üÝ­·på~÷7í!‘Õò"ø¨Î¾ª(È5ˆObü¤‡ÍƒJÖ
[  829.419741][T16582] [U] ±k\&—}6£6œXîHX�¥ôµ„Ìþ.`¸a“$Û40|϶¿�9°øÞ¨„¯ÀÏU‚ò4�ôä®VbzÃð}ÌwÔM”TºŽíQŸýΦr’4”ÿ
[  829.419817][T16582] [U] ".h6øÞ"Ökã‡[›‰¤ŒJá4çØI�n¨™[Z(•„C|Të]z{�â3Ÿc=»¨xîôžë…î4ßw‰)\T‘XJø�SH{q;ì¹¢…ötÔÇ+‹¦÷gíèÿ®d„.Ë‚³>yž�÷éwUh„fN—Ž�Çhl]SÔ2ŠÇÙ\g%ŠO¼&z)µðš'¨pul‚_<ã	¢Ø°‰ò®Ôå`Ò±TÔÁþœÐËþ;_ô"(‘u{7jœ¿2X ‘/€'ÝÙcÑÌõIº©ÀÏH¿c�Õ³žV¦=�‘AiÇ%w¼Esž RšŸjŠîœƒÚ”gÂ÷rÁ¹í¡hI
˜¢œaïì6-úD�úV¨á i"øånæ¨ þÚAsc~4Áª¹8cø*­OO5/ÿœJš~º§¡w—vK+¬®‰Œ3èÇY)Ž¹M°¸æv¶Ìyqæ½€DTr¯
Otpem%f×ÊejÍA5æÔT_-X~ ^aaÛ‚ò˜½qÖå
[  829.419935][T16582] [U] 	+�w‰G?]£Ó'a:	»Ú)Õ
ïó™“' B>t¢ ¡f/™÷<'èUÓ'–¼h§ié.+]eŸ.½-É¿ÿ¿Ò%÷è>2`¶^Uÿ8F.Š6¤Å3ÓØ+ËA¾Â««„°g3ÓpÂó6:�^0À�téèv÷'Eõt¼€ûâYC‰n¾þrÏ©ÞnèPj×;æZ†êôñû‘8!¯È\ù…¸AØÊ–2Á£$ðµ™Â­wi.Íç#ŠÈ/Bai¼�Ä`ðá4j’ôdîy@Óz„ügW÷5Ë¿Bĵٜ Nóy"vI2ûÌ
[  829.419982][T16582] [U] ôT¦_K5¸t¬YJÐþÎ9ðÕcÊ$brŸLúNul¶ü9wÈýÍ|žGå"ʃÆ%Çú¶êCªØ�°¶ºqîÙ
 ŸÇ3‹Æq¯ôN^HP*½Ü$	µ.Î7yÓ±œ2³
[  829.420008][T16582] [U] ½?�©ÿhüä*ÙÁ”Î3í�7Üé�¾^#Q�"0~‡‚ð(éoïXLŒb£,'vîÓ=‹ÝëCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷î¾™÷p#ò2DO*Ƀ
[  829.420066][T16582] [U] ©s¹“gžµ²¶“˜GuÐÔd-{¸™â|&“�®ŸŸñ�2µ›LÞc_©œ!`¨ÍozÖ¥¢B¶³%>êrñ¶öwï‡ýŽSsÂH"£yA4£O.šYÙÛä�„RTÔ¶ŒBÚ[+/<<R�B�Êäõ|ФeŽžÑÛ –V96#ûúÑͤê¦jºUº%
s81ƒ�þÒ©s�P±¨\£ƒ?qª|L�´QXµ0ÂKÔ1orÉ´2¡½|ÖüdÖFÌ¿»ù�ÚË2Þ”–¨×0ÌåH•}C[/¤»“Ÿpx^¼èo
[  829.420148][T16582] [U] ÖØ›·Ü—(JÅЛ•§mÛüxz˜;œ½±ÓÿØ�_¹»µÔ*3÷3…ß5¸\ƒxm³ÚU�‰AK!aQ`ßË;Fð•�I+ÖÐVUHåðÂmÑj³´Æ·ÙÛZÄcøãz‹¼Â)_矡	ô‘¡&ÿö¡ÿáaÇxtoÈÝê_½ ú¼¦:¨â×%à²Pò×ÈCö²‚yö+_þü›ýû}Uïm˜ƒÆ«CÅ!KJò7Ðßg¯Ë=bè
[  829.519362][T16582] [U] Ù½¥Fœ%ŽXAÙÂlŸ2r*gŒòVW¬Ñ$ƒüj	ãA˜›F¶ß�·+ø¾9Í„ViºÖ—¼kÙ¾Å1}_©â
á¥%Ãr6„•(]“¦/Ÿ¶ø�Å™YܺÇÞh㤾üÑr gªÄrn/Ü«Î#!êdÙûÚ«%ÞÛËDªï-{ð$þvU‘ýT²¼ª$:mtrÔEŽC1V‰D~îÈ];[˜ËÚÐ÷sq¾¯œù(ìëe,X¦8â"Ù
æðG¥dŸúµ2@T8ž¾´òƒàðÿàt8.Rc+Ä@Ëꦇp‡uá
p”‰¼¶C±‡Ë'å„yLÓ-Ss1E?Å7ÓO‡§ì^]¦†Âóc”â½H]§Jkr]Rkq܆�øÝ£þ´OTcôÆx¶¨¾4™NË	³Ï&�á­ðÚ‹ŠÓ@¶:m7ß~�+”W*ÛÁ–xMüó>>—¡{q¢Ú×
_²Õ�LX8ÊU„ÇØî{ðZ³íø�)ÿÒ7?ËrR;ÿcßr hײڣỨè1Å>)©Măâ‰Ït§²Ú(ìÇaÏ�„}9·Ú¥ãJ*MÑœ¥Ä¡«'L¹£q	ìDWŸòø¸=ؽ|q¬	ÏÆ™W;5æÙŽª!ñdB¸x`é§ö/÷ÂE�`ƦM¢Xîâ"ä\
[  829.519417][T16582] [U] {;Žõ¥ÂÙ˜_ˆo2«Ñ)îo®›.2ÐW2겨ðyùÃãx_  HPϱœSªD­�¦ø:]‚{Ë©ÔÝæè½
[  829.519456][T16582] [U] I,Ç>Çó¤	îÙ5�1ñ÷^1òN4¯oǶþ'0ý?Ö’iÙ9w.ï_.¶WŠa¼Š�Vˆ±`)ÑZ¬ïæc6GiÓ¹²a»¬XL[¢›½¡Fü*ÀñO‰W)+‡Ç'\nÆ
[K@ÑëÄü2çǬ–®¡p"^`Á‰í	øß
[  829.519475][T16582] [U] 22½“Æ©Ðû©x?0;3u±
[  829.519530][T16582] [U] ÞœÕ
æ�ósObx 8”Wˆ4á‘(ð~/§¿íKÇUžãÔ–oQËe+·G®-yµgY_
•>v¢ÜÈë—3.hÁÓ™]Í„²2‘”)™DË,	‘Ä	þD~×d©£¡+Ãw;A\˜F
PÉþȘ|$ºø)�
KØ�I³éÐÉ¿kñYT^RÍüù癵“ËA=±#–Üœ	ÝíßËae©�tå1·Îݯ4K¯.e"RÚS|ðŸÀsÖ’Á:•ù>p™…rÐ"z‰ú­ûúé#P!˜KY"›}ÃÆF¿N84ü³ƒÅhÞ±£o•Èsߙ̫%DlwÙmæ²Ç
[  829.519568][T16582] [U] [ª['xn€'²÷á¿Ü,mr¦«/žšœâ1D=!DŽx91Bù
wç»R—lf…ƒÆKì¤Zõê# `ì‘lØ›§Ëœ»×b~åmÒÔÖ
[  829.519595][T16582] [U] ™LÖ>�ñ�d+ˆd¯§—®Ì"5Žê��h3<ª¨ÅiR=F^”f�nõóÜÀ‰¿û­vÛ÷œDÁOIOÚ:Uö>ÖYâ
[  829.519612][T16582] [U] 'B—6vý20³ä·çž¥·×Œï"t8Ñ{9ÆFW��]ôÊäì©�
[  829.519641][T16582] [U] ù72þ‰ïÂÃuþC6™îüÔÏ„I]8cª£tÛ¨QSk�YÞîIÒÀâ¹ ¿|V'ÛTV/ùÅg•$[â 9kh`ú"ü‘úõ}€ñ[^=ˆú0á]½ã%ÆÌ‚T“Šž¹ØFì_vö4C¸òÅ
[  829.519683][T16582] [U] ¹ec�
[  829.519698][T16582] [U] �—”|‚Êì<äî:^ü3$7nK~Ø-™@÷¦?Ÿ–/mtl·�Û¾©Iˆwè¬@g~tØ{êÜPß+Æ$ªjp|µŽçIÛRió�pmð õ·YÓ ú”8ìtÉÐÞVžÙÿÆë,îlâ,Õ
[  829.805361][T16589] [U] ˆKÌúÛõ‰)0ÄÄÝ~ü³ÊªÁiP'ífóòœzÚÞr¬™ÿ@BÓ]Â5ÝÊ{­©Ê¼ô'à8åÆ¥F‡¹UTqUd
Ç©¤K;7íª0c[„ãy–¼ÈYC¦¶»Ø°mª™Lò8’T…ÍšÎ5³ýýrx�™¶ðWí x¤²óoQhVi'8œ¥Î…Lµ
[  829.805400][T16589] [U] Ts£ÛH™Ï¿@Óðćå‡fÏœ{x„!Bû”Á¡ÉJK˜°Ïí’,ÛêB
[  829.805409][T16589] [U] K{‘
[  829.805564][T16589] [U] ät Ž1ÊàŠªFìÇÄfËŠî`GÊJç˜Ügö毹¬¡—þÈoÕñ/ümCç
[  829.806201][T16589] [U] tžØ–/,�~ˆÄœ­‹jõÿÊ}8îÊþ'o1�Ü"™7-î‚JQœK—¤Wºïqé5c%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚íè¼`+³û(·â¿!(éûéz'àtXln»I®gÅj– °üÝ­·på~÷7í!‘Õò"ø¨Î¾ª(È5ˆObü¤‡ÍƒJÖ
[  829.806348][T16589] [U] ±k\&—}6£6œXîHX�¥ôµ„Ìþ.`¸a“$Û40|϶¿�9°øÞ¨„¯ÀÏU‚ò4�ôä®VbzÃð}ÌwÔM”TºŽíQŸýΦr’4”ÿ
[  829.825355][T16589] [U] ".h6øÞ"Ökã‡[›‰¤ŒJá4çØI�n¨™[Z(•„C|Të]z{�â3Ÿc=»¨xîôžë…î4ßw‰)\T‘XJø�SH{q;ì¹¢…ötÔÇ+‹¦÷gíèÿ®d„.Ë‚³>yž�÷éwUh„fN—Ž�Çhl]SÔ2ŠÇÙ\g%ŠO¼&z)µðš'¨pul‚_<ã	¢Ø°‰ò®Ôå`Ò±TÔÁþœÐËþ;_ô"(‘u{7jœ¿2X ‘/€'ÝÙcÑÌõIº©ÀÏH¿c�Õ³žV¦=�‘AiÇ%w¼Esž RšŸjŠîœƒÚ”gÂ÷rÁ¹í¡hI
˜¢œaïì6-úD�úV¨á i"øånæ¨ þÚAsc~4Áª¹8cø*­OO5/ÿœJš~º§¡w—vK+¬®‰Œ3èÇY)Ž¹M°¸æv¶Ìyqæ½€DTr¯
Otpem%f×ÊejÍA5æÔT_-X~ ^aaÛ‚ò˜½qÖå
[  829.825846][T16589] [U] 	+�w‰G?]£Ó'a:	»Ú)Õ
ïó™“' B>t¢ ¡f/™÷<'èUÓ'–¼h§ié.+]eŸ.½-É¿ÿ¿Ò%÷è>2`¶^Uÿ8F.Š6¤Å3ÓØ+ËA¾Â««„°g3ÓpÂó6:�^0À�téèv÷'Eõt¼€ûâYC‰n¾þrÏ©ÞnèPj×;æZ†êôñû‘8!¯È\ù…¸AØÊ–2Á£$ðµ™Â­wi.Íç#ŠÈ/Bai¼�Ä`ðá4j’ôdîy@Óz„ügW÷5Ë¿Bĵٜ Nóy"vI2ûÌ
[  829.826778][T16589] [U] ôT¦_K5¸t¬YJÐþÎ9ðÕcÊ$brŸLúNul¶ü9wÈýÍ|žGå"ʃÆ%Çú¶êCªØ�°¶ºqîÙ
 ŸÇ3‹Æq¯ôN^HP*½Ü$	µ.Î7yÓ±œ2³
[  829.826840][T16589] [U] ½?�©ÿhüä*ÙÁ”Î3í�7Üé�¾^#Q�"0~‡‚ð(éoïXLŒb£,'vîÓ=‹ÝëCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷î¾™÷p#ò2DO*Ƀ
[  829.827025][T16589] [U] ©s¹“gžµ²¶“˜GuÐÔd-{¸™â|&“�®ŸŸñ�2µ›LÞc_©œ!`¨ÍozÖ¥¢B¶³%>êrñ¶öwï‡ýŽSsÂH"£yA4£O.šYÙÛä�„RTÔ¶ŒBÚ[+/<<R�B�Êäõ|ФeŽžÑÛ –V96#ûúÑͤê¦jºUº%
s81ƒ�þÒ©s�P±¨\£ƒ?qª|L�´QXµ0ÂKÔ1orÉ´2¡½|ÖüdÖFÌ¿»ù�ÚË2Þ”–¨×0ÌåH•}C[/¤»“Ÿpx^¼èo
[  829.827269][T16589] [U] ÖØ›·Ü—(JÅЛ•§mÛüxz˜;œ½±ÓÿØ�_¹»µÔ*3÷3…ß5¸\ƒxm³ÚU�‰AK!aQ`ßË;Fð•�I+ÖÐVUHåðÂmÑj³´Æ·ÙÛZÄcøãz‹¼Â)_矡	ô‘¡&ÿö¡ÿáaÇxtoÈÝê_½ ú¼¦:¨â×%à²Pò×ÈCö²‚yö+_þü›ýû}Uïm˜ƒÆ«CÅ!KJò7Ðßg¯Ë=bè
[  829.852616][T16589] [U] Ù½¥Fœ%ŽXAÙÂlŸ2r*gŒòVW¬Ñ$ƒüj	ãA˜›F¶ß�·+ø¾9Í„ViºÖ—¼kÙ¾Å1}_©â
á¥%Ãr6„•(]“¦/Ÿ¶ø�Å™YܺÇÞh㤾üÑr gªÄrn/Ü«Î#!êdÙûÚ«%ÞÛËDªï-{ð$þvU‘ýT²¼ª$:mtrÔEŽC1V‰D~îÈ];[˜ËÚÐ÷sq¾¯œù(ìëe,X¦8â"Ù
æðG¥dŸúµ2@T8ž¾´òƒàðÿàt8.Rc+Ä@Ëꦇp‡uá
p”‰¼¶C±‡Ë'å„yLÓ-Ss1E?Å7ÓO‡§ì^]¦†Âóc”â½H]§Jkr]Rkq܆�øÝ£þ´OTcôÆx¶¨¾4™NË	³Ï&�á­ðÚ‹ŠÓ@¶:m7ß~�+”W*ÛÁ–xMüó>>—¡{q¢Ú×
_²Õ�LX8ÊU„ÇØî{ðZ³íø�)ÿÒ7?ËrR;ÿcßr hײڣỨè1Å>)©Măâ‰Ït§²Ú(ìÇaÏ�„}9·Ú¥ãJ*MÑœ¥Ä¡«'L¹£q	ìDWŸòø¸=ؽ|q¬	ÏÆ™W;5æÙŽª!ñdB¸x`é§ö/÷ÂE�`ƦM¢Xîâ"ä\
[  829.852848][T16589] [U] {;Žõ¥ÂÙ˜_ˆo2«Ñ)îo®›.2ÐW2겨ðyùÃãx_  HPϱœSªD­�¦ø:]‚{Ë©ÔÝæè½
[  829.853069][T16589] [U] I,Ç>Çó¤	îÙ5�1ñ÷^1òN4¯oǶþ'0ý?Ö’iÙ9w.ï_.¶WŠa¼Š�Vˆ±`)ÑZ¬ïæc6GiÓ¹²a»¬XL[¢›½¡Fü*ÀñO‰W)+‡Ç'\nÆ
[K@ÑëÄü2çǬ–®¡p"^`Á‰í	øß
[  829.853120][T16589] [U] 22½“Æ©Ðû©x?0;3u±
[  829.853318][T16589] [U] ÞœÕ
æ�ósObx 8”Wˆ4á‘(ð~/§¿íKÇUžãÔ–oQËe+·G®-yµgY_
•>v¢ÜÈë—3.hÁÓ™]Í„²2‘”)™DË,	‘Ä	þD~×d©£¡+Ãw;A\˜F
PÉþȘ|$ºø)�
KØ�I³éÐÉ¿kñYT^RÍüù癵“ËA=±#–Üœ	ÝíßËae©�tå1·Îݯ4K¯.e"RÚS|ðŸÀsÖ’Á:•ù>p™…rÐ"z‰ú­ûúé#P!˜KY"›}ÃÆF¿N84ü³ƒÅhÞ±£o•Èsߙ̫%DlwÙmæ²Ç
[  829.853462][T16589] [U] [ª['xn€'²÷á¿Ü,mr¦«/žšœâ1D=!DŽx91Bù
wç»R—lf…ƒÆKì¤Zõê# `ì‘lØ›§Ëœ»×b~åmÒÔÖ
[  829.853533][T16589] [U] ™LÖ>�ñ�d+ˆd¯§—®Ì"5Žê��h3<ª¨ÅiR=F^”f�nõóÜÀ‰¿û­vÛ÷œDÁOIOÚ:Uö>ÖYâ
[  829.853638][T16589] [U] 'B—6vý20³ä·çž¥·×Œï"t8Ñ{9ÆFW��]ôÊäì©�
[  829.853717][T16589] [U] ù72þ‰ïÂÃuþC6™îüÔÏ„I]8cª£tÛ¨QSk�YÞîIÒÀâ¹ ¿|V'ÛTV/ùÅg•$[â 9kh`ú"ü‘úõ}€ñ[^=ˆú0á]½ã%ÆÌ‚T“Šž¹ØFì_vö4C¸òÅ
[  829.853873][T16589] [U] ¹ec�
[  829.853913][T16589] [U] �—”|‚Êì<äî:^ü3$7nK~Ø-™@÷¦?Ÿ–/mtl·�Û¾©Iˆwè¬@g~tØ{êÜPß+Æ$ªjp|µŽçIÛRió�pmð õ·YÓ ú”8ìtÉÐÞVžÙÿÆë,îlâ,Õ
[  830.111098][T16577] [U] ˆKÌúÛõ‰)0ÄÄÝ~ü³ÊªÁiP'ífóòœzÚÞr¬™ÿ@BÓ]Â5ÝÊ{­©Ê¼ô'à8åÆ¥F‡¹UTqUd
Ç©¤K;7íª0c[„ãy–¼ÈYC¦¶»Ø°mª™Lò8’T…ÍšÎ5³ýýrx�™¶ðWí x¤²óoQhVi'8œ¥Î…Lµ
[  830.212550][ T5693] usb 1-1: 1:0 : does not exist
[  830.212617][ T5693] usb 1-1: 2:1 : incorrect wMaxPacketSize for BADD profile
[  830.215033][ T5693] usb 1-1: 1:3 : does not exist
[  830.215233][ T5693] usb 1-1: incorrect wMaxPacketSize 0x210 for BADD profile
[  830.269101][T16585] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3118'.
[  830.378006][T16593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3119'.
[  830.378079][T16593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3119'.
[  830.528060][ T5693] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22
[  830.574901][ T5693] usb 1-1: USB disconnect, device number 59
[  830.806429][T16394] udevd[16394]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  831.620799][ T5677] usb 1-1: new full-speed USB device number 60 using dummy_hcd
[  831.748801][T16619] loop6: detected capacity change from 0 to 524288000
[  831.781650][ T5677] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  831.800457][T16619] Invalid logical block size (255)
[  831.809588][ T5677] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  831.818049][ T5677] usb 1-1: Product: syz
[  831.818075][ T5677] usb 1-1: Manufacturer: syz
[  831.818094][ T5677] usb 1-1: SerialNumber: syz
[  831.842263][ T5677] usb 1-1: config 0 descriptor??
[  832.078715][ T5677] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  832.099879][T16627] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3132'.
[  832.099932][T16627] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3132'.
[  832.330739][ T5607] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  832.483425][T16615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  832.494642][T16615] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  832.504966][ T5607] usb 7-1: Using ep0 maxpacket: 16
[  832.519855][ T5693] usb 3-1: new low-speed USB device number 62 using dummy_hcd
[  832.536803][ T5607] usb 7-1: unable to get BOS descriptor or descriptor too short
[  832.536897][ T5607] usb 7-1: New USB device found, idVendor=0644, idProduct=8020, bcdDevice= 0.40
[  832.546504][ T5607] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  832.546536][ T5607] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  832.586870][ T5607] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  832.586956][ T5607] usb 7-1: Product: syz
[  832.586992][ T5607] usb 7-1: Manufacturer: syz
[  832.587034][ T5607] usb 7-1: SerialNumber: syz
[  832.710524][ T5693] usb 3-1: No LPM exit latency info found, disabling LPM.
[  832.710628][ T5693] usb 3-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40
[  832.723491][ T5693] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1088, setting to 0
[  832.723689][ T5693] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 0
[  832.869299][ T5607] usb 7-1: unit 3 not found!
[  833.052625][ T5761] usb 6-1: new high-speed USB device number 122 using dummy_hcd
[  833.164889][ T5607] usb 7-1: USB disconnect, device number 21
[  833.210441][ T5761] usb 6-1: Using ep0 maxpacket: 8
[  833.216671][ T5761] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  833.228379][ T5761] usb 6-1: config 0 has an invalid interface number: 186 but max is 0
[  833.236960][ T5761] usb 6-1: config 0 has no interface number 0
[  833.237036][ T5761] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  833.237063][ T5761] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  833.237118][ T5761] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  833.237148][ T5761] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  833.237176][ T5761] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  833.316098][ T5677] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  833.373249][ T5761] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  833.373300][ T5761] usb 6-1: Product: syz
[  833.373337][ T5761] usb 6-1: Manufacturer: syz
[  833.373358][ T5761] usb 6-1: SerialNumber: syz
[  833.426876][ T5761] usb 6-1: config 0 descriptor??
[  833.599616][T16322] udevd[16322]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  833.700885][ T5761] iowarrior 6-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0
[  833.782077][ T5761] usb 1-1: USB disconnect, device number 60
[  833.900954][ T5731] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  833.930972][T16657] loop6: detected capacity change from 0 to 524288000
[  833.991330][T16657] Invalid logical block size (255)
[  834.051704][ T5731] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  834.067646][ T5731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  834.067709][ T5731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  834.067976][ T5731] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  834.068287][ T5731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  834.135449][ T5731] usb 4-1: config 0 descriptor??
[  834.285941][T16662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3144'.
[  834.374405][T16664] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3146'.
[  834.581280][ T5607] usb 6-1: USB disconnect, device number 122
[  834.726631][ T5731] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  835.324057][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  835.378831][ T5693] usb 3-1: can't set config #1, error -71
[  835.439181][ T5693] usb 3-1: USB disconnect, device number 62
[  835.965643][    C1] plantronics 0003:047F:FFFF.001C: usb_submit_urb(ctrl) failed: -1
[  836.065573][ T5616] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[  836.220478][T16690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3153'.
[  836.262301][T16690] batman_adv: batadv0: Adding interface: veth0_to_bond
[  836.262347][T16690] batman_adv: batadv0: The MTU of interface veth0_to_bond is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  836.262382][T16690] batman_adv: batadv0: Not using interface veth0_to_bond (retrying later): interface not active
[  836.797445][ T5693] usb 4-1: USB disconnect, device number 30
[  837.052489][T16707] netlink: 'syz.5.3158': attribute type 1 has an invalid length.
[  837.121671][   T32] audit: type=1326 audit(1787948343.422:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16697 comm="syz.2.3155" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c7d9e159 code=0x7ffc0000
[  837.121748][   T32] audit: type=1326 audit(1787948343.422:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16697 comm="syz.2.3155" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c7d9e159 code=0x7ffc0000
[  837.146826][   T32] audit: type=1326 audit(1787948343.422:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16697 comm="syz.2.3155" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c7d9e159 code=0x7ffc0000
[  837.146897][   T32] audit: type=1326 audit(1787948343.422:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16697 comm="syz.2.3155" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c7d9e159 code=0x7ffc0000
[  837.146945][   T32] audit: type=1326 audit(1787948343.422:3053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16697 comm="syz.2.3155" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f84c7d9e159 code=0x7ffc0000
[  837.146995][   T32] audit: type=1326 audit(1787948343.422:3054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16697 comm="syz.2.3155" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c7d9e159 code=0x7ffc0000
[  837.147043][   T32] audit: type=1326 audit(1787948343.422:3055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16697 comm="syz.2.3155" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c7d9e159 code=0x7ffc0000
[  837.147090][   T32] audit: type=1326 audit(1787948343.422:3056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16697 comm="syz.2.3155" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f84c7d9e159 code=0x7ffc0000
[  837.147138][   T32] audit: type=1326 audit(1787948343.422:3057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16697 comm="syz.2.3155" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f84c7d9e159 code=0x7ffc0000
[  837.570051][T16707] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3158'.
[  837.710195][T16717] bridge1: entered promiscuous mode
[  837.721124][T16730] FAULT_INJECTION: forcing a failure.
[  837.721124][T16730] name failslab, interval 1, probability 0, space 0, times 0
[  837.734279][T16730] CPU: 0 UID: 0 PID: 16730 Comm: syz.0.3166 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  837.734317][T16730] Tainted: [L]=SOFTLOCKUP
[  837.734327][T16730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  837.734341][T16730] Call Trace:
[  837.734351][T16730]  <TASK>
[  837.734361][T16730]  dump_stack_lvl+0xe8/0x150
[  837.734401][T16730]  should_fail_ex+0x410/0x560
[  837.734441][T16730]  should_failslab+0xa8/0x100
[  837.734471][T16730]  __kvmalloc_node_noprof+0x176/0x820
[  837.734499][T16730]  ? video_usercopy+0xa54/0x1430
[  837.734605][T16730]  ? video_usercopy+0xa54/0x1430
[  837.734639][T16730]  video_usercopy+0xa54/0x1430
[  837.734671][T16730]  ? hook_file_ioctl+0x1f2/0x600
[  837.734708][T16730]  ? __pfx___video_do_ioctl+0x10/0x10
[  837.734738][T16730]  ? __pfx_video_usercopy+0x10/0x10
[  837.734777][T16730]  ? __fget_files+0x2a/0x420
[  837.734809][T16730]  ? __fget_files+0x2a/0x420
[  837.734838][T16730]  ? __fget_files+0x3a2/0x420
[  837.734871][T16730]  v4l2_ioctl+0x18d/0x1e0
[  837.734900][T16730]  ? __pfx_v4l2_ioctl+0x10/0x10
[  837.734926][T16730]  __se_sys_ioctl+0xfc/0x170
[  837.734951][T16730]  do_syscall_64+0x166/0x520
[  837.734981][T16730]  ? trace_irq_disable+0x3b/0x140
[  837.735003][T16730]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  837.735027][T16730]  ? clear_bhb_loop+0x70/0xc0
[  837.735054][T16730]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  837.735076][T16730] RIP: 0033:0x7f6f2739e159
[  837.735098][T16730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  837.735117][T16730] RSP: 002b:00007f6f2824c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  837.735141][T16730] RAX: ffffffffffffffda RBX: 00007f6f27625fa0 RCX: 00007f6f2739e159
[  837.735157][T16730] RDX: 0000200000000080 RSI: 00000000c0285628 RDI: 0000000000000003
[  837.735172][T16730] RBP: 00007f6f2824c090 R08: 0000000000000000 R09: 0000000000000000
[  837.735186][T16730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  837.735199][T16730] R13: 00007f6f27626038 R14: 00007f6f27625fa0 R15: 00007f6f2774fa48
[  837.735241][T16730]  </TASK>
[  838.035448][T16717] bond2: (slave bridge1): making interface the new active one
[  838.053864][T16717] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  838.456064][T16738] netlink: 'syz.3.3168': attribute type 21 has an invalid length.
[  838.474441][T16738] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3168'.
[  838.677686][T16743] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3169'.
[  839.261928][ T5761] usb 6-1: new high-speed USB device number 123 using dummy_hcd
[  839.400976][ T5761] usb 6-1: device descriptor read/64, error -71
[  839.643181][ T5761] usb 6-1: new high-speed USB device number 124 using dummy_hcd
[  839.705455][ T5607] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  839.791696][ T5761] usb 6-1: device descriptor read/64, error -71
[  839.901136][ T5607] usb 7-1: New USB device found, idVendor=03e8, idProduct=0008, bcdDevice= 0.00
[  839.910970][ T5761] usb usb6-port1: attempt power cycle
[  839.913082][ T5607] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  839.913229][ T5607] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  839.913292][ T5607] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  839.913396][ T5607] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  839.972751][ T5607] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  839.972809][ T5607] usb 7-1: Product: syz
[  839.972844][ T5607] usb 7-1: Manufacturer: syz
[  839.972919][ T5607] usb 7-1: SerialNumber: syz
[  840.022807][ T5607] kaweth 7-1:1.0: couldn't find required endpoints
[  840.256483][ T5607] usb 7-1: USB disconnect, device number 22
[  840.300588][ T5761] usb 6-1: new high-speed USB device number 125 using dummy_hcd
[  840.323923][ T5761] usb 6-1: device descriptor read/8, error -71
[  840.561416][ T5761] usb 6-1: new high-speed USB device number 126 using dummy_hcd
[  840.584815][ T5761] usb 6-1: device descriptor read/8, error -71
[  840.690845][ T5761] usb usb6-port1: unable to enumerate USB device
[  840.938222][T16770] FAULT_INJECTION: forcing a failure.
[  840.938222][T16770] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  840.938289][T16770] CPU: 0 UID: 0 PID: 16770 Comm: syz.0.3178 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  840.938359][T16770] Tainted: [L]=SOFTLOCKUP
[  840.938368][T16770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  840.938383][T16770] Call Trace:
[  840.938396][T16770]  <TASK>
[  840.938407][T16770]  dump_stack_lvl+0xe8/0x150
[  840.938454][T16770]  should_fail_ex+0x410/0x560
[  840.938497][T16770]  _copy_from_user+0x2d/0xb0
[  840.938521][T16770]  video_usercopy+0xab1/0x1430
[  840.938559][T16770]  ? hook_file_ioctl+0x1f2/0x600
[  840.938595][T16770]  ? __pfx___video_do_ioctl+0x10/0x10
[  840.938625][T16770]  ? __pfx_video_usercopy+0x10/0x10
[  840.938663][T16770]  ? __fget_files+0x2a/0x420
[  840.938696][T16770]  ? __fget_files+0x2a/0x420
[  840.938724][T16770]  ? __fget_files+0x3a2/0x420
[  840.938758][T16770]  v4l2_ioctl+0x18d/0x1e0
[  840.938785][T16770]  ? __pfx_v4l2_ioctl+0x10/0x10
[  840.938811][T16770]  __se_sys_ioctl+0xfc/0x170
[  840.938836][T16770]  do_syscall_64+0x166/0x520
[  840.938865][T16770]  ? trace_irq_disable+0x3b/0x140
[  840.938886][T16770]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  840.938909][T16770]  ? clear_bhb_loop+0x70/0xc0
[  840.938937][T16770]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  840.938961][T16770] RIP: 0033:0x7f6f2739e159
[  840.938983][T16770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  840.939003][T16770] RSP: 002b:00007f6f2824c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  840.939029][T16770] RAX: ffffffffffffffda RBX: 00007f6f27625fa0 RCX: 00007f6f2739e159
[  840.939047][T16770] RDX: 0000200000000080 RSI: 00000000c0285628 RDI: 0000000000000003
[  840.939062][T16770] RBP: 00007f6f2824c090 R08: 0000000000000000 R09: 0000000000000000
[  840.939077][T16770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  840.939091][T16770] R13: 00007f6f27626038 R14: 00007f6f27625fa0 R15: 00007f6f2774fa48
[  840.939125][T16770]  </TASK>
[  841.485034][T16788] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3177'.
[  841.651110][ T5677] usb 4-1: new low-speed USB device number 31 using dummy_hcd
[  841.741435][ T5607] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  841.811364][ T5677] usb 4-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32
[  841.829566][ T5677] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  841.839935][ T5677] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  841.851520][ T5677] usb 4-1: config 0 descriptor??
[  841.907180][ T5607] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  841.914552][ T5607] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  841.914718][ T5607] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7
[  841.943477][ T5607] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  841.943537][ T5607] usb 7-1: Product: syz
[  841.943583][ T5607] usb 7-1: Manufacturer: syz
[  841.943629][ T5607] usb 7-1: SerialNumber: syz
[  842.507687][ T5693] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  842.639084][T16802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  842.651733][T16802] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  842.664381][ T5693] usb 3-1: Using ep0 maxpacket: 8
[  842.674629][ T5693] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  842.687951][ T5693] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  842.688028][ T5693] usb 3-1: config 0 has no interface number 0
[  842.688102][ T5693] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  842.688262][ T5693] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  842.688331][ T5693] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  842.688460][ T5693] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  842.688641][ T5693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  842.774735][ T5693] usb 3-1: config 0 descriptor??
[  842.816405][ T5693] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  843.034991][T16801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  843.048227][T16801] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  843.063355][ T5685] usb 3-1: USB disconnect, device number 63
[  843.114906][ T5685] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[  843.187523][ T5607] cdc_ncm 7-1:1.0: bind() failure
[  843.226799][ T5607] usbtest 7-1:1.1: probe with driver usbtest failed with error -71
[  843.247708][ T5607] usb 7-1: USB disconnect, device number 23
[  843.715315][T16818] FAULT_INJECTION: forcing a failure.
[  843.715315][T16818] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  843.732236][T16818] CPU: 0 UID: 0 PID: 16818 Comm: syz.2.3193 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  843.732279][T16818] Tainted: [L]=SOFTLOCKUP
[  843.732288][T16818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  843.732302][T16818] Call Trace:
[  843.732312][T16818]  <TASK>
[  843.732323][T16818]  dump_stack_lvl+0xe8/0x150
[  843.732363][T16818]  should_fail_ex+0x410/0x560
[  843.732402][T16818]  _copy_to_user+0x31/0xb0
[  843.732428][T16818]  video_usercopy+0xcc4/0x1430
[  843.732466][T16818]  ? __pfx___video_do_ioctl+0x10/0x10
[  843.732497][T16818]  ? __pfx_video_usercopy+0x10/0x10
[  843.732536][T16818]  ? __fget_files+0x2a/0x420
[  843.732570][T16818]  ? __fget_files+0x2a/0x420
[  843.732598][T16818]  ? __fget_files+0x3a2/0x420
[  843.732632][T16818]  v4l2_ioctl+0x18d/0x1e0
[  843.732660][T16818]  ? __pfx_v4l2_ioctl+0x10/0x10
[  843.732686][T16818]  __se_sys_ioctl+0xfc/0x170
[  843.732712][T16818]  do_syscall_64+0x166/0x520
[  843.732744][T16818]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  843.732768][T16818]  ? clear_bhb_loop+0x70/0xc0
[  843.732797][T16818]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  843.732818][T16818] RIP: 0033:0x7f84c7d9e159
[  843.732840][T16818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  843.732860][T16818] RSP: 002b:00007f84c8c3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  843.732885][T16818] RAX: ffffffffffffffda RBX: 00007f84c8025fa0 RCX: 00007f84c7d9e159
[  843.732903][T16818] RDX: 0000200000000080 RSI: 00000000c0285628 RDI: 0000000000000003
[  843.732919][T16818] RBP: 00007f84c8c3b090 R08: 0000000000000000 R09: 0000000000000000
[  843.732934][T16818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  843.732948][T16818] R13: 00007f84c8026038 R14: 00007f84c8025fa0 R15: 00007f84c814fa48
[  843.732983][T16818]  </TASK>
[  844.109377][ T5677] usb 4-1: string descriptor 0 read error: -71
[  844.125755][ T5677] cypress_m8 4-1:0.0: DeLorme Earthmate USB converter detected
[  844.156124][ T5677] earthmate ttyUSB0: required endpoint is missing
[  844.214231][ T5677] usb 4-1: USB disconnect, device number 31
[  844.222551][ T5677] cypress_m8 4-1:0.0: device disconnected
[  844.432901][T16834] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3199'.
[  844.478689][T16834] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3199'.
[  844.524669][T16834] netlink: 'syz.6.3199': attribute type 1 has an invalid length.
[  844.555686][T16834] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3199'.
[  844.650500][ T5685] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  844.659275][T16843] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3199'.
[  844.692657][T16841] batadv_slave_1: entered promiscuous mode
[  844.731581][ T5693] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  844.763343][T16836] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3198'.
[  844.820981][ T5685] usb 1-1: Using ep0 maxpacket: 32
[  844.828091][ T5685] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  844.846902][ T5685] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  844.846947][ T5685] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  844.847019][ T5685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  844.886407][ T5693] usb 4-1: Using ep0 maxpacket: 16
[  844.914417][ T5693] usb 4-1: unable to get BOS descriptor or descriptor too short
[  844.914518][ T5693] usb 4-1: New USB device found, idVendor=067c, idProduct=1001, bcdDevice=e9.13
[  844.937362][ T5685] usb 1-1: config 0 descriptor??
[  844.949225][ T5685] hub 1-1:0.0: USB hub found
[  844.966175][ T5693] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  844.966232][ T5693] usb 4-1: config 0 has no interface number 0
[  844.966327][ T5693] usb 4-1: config 0 interface 67 altsetting 133 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  844.966421][ T5693] usb 4-1: config 0 interface 67 altsetting 133 has a duplicate endpoint with address 0x8, skipping
[  844.966509][ T5693] usb 4-1: config 0 interface 67 altsetting 133 endpoint 0xF has an invalid bInterval 151, changing to 11
[  844.966569][ T5693] usb 4-1: config 0 interface 67 altsetting 133 endpoint 0xF has invalid wMaxPacketSize 0
[  844.966638][ T5693] usb 4-1: config 0 interface 67 altsetting 133 has a duplicate endpoint with address 0xF, skipping
[  844.966745][ T5693] usb 4-1: config 0 interface 67 has no altsetting 0
[  845.086088][ T5693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  845.086169][ T5693] usb 4-1: Product: syz
[  845.086225][ T5693] usb 4-1: Manufacturer: syz
[  845.086285][ T5693] usb 4-1: SerialNumber: syz
[  845.148733][ T5693] usb 4-1: config 0 descriptor??
[  845.239069][ T5685] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  845.474335][ T5693] pegasus 4-1:0.67: Missing or invalid endpoints
[  845.516335][ T5693] usb 4-1: USB disconnect, device number 32
[  845.686850][T16835] batadv_slave_1: left promiscuous mode
[  846.130270][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  846.197527][ T5685] usbhid 1-1:0.0: can't add hid device: -71
[  846.197828][ T5685] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  846.231550][ T5685] usb 1-1: USB disconnect, device number 61
[  846.705090][T16860] FAULT_INJECTION: forcing a failure.
[  846.705090][T16860] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  846.724955][T16860] CPU: 1 UID: 0 PID: 16860 Comm: syz.5.3208 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  846.724993][T16860] Tainted: [L]=SOFTLOCKUP
[  846.725003][T16860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  846.725017][T16860] Call Trace:
[  846.725027][T16860]  <TASK>
[  846.725037][T16860]  dump_stack_lvl+0xe8/0x150
[  846.725078][T16860]  should_fail_ex+0x410/0x560
[  846.725117][T16860]  _copy_to_user+0x31/0xb0
[  846.725141][T16860]  video_usercopy+0xdf4/0x1430
[  846.725178][T16860]  ? __pfx___video_do_ioctl+0x10/0x10
[  846.725208][T16860]  ? __pfx_video_usercopy+0x10/0x10
[  846.725246][T16860]  ? __fget_files+0x2a/0x420
[  846.725277][T16860]  ? __fget_files+0x2a/0x420
[  846.725305][T16860]  ? __fget_files+0x3a2/0x420
[  846.725337][T16860]  v4l2_ioctl+0x18d/0x1e0
[  846.725365][T16860]  ? __pfx_v4l2_ioctl+0x10/0x10
[  846.725391][T16860]  __se_sys_ioctl+0xfc/0x170
[  846.725416][T16860]  do_syscall_64+0x166/0x520
[  846.725445][T16860]  ? trace_irq_disable+0x3b/0x140
[  846.725468][T16860]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  846.725491][T16860]  ? clear_bhb_loop+0x70/0xc0
[  846.725519][T16860]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  846.725542][T16860] RIP: 0033:0x7f629ab9e159
[  846.725564][T16860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  846.725585][T16860] RSP: 002b:00007f629ba3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  846.725610][T16860] RAX: ffffffffffffffda RBX: 00007f629ae25fa0 RCX: 00007f629ab9e159
[  846.725626][T16860] RDX: 0000200000000080 RSI: 00000000c0285628 RDI: 0000000000000003
[  846.725642][T16860] RBP: 00007f629ba3b090 R08: 0000000000000000 R09: 0000000000000000
[  846.725658][T16860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  846.725672][T16860] R13: 00007f629ae26038 R14: 00007f629ae25fa0 R15: 00007f629af4fa48
[  846.725710][T16860]  </TASK>
[  847.214191][T16866] tunl0: entered promiscuous mode
[  847.232997][T16866] gre0: entered promiscuous mode
[  847.279320][T16866] gretap0: entered promiscuous mode
[  847.320540][T16866] erspan0: entered promiscuous mode
[  847.333486][T16866] ip_vti0: entered promiscuous mode
[  847.343331][T16866] ip6_vti0: entered promiscuous mode
[  847.353394][T16866] sit0: entered promiscuous mode
[  847.364908][T16866] ip6tnl0: entered promiscuous mode
[  847.374911][T16866] ip6gre0: entered promiscuous mode
[  847.405469][T16866] syz_tun: entered promiscuous mode
[  847.440052][T16866] ip6gretap0: entered promiscuous mode
[  847.449866][T16866] bridge0: port 2(bridge_slave_1) entered disabled state
[  847.450615][T16866] bridge0: port 1(bridge_slave_0) entered disabled state
[  847.471814][T16866] bridge0: entered promiscuous mode
[  847.485674][T16866] vcan0: entered promiscuous mode
[  847.524041][T16866] bond0: entered promiscuous mode
[  847.530955][ T5607] usb 6-1: new full-speed USB device number 127 using dummy_hcd
[  847.539524][T16866] bond_slave_0: entered promiscuous mode
[  847.546247][T16866] bond_slave_1: entered promiscuous mode
[  847.558600][T16866] team0: entered promiscuous mode
[  847.566780][T16866] team_slave_0: entered promiscuous mode
[  847.573081][T16866] team_slave_1: entered promiscuous mode
[  847.621012][T16866] dummy0: entered promiscuous mode
[  847.674311][T16876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3215'.
[  847.704251][ T5607] usb 6-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00
[  847.720994][ T5607] usb 6-1: config 0 has an invalid interface number: 243 but max is 0
[  847.721044][ T5607] usb 6-1: config 0 has no interface number 0
[  847.721109][ T5607] usb 6-1: config 0 interface 243 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  847.721143][ T5607] usb 6-1: config 0 interface 243 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  847.721172][ T5607] usb 6-1: config 0 interface 243 has no altsetting 0
[  847.721213][ T5607] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  847.788074][T16866] nlmon0: entered promiscuous mode
[  847.788143][ T5607] usb 6-1: config 0 descriptor??
[  847.818676][T16866] batadv0: entered promiscuous mode
[  847.847582][T16866] vxcan0: entered promiscuous mode
[  847.878441][T16866] vxcan1: entered promiscuous mode
[  847.895461][T16866] veth0: entered promiscuous mode
[  847.921335][T16866] veth1: entered promiscuous mode
[  847.957339][T16866] wg0: entered promiscuous mode
[  847.994920][T16866] wg1: entered promiscuous mode
[  848.020043][T16866] wg2: entered promiscuous mode
[  848.047621][T16866] veth0_to_bridge: entered promiscuous mode
[  848.087201][T16866] veth1_to_bridge: entered promiscuous mode
[  848.132955][T16866] veth0_to_bond: entered promiscuous mode
[  848.163368][T16866] veth1_to_bond: entered promiscuous mode
[  848.172212][T16866] veth0_to_team: entered promiscuous mode
[  848.183888][T16866] veth1_to_team: entered promiscuous mode
[  848.194653][T16866] veth0_to_batadv: entered promiscuous mode
[  848.205007][T16866] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  848.205110][T16866] batadv_slave_0: entered promiscuous mode
[  848.226619][T16866] veth1_to_batadv: entered promiscuous mode
[  848.262186][ T5607] uclogic 0003:28BD:0905.001D: interface is invalid, ignoring
[  848.273051][T16866] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  848.273145][T16866] batadv_slave_1: entered promiscuous mode
[  848.294822][T16866] xfrm0: entered promiscuous mode
[  848.313109][T16866] veth0_to_hsr: entered promiscuous mode
[  848.348289][T16866] veth1_to_hsr: entered promiscuous mode
[  848.362958][T16866] hsr0: entered promiscuous mode
[  848.371797][T16866] veth1_virt_wifi: entered promiscuous mode
[  848.382231][T16866] veth0_virt_wifi: entered promiscuous mode
[  848.393945][T16866] virt_wifi0: entered promiscuous mode
[  848.412842][T16866] vlan0: entered promiscuous mode
[  848.423342][T16866] vlan1: entered promiscuous mode
[  848.441920][T16866] macvlan0: entered promiscuous mode
[  848.464564][T16866] macvlan1: entered promiscuous mode
[  848.479501][T16866] ipvlan0: entered promiscuous mode
[  848.480000][T16866] ipvlan1: entered promiscuous mode
[  848.520761][ T5607] usb 6-1: USB disconnect, device number 127
[  848.535737][T16866] macvtap0: entered promiscuous mode
[  848.569899][T16866] macsec0: entered promiscuous mode
[  848.580908][T16866] geneve0: entered promiscuous mode
[  848.593095][T16866] geneve1: entered promiscuous mode
[  848.609007][T16866] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[  848.624842][T16866] netdevsim netdevsim6 netdevsim1: entered promiscuous mode
[  848.635756][T16866] netdevsim netdevsim6 netdevsim2: entered promiscuous mode
[  848.648834][T16866] netdevsim netdevsim6 netdevsim3: entered promiscuous mode
[  848.672337][T16866] mac80211_hwsim hwsim54 wlan0: entered promiscuous mode
[  848.688387][T16866] mac80211_hwsim hwsim55 wlan1: entered promiscuous mode
[  848.701206][T16866] ipip0: entered promiscuous mode
[  848.703882][T16866] syztnl1: entered promiscuous mode
[  848.737437][T16883] mac80211_hwsim hwsim59 wlan0: entered promiscuous mode
[  848.774603][ T3307] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  848.775885][ T3307] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  848.776003][ T3307] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  848.831881][ T3307] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  848.930625][T16889] syzkaller0: entered promiscuous mode
[  848.930674][T16889] syzkaller0: entered allmulticast mode
[  848.964274][T16893] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3221'.
[  849.021056][T16896] FAULT_INJECTION: forcing a failure.
[  849.021056][T16896] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  849.034557][T16896] CPU: 0 UID: 0 PID: 16896 Comm: syz.6.3222 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  849.034593][T16896] Tainted: [L]=SOFTLOCKUP
[  849.034602][T16896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  849.034616][T16896] Call Trace:
[  849.034625][T16896]  <TASK>
[  849.034635][T16896]  dump_stack_lvl+0xe8/0x150
[  849.034673][T16896]  should_fail_ex+0x410/0x560
[  849.034709][T16896]  _copy_to_user+0x31/0xb0
[  849.034733][T16896]  simple_read_from_buffer+0xe1/0x170
[  849.034768][T16896]  proc_fail_nth_read+0x1bb/0x230
[  849.034799][T16896]  ? common_file_perm+0x20e/0x2b0
[  849.034835][T16896]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  849.034871][T16896]  ? rw_verify_area+0x24a/0x4c0
[  849.034902][T16896]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  849.034933][T16896]  vfs_read+0x213/0xa80
[  849.034969][T16896]  ? __pfx___mutex_lock+0x10/0x10
[  849.034999][T16896]  ? __pfx_vfs_read+0x10/0x10
[  849.035032][T16896]  ? __fget_files+0x2a/0x420
[  849.035065][T16896]  ? __fget_files+0x3a2/0x420
[  849.035093][T16896]  ? __fget_files+0x2a/0x420
[  849.035131][T16896]  ksys_read+0x150/0x270
[  849.035165][T16896]  ? __pfx_ksys_read+0x10/0x10
[  849.035195][T16896]  ? __pfx_v4l2_ioctl+0x10/0x10
[  849.035232][T16896]  do_syscall_64+0x166/0x520
[  849.035261][T16896]  ? trace_irq_disable+0x3b/0x140
[  849.035283][T16896]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  849.035306][T16896]  ? clear_bhb_loop+0x70/0xc0
[  849.035334][T16896]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  849.035359][T16896] RIP: 0033:0x7f2d1995e98e
[  849.035381][T16896] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  849.035402][T16896] RSP: 002b:00007f2d1a8e8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  849.035428][T16896] RAX: ffffffffffffffda RBX: 00007f2d1a8e96c0 RCX: 00007f2d1995e98e
[  849.035446][T16896] RDX: 000000000000000f RSI: 00007f2d1a8e90a0 RDI: 0000000000000004
[  849.035461][T16896] RBP: 00007f2d1a8e9090 R08: 0000000000000000 R09: 0000000000000000
[  849.035476][T16896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  849.035491][T16896] R13: 00007f2d19c26038 R14: 00007f2d19c25fa0 R15: 00007f2d19d4fa48
[  849.035532][T16896]  </TASK>
[  849.679070][   T32] audit: type=1800 audit(1787948355.972:3058): pid=16915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3228" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0
[  849.742472][ T4946] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  849.829267][ T5731] wiimote 0005:057E:0306.001E: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0
[  849.840203][T16921] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3231'.
[  849.892450][ T4946] usb 7-1: Using ep0 maxpacket: 8
[  849.896756][ T4946] usb 7-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00
[  849.904060][ T4946] usb 7-1: config 0 has an invalid descriptor of length 115, skipping remainder of the config
[  849.904199][ T4946] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  849.904316][ T4946] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  849.946499][ T4946] usb 7-1: config 0 descriptor??
[  849.950782][ T5607] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  850.010020][T16925] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  850.026490][ T5731] wiimote 0005:057E:0306.001E: New device registered
[  850.102396][T16908] wiimote 0005:057E:0306.001E: Device removed
[  850.106954][ T5607] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  850.132976][ T5607] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  850.133074][ T5607] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  850.133258][ T5607] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  850.179195][T16917] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  850.206129][ T5607] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  850.305223][T16924] fido_id[16924]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  850.471164][T16902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  850.471690][T16902] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  850.505696][ T4946] hid_parser_main: 32 callbacks suppressed
[  850.511340][ T4946] betop 0003:11C2:2208.001F: unknown main item tag 0x2
[  850.515562][ T4946] betop 0003:11C2:2208.001F: unknown main item tag 0x4
[  850.515692][ T4946] betop 0003:11C2:2208.001F: reserved main item tag 0xd
[  850.515949][ T4946] betop 0003:11C2:2208.001F: unknown main item tag 0x1
[  850.516024][ T4946] betop 0003:11C2:2208.001F: unknown main item tag 0x0
[  850.516097][ T4946] betop 0003:11C2:2208.001F: unknown main item tag 0x0
[  850.516169][ T4946] betop 0003:11C2:2208.001F: unknown main item tag 0x0
[  850.518893][ T4946] betop 0003:11C2:2208.001F: unknown main item tag 0x0
[  850.518976][ T4946] betop 0003:11C2:2208.001F: unknown main item tag 0x0
[  850.519049][ T4946] betop 0003:11C2:2208.001F: unknown main item tag 0x0
[  850.519114][ T4946] betop 0003:11C2:2208.001F: unknown main item tag 0x0
[  850.642393][ T5607] usb 4-1: USB disconnect, device number 33
[  850.653204][ T4946] betop 0003:11C2:2208.001F: hidraw1: USB HID v80.09 Device [HID 11c2:2208] on usb-dummy_hcd.6-1/input0
[  850.680430][ T5685] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  850.712054][ T5761] usb 7-1: USB disconnect, device number 24
[  850.860358][ T5685] usb 3-1: Using ep0 maxpacket: 8
[  850.868466][ T5685] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d
[  850.914946][ T5685] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  850.915002][ T5685] usb 3-1: Product: syz
[  850.915039][ T5685] usb 3-1: Manufacturer: syz
[  850.915060][ T5685] usb 3-1: SerialNumber: syz
[  850.999290][T16931] fido_id[16931]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  851.027791][ T5685] usb 3-1: config 0 descriptor??
[  851.080135][ T5685] gspca_main: sonixj-2.14.0 probing 0c45:614a
[  851.142241][ T5693] wiimote 0005:057E:0306.001E: detected device: Nintendo Wii Remote (Gen 1)
[  851.395475][ T5607] usb 4-1: new full-speed USB device number 34 using dummy_hcd
[  851.570776][ T5607] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  851.584161][ T5607] usb 4-1: config 0 has no interfaces?
[  851.612138][ T5607] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  851.612203][ T5607] usb 4-1: Product: syz
[  851.612220][ T5607] usb 4-1: Manufacturer: syz
[  851.612267][ T5607] usb 4-1: SerialNumber: syz
[  851.665575][ T5607] usb 4-1: config 0 descriptor??
[  851.746968][ T5693] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.001E/input/input106
[  851.931220][ T5731] usb 4-1: USB disconnect, device number 34
[  851.979917][ T5693] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.001E/input/input107
[  852.043350][ T5693] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.001E/input/input105
[  852.373998][ T5685] usb 3-1: USB disconnect, device number 64
[  852.603465][T16940] netlink: 'syz.3.3236': attribute type 4 has an invalid length.
[  852.603514][T16940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3236'.
[  852.697312][T16941] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  852.741787][ T5731] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  852.892258][ T5731] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  852.902371][ T5731] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  852.902416][ T5731] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  852.902461][ T5731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  852.936507][T16938] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  852.957543][ T5731] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  853.227273][ T5731] usb 1-1: USB disconnect, device number 62
[  853.835251][T16951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3240'.
[  854.107520][T16955] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3242'.
[  854.213002][T16955] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  854.229554][T16955] bond1 (unregistering): Released all slaves
[  854.715345][T16966] FAULT_INJECTION: forcing a failure.
[  854.715345][T16966] name failslab, interval 1, probability 0, space 0, times 0
[  854.729877][T16966] CPU: 0 UID: 0 PID: 16966 Comm: syz.2.3246 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  854.729913][T16966] Tainted: [L]=SOFTLOCKUP
[  854.729922][T16966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  854.729935][T16966] Call Trace:
[  854.729944][T16966]  <TASK>
[  854.729953][T16966]  dump_stack_lvl+0xe8/0x150
[  854.729990][T16966]  should_fail_ex+0x410/0x560
[  854.730027][T16966]  should_failslab+0xa8/0x100
[  854.730055][T16966]  __kmalloc_cache_noprof+0xa3/0x600
[  854.730088][T16966]  ? stack_trace_save+0xa9/0x100
[  854.730121][T16966]  ? rtnl_newlink+0x143/0x1c30
[  854.730249][T16966]  ? rtnl_newlink+0x143/0x1c30
[  854.730288][T16966]  rtnl_newlink+0x143/0x1c30
[  854.730322][T16966]  ? kasan_save_track+0x4f/0x80
[  854.730343][T16966]  ? kasan_save_track+0x3e/0x80
[  854.730365][T16966]  ? __kasan_slab_free+0x5c/0x80
[  854.730388][T16966]  ? kmem_cache_free+0x182/0x650
[  854.730409][T16966]  ? nlmon_xmit+0xb0/0x100
[  854.730517][T16966]  ? dev_hard_start_xmit+0x2cd/0x830
[  854.730564][T16966]  ? __dev_queue_xmit+0x14c0/0x3820
[  854.730612][T16966]  ? __netlink_deliver_tap+0x5b4/0x860
[  854.730638][T16966]  ? netlink_deliver_tap+0x19c/0x1b0
[  854.730662][T16966]  ? netlink_unicast+0x781/0x940
[  854.730682][T16966]  ? netlink_sendmsg+0x813/0xb40
[  854.730706][T16966]  ? __pfx_rtnl_newlink+0x10/0x10
[  854.730736][T16966]  ? do_syscall_64+0x166/0x520
[  854.730766][T16966]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  854.730826][T16966]  ? kasan_quarantine_put+0xbb/0x1f0
[  854.730870][T16966]  ? lockdep_hardirqs_on+0x7b/0x110
[  854.730904][T16966]  ? nlmon_xmit+0xb0/0x100
[  854.730934][T16966]  ? kmem_cache_free+0x182/0x650
[  854.730968][T16966]  ? __lock_acquire+0x6df/0x2e50
[  854.730996][T16966]  ? __dev_queue_xmit+0x29b/0x3820
[  854.731025][T16966]  ? __local_bh_enable_ip+0xd6/0x140
[  854.731056][T16966]  ? lockdep_hardirqs_on+0x7b/0x110
[  854.731086][T16966]  ? __dev_queue_xmit+0x29b/0x3820
[  854.731109][T16966]  ? __local_bh_enable_ip+0xd6/0x140
[  854.731136][T16966]  ? __dev_queue_xmit+0x29b/0x3820
[  854.731166][T16966]  ? lock_acquire+0x115/0x350
[  854.731187][T16966]  ? __pfx_rtnl_newlink+0x10/0x10
[  854.731230][T16966]  ? __pfx_rtnl_newlink+0x10/0x10
[  854.731260][T16966]  rtnetlink_rcv_msg+0x802/0xc00
[  854.731296][T16966]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  854.731326][T16966]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  854.731356][T16966]  ? ref_tracker_free+0x689/0x830
[  854.731394][T16966]  ? __pfx_ref_tracker_free+0x10/0x10
[  854.731438][T16966]  netlink_rcv_skb+0x226/0x4a0
[  854.731464][T16966]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  854.731498][T16966]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  854.731536][T16966]  ? netlink_deliver_tap+0x2e/0x1b0
[  854.731561][T16966]  ? netlink_deliver_tap+0x2e/0x1b0
[  854.731592][T16966]  netlink_unicast+0x7bd/0x940
[  854.731625][T16966]  netlink_sendmsg+0x813/0xb40
[  854.731661][T16966]  ? __pfx_netlink_sendmsg+0x10/0x10
[  854.731693][T16966]  ? apparmor_socket_sendmsg+0x98/0x360
[  854.731726][T16966]  ? __pfx_netlink_sendmsg+0x10/0x10
[  854.731750][T16966]  sock_sendmsg_nosec+0x13a/0x180
[  854.731784][T16966]  ____sys_sendmsg+0x54e/0x850
[  854.731812][T16966]  ? __pfx_____sys_sendmsg+0x10/0x10
[  854.731847][T16966]  ? import_iovec+0x73/0xa0
[  854.731891][T16966]  ___sys_sendmsg+0x2a5/0x360
[  854.731911][T16966]  ? __lock_acquire+0x6df/0x2e50
[  854.731938][T16966]  ? __pfx____sys_sendmsg+0x10/0x10
[  854.731995][T16966]  ? __fget_files+0x2a/0x420
[  854.732022][T16966]  ? __fget_files+0x3a2/0x420
[  854.732053][T16966]  __x64_sys_sendmsg+0x1b1/0x290
[  854.732073][T16966]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  854.732107][T16966]  do_syscall_64+0x166/0x520
[  854.732131][T16966]  ? trace_irq_disable+0x3b/0x140
[  854.732149][T16966]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  854.732167][T16966]  ? clear_bhb_loop+0x70/0xc0
[  854.732190][T16966]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  854.732209][T16966] RIP: 0033:0x7f84c7d9e159
[  854.732228][T16966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  854.732244][T16966] RSP: 002b:00007f84c8c3b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  854.732264][T16966] RAX: ffffffffffffffda RBX: 00007f84c8025fa0 RCX: 00007f84c7d9e159
[  854.732278][T16966] RDX: 0000000004000804 RSI: 0000200000000080 RDI: 0000000000000005
[  854.732291][T16966] RBP: 00007f84c8c3b090 R08: 0000000000000000 R09: 0000000000000000
[  854.732303][T16966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  854.732315][T16966] R13: 00007f84c8026038 R14: 00007f84c8025fa0 R15: 00007f84c814fa48
[  854.732341][T16966]  </TASK>
[  854.801839][ T5685] usb 4-1: new low-speed USB device number 35 using dummy_hcd
[  854.817617][T16964] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3245'.
[  854.945078][ T5685] usb 4-1: device descriptor read/64, error -71
[  855.183155][ T5685] usb 4-1: new low-speed USB device number 36 using dummy_hcd
[  855.330550][ T5685] usb 4-1: device descriptor read/64, error -71
[  855.345761][ T5618] Bluetooth: hci4: Invalid handle: 0xed88 > 0x0eff
[  855.440686][ T5685] usb usb4-port1: attempt power cycle
[  855.793635][ T5685] usb 4-1: new low-speed USB device number 37 using dummy_hcd
[  855.821064][ T5685] usb 4-1: device descriptor read/8, error -71
[  855.956712][T16986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3253'.
[  856.061131][ T5685] usb 4-1: new low-speed USB device number 38 using dummy_hcd
[  856.081297][ T5685] usb 4-1: device descriptor read/8, error -71
[  856.200656][ T5685] usb usb4-port1: unable to enumerate USB device
[  856.973646][T17003] netlink: 'syz.2.3258': attribute type 32 has an invalid length.
[  857.250480][ T5731] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  857.335339][   T31] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  857.401319][ T5731] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  857.413782][ T5731] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  857.413848][ T5731] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  857.413914][ T5731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  857.453188][ T5731] usb 1-1: config 0 descriptor??
[  857.522816][   T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  857.533392][   T31] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  857.533440][   T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  857.533509][   T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  857.533539][   T31] usb 3-1: config 1 has no interface number 0
[  857.533577][   T31] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30
[  857.533654][   T31] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32
[  857.608291][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  857.617134][   T31] usb 3-1: Product: syz
[  857.617192][   T31] usb 3-1: Manufacturer: syz
[  857.617243][   T31] usb 3-1: SerialNumber: syz
[  858.051750][ T5693] usb 3-1: USB disconnect, device number 65
[  858.177812][ T5731] usbhid 1-1:0.0: can't add hid device: -71
[  858.185751][ T5731] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  858.205731][ T5731] usb 1-1: USB disconnect, device number 63
[  859.150391][ T5731] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  859.280508][ T5731] usb 4-1: device descriptor read/64, error -71
[  859.301861][   T31] usb 1-1: new full-speed USB device number 64 using dummy_hcd
[  859.310544][ T5693] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  859.463530][   T31] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  859.474481][ T5693] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  859.491183][ T5693] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  859.502382][ T5693] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  859.502583][   T31] usb 1-1: config 0 has an invalid interface number: 48 but max is 0
[  859.502608][   T31] usb 1-1: config 0 has no interface number 0
[  859.503036][   T31] usb 1-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30
[  859.503078][   T31] usb 1-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[  859.503105][   T31] usb 1-1: config 0 interface 48 has no altsetting 0
[  859.503137][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  859.527761][ T5731] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  859.563431][ T5693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  859.563467][ T5693] usb 3-1: SerialNumber: syz
[  859.612434][   T31] usb 1-1: config 0 descriptor??
[  859.622537][ T5693] cdc_ether 3-1:1.0: missing cdc ether descriptor
[  859.733678][ T5731] usb 4-1: device descriptor read/64, error -71
[  859.831385][T17025] loop4: detected capacity change from 0 to 7
[  859.841064][T17025] Dev loop4: unable to read RDB block 7
[  859.841122][T17025]  loop4: AHDI p1 p2 p3
[  859.841149][T17025] loop4: partition table partially beyond EOD, truncated
[  859.841341][T17025] loop4: p1 size 825635125 extends beyond EOD, truncated
[  859.858797][ T5731] usb usb4-port1: attempt power cycle
[  859.877289][T17025] loop4: p3 start 335544320 is beyond EOD, truncated
[  859.886891][ T5761] usb 3-1: USB disconnect, device number 66
[  859.972808][T17024] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3264'.
[  860.012773][T16394] udevd[16394]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  860.043775][   T31] usb 1-1: string descriptor 0 read error: -71
[  860.053039][   T31] cp210x 1-1:0.48: cp210x converter detected
[  860.061318][   T31] cp210x 1-1:0.48: failed to get vendor val 0x370b size 1: -71
[  860.069143][   T31] cp210x 1-1:0.48: querying part number failed
[  860.085798][   T31] usb 1-1: cp210x converter now attached to ttyUSB0
[  860.098385][   T31] usb 1-1: USB disconnect, device number 64
[  860.120473][   T31] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  860.129050][   T31] cp210x 1-1:0.48: device disconnected
[  860.220582][ T5731] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  860.241432][ T5731] usb 4-1: device descriptor read/8, error -71
[  860.480400][ T5731] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  860.490440][ T5693] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  860.503627][ T5731] usb 4-1: device descriptor read/8, error -71
[  860.534695][T17039] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3270'.
[  860.577233][T17039] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  860.600571][   T31] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  860.609515][T17039] bond1 (unregistering): Released all slaves
[  860.612122][ T5731] usb usb4-port1: unable to enumerate USB device
[  860.652065][ T5693] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  860.654362][ T5693] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  860.654502][ T5693] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  860.667369][ T5693] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  860.667448][ T5693] usb 6-1: SerialNumber: syz
[  860.711737][ T5693] cdc_ether 6-1:1.0: missing cdc ether descriptor
[  860.753074][   T31] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  860.766284][   T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  860.766335][   T31] usb 7-1: Product: syz
[  860.766373][   T31] usb 7-1: Manufacturer: syz
[  860.766431][   T31] usb 7-1: SerialNumber: syz
[  860.784091][   T31] usb 7-1: config 0 descriptor??
[  860.919006][T17031] loop4: detected capacity change from 0 to 7
[  860.928649][T17031] Dev loop4: unable to read RDB block 7
[  860.928748][T17031]  loop4: AHDI p1 p2 p3
[  860.928854][T17031] loop4: partition table partially beyond EOD, truncated
[  860.929556][T17031] loop4: p1 size 825635125 extends beyond EOD, truncated
[  860.960780][T17031] loop4: p3 start 335544320 is beyond EOD, truncated
[  860.969915][ T5685] usb 6-1: USB disconnect, device number 2
[  861.075004][T16322] udevd[16322]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  861.343102][T17053] lo: entered promiscuous mode
[  861.396853][T17053] tunl0: entered promiscuous mode
[  861.410855][T17053] gre0: entered promiscuous mode
[  861.450057][T17053] gretap0: entered promiscuous mode
[  861.476685][T17053] erspan0: entered promiscuous mode
[  861.485851][T17053] ip_vti0: entered promiscuous mode
[  861.492634][T17053] ip6_vti0: entered promiscuous mode
[  861.503135][T17053] sit0: entered promiscuous mode
[  861.526057][T17053] ip6tnl0: entered promiscuous mode
[  861.549983][T17053] ip6gre0: entered promiscuous mode
[  861.582355][T17053] syz_tun: entered promiscuous mode
[  861.609591][   T31] usb 7-1: Firmware version (0.0) predates our first public release.
[  861.609641][   T31] usb 7-1: Please update to version 0.2 or newer
[  861.632316][T17033] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3268'.
[  861.668144][T17053] ip6gretap0: entered promiscuous mode
[  861.680810][T17053] bridge0: port 2(bridge_slave_1) entered disabled state
[  861.681512][T17053] bridge0: port 1(bridge_slave_0) entered disabled state
[  861.697189][T17053] bridge0: entered promiscuous mode
[  861.707140][T17053] vcan0: entered promiscuous mode
[  861.724696][T17053] bond0: entered promiscuous mode
[  861.724741][T17053] bond_slave_0: entered promiscuous mode
[  861.725035][T17053] bond_slave_1: entered promiscuous mode
[  861.751012][T17053] team0: entered promiscuous mode
[  861.756680][T17053] team_slave_0: entered promiscuous mode
[  861.763195][T17053] team_slave_1: entered promiscuous mode
[  861.777225][T17053] dummy0: entered promiscuous mode
[  861.801147][T17053] nlmon0: entered promiscuous mode
[  861.809305][T17053] batadv0: entered promiscuous mode
[  861.829064][T17053] vxcan0: entered promiscuous mode
[  861.848320][T17053] vxcan1: entered promiscuous mode
[  861.859766][T17053] veth0: entered promiscuous mode
[  861.871357][T17053] veth1: entered promiscuous mode
[  861.884371][T17053] wg0: entered promiscuous mode
[  861.913804][T17053] wg1: entered promiscuous mode
[  861.934078][T17053] wg2: entered promiscuous mode
[  861.942488][T17053] veth0_to_bridge: entered promiscuous mode
[  861.965834][T17053] veth1_to_bridge: entered promiscuous mode
[  861.985212][T17053] veth0_to_bond: entered promiscuous mode
[  861.995019][T17053] veth1_to_bond: entered promiscuous mode
[  862.007456][T17053] veth0_to_team: entered promiscuous mode
[  862.020153][T17053] veth1_to_team: entered promiscuous mode
[  862.060167][T17053] veth0_to_batadv: entered promiscuous mode
[  862.078324][T17053] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  862.078419][T17053] batadv_slave_0: entered promiscuous mode
[  862.096487][T17053] veth1_to_batadv: entered promiscuous mode
[  862.111693][T17053] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  862.111829][T17053] batadv_slave_1: entered promiscuous mode
[  862.133346][T17053] xfrm0: entered promiscuous mode
[  862.146603][T17053] veth0_to_hsr: entered promiscuous mode
[  862.165800][T17053] veth1_to_hsr: entered promiscuous mode
[  862.184452][T17053] hsr0: entered promiscuous mode
[  862.194485][T17053] veth1_virt_wifi: entered promiscuous mode
[  862.197917][T17053] veth0_virt_wifi: entered promiscuous mode
[  862.216515][T17053] virt_wifi0: entered promiscuous mode
[  862.238987][T17053] vlan0: entered promiscuous mode
[  862.248412][T17053] vlan1: entered promiscuous mode
[  862.263899][T17053] macvlan0: entered promiscuous mode
[  862.274376][T17053] macvlan1: entered promiscuous mode
[  862.281840][ T5731] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  862.294721][T17053] ipvlan0: entered promiscuous mode
[  862.302185][T17053] ipvlan1: entered promiscuous mode
[  862.343143][T17053] macvtap0: entered promiscuous mode
[  862.354582][T17053] macsec0: entered promiscuous mode
[  862.364458][T17053] geneve0: entered promiscuous mode
[  862.371903][T17053] geneve1: entered promiscuous mode
[  862.379406][T17053] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  862.392410][T17053] netdevsim netdevsim2 netdevsim1: entered promiscuous mode
[  862.408360][T17053] netdevsim netdevsim2 netdevsim2: entered promiscuous mode
[  862.418554][T17053] netdevsim netdevsim2 netdevsim3: entered promiscuous mode
[  862.430752][ T5731] usb 1-1: Using ep0 maxpacket: 16
[  862.436601][ T5731] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  862.448809][ T5731] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8
[  862.461363][ T5761] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  862.470875][ T5731] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  862.470907][ T5731] usb 1-1: Product: syz
[  862.470923][ T5731] usb 1-1: Manufacturer: syz
[  862.470938][ T5731] usb 1-1: SerialNumber: syz
[  862.480965][T17053] mac80211_hwsim hwsim60 wlan1: entered promiscuous mode
[  862.485323][T17053] syztnl1: entered promiscuous mode
[  862.530188][ T5731] usb 1-1: config 0 descriptor??
[  862.542183][T10552] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  862.542592][T10552] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  862.542953][T10552] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  862.543274][T10552] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  862.579409][ T5731] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  862.589241][ T5731] usb 1-1: Detected FT232R
[  862.622265][ T5761] usb 6-1: Using ep0 maxpacket: 8
[  862.625589][ T5761] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  862.628303][ T5761] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  862.628378][ T5761] usb 6-1: config 179 has no interface number 0
[  862.628500][ T5761] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  862.628573][ T5761] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  862.628655][ T5761] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  862.628726][ T5761] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  862.628790][ T5761] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  862.628901][ T5761] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  862.728163][T17064] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  862.761181][   T31] usb 7-1: USB disconnect, device number 25
[  862.912396][ T5731] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  862.919711][ T5731] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  862.928078][ T5731] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71
[  862.947135][ T5731] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  862.963648][ T5731] usb 1-1: USB disconnect, device number 65
[  863.068021][ T5731] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  863.068680][ T5731] ftdi_sio 1-1:0.0: device disconnected
[  863.086354][ T5761] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input108
[  863.176069][ T4946] usb 6-1: USB disconnect, device number 3
[  863.176097][    C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  863.176147][    C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  863.421393][T17070] ------------[ cut here ]------------
[  863.421430][T17070] ODEBUG: free active (active state 0) object: ffff88807b63d020 object type: hrtimer hint: dummy_hrtimer_callback+0x0/0x150
[  863.421616][T17070] WARNING: lib/debugobjects.c:632 at debug_print_object+0xec/0x230, CPU#1: syz.2.3280/17070
[  863.453442][T17070] Modules linked in:
[  863.459761][T17070] CPU: 1 UID: 0 PID: 17070 Comm: syz.2.3280 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  863.471104][T17070] Tainted: [L]=SOFTLOCKUP
[  863.475678][T17070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  863.485992][T17070] RIP: 0010:debug_print_object+0x18a/0x230
[  863.492878][T17070] Code: f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 7d 80 4e fd 4d 8b 0f 4c 89 ef 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f0 ff 34 24 <67> 48 0f b9 3a 48 83 c4 08 ff 05 53 38 91 0b 48 83 c4 10 5b 41 5c
[  863.513519][T17070] RSP: 0018:ffffc90006effb70 EFLAGS: 00010246
[  863.519701][T17070] RAX: 1ffffffff181f32c RBX: dffffc0000000000 RCX: 0000000000000000
[  863.528169][T17070] RDX: ffffffff8c6d9740 RSI: ffffffff8c6d91c0 RDI: ffffffff90852360
[  863.536469][T17070] RBP: ffffffff8c6d9740 R08: ffff88807b63d020 R09: ffffffff8c0f9ba0
[  863.544666][T17070] R10: dffffc0000000000 R11: ffffffff81b44a70 R12: 0000000000000000
[  863.552778][T17070] R13: ffffffff90852360 R14: ffff88807b63d020 R15: ffffffff8c0f9960
[  863.560875][T17070] FS:  000055555f102500(0000) GS:ffff888124de0000(0000) knlGS:0000000000000000
[  863.569888][T17070] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  863.576577][T17070] CR2: 00007f393d2ad854 CR3: 000000001d7ee000 CR4: 00000000003526f0
[  863.584637][T17070] Call Trace:
[  863.587948][T17070]  <TASK>
[  863.591658][T17070]  ? __pfx_dummy_hrtimer_callback+0x10/0x10
[  863.597607][T17070]  ? __pfx_dummy_hrtimer_callback+0x10/0x10
[  863.603924][T17070]  debug_check_no_obj_freed+0x2e3/0x450
[  863.609526][T17070]  kfree+0x13e/0x650
[  863.613535][T17070]  ? _raw_spin_unlock_irq+0x23/0x50
[  863.618966][T17070]  ? dummy_pcm_close+0x9b/0xb0
[  863.624443][T17070]  dummy_pcm_close+0x9b/0xb0
[  863.629125][T17070]  snd_pcm_release_substream+0x313/0x490
[  863.635034][T17070]  snd_pcm_release+0xb6/0x160
[  863.639759][T17070]  ? __pfx_snd_pcm_release+0x10/0x10
[  863.645111][T17070]  __fput+0x418/0xa50
[  863.649180][T17070]  task_work_run+0x1d9/0x270
[  863.653896][T17070]  ? __pfx_task_work_run+0x10/0x10
[  863.659068][T17070]  exit_to_user_mode_loop+0x204/0x770
[  863.664561][T17070]  ? rcu_is_watching+0x16/0xb0
[  863.669384][T17070]  do_syscall_64+0x328/0x520
[  863.674105][T17070]  ? trace_irq_disable+0x3b/0x140
[  863.679207][T17070]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  863.685394][T17070]  ? clear_bhb_loop+0x70/0xc0
[  863.690153][T17070]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  863.696903][T17070] RIP: 0033:0x7f84c7d9e159
[  863.701966][T17070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  863.721692][T17070] RSP: 002b:00007f84c814fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  863.730154][T17070] RAX: 0000000000000000 RBX: 00007f84c8027da0 RCX: 00007f84c7d9e159
[  863.738207][T17070] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  863.746233][T17070] RBP: 00007f84c8027da0 R08: 00007f84c8026218 R09: 0000000000000000
[  863.754293][T17070] R10: 000000000003fc58 R11: 0000000000000246 R12: 00000000000d2e3e
[  863.762371][T17070] R13: 00007f84c802627c R14: 00007f84c8026278 R15: 00007f84c8026270
[  863.770620][T17070]  </TASK>
[  863.773668][T17070] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  863.781050][T17070] CPU: 1 UID: 0 PID: 17070 Comm: syz.2.3280 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  863.792029][T17070] Tainted: [L]=SOFTLOCKUP
[  863.796368][T17070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  863.806465][T17070] Call Trace:
[  863.809762][T17070]  <TASK>
[  863.812701][T17070]  vpanic+0x56d/0xa60
[  863.816764][T17070]  ? __pfx__printk+0x10/0x10
[  863.821366][T17070]  ? __pfx_vpanic+0x10/0x10
[  863.825887][T17070]  ? is_bpf_text_address+0x292/0x2b0
[  863.831217][T17070]  ? is_bpf_text_address+0x26/0x2b0
[  863.836641][T17070]  panic+0xc5/0xd0
[  863.840405][T17070]  ? __pfx_panic+0x10/0x10
[  863.844869][T17070]  __warn+0x315/0x4c0
[  863.848867][T17070]  ? debug_print_object+0xec/0x230
[  863.854001][T17070]  ? debug_print_object+0xec/0x230
[  863.859135][T17070]  __report_bug+0x276/0x570
[  863.863737][T17070]  ? kernel_text_address+0xa5/0xe0
[  863.868946][T17070]  ? debug_print_object+0xec/0x230
[  863.874076][T17070]  ? __pfx___report_bug+0x10/0x10
[  863.879124][T17070]  ? __lock_acquire+0x6df/0x2e50
[  863.884089][T17070]  report_bug_entry+0x19b/0x290
[  863.888957][T17070]  ? debug_print_object+0x18a/0x230
[  863.894172][T17070]  ? debug_print_object+0x18f/0x230
[  863.899417][T17070]  handle_bug+0xce/0x200
[  863.903692][T17070]  exc_invalid_op+0x1a/0x50
[  863.908215][T17070]  asm_exc_invalid_op+0x1a/0x20
[  863.913102][T17070] RIP: 0010:debug_print_object+0x18a/0x230
[  863.918945][T17070] Code: f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 7d 80 4e fd 4d 8b 0f 4c 89 ef 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f0 ff 34 24 <67> 48 0f b9 3a 48 83 c4 08 ff 05 53 38 91 0b 48 83 c4 10 5b 41 5c
[  863.938660][T17070] RSP: 0018:ffffc90006effb70 EFLAGS: 00010246
[  863.944745][T17070] RAX: 1ffffffff181f32c RBX: dffffc0000000000 RCX: 0000000000000000
[  863.952727][T17070] RDX: ffffffff8c6d9740 RSI: ffffffff8c6d91c0 RDI: ffffffff90852360
[  863.960708][T17070] RBP: ffffffff8c6d9740 R08: ffff88807b63d020 R09: ffffffff8c0f9ba0
[  863.968794][T17070] R10: dffffc0000000000 R11: ffffffff81b44a70 R12: 0000000000000000
[  863.976802][T17070] R13: ffffffff90852360 R14: ffff88807b63d020 R15: ffffffff8c0f9960
[  863.984792][T17070]  ? __pfx_hrtimer_debug_hint+0x10/0x10
[  863.990375][T17070]  ? __pfx_dummy_hrtimer_callback+0x10/0x10
[  863.996275][T17070]  ? __pfx_dummy_hrtimer_callback+0x10/0x10
[  864.002183][T17070]  debug_check_no_obj_freed+0x2e3/0x450
[  864.007753][T17070]  kfree+0x13e/0x650
[  864.011670][T17070]  ? _raw_spin_unlock_irq+0x23/0x50
[  864.016875][T17070]  ? dummy_pcm_close+0x9b/0xb0
[  864.021649][T17070]  dummy_pcm_close+0x9b/0xb0
[  864.026247][T17070]  snd_pcm_release_substream+0x313/0x490
[  864.031901][T17070]  snd_pcm_release+0xb6/0x160
[  864.036621][T17070]  ? __pfx_snd_pcm_release+0x10/0x10
[  864.041915][T17070]  __fput+0x418/0xa50
[  864.045933][T17070]  task_work_run+0x1d9/0x270
[  864.050550][T17070]  ? __pfx_task_work_run+0x10/0x10
[  864.055674][T17070]  exit_to_user_mode_loop+0x204/0x770
[  864.061055][T17070]  ? rcu_is_watching+0x16/0xb0
[  864.065833][T17070]  do_syscall_64+0x328/0x520
[  864.070436][T17070]  ? trace_irq_disable+0x3b/0x140
[  864.075468][T17070]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  864.081546][T17070]  ? clear_bhb_loop+0x70/0xc0
[  864.086252][T17070]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  864.092156][T17070] RIP: 0033:0x7f84c7d9e159
[  864.096585][T17070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  864.116196][T17070] RSP: 002b:00007f84c814fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  864.124795][T17070] RAX: 0000000000000000 RBX: 00007f84c8027da0 RCX: 00007f84c7d9e159
[  864.132800][T17070] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  864.140799][T17070] RBP: 00007f84c8027da0 R08: 00007f84c8026218 R09: 0000000000000000
[  864.148778][T17070] R10: 000000000003fc58 R11: 0000000000000246 R12: 00000000000d2e3e
[  864.156753][T17070] R13: 00007f84c802627c R14: 00007f84c8026278 R15: 00007f84c8026270
[  864.164758][T17070]  </TASK>
[  864.168419][T17070] Kernel Offset: disabled
[  864.172768][T17070] Rebooting in 86400 seconds..