last executing test programs:

10m21.825272642s ago: executing program 3 (id=1526):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a00)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x1}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xfffffffd, 0x2, 0xedb8, 0x6, 0xd, 0x18}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4}, 0x4048000)
setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4)

10m21.537241199s ago: executing program 3 (id=1529):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x80010080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x0, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x4, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x7, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x7, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xb, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000400)=ANY=[@ANYBLOB='fi'], 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$PPPIOCGFLAGS1(r5, 0x8004745a, &(0x7f0000000140))
ioctl$KVM_RUN(r6, 0xae80, 0x0)

10m21.266015149s ago: executing program 3 (id=1531):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x18}}, 0x0)
recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/144, 0x90}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f0000000480)=""/4097, 0x1001}, {&(0x7f00000014c0)=""/151, 0x97}], 0x4}, 0x9}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x85}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4072, 0xfe8}, {&(0x7f00000032c0)=""/4105, 0x1009}], 0x2}, 0x7}], 0x7, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0xf, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003280)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)

10m20.343881899s ago: executing program 3 (id=1537):
syz_clone(0x2200011, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000400000000000e1ff95000000000000002ba76bb3019c1341056bd8174b79603123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00ba19ce670d25010000020000040000009fc40400d2532e764975f03f1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac05c04683712a0b09ec39e9ef8f6e396ad200a011ea665c45a3449abe802f5ab3e89cf40b858e217ce740068720000074e468eea3fcfcf498278ad15f5f87e1c26433a8acdc0e65888b2007f00000000000000000100000000000000010000000000000053350000000034a70c2ab40c7cf5691db43a5c00000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000040cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d01000000520655a8056085f4d431623c850af895abba14f6fbd7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdc2ba9d580609e31c30891e7d87a79d6fce424c2200af6cb784a1975fa657de38a3a32a4fd67ce446adb431d07db79240aca1dd9ba02450500000000000000e645f091231b986e77d05d988d6edc6f9b4eb883ec8f878300cabf2b5543ffc1bdb92618242852e6e8b3e56fefbfff81669557b3809d8c396d2c0361629d1822f722ec23812770d72cd0010000007889b8c7044f563a1f68d4efe895fdbc463f747c08f4010586903500000000000000e800000000000000000000000000000000000000003ddf4aa4b1c8b0a0ae6feb6737c275dc2740f742b5425f1d581961471cdb51f8940290e99ccff4123f955267fe4a75c11448741f064fe7ce7e62ee4df874e086287547d4099aeec9f1538ee25a2a5ccf4a9b604e88e12ff251845d0fff45bdbaeba4d4e3c6f7f623579435b2c505fb711300000000040000000000000000000000004c00e67ccc02148a4fc43021cce9f24f4b2f9492c32e7a92a557ac2b44b84e88bbf7611589906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec0c0acef5385c5a2720caeb68f1e9c05b0591d89467ded84da092dea262e51811e2d7fa515722516bd5ef6cfa4966e5937562a5649a1a0000a042a7097ddefe0671a5767014b09b78f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32879d326497e21e041254f06bd7f3a067e147e82e841dba3867da8bfbc101d3960e07d282f483e7be49833f3c435f9700bc84680549f9eb16682ecb72277ffaca907a3eac4bfc8e0a47c0076d7cc9d32b3cc96aa751d890881c3c33bd91f6ecf45ab3f12f816318346f9b883427b9190024edc1eddd68f34ce3bfedb5fe5d7beae4d3ca561e37570587783f9673e7ab17f5a09efc1114777d2707d2996961203aedff1c5a87013b98649805216631e20d07dff3ae567ca0d38a828542625fc6096aedc0ac5c144f0965071274bea051007e398cf9090c53d4b8b7dc784e3d83b78b007a43d744aa99d6a7c576e20b4281eff511122ccb399bcef0a0471639c81aab7445cebfc9b00b31fcbaf63086b3c16f51b593acee0b3a4830dd6af1accb15cc6163cabc01442527aa10000000000000000a4ba25997affe74ec552bf9deafbd63e"], &(0x7f0000000d40)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r1, 0xe0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe5, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a675, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x0, 0xffffffa6, 0x0, 0x41000, 0x0, '\x00', r2, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000480), 0xc)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x78b})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000ec0)={'wlan1\x00', <r7=>0x0})
syz_mount_image$fuse(&(0x7f0000000f00), &(0x7f0000000f40)='./file0\x00', 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001000), 0x40, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0\x00'})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r6)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001340)={0x40, r10, 0x1, 0x70bd2d, 0xffffffff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xbf, 0x80, 0xce, 0x3, 0x2, 0x4, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
r11 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000001380)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r11, 0x0, 0x0)
getpgrp(0x0)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x800, 0x4, 0x81, 0x4, 0x1, 0x0, 0x3, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x6, 0x6, 0x2, 0x100000000001], 0x6000, 0x4bb40})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
epoll_create1(0x80000)
r12 = io_uring_setup(0x70c3, &(0x7f0000000680)={0x0, 0x2c3f, 0x0, 0x20001, 0x2})
close_range(r12, 0xffffffffffffffff, 0x0)

10m19.447742514s ago: executing program 3 (id=1545):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_open_dev$dri(&(0x7f0000000300), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000340)={0x7f, 0x200004d, 0x6, 0x0, <r3=>0x0})
r4 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000580)={0x1, 0x3, 0x9})
r5 = syz_open_dev$dri(&(0x7f00000005c0), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000600)={0x8, 0x404d, 0x2ba9})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000640)={0x1, 0x3, 0x9})
r6 = syz_open_dev$dri(&(0x7f0000000680), 0xcaf8, 0x40000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000006c0)={r3})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000700)={0x1, 0x5, 0xcd})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000740)={0x7, 0x52a1, 0x1e})
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x1, &(0x7f00000007c0)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000800)={0xfffffffe, 0x5, 0xa608})
close_range(r7, 0xffffffffffffffff, 0x0)
r8 = syz_open_dev$evdev(&(0x7f0000000900), 0x2, 0x862b01)
ioctl$EVIOCGKEYCODE(r8, 0x80084504, 0x0)
sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="78000000c53b28900b6132d15afc3efbfc1954b0f764c1981d02d0876da364fdfe7da3fecc4c9bf8ace699847c041ca5f4ead282f078f493a41d1fc6acfcbcdbf844e3d018c241c8bf3393b8bacca772fff0be74b0c2fbffffffffffffff25c2d004964d4a00d41b5116746bd01829bf337c494ef325505147254ed7072ce166a8587f3f87ae78620d0235924f4ae8c900287b13e60000000043359e8d37f84102b1894b0db0601f442dee23c6159c60b3a3fa", @ANYRES32=r3, @ANYBLOB="00012dbd7000ffdbdf251b0000005c00228009000080080004000e000000080002000400000044000080080007000700000008000700010100000800030002000000080001000800000008000300010000000800070001100000080001000400000008000400000001000500920002000000a7a38232ccbe4a59e4fedf4bb18ae32d17582ae1a578205d8755fb561df4c3b8c8db4e60a0de1f5f6d775603f3ca968b00000000000042520c0ccecadc2a07b05be718"], 0x78}, 0x1, 0x0, 0x0, 0x4000820}, 0x40)
sendmmsg(r0, &(0x7f0000000100), 0x800001d, 0x300)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="240000002f00090027bd9f0000000000040000000c00180005ac0f"], 0x24}, 0x1, 0x0, 0x0, 0x42800}, 0x4)
setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000140)=0x6, 0x4)
r10 = syz_usb_connect$uac2(0x0, 0x83, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0], 0x0)
set_mempolicy(0x4005, &(0x7f0000000180)=0x4, 0x8)
io_setup(0x10000, &(0x7f00000001c0))
syz_usb_control_io$uac2(r10, 0x0, 0x0)
syz_usb_control_io$uac2(r10, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

10m16.385707568s ago: executing program 3 (id=1560):
r0 = socket$inet(0x2, 0x1, 0x0)
listen(r0, 0x1)
ioctl$sock_TIOCINQ(r0, 0x541b, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/98, 0x62}], 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
close(r1)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x20001, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000080)={<r4=>0xffffffffffffffff}, 0x2, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r4}}, 0x20)
write$snapshot(r2, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

10m1.301602998s ago: executing program 32 (id=1560):
r0 = socket$inet(0x2, 0x1, 0x0)
listen(r0, 0x1)
ioctl$sock_TIOCINQ(r0, 0x541b, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/98, 0x62}], 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
close(r1)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x20001, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000080)={<r4=>0xffffffffffffffff}, 0x2, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r4}}, 0x20)
write$snapshot(r2, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

8m26.503512583s ago: executing program 5 (id=2020):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x20, 0x4000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0xc}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0)
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x40055}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
socket$inet_udp(0x2, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000002c0)={0x1, &(0x7f0000000380)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
vmsplice(r4, &(0x7f00000003c0)=[{0x0}], 0x1, 0x1)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea0009058703"], 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
socket$nl_generic(0x10, 0x3, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r5, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x58, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4041}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) (async)
sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
syz_open_dev$char_usb(0xc, 0xb4, 0x10000) (async)
r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
r10 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0)
r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) (async)
r12 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r12, 0xc0184800, &(0x7f0000000340)={0xe939, <r13=>r11})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x0, r13})
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r10, 0x100000000)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r9, 0x0, 0x0, 0x1, {0x2011}})
io_uring_enter(r0, 0x1000001, 0xfffffffe, 0x4b, 0x0, 0x0)
poll(0x0, 0x0, 0x3ff) (async)
poll(0x0, 0x0, 0x3ff)

8m23.804687301s ago: executing program 5 (id=2030):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=0x14)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x81)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x54}, 0x1, 0x0, 0x0, 0xc1}, 0x48880)
socket$kcm(0x1e, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
openat$audio1(0xffffffffffffff9c, &(0x7f00000006c0), 0x203a2, 0x0)
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000700)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000780)=<r1=>0x0, &(0x7f00000007c0)=<r2=>0x0, &(0x7f0000000800)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000840)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000008c0)=@any_dev={0x4043, 0x8a, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000000900)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000940)={0x0, 0x1, 0x0, 0x3, 0x10d}, &(0x7f00000009c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x617d, 0x80, 0x2000, 0x10000004, 0x0, r6}, <r7=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x4000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4e48, 0x400, 0x2, 0x367}}], 0x1, &(0x7f0000000c40)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xffb9, 0x4, 0x0, 0x0}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000cc0)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000d00), 0x7, 0x2)
r8 = fcntl$getown(r7, 0x9)
wait4(r8, &(0x7f0000000d40), 0x1000000, &(0x7f0000000d80))
r9 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000e40)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000ec0)=<r10=>0x0, &(0x7f0000000f00)=<r11=>0x0, &(0x7f0000000f40)=<r12=>0x0)
syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f0000000f80)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001000)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000001040))
socket$inet6_tcp(0xa, 0x1, 0x0)

8m22.4641296s ago: executing program 5 (id=2034):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000740)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000780)={{}, {0x77359400}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@getsadinfo={0x88, 0x23, 0x100, 0x70bd2a, 0x25dfdbfd, 0x0, [@etimer_thresh={0x3, 0xc, 0x5}, @XFRMA_SET_MARK={0x8, 0x1d, 0x2}, @replay_esn_val={0x30, 0x17, {0x5, 0x70bd27, 0x70bd24, 0x70bd28, 0x70bd2b, 0x8, [0x80000001, 0x9, 0xbd93, 0x6bca, 0x0]}}, @policy_type={0xa}, @coaddr={0x14, 0xe, @in6=@mcast1}, @srcaddr={0x14, 0xd, @in6=@ipv4={'\x00', '\xff\xff', @local}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008011}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xcadbf000)
sendmsg$nl_generic(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002f00090027bd700000000000040000000c000c000000000000000647ab9066875e58ae2e305c0000"], 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000)
shutdown(0xffffffffffffffff, 0x0)
close(0x3)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000ac0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b40)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x4000810)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b80), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000bc0)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000c00))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c40)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
ioctl$VIDIOC_DQEVENT(r4, 0x80885659, &(0x7f0000000c80)={0x0, @data})
fcntl$lock(r4, 0x6, &(0x7f0000000d40)={0x1, 0x1, 0x3, 0xdf5b})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=@newlink={0x60, 0x10, 0x40d, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x600b2, 0x40c41}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8840}, 0x0)
flock(r4, 0x2)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000e80)='stat\x00')
sendmsg$nl_route(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x20008005}, 0x10888)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600843b00000c00028008000d"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040))
getrandom(0x0, 0x0, 0x0)
madvise(&(0x7f000004a000/0x4000)=nil, 0x4000, 0x4)

8m21.697185873s ago: executing program 5 (id=2038):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = dup(r2)
sendmsg$inet6(r2, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0x270, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x244, 0x3, 0x0, 0x1, [{0x240, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1f8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5b, 0x1, "8359fa132e64f10d622d383f5ebb5135951c02f82fc04e617897afd48db051df750a8104ede94c45f815ab9a86a3eff59fb546153d14077450ef9059ff5cfaff4a23cfa98b461350320aea34c4cc432a37cf3b85bcff41"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x7b, 0x1, "165c378f8a93fde7de6d4c635b5cf21ee34cd77a4ec0877185a59a78c5284279e4f2ed5027136ce9c7cc484302b8631221ed2289b08bf5e345474c95501561e788135dfe6166c2f368e3fa27bd9567229628e558d4588adec211a38cd2c9c12667496f33db7966dcbcd0dde93ea0fb1fddf9d4c4047f82"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xc1, 0x1, "dc28f4b6652fb088c68673a464a9c9c8f02311436523f674dd3f7fdbd89d52905aa9b14293e16aed42d37a28bb6cab6e5e9f16476244a08093fc673e0800e2d7eab9ca4663f8254d36dc6a8cce845cb7e36bbeb753232cebc359930f78a4e1ad4d28171f0f1bb95c53adb43b8b4ae17a314f32c32d3a76099787b52fcb5a58c2aec752da2de2acf141ac2cd97fa5fe094886c28257eaa3925d0041ff2a5fcbe77dedbe8262e19ab1463f873d420e9308a7465df8ad69be98c37b58c823"}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xc53}]}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0x2f4}}, 0x0)
r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, 0x0)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r6, &(0x7f00000012c0), 0x10)
setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000001300), 0xf00)
setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r3)
syz_open_dev$vim2m(&(0x7f0000001380), 0x800, 0x2)
syz_open_dev$vim2m(0x0, 0xfffffff0, 0x2)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
r7 = syz_open_dev$vim2m(&(0x7f00000013c0), 0x800, 0x2)
ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000001400)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}})
ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000001440)={0x2, @win={{0x6, 0x1, 0x1ff, 0x70}, 0x5, 0x3, 0x0, 0x2, 0x0, 0x1}})
syz_usb_disconnect(0xffffffffffffffff)
close_range(r0, r1, 0x0)

8m20.610169076s ago: executing program 5 (id=2040):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/3\x00')
read$FUSE(r2, &(0x7f0000002180)={0x2020}, 0x229)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000041c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000004200)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000900)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x50, r4, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x50}}, 0x0)
sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000840)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f0000000600)={0x1e0, r4, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x101, 0x67}}}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0xf7c6}, @NL80211_ATTR_IE={0xd9, 0x2a, [@challenge={0x10, 0x1, 0x27}, @preq={0x82, 0x6d, {{0x0, 0x0, 0x1, 0x0, 0x1}, 0x7f, 0xd, 0x7fff, @broadcast, 0xffffffc0, @value=@device_b, 0x8, 0x3, 0x7, [{{0x1}, @device_a, 0x3ff}, {{0x1}, @device_b}, {{0x1, 0x0, 0x1}, @device_a, 0x3b}, {{0x1}, @device_a, 0xed84}, {{0x1}, @device_b}, {{0x1, 0x0, 0x1}, @device_a, 0x5}, {{0x1}, @device_a, 0x8}]}}, @preq={0x82, 0x41, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0x0, 0x1, 0x8, @broadcast, 0x8000, @value, 0x9, 0x3, 0x3, [{{0x0, 0x0, 0x1}, @device_a, 0x40}, {{0x1, 0x0, 0x1}, @device_a, 0x20}, {{0x1}, @device_a, 0x1}]}}, @ibss={0x6, 0x2, 0x7}, @ht={0x2d, 0x1a, {0x8000, 0x0, 0x1, 0x0, {0x8, 0x1ff8, 0x0, 0x9, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x3b2b5b1fd881ea85, 0xa0, 0xfd}}]}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x3}, @NL80211_ATTR_IE={0xc9, 0x2a, [@measure_req={0x26, 0x1a, {0xbe, 0x3, 0x9, "b6df452c80716fbc7dfdaf8d8f7aeda4577caed5ea7ecd"}}, @random={0x9, 0x53, "0ecdc812b3dbeac8cbdd0401aa27e60dd4d95e26c73b2a33a6552533444e27736748475215594f98584df8f055757c006e4c554cddcc5cafad3581a82e530ffa227fcc90dbf9dbe558c23a97ac581fd2d6101b"}, @peer_mgmt={0x75, 0x16, {0x1, 0xfff8, @val=0x9, @void, @val="aae9648d14989193ea31d618b4536217"}}, @mesh_id={0x72, 0x6}, @erp={0x2a, 0x1, {0x0, 0x1}}, @mic={0x8c, 0x18, {0xc44, "34600d6fd5cd", @long="846718ae3aebaaf76c75a57edcc2bf04"}}, @rann={0x7e, 0x15, {{0x1, 0x9}, 0x9, 0x7, @device_a, 0x800, 0x8, 0x7}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3a}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x8080}, 0x4000880)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000e5ff", @ANYRES16=r8, @ANYBLOB="01002dbd7000ffdbdf251600000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000008700c0b0400000002030109022d0001010280000904000f020301031309058103080095140209"], &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
socket$inet6_sctp(0xa, 0x5, 0x84)
preadv2(r9, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/68, 0x44}], 0x1, 0x80000000, 0xfff, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0)
r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00', 0x9801)
move_mount(r10, &(0x7f0000000380)='.\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0)
umount2(&(0x7f0000000400)='./file0\x00', 0xb)
ioctl$EVIOCGBITSND(r9, 0x80404532, &(0x7f00000001c0)=""/176)

8m19.067466092s ago: executing program 5 (id=2044):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, 0x0)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={<r3=>0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f00000003c0)={<r4=>r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000480)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f0000003d00)=[{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000800)="c31d", 0x2}], 0x1, &(0x7f0000001f80)=[@sndrcv={0x30, 0x84, 0x1, {0x8, 0x2, 0x4, 0x8, 0x2, 0x2, 0x81, 0xd, r4}}], 0x30, 0x8810}], 0x1, 0x0)

8m3.990372111s ago: executing program 33 (id=2044):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, 0x0)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={<r3=>0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f00000003c0)={<r4=>r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000480)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f0000003d00)=[{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000800)="c31d", 0x2}], 0x1, &(0x7f0000001f80)=[@sndrcv={0x30, 0x84, 0x1, {0x8, 0x2, 0x4, 0x8, 0x2, 0x2, 0x81, 0xd, r4}}], 0x30, 0x8810}], 0x1, 0x0)

3m18.340599539s ago: executing program 4 (id=3235):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
close(r4)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x84, 0x3, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x41, 0x10000, 0x5, 0x4, 0x3, 0x108000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0x7ff, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x6, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x7c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x6, 0x9}, {0x8, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x80, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x1, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xefa, 0x6, 0x7f, 0x2, 0x0, 0xb}, {0x4, 0x4b, 0x0, 0x3a, 0x7f, 0x7ff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53d2, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0xcce, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x7fffffff, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x0, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0x3}, {0x1, 0x2d73, 0x400, 0xe408, 0x9f17, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x8, 0x5, 0x8}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0x2000000e, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x7, 0x6, 0x6}, {0xa, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x102, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0x7f, 0x100}, {0x81, 0x4, 0x988, 0x3, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe98, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x2}, {0x3, 0x3, 0x5, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x6, 0x6, 0x4, 0xf, 0x5}, {0xfe, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x2, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x2, 0x1}, {}, {0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x6}, {0x2}, {0x2}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r8 = socket$kcm(0x11, 0x3, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000001240)={'syzkaller0\x00', <r10=>0x0})
setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000001280), 0x56)
sendmsg$kcm(r8, &(0x7f00000012c0)={&(0x7f0000001300)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000001380)=[{&(0x7f00000013c0)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

3m16.808372057s ago: executing program 4 (id=3243):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c02000019000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff02000020020000203c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000100000000000084010500fc010000000000000000000000000001000000002b"], 0x23c}, 0x1, 0x0, 0x0, 0x60004000}, 0x0)

3m15.104800595s ago: executing program 4 (id=3250):
r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={<r1=>0xffffffffffffffff})
io_setup(0x7, &(0x7f00000006c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000700)=[&(0x7f0000000740)={0x4c5, 0x0, 0x106, 0x800000000001, 0x0, r1, 0x0, 0x300}])
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000003c0)={'syzkaller1\x00', 0xc201})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'veth0_macvtap\x00', <r7=>0x0})
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_int(r8, 0x1, 0x12, &(0x7f0000000480)=0x8, 0x4)
setsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f00000004c0)={@mcast2, r7}, 0x14)
sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x74, r7, {0x4, 0xfff2}, {0xafabc05531515610, 0xd}, {0x8, 0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048005)
r9 = socket$netlink(0x10, 0x3, 0x10)
dup(0xffffffffffffffff)
bind$netlink(r9, &(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)={0x1, &(0x7f0000000640)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r10, 0xffffffffffffffff, 0x0)
r11 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000400)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r4, &(0x7f0000000440)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x8, 0x18, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x8}}}}, 0x36)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)

3m12.621643359s ago: executing program 4 (id=3260):
mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x81, &(0x7f00000003c0)={<r2=>0xffffffffffffffff}, 0x111, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000400)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x4e22, @empty}}}, 0x90)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x8, @local}}}, 0x118) (async)
unshare(0x26020480) (async)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000640)=ANY=[], 0x1, 0x0, 0x0) (async)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async)
umount2(0x0, 0x3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
recvmmsg(r4, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x408a}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/99, 0x63}], 0x1}, 0x5}], 0x2, 0x40000101, 0x0) (async)
sendto$inet6(r4, 0x0, 0x0, 0x4010, 0x0, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
unshare(0x26020480) (async)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
umount2(&(0x7f0000000100)='./file0\x00', 0x0)

3m10.785218381s ago: executing program 4 (id=3266):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x0, 0x3, 0x3}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x3, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000180), 0x10, 0x0}, 0x0)
sendmsg$tipc(r2, &(0x7f00000001c0)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48001}, 0x20044095)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582", @ANYBLOB="46965bc2558a"], 0x0)

3m10.481306098s ago: executing program 4 (id=3269):
r0 = socket$unix(0x1, 0x5, 0x0)
getsockopt$sock_int(r0, 0x1, 0x8, 0x0, &(0x7f0000000040))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="03830004", @ANYRES16=r2, @ANYBLOB="010027bd7000000000001400000018000180140002006e657464657673696d3000000000000005000c000300000008001600ffffffff080003000d00000008000f00050000000800040019dc0000050019"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)

3m10.149514439s ago: executing program 34 (id=3269):
r0 = socket$unix(0x1, 0x5, 0x0)
getsockopt$sock_int(r0, 0x1, 0x8, 0x0, &(0x7f0000000040))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="03830004", @ANYRES16=r2, @ANYBLOB="010027bd7000000000001400000018000180140002006e657464657673696d3000000000000005000c000300000008001600ffffffff080003000d00000008000f00050000000800040019dc0000050019"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)

8.323965958s ago: executing program 7 (id=4118):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x4, 0xd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0x8}, {0xe}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0xa, 0x2}}]}}]}, 0x44}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000b00000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000)
getsockopt$inet_sctp6_SCTP_ASCONF_SUPPORTED(r0, 0x84, 0x80, &(0x7f0000000080)={<r1=>0x1, 0x4}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0)={r1, 0xebd, 0x30}, 0xc)
sendmmsg(r0, 0x0, 0x0, 0xfc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x3f, 0x200, 0x70bd29, 0x0, {0x2}, [@generic="aa56"]}, 0x18}}, 0x0)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="000a0700000000000000fb12"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000019640))
unshare(0x22020600)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_create_resource$futex(&(0x7f0000000000)=0x1)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000005c0), 0x40800, 0x0)
preadv(r4, &(0x7f0000000600)=[{&(0x7f0000000640)=""/102369, 0x18fe1}, {0x0}], 0x2, 0xb7de, 0x408006)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x4001af84, &(0x7f0000000540))
syz_create_resource$futex(&(0x7f00000000c0)=0x1)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='loginuid\x00')
ftruncate(r6, 0x7fffffff)

7.750963277s ago: executing program 0 (id=4121):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="691608030000000095"], &(0x7f0000000100)='GPL\x00', 0xa, 0x47, &(0x7f0000000140)=""/71, 0x40f00, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
syz_open_dev$ttys(0xc, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000010003c3bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000065040200000000ff2d180500000000003400000001ed00007b030000000000000f440000000000007a0a00fe00ffffffdb03000000000000b5000000000000009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e51815548000000000000000275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cc00eec36574a8f6456e2ccae25ea21714eca8cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2400000000000000800643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d64364c82770c8204a0deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f4720082f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c3560a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eaeb883418f562ae00003ea96d10f172c0374d6eed826407000000000000004a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d851680f6f2f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f4ca2195234648e0a1ca50db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145eb6dc5f6a9037d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f928ba7554ba583fef3ec7932f5954f31a878e2fae6691df8b4b7ecd27ce82f7df3e7d1daac43738612e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e96735600000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2c60ca99e8ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd0000000069ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fd691b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a000000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a4dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc00956d2227db60c0a461ed2b3ecfb16d19037c8c88c91dda1f904fbbc864e95ad43d6dd6d5eadbcea25682ba4b91e14c3fbfdfd1d680aa1af102d97681656bf56ff0674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ce379b4cda2500108052aeb9bd03ff6d4c5dbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ae7c5f58af43866ca64750f43e583ca1ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656859db4cb06aaaf9f02cfab5b9e61cc00e8e19429921b8df4c4c53bddea4cc48737371cdf8f681dd7a2685df194ca89da8cf6d29a2be9779181fd5d105af5786094d9130f5826b18b9667b971a994f3fd069629a1052f441e96884f90c91f4a974242aabfc8adbadc9ca27955b5c90f0bd9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f33624bd2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b7236bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37afe20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6feb33219cc9164461a8ba3afd5949b9a6046c53663df30a049414089c1ae8f3476236b05dde8dda4843a62c591f8d2b1a62d0db8dc826219bd87398b33e140792297d023ef52de2e75b9dbbfb8712ccc15c69cfb4c6c1bc2ae74621e536b9d3f09a15dada1561a8192d65cc59d7ed5a6bd61000000000000000000000000000000000000000000000000000000000000000000000000f637782e317d492b2392fd0ea81397a80227f271bad21d688af35a2bd02c15d20f3d62a50e20260642c25f304c8034a5f4d8e45e701dbd84294d1096e715662b8223e10e98c4c38451fc5c702084e3fa9b184e0d0fba44acf3bb8a846cf680dfbf312cddfdb2043288fa6b67fa762c8b75d4478756ef240f2b314e4d77a3afb4fcec92248327004d1dac7ac87a6f8cb04d82acc307d60e4713bd9a8f29091d3048c669a5f5439e0a906ce098d177b9579882586511cfe6a23e57c44d1654899f077b5636e4181f3de6b814bedcac5290ad8018bbe4424edc6d9b0e61b404bb7a2d4883bbc200de8332029cbc04a0bc52d9870cdfb950b139625fa88f5c9088fc9032a5ea07415029c74354f54e37427a4b26e559cd240b7950630d7d4da9cb8d256356bee8c827db43313e75da9c36d0f7bef4fcf23469d8c9104a917959c3bc791a54d1882f532d2597ff50d4a10fe3b80a3d67d3c3dca0dfe0e4eb039df7480542f841313ad2ec26fe7d03829f80c6f3e028d2f4495c3c523929b203048ac9ba20b012c005e36b93eb5a02768503c6c41f50d2a04999bba560f86c7c9a78e4b337983cbdb5d71be3090208a1f7eaa3edc840ea0da5f4cc01f3e87c7566176981a738bcd4dd8b8a137e7a15e57054ebf1d9ba227361be11a7d155054e154364041468e6268ea23e74eacbb5200e2d8f8919402ca20794a29dd986c6593d47b47d5cd70153908a77039a995a44e960ad037f4d2569751eea3ae70fc49f32c30d6be0594bfda189f0be84d1eaf70e0e90223a3c97ade9973e9219c5a2e1c68efe6adf744710eb0ad8e555be26855496bc6b5e13078380230728b1862f0d93397b88ebf5197b61d27b6c555502aed27d2f2b127aeeae41dd4324fad2e7a962"], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001100), 0x0, 0x10, &(0x7f0000001140), 0xfffffffffffffd00}, 0x48) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000010003c3bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000065040200000000ff2d180500000000003400000001ed00007b030000000000000f440000000000007a0a00fe00ffffffdb03000000000000b5000000000000009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e51815548000000000000000275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cc00eec36574a8f6456e2ccae25ea21714eca8cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2400000000000000800643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d64364c82770c8204a0deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f4720082f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c3560a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eaeb883418f562ae00003ea96d10f172c0374d6eed826407000000000000004a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d851680f6f2f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f4ca2195234648e0a1ca50db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145eb6dc5f6a9037d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f928ba7554ba583fef3ec7932f5954f31a878e2fae6691df8b4b7ecd27ce82f7df3e7d1daac43738612e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e96735600000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2c60ca99e8ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd0000000069ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fd691b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a000000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a4dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc00956d2227db60c0a461ed2b3ecfb16d19037c8c88c91dda1f904fbbc864e95ad43d6dd6d5eadbcea25682ba4b91e14c3fbfdfd1d680aa1af102d97681656bf56ff0674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ce379b4cda2500108052aeb9bd03ff6d4c5dbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ae7c5f58af43866ca64750f43e583ca1ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656859db4cb06aaaf9f02cfab5b9e61cc00e8e19429921b8df4c4c53bddea4cc48737371cdf8f681dd7a2685df194ca89da8cf6d29a2be9779181fd5d105af5786094d9130f5826b18b9667b971a994f3fd069629a1052f441e96884f90c91f4a974242aabfc8adbadc9ca27955b5c90f0bd9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f33624bd2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b7236bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37afe20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6feb33219cc9164461a8ba3afd5949b9a6046c53663df30a049414089c1ae8f3476236b05dde8dda4843a62c591f8d2b1a62d0db8dc826219bd87398b33e140792297d023ef52de2e75b9dbbfb8712ccc15c69cfb4c6c1bc2ae74621e536b9d3f09a15dada1561a8192d65cc59d7ed5a6bd61000000000000000000000000000000000000000000000000000000000000000000000000f637782e317d492b2392fd0ea81397a80227f271bad21d688af35a2bd02c15d20f3d62a50e20260642c25f304c8034a5f4d8e45e701dbd84294d1096e715662b8223e10e98c4c38451fc5c702084e3fa9b184e0d0fba44acf3bb8a846cf680dfbf312cddfdb2043288fa6b67fa762c8b75d4478756ef240f2b314e4d77a3afb4fcec92248327004d1dac7ac87a6f8cb04d82acc307d60e4713bd9a8f29091d3048c669a5f5439e0a906ce098d177b9579882586511cfe6a23e57c44d1654899f077b5636e4181f3de6b814bedcac5290ad8018bbe4424edc6d9b0e61b404bb7a2d4883bbc200de8332029cbc04a0bc52d9870cdfb950b139625fa88f5c9088fc9032a5ea07415029c74354f54e37427a4b26e559cd240b7950630d7d4da9cb8d256356bee8c827db43313e75da9c36d0f7bef4fcf23469d8c9104a917959c3bc791a54d1882f532d2597ff50d4a10fe3b80a3d67d3c3dca0dfe0e4eb039df7480542f841313ad2ec26fe7d03829f80c6f3e028d2f4495c3c523929b203048ac9ba20b012c005e36b93eb5a02768503c6c41f50d2a04999bba560f86c7c9a78e4b337983cbdb5d71be3090208a1f7eaa3edc840ea0da5f4cc01f3e87c7566176981a738bcd4dd8b8a137e7a15e57054ebf1d9ba227361be11a7d155054e154364041468e6268ea23e74eacbb5200e2d8f8919402ca20794a29dd986c6593d47b47d5cd70153908a77039a995a44e960ad037f4d2569751eea3ae70fc49f32c30d6be0594bfda189f0be84d1eaf70e0e90223a3c97ade9973e9219c5a2e1c68efe6adf744710eb0ad8e555be26855496bc6b5e13078380230728b1862f0d93397b88ebf5197b61d27b6c555502aed27d2f2b127aeeae41dd4324fad2e7a962"], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001100), 0x0, 0x10, &(0x7f0000001140), 0xfffffffffffffd00}, 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001180)={r0, 0xffffffffffffffff, 0x1c, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) (async)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001180)={r0, 0xffffffffffffffff, 0x1c, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000011c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000938000/0x8000)=nil, 0x8000, 0x2, 0x22052, r2, 0x41877000) (async)
mmap(&(0x7f0000938000/0x8000)=nil, 0x8000, 0x2, 0x22052, r2, 0x41877000)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000001200)="dc", 0x1)
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f00000013c0)={0x18, 0x0, 0x6, 0x0, &(0x7f0000001340)=[{0x2, 0x1}, {0x40, 0x1}, {0xb5, 0x3}, {0x8, 0x4}, {0x7, 0x1}, {0x2, 0x6}]}) (async)
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f00000013c0)={0x18, 0x0, 0x6, 0x0, &(0x7f0000001340)=[{0x2, 0x1}, {0x40, 0x1}, {0xb5, 0x3}, {0x8, 0x4}, {0x7, 0x1}, {0x2, 0x6}]})
setsockopt$inet_opts(r3, 0x0, 0xc, &(0x7f0000001240)="e0", 0xfed7)
prlimit64(0x0, 0x7, &(0x7f0000001300), 0x0)
socket$unix(0x1, 0x5, 0x0)
getsockopt$inet_opts(r3, 0x0, 0x400000000000009, &(0x7f0000001280)=""/16, &(0x7f00000012c0)=0x2b) (async)
getsockopt$inet_opts(r3, 0x0, 0x400000000000009, &(0x7f0000001280)=""/16, &(0x7f00000012c0)=0x2b)
ioctl$TCXONC(r1, 0x540a, 0x0)

7.607532064s ago: executing program 0 (id=4122):
syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x0)

7.437605114s ago: executing program 0 (id=4124):
syz_usb_connect(0x2, 0xc7, &(0x7f0000000080)=ANY=[@ANYBLOB="12011002000000408680d20a0000010200010902b5000201008030080b00020e03000009040000010e0100000d2401000134000000000001011224170101020000000000000000030000000924030201010003000c24050300ee0002", @ANYBLOB="64be45a443"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) (async)
syz_open_dev$mouse(&(0x7f0000000040), 0x40, 0x80000)

6.801489451s ago: executing program 6 (id=4126):
r0 = fsopen(&(0x7f0000000040)='hfsplus\x00', 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
read$dsp(0xffffffffffffffff, &(0x7f00000002c0)=""/84, 0x54)
landlock_restrict_self(0xffffffffffffffff, 0xc)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x16, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x200000, 0x0, 0x2c3f9d})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
dup(r5)
fallocate(r1, 0x10, 0x0, 0x76000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000019c0))
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540), 0x80200, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f0000000580), 0x2, 0x141102)
writev(r6, &(0x7f00000005c0)=[{&(0x7f0000000600)="94", 0xf000}, {0x0}], 0x2)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000640)=[@in={0x2, 0x4e20, @empty}], 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, 0x0}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000eda0c1f93d1111494058973da2832c31e6f25c48a624bc769a7a0258781c700646219602e702f014f615e6c8f86884a336e6de9feffca45c3496d76ecd4317bcae740d1729acf2532066dc20e9f448dd1cd8515e69dea96164ae32c7947b8195f0093e659901225375bd818d75965051c2fc6f9863a2", @ANYRESHEX=r0, @ANYRES64=r4, @ANYBLOB="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", @ANYRESDEC=r1, @ANYRES8=0x0], 0x50)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0xfffffffffffffda4, &(0x7f0000000780)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}]}, &(0x7f00000007c0)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000800)={0x0, @in={{0x2, 0x0, @multicast2}}, 0x8007, 0x23}, 0x90)
syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0)
r8 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80)
ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000000140)={&(0x7f0000001440)=[{0x8004, 0x4011, 0x3, &(0x7f0000000000)='v;\n'}, {0x5, 0x0, 0x0, 0x0}], 0x2})

5.122565871s ago: executing program 7 (id=4132):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00004c2000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000150000/0x1000)=nil, &(0x7f0000b21000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00004c2000/0x1000)=nil, &(0x7f000069c000/0x2000)=nil, &(0x7f0000184000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@bridge_getneigh={0x20, 0x1e, 0x1, 0x70bd28, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x40000, 0x8001}}, 0x20}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x30000010)
r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000300)}], 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\''], 0x50)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xf}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x50, 0x1, 0x2, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x0, 0x1, 0x6d}}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x1}]}]}, 0x50}}, 0x8000)
writev(r4, &(0x7f0000000240)=[{&(0x7f0000000280), 0xfffffebe}], 0x1)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_opts(r6, 0x0, 0x4, 0x0, &(0x7f0000000280))
io_uring_enter(r1, 0x2219, 0x1adf, 0x16, 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)

4.286170845s ago: executing program 0 (id=4138):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x5c}}, 0x0)
r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="bc", 0x1}], 0x1}}], 0x1, 0x4)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000000c0)={[0x6, 0x100000f, 0x9, 0x0, 0x1, 0x0, 0x2, 0x1, 0x2, 0x5, 0x7, 0x1, 0x3, 0xe0c, 0x4000000000000001, 0x2], 0x3ff8, 0x280342})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000c80)={'#! ', './file0', [{0x20, '#\xe9c\x9f1\xe1\xe8\xe9\x84\xd0J.V9\x03\x03\a\xc5\xccy\xb0\x95=\x177*\x8e\x0e\xfc\xe0U\x97l&\x863\x7f9]\xd3\xacW\t\xab\xbf\x92\x80\xe3\xd5\x95iQ\x1e\xeb\xf3\xd8\x9e#\xc9\x10\b\x00\x00 \xce\x1e~-\xe8\xdd\xe0\xa0\x9e\x8f9\x87R,\xe1G>i\xfdaq\xad\xd8\xcdOg\x8b\xef\x81\x9d\xac\x87\xad\x81B\x9b\xf3k\x8c\x1aGs\x96O3\xcc*9\xc9\x11\xa7\x10\x84T)\xb6h\x90\xf2\x81\xc5\xa8\x16=\x81\x83\f\xfa\xa3\xb2\xf4\xc6y\x9e\xa2\x93\x8b\xde\xd3\x95~\x92\x10\xf6l\xf2;\x18\xd1\xa6K\x10\x86\xcf\x1a\x802\xd0\xd7<\x8cJ> \xfa\xd6W\x9e\xb4E\xb2\tkf\x85D|-7v\x1a\xacB\xfa\x95\x89}\x034}\xed4\xe6\xc0z\xea\xd9\x8d\xc7W9\xa8\x97\xdf\xff\xba0(\xea\xc3#I\xc9\x87V\x1f\xde\x88\xc8<\x110'}, {0x20, '[/\\'}]}, 0xf2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0xe8, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x97, 0x6, "65b74ebf9040b5e7c64d163f670437774c15a1dfdf8dda1dcdcb9ffd13325aa8a3890ef44f9003f91a9164adc35f0b9c2d644addc3c1d7bc172b5e3fe838dcd56a530f25292c1058ed189734276910999a7354a11ed43dae6a2f6e48a66770692c37c52b646b8f1599c477556e895d79f07d3c7eecc45f9bebec3ebadc613fff7127a500"/147}, @NFTA_TABLE_USERDATA={0x26, 0x6, "dd89f035a899e7a775c73188afb670f4409e24cc81999504c1edc73342d29d2c2a92"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x110}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)
close(r2)
r8 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201400000000020bd289400000000000001090224000100000000090401ff010300000009210000000122070009058103"], 0x0)
ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000d80)={{r6}, "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"})
add_key(&(0x7f00000001c0)='asymmetric\x00', 0x0, &(0x7f0000000740)="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", 0x110, 0xfffffffffffffffd)
r9 = socket$nl_route(0x10, 0x3, 0x0)
write(r9, &(0x7f0000000c00)="38000000240001040100000000000000000000000100000000000100ffffffff0000000008000100657473000c0002800500010010000000", 0x38)
write(r9, &(0x7f0000000c40)="40000000240001040400000000000000000000000100000000000400030001000000000008000100657473001400028005000100100000000500020003000000", 0x40)
syz_usb_control_io(r8, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
syz_usb_control_io(r8, &(0x7f0000000200)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="405107000400000081d65d67d9"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r8, &(0x7f0000000bc0)={0x2c, &(0x7f0000000040)={0x20, 0x21, 0x2, {0x2, 0xd}}, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0xed, 0x3, "c39bab3e", 'l)\nq'}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x3, 0x1, 0x7, 0x6, 0x4, 0x18}}}, &(0x7f0000000980)={0x84, &(0x7f00000003c0)={0x40, 0x10, 0x93, "aaddcbf6a615adb5d954eb4793eb3c92c2e06cd7dd914af08ac7a1d54f9095ef2a98a4dcef8e69ad1f733ba11c073b18e445e6d29ca5f1b11245817bb4a57ee60265cc3a6d19c293e16b41d5b52c0ea23e81181cd6c9354fd97c706d6542a6bc1fce7e64fe452e59600c9afeb8273f61b929e9431f835c838024f447c03468ab98df94e0d7c57d6632ede12e4ae318dfc2ef68"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0xe}, &(0x7f00000004c0)={0x0, 0x8, 0x1}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000001d80)=ANY=[@ANYBLOB="dbab780b275a72025cfc122ee80f6aeef7b8c12d"], &(0x7f0000000580)={0x40, 0x7, 0x2, 0x401}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0xf6}, &(0x7f0000000600)={0x40, 0xb, 0x2, "b1f8"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0xf4}, &(0x7f0000000680)={0x40, 0x13, 0x6, @local}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, &(0x7f0000000700)={0x40, 0x19, 0x2, "f870"}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x30}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0xb}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x9}})

3.923700032s ago: executing program 2 (id=4140):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x0) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
close(0x3)
r0 = socket(0xa, 0xe, 0x2)
setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) (async)
socket(0x2, 0x80805, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0xa800, 0x0)
preadv2(r2, &(0x7f0000000180)=[{&(0x7f0000001c40)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x9d)
r3 = socket$vsock_stream(0x28, 0x1, 0x0) (async)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000002c40)=0x2, 0x4) (async)
bind$inet(r4, &(0x7f0000002c80)={0x2, 0x5e21, @empty}, 0x10)
r5 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000002cc0)=0x8, 0x4)
bind$inet(r5, &(0x7f0000002d00)={0x2, 0x5e21, @empty}, 0x10) (async)
close_range(r3, 0xffffffffffffffff, 0x0) (async)
r6 = syz_open_dev$evdev(&(0x7f0000002d40), 0x550c, 0x20100)
ioctl$EVIOCGBITSND(r6, 0x80404532, &(0x7f0000002d80)=""/4096)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$netlink(0x10, 0x3, 0x0) (async)
r8 = socket(0x400000000010, 0x2, 0x0) (async)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000003dc0)={0x0, 0x0, &(0x7f0000003e00)={&(0x7f0000003e40)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x8, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0xc}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x4010) (async)
sendmsg$can_j1939(r8, &(0x7f0000003ec0)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f0000003f40)="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", 0xfc}, 0x1, 0x0, 0x0, 0x4000011}, 0x80) (async)
ioctl$sock_inet_udp_SIOCINQ(r8, 0x541b, &(0x7f0000004040))
sendmsg$netlink(r7, &(0x7f0000004080)={0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000004100)={0x30, 0x5e, 0xe25, 0x0, 0x25dfdbfe, "", [@nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}]}, @typed={0x14, 0x15f, 0x0, 0x0, @ipv6=@empty}]}, 0x30}], 0x1}, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000004140), r1)

3.789099585s ago: executing program 2 (id=4141):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x40240, 0x0)
ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000500)={0x48, 0x16, 0x0, 0x0, 0xe160, 0x0, 0x0})
r1 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x400, 0x51}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, 0x0, 0x0, 0x0, <r5=>0x0})
ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000200)={0x20, r5, &(0x7f00000001c0)=[{0x1, 0x3}, {0x1, 0x1}, {0x1, 0x3}, {0x0, 0x2}, {0x1, 0x2}, {0x1, 0x1}, {0x1, 0x1}], 0xdeadbeef, 0x8, 0x7})
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1})
io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)

3.752931375s ago: executing program 2 (id=4142):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f00000002c0)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000019840)={&(0x7f00000199c0)={0x1, 0x0, 0x800, {0x0, 0xea60}, {}, {}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x2, 0x3, 0x0, 0x0, "5e3dba8ae862e81c"}}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x1)
sendmsg$can_bcm(r1, &(0x7f0000019a40)={0x0, 0x0, &(0x7f0000019b40)={&(0x7f000001a040)={0x1, 0x944, 0xffffffff, {0x0, 0xea60}, {0x0, 0x2710}, {}, 0x1, @canfd={{0x0, 0x1, 0x1}, 0x2f, 0x3, 0x0, 0x0, "f1b68c3e70a5d4bb02ab9dd1826faf62d4bcfd6c350a928a417ccf61f72b6378965ff4776ad1e8e0b6d8bc529caeb5e8ff90381a02e9b1826bd45bc45cb236d7"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x8050)
sendmsg$can_bcm(r1, &(0x7f000001a0c0)={0x0, 0x0, &(0x7f000001a100)={&(0x7f000001a140)=ANY=[@ANYBLOB="0200"], 0x48}, 0x1, 0x0, 0x0, 0x4080}, 0xc084)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0xd0}, 0x1, 0x0, 0x0, 0x30004000}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000019f00)=@newqdisc={0x120, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0x0, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xf0, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xfd6973cf48ebf5e1}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x6, 0x8e, 0x6, 0x6, 0xe2}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x8000000000000001, 0x79a, 0xfffffffc, 0xf15, 0x2}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x10000}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x1}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x10000, 0x1e0}}, @TCA_NETEM_DELAY_DIST={0x49, 0x2, "eca05095bd3f490eb7cbaeadfa963b016b1ebf2ffaad214523e226dfe219d3ce91faa608d9b15ed5e277c8955fbd665fb247b051999e843daa55ea968d35779c25e8ab8a16"}]}}}]}, 0x120}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20000004)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000019680)={'veth0_to_hsr\x00'})
sendmsg$nl_route_sched(r5, &(0x7f00000196c0)={0x0, 0x0, &(0x7f0000019700)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x9, 0x4}, {0x1, 0xffff}, {0x0, 0xfff2}}}, 0x24}}, 0x0)
r7 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x203, 0x133702)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r7, 0x0)
syz_open_procfs(0x0, &(0x7f0000000640)='pagemap\x00')
pread64(r7, &(0x7f0000000680)=""/102389, 0xe4d1, 0x10000002ff)
sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc02, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc815}, 0x4890)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000480)={'syzkaller0\x00', @multicast})
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00'})
socket$kcm(0x11, 0x3, 0x0)

3.438646981s ago: executing program 6 (id=4144):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0x2d, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x6a}], 0x1, 0x100, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r4=>r1, {0x70}}, './file0\x00'})
sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000001400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000000380)={0x1010, 0x453, 0x200, 0x70bd25, 0x25dfdbfd, "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", ["", "", ""]}, 0x1010}}, 0x200488c1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x64, r3, 0x400, 0x70bd2d, 0x25dfdbf7, {{}, {@void, @val={0xc, 0x99, {0xff, 0x4f}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4}, @NL80211_ATTR_PMKID={0x14, 0x55, "1eeeb18566d6d9650000e3ff00"}, @NL80211_ATTR_PMKID={0x14, 0x55, "45e77f3bcd953bbda5abc15ed2819956"}, @NL80211_ATTR_PMK={0x14, 0xfe, "03335656f03c32b89a6c9e8088264220"}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008001}, 0x4004008)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}})
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0x6)

3.436253299s ago: executing program 7 (id=4145):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, 0x0, 0x0)
close(0x3)

3.398911641s ago: executing program 1 (id=4146):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r3=>0x0})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x1ff) (async)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
fsopen(0x0, 0x0) (async)
r5 = openat$cgroup_type(r4, &(0x7f0000000240), 0x2, 0x0)
write$cgroup_type(r5, &(0x7f0000000280), 0x9)
r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
write$cgroup_pid(r6, &(0x7f0000000300), 0x12)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340), 0x200002, 0x0)
r8 = openat$cgroup_ro(r7, &(0x7f0000000380)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f00000003c0)=0x1, 0x12) (async)
r9 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xc}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x10}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000094}, 0x2000400c) (async)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x48, r1, 0x1, 0xf0bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {0x4ec}, @device_a, @device_b, @initial, {0x4, 0x7}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x6, 0xb8, 0xb4}, @void}}}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}]]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4)

3.396427235s ago: executing program 6 (id=4147):
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) (async)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c)
r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000240)=<r5=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r6) (async)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000280)={0x0, 0x20fb89, 0x800, 0x1, 0x32c}, &(0x7f0000000300)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x400, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000580)={0x2e, 0x871629fa8e454157, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8a2, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r8 = inotify_init()
r9 = userfaultfd(0x1)
mkdir(&(0x7f00000006c0)='./file0\x00', 0x101)
r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r10, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$fuse(0x0, &(0x7f0000000840)='./file0\x00', 0x0, 0x100000, 0x0)
unshare(0x26020480) (async)
unshare(0x26020480)
r11 = syz_mount_image$fuse(&(0x7f0000000880), &(0x7f00000008c0)='./file0\x00', 0x80000, &(0x7f0000000900)=ANY=[], 0x1, 0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x89901) (async)
open_tree(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x89901)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
fchmodat(0xffffffffffffff9c, &(0x7f0000000b40)='.\x00', 0xffffffd3)
move_mount(r11, &(0x7f0000000640)='.\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x200)
umount2(&(0x7f0000000a00)='./file0\x00', 0x0)
ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000a40)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1})
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000a80)={0xaa, 0x145}) (async)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000a80)={0xaa, 0x145})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000ac0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1})
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil)
close_range(r8, 0xffffffffffffffff, 0x0)
sendto$inet6(r0, &(0x7f0000000b00)="046bf184b7b7f1a55a5a9c11a44b7193cf786d2f6e3e7d299a814d1a26591bf94e10", 0xfffffffffffffd33, 0x0, 0x0, 0x0) (async)
sendto$inet6(r0, &(0x7f0000000b00)="046bf184b7b7f1a55a5a9c11a44b7193cf786d2f6e3e7d299a814d1a26591bf94e10", 0xfffffffffffffd33, 0x0, 0x0, 0x0)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3011, 0x17)

3.097640987s ago: executing program 7 (id=4148):
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000080)={0x0, 0x2, 0x1, 0x0, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000200)=<r3=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000240)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, <r4=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r5=>0x0) (async)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="380000000206010800000002000000000000000014000780080011ddc3b9b25205001500dd000000050001000600000005000500"], 0x38}}, 0x0) (async)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000a80)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x2, r7, 0x0, 0x0, 0x0, <r8=>0x0, 0x1})
ioctl$IOMMU_HWPT_ALLOC$TEST(r6, 0x3b89, &(0x7f0000000b40)={0x28, 0x0, r8, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000b80)}) (async, rerun: 32)
ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f0000000bc0)={0xc, r7}) (async, rerun: 32)
ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r6, 0x3b70, &(0x7f0000000c00)={0x48})
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0) (async)
r9 = socket(0x10, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000900)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000940)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r10, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) (async, rerun: 64)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64)
r12 = dup(r11)
syz_ublk_setup_queues(r12, r5, &(0x7f0000000340)={0x0, 0xfffffffe, 0x0, 0xffbffffe, 0x257, 0x0, r0}, &(0x7f00000003c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3382, 0x1, 0xfffffffe, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffff8, 0x1000, 0x1, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x2, 0x0, r0}}, {0x0, 0x0, <r13=>0xffffffffffffffff, {0x0, 0x657d, 0x8000, 0xfffffffe, 0x2, 0x0, r12}}], 0x1, &(0x7f0000000640)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0)
fsopen(&(0x7f0000000000)='fuse\x00', 0x0)
fsconfig$FSCONFIG_SET_PATH(r12, 0x3, &(0x7f00000006c0)='\x00', &(0x7f0000000700)='./file0\x00', r12)
r14 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
ioctl$XFS_IOC_SET_RESBLKS(r13, 0xc0105872, &(0x7f0000000c40)={0x200, 0x9}) (async)
syz_usb_control_io$cdc_ncm(r14, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async)
syz_usb_ep_write$ath9k_ep1(r14, 0x82, 0xc38, &(0x7f00000020c0)=ANY=[])

3.049262331s ago: executing program 1 (id=4149):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xc7ca, 0x40, 0x0, 0x1c1}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) (async)
r1 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xc7ca, 0x40, 0x0, 0x1c1}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f00000001c0)=[@ioring_restriction_register_op={0x0, 0x7}], 0x1)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x0, 0x0) (async)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x0, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, 0x0, 0x7ffffffe) (async)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, 0x0, 0x7ffffffe)
ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201)
r2 = syz_open_dev$video(&(0x7f0000000000), 0x6, 0x800)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0x8, 0x40, 0x7fff0000}]})
timer_create(0x0, 0x0, &(0x7f0000000400))
timer_gettime(0x0, &(0x7f0000000440)) (async)
timer_gettime(0x0, &(0x7f0000000440))
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000280)={0x0, 0x5, 0x2, {0x9, @sdr={0x36314d4e, 0xc}}, 0x10000})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil)
ptrace(0x10, r3)
ptrace$setsig(0x4203, r3, 0xa, &(0x7f0000000200)={0x9, 0x9, 0x7})
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.369220824s ago: executing program 6 (id=4150):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x109980, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x67, 0x0, 0x0)
unshare(0x22020600)
r3 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0x40405515, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x4000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x91c5, 0x0, 0x0, 0x0, 0x0, 0x8000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0xe, 0x2, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff, 0x7, 0x0, 0x8]})

2.267923027s ago: executing program 6 (id=4151):
r0 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0xffffffff, 0x800)
r1 = epoll_create1(0x80000)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aeb2, &(0x7f0000000100)={0x2, 0x12c, @ioapic={0x80a0000, 0x9, 0xfffff5a7, 0x7fffffff, 0x0, [{0x1, 0x5, 0xfd, '\x00', 0x4}, {0x7, 0x3, 0x8, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x49, 0xe, 0xd6, '\x00', 0x86}, {0xc, 0x2, 0x6, '\x00', 0x2}, {0xd, 0x81, 0xf9, '\x00', 0x3}, {0x2, 0xa, 0x7, '\x00', 0x6}, {0x8, 0xd, 0x2a, '\x00', 0x8}, {0x4, 0xff, 0xa, '\x00', 0xfe}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0xb}, {0x2, 0x0, 0x1, '\x00', 0x7f}, {0x45, 0x51, 0x6, '\x00', 0x8}, {0xe, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x2, 0x3, '\x00', 0x7}, {0xd, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xa, 0xd2, '\x00', 0x8}, {0xa, 0x0, 0xca, '\x00', 0x6}, {0x0, 0x7, 0x4, '\x00', 0x1a}, {0xb, 0x8, 0x8, '\x00', 0xda}, {0x3, 0x7, 0x6, '\x00', 0x7}, {0x9, 0x3, 0x0, '\x00', 0x2}, {0xf9, 0x21, 0x4, '\x00', 0x7}, {0x8, 0xb, 0x0, '\x00', 0x6}]}})
epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x1ff, 0x0, 0x0)
ioctl$DVB_DVR_DMX_EXPBUF(r0, 0xc00c6f3e, &(0x7f0000000080)={0x10000, 0x80000, r1})

2.028842526s ago: executing program 7 (id=4152):
r0 = socket$packet(0x11, 0x2, 0x300)
unshare(0x22020600) (async)
unshare(0x22020600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002200)='./file1/file4\x00', 0x1c0)
renameat2(0xffffffffffffff9c, &(0x7f0000002240)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f0000002280)='./file0\x00', 0x4) (async)
renameat2(0xffffffffffffff9c, &(0x7f0000002240)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f0000002280)='./file0\x00', 0x4)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001600)=@filter={'filter\x00', 0x42, 0x4, 0xb40, 0xffffffff, 0xc8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xaa8, 0xaa8, 0xaa8, 0xffffffff, 0x5, 0x0, {[{{@ip={@empty, @dev, 0x0, 0x0, 'bridge_slave_1\x00', 'nr0\x00'}, 0x3127, 0xa0, 0xc8, 0x1ba, {0x46010000}, [@common=@addrtype={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x287, 0x898, 0x8f8, 0x0, {0x0, 0x4}, [@common=@unspec=@u32={{0x7e0}, {[{[{}, {0x1000000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}, {[{}, {}, {0x0, 0x2}], [{}, {0x0, 0x8}]}, {}, {}, {[{}, {}, {}, {}, {}, {0xfffffffe}], [{0x6}, {0x0, 0x3}], 0xfe}, {[{}, {}, {}, {}, {}, {}, {0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {0x0, 0xfe40}]}, {[{0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}, {[{}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}, {}, {[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}, {[], [{}, {0x4}, {}, {}, {}, {}, {}, {}, {0x4}]}], 0x5}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@private=0xa010102, [0xff000000, 0xff, 0xff0000ff], 0x4e24, 0xc, 0x2, 0x4e24, 0x1, 0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x1], 0x1, 0x1}, {0x0, [0x4, 0x0, 0x5, 0x1, 0x5, 0x4], 0x4, 0x3}}}}, {{@ip={@multicast1, @broadcast, 0x0, 0x0, 'lo\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x1, 0x1}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xba0) (async)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001600)=@filter={'filter\x00', 0x42, 0x4, 0xb40, 0xffffffff, 0xc8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xaa8, 0xaa8, 0xaa8, 0xffffffff, 0x5, 0x0, {[{{@ip={@empty, @dev, 0x0, 0x0, 'bridge_slave_1\x00', 'nr0\x00'}, 0x3127, 0xa0, 0xc8, 0x1ba, {0x46010000}, [@common=@addrtype={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x287, 0x898, 0x8f8, 0x0, {0x0, 0x4}, [@common=@unspec=@u32={{0x7e0}, {[{[{}, {0x1000000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}, {[{}, {}, {0x0, 0x2}], [{}, {0x0, 0x8}]}, {}, {}, {[{}, {}, {}, {}, {}, {0xfffffffe}], [{0x6}, {0x0, 0x3}], 0xfe}, {[{}, {}, {}, {}, {}, {}, {0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {0x0, 0xfe40}]}, {[{0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}, {[{}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}, {}, {[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}, {[], [{}, {0x4}, {}, {}, {}, {}, {}, {}, {0x4}]}], 0x5}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@private=0xa010102, [0xff000000, 0xff, 0xff0000ff], 0x4e24, 0xc, 0x2, 0x4e24, 0x1, 0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x1], 0x1, 0x1}, {0x0, [0x4, 0x0, 0x5, 0x1, 0x5, 0x4], 0x4, 0x3}}}}, {{@ip={@multicast1, @broadcast, 0x0, 0x0, 'lo\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x1, 0x1}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xba0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) (async)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)="7264ef824c55c1597948137adebebf2395e8da2f5a8ec97c8ff833521f56586601eae0089c3ba33a9df0fb773b1690c855b5ae0646dba274fee007327921e03e79d7c0dbb90a1064b8bf7ffb19d7ce7f5c123fa53fc9016ff93317b0545f45eb5335b7cac4cce5fce864018053e8313ac4211f5f85fa8de0a8ff521d9e3c8800d5162d27e8ba70352ac66697c183e16eb68006b00a90ffe12d605ec88f7c99490b13cb89365aa0092ac8c3213742255711861e3d795ce4a7ba5121d6b204cadb998bfea38f78f9521f331cc6b2", 0xcd}, {&(0x7f0000000140)="b5697b1cac2f2f924a5d6a8f545d6867b4dc5b6b4fda5aa3e373c28109fca03215b82582cde57319e56bc2e22325151943da62aae77c6d8324b94c4ae0987d61f870b24c7558bcb2da8ab58cb641e0f3724d43220f98a189f63aa38fe492415171de43b79eb36220b98eab3882380ed5bfa8e3224d807b4cd31b175cf19268e263f81d4e525325ed0eff817273cd279fbb10f65062761fab3d25a4a6f70863c154304f6d197caec61557fcc27226f0f6980a595ad85eb4c34371a41d4e05c0536fcfe15f2300f437a02fc35c4854f82d420d7b0e753a6f9f6f9b", 0xda}, {&(0x7f0000000240)="ebada7c8fa866aba855da79d82a260a8cdc74b7b956939e741f5db232e", 0x1d}, {&(0x7f0000000280)="672b1f8c83570ce7a38c846aedc59fa173f14cb08cb39452f3be7c25d8f33300e4eaba046d85f7fcea791252becdb107b173ba08af24d244cd7d08325c26314b9f9d11e6717a7fe1e99c40e7a4cf3c8b2ce82967ea684e0b0735ce226293495b4d22b9e5d795da9ae054a4b8517d5eba4d7ea9a0750b8254b2e95ae7b0acdc78f5a0b0a969b3e4802c5d6a395c950ed06260da47527a69a313ad9f352279603133f1bd87964051de2bf3afa37077c3fd4f6f64ac3438eca9bdb64cb710cf38d803ef46ab4611a0367bd2b2a34ba41d3e2e433a2b2fab9b6a3464acf61f2bdd3316d3554081b3bbd877a969d3864b219d62d701dd", 0xf4}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="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", 0xfd}, {&(0x7f0000001480)="ddf30d295ca3d92da6bc09c39637c9d459e9396e7147556b686df425c3623540f57d020e5eccaf3299a1af1b75c3d26b74", 0x31}], 0x7, &(0x7f0000001540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}, @ip_ttl={{0x14, 0x0, 0x2, 0xa}}, @ip_retopts={{0x34, 0x0, 0x7, {[@rr={0x7, 0x7, 0x9, [@loopback]}, @rr={0x7, 0x13, 0xbd, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3f}, @broadcast, @empty]}, @end, @noop, @noop, @ra={0x94, 0x4}]}}}], 0x68}, 0x40000)

2.018966471s ago: executing program 2 (id=4153):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="10", 0xfffffffe}], 0x1, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x8841)
poll(&(0x7f0000000280), 0x20000000000000b5, 0x9)
r1 = socket$igmp6(0xa, 0x3, 0x2)
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvlan0\x00', <r2=>0x0})
getsockopt$inet6_int(r1, 0x29, 0xce, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
r4 = syz_open_dev$ndb(&(0x7f0000000480), 0x0, 0x404000)
ioctl$NBD_DISCONNECT(r4, 0xab08)
write$UHID_CREATE2(r3, &(0x7f00000002c0)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x33, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"}}, 0x14b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000)
write$UHID_INPUT2(r3, &(0x7f0000000440)={0xc, {0x3, "11ff01"}}, 0x9)
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@mcast1, @private2, @remote, 0x1, 0x2, 0x5, 0x400, 0xb7, 0xd30048, r2})
syz_emit_ethernet(0x7a, &(0x7f0000002600)=ANY=[@ANYBLOB="ffffff8100ffaaaaaa15aa808100100086dd60f53a0400403a00fe8000000000000000000000000000bbff020010000000000000000000000001020090780000050060000000004000fffc010000000000000000000000000000fc0200000000000000000000000000003a00000000000000f4c638bed6f068cc"], 0x0)
syz_emit_ethernet(0x66, &(0x7f00000027c0)=ANY=[@ANYBLOB="aaaaaaaaa6aa017ec200000186dd6002004a00303c00fc100000000000000000000000000000fe800000000000000000580000000000aa2f040402e5700500fc010000000000080000000000000000fc0000000000000000000000000000004e240000000890"], 0x0)

2.002641644s ago: executing program 7 (id=4154):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
close(0xffffffffffffffff) (async)
close(0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0) (async)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x0, 0x0}, &(0x7f0000001280)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e22, @empty}}}, &(0x7f0000000040)=0x84)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) (async)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000280)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x1, 0x7}]}, 0x10)
close(0x3)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$sock_buf(r3, 0x1, 0x1f, 0xffffffffffffffff, &(0x7f00000003c0)=0x51)
mlockall(0x2)
r4 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x3, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_IOWQ_AFF(r4, 0x11, &(0x7f0000000500)='n', 0x1)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, &(0x7f0000000180)=[0x2, 0x6], 0x2)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
quotactl$Q_SYNC(0xffffffff80000102, 0x110e22ffff, 0x0, 0x0)
shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) (async)
r5 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil)
shmat(r5, &(0x7f0000ffb000/0x4000)=nil, 0xffffffffffffcfff) (async)
shmat(r5, &(0x7f0000ffb000/0x4000)=nil, 0xffffffffffffcfff)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) (async)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) (async)
syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0x11, 0x8, 0x80, 0x6, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x1, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x0, 0xd, 0x1, 0x1, 0x7, 0xe661, 0x4, 0x7, 0x7, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x92c, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x200623, 0x80, 0x1, 0x5, 0x8445, 0x6, 0x5, 0x1, 0x200], [0x1000000b, 0x9, 0x80000130, 0x1, 0x5, 0xfffffff4, 0x2, 0xc8, 0xf9, 0xe, 0x7f, 0x6c7, 0x9, 0xfffffffc, 0x4, 0x0, 0x0, 0x1, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x1e, 0x4, 0x1, 0x7fff, 0x6, 0x4400, 0x401, 0x8, 0xfffffffd, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x1, 0x1, 0x0, 0xffff80f1, 0x1, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x11, 0x5, 0xffff, 0xfffffe01, 0x4, 0x7, 0x3, 0x3, 0x9, 0x1, 0x3, 0xfff, 0xbc45, 0x48c93695, 0x45, 0x9], [0x7, 0xa, 0x4, 0x8005, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x5, 0x0, 0x5, 0xf, 0x4, 0x6, 0x400005, 0x5, 0x6, 0x5, 0x80000001, 0x86, 0x4, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x11, 0x800003, 0x200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0x1000, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0xfffffffa, 0x5, 0x21c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x24], [0x9, 0x40bb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xbb, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x3, 0xfe, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x0, 0x6, 0x96, 0x1, 0x80000002, 0x7, 0x4, 0xc8, 0x1, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xfffffffe, 0x30b1d69b, 0xa1f, 0xc33, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x2, 0xffff2441, 0x20fff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r6 = socket(0x2, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x6, 0x6}]}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x6, 0x6}]}, 0x10)

1.659398775s ago: executing program 1 (id=4155):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r1], 0x0}, 0x0)
r3 = syz_usb_connect(0x2, 0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002ff000040cd06310100010102030109023c00010100a0320904000006ff00000007050102400000070502024000000705040240000007050602400000070581034000010705880240"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(r3, 0x88, 0x0, 0x0)

1.613675791s ago: executing program 6 (id=4156):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f02b, 0x1})
unshare(0x0)
unshare(0x4000100)
unshare(0x4000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x12, 0x4, &(0x7f0000000580)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0xd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="34000000698f0e27fe560cda3f0706050000000000000000000700000005000100070000000900020073797a30000000000900020073797a3100000000682b8ce74000c2ed8e3652ff9a03c9d8919acb78ae27a0da44239761c3176479ae9aadbc97ae690a7e06d779b5371f345f4f49b06a06afc4432d5834ab05cbf0784e0d97e35ee8e4c9f7d062dbaef16b47269e68e5af7359da044d857894f3c9b34eee8d38331e6e84f9255ae71f4f"], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x4)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = fsopen(&(0x7f0000000580)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000640)='secret\x00', &(0x7f0000000680)='AQAAAAAAAAAA=AAAABA+A=AAAAAAAAAAAAAAAA==\x00', 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000400)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x13, 0x32, 0x829, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x8084)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x6, 0xa, 0x0, 0x0, 0xeb2, 0x0, 0x0, 0xfa0f, 0x7}, 0x0)
syz_clone(0x20000, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="120100008b4cd740402053d8f6f8410203010902120001020000000904"], 0x0)
r4 = syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, &(0x7f0000000080)=<r5=>0x0)
syz_ublk_add_dev(r4, 0x0, 0x0, r5, &(0x7f00000005c0)={0x2e, 0x3d, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0)
r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000340), 0x88002, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000380)=0xd)
open(&(0x7f00000003c0)='./bus\x00', 0x143142, 0xc0)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x88800, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000001c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
fanotify_init(0x200, 0x0)
r8 = memfd_create(&(0x7f00000006c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1)
r9 = dup(r8)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB='\v\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000828bd7000fbdbdf251d0000000c0099000d0000005b000000"], 0x20}, 0x1, 0x0, 0x0, 0x4040400}, 0x40040)
fanotify_mark(0xffffffffffffffff, 0x1, 0x48000047, r9, 0x0)

1.324385077s ago: executing program 2 (id=4157):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_open_dev$usbfs(&(0x7f0000000640), 0x75, 0x109301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000680)={0x0, 0x0, "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"})
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000007c0)=@urb_type_iso={0x0, {0x1, 0x1}, 0x49e, 0xc0, 0x0, 0x0, 0x3, 0x60000, 0x1, 0x800, 0x8, 0x0, [{0x1, 0x3, 0x101}]}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
r4 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000106d043ac500000000000109022d0001000070060904000504030002000921fcff400122180009058103"], 0x0) (async)
r5 = socket$inet_sctp(0x2, 0x5, 0x84) (async)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x10, &(0x7f0000000480)=[@in={0x2, 0x800, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000004c0)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000500)=@assoc_value={<r7=>0x0}, &(0x7f0000000540)=0x8)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000580)={r7, 0x1, 0x1}, 0x8) (async)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000005c0)=@assoc_value={r7, 0xa}, &(0x7f0000000600)=0x8)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f00000001c0)={0x3, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020300090f0007000000000000000000010008000000000005000600010000000a00000000000000fc020000000000000000000000000000000000000000cbc520af4b559b000002000100000000001c0009030100004005000500000000000a00000000000000fc00"/120], 0x78}, 0x1, 0x7}, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) (async)
r9 = syz_open_dev$hiddev(&(0x7f0000000140), 0xa, 0x62080)
ioctl$HIDIOCGREPORTINFO(r9, 0xc00c4809, &(0x7f0000000180)={0x2, 0x100, 0xffffff03})
sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000004258978fc6d0bcbb587a0edfdfd09f627d4de53469b261fa2b214f12165898be5ac70f95ed53133a00f5504c29839564258539b9e9c217352f5fd104b289db8591fd2b137a24d0317a17cbb36eb8502038f7c40d5da65ab196bab7385c7a6b7fbeb69e688dc2bbea8bbbfefe5f75f978daa233195129681d2a27b9266a2c12ef99d0ddb13b8b9b69920d70b7aae6acb719e01c98ec5624d5d79d2e0fa4d2b50a6ec54095f91b135b2928c38c445ace576a16082be6262b007583f413f714d67403d98f03200b12fc", @ANYRES16=r0, @ANYBLOB="010025bd7000fedbdf251600000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x40)

1.125914256s ago: executing program 0 (id=4158):
syz_usb_connect$uac1(0x4, 0x103, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xe41, 0x424a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0x9, 0xc0, 0x7d, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7f, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x5, 0x3, 0x5, 0x5}, @as_header={0x7, 0x24, 0x1, 0x9, 0x0, 0x4}, @as_header={0x7, 0x24, 0x1, 0x6b, 0x0, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x420, 0x7, 0x4, 0x3, {0x7, 0x25, 0x1, 0xc, 0xd, 0x800}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x0, 0x6ed, 0x4}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7f, 0x9, 0x28, 0x8, 0x7}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2a, 0x4, 0xd, 0x9, 0x3}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0xff, 0x81, 0x10, 0x80}]}, {{0x9, 0x5, 0x82, 0x9, 0x1ff, 0x84, 0x20, 0x0, {0x7, 0x25, 0x1, 0xc, 0x7, 0x72e6}}}}}}}}]}}, 0x0)

761.369182ms ago: executing program 1 (id=4159):
syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="9f132e542dbc5d59d9257a0bf31453e9afcb3a13d1d96bd40eba48774ce270b044882f058398bd7963ce86c3d2dd0e9cb1891ab40ea1198183d8d0b42d92ab7a723cf2a11389726ba56f3b8a23690b99e8f8b7017cb1ba394dc37812fcf6d02a78f8c9cffad16ba0ebc101623f996fac2fe534d1b07939b6341da2e076497fd114ed52109b6eaa6ac4c18b01a7157389c4c7b46267ff9c5463cb307b6977b152f47a7261"], 0x0)

526.752236ms ago: executing program 0 (id=4160):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpu.stat\x00', 0x275a, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x28, 0x2f, 0x9, 0x70bd27, 0x25dfdbfb, {0x4}, [@typed={0x11, 0x16, 0x0, 0x0, @str='&*(-^/[#\\.\xa5%\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x42014}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r3)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r4, 0xae7bb80b60edf211, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20008014)
r5 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x1, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r5, 0x80804120, &(0x7f0000001780))
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000001c0))
ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000640)=0x10)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
poll(&(0x7f00000002c0)=[{r7, 0x80ad}], 0x1, 0x2)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x38, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa, 0x1, "fefe807eb37b"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xbc}, 0x1, 0x0, 0x0, 0x48041}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000000500010000000000000000000500000a1400000000000000080200000a00000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)
close(r9)

173.113838ms ago: executing program 1 (id=4161):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x109980, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
unshare(0x22020600)
r2 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0x40405515, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x4000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x91c5, 0x0, 0x0, 0x0, 0x0, 0x8000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0xe, 0x2, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff, 0x7, 0x0, 0x8]})

29.772847ms ago: executing program 2 (id=4162):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = dup(r2)
sendmsg$inet6(r2, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSETELEM={0x2e8, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2bc, 0x3, 0x0, 0x1, [{0x2b8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x270, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5b, 0x1, "8359fa132e64f10d622d383f5ebb5135951c02f82fc04e617897afd48db051df750a8104ede94c45f815ab9a86a3eff59fb546153d14077450ef9059ff5cfaff4a23cfa98b461350320aea34c4cc432a37cf3b85bcff41"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x7b, 0x1, "165c378f8a93fde7de6d4c635b5cf21ee34cd77a4ec0877185a59a78c5284279e4f2ed5027136ce9c7cc484302b8631221ed2289b08bf5e345474c95501561e788135dfe6166c2f368e3fa27bd9567229628e558d4588adec211a38cd2c9c12667496f33db7966dcbcd0dde93ea0fb1fddf9d4c4047f82"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xc1, 0x1, "dc28f4b6652fb088c68673a464a9c9c8f02311436523f674dd3f7fdbd89d52905aa9b14293e16aed42d37a28bb6cab6e5e9f16476244a08093fc673e0800e2d7eab9ca4663f8254d36dc6a8cce845cb7e36bbeb753232cebc359930f78a4e1ad4d28171f0f1bb95c53adb43b8b4ae17a314f32c32d3a76099787b52fcb5a58c2aec752da2de2acf141ac2cd97fa5fe094886c28257eaa3925d0041ff2a5fcbe77dedbe8262e19ab1463f873d420e9308a7465df8ad69be98c37b58c823"}, @NFTA_DATA_VALUE={0x79, 0x1, "4fcef62e0c28e37a2e439d3d6112a62c7cbe860c58c2acfc8321f970920af0e20f53ef4d1c15db88557192c06535c881e7552d6bb6d0713293f22ce0dc7817235c4d893c506e5081d59ee39687d00b8ce6c3c85ce9c82542c5daf9c6cbc120e460a5debba5486bf0d0ba4ea8d3954793fe888bf715"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xc53}]}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0x344}}, 0x0)
r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, 0x0)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r6, &(0x7f00000012c0), 0x10)
setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000001300), 0xf00)
setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r3)
syz_open_dev$vim2m(&(0x7f0000001380), 0x800, 0x2)
syz_open_dev$vim2m(0x0, 0xfffffff0, 0x2)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
r7 = syz_open_dev$vim2m(&(0x7f00000013c0), 0x800, 0x2)
ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000001400)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}})
ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000001440)={0x2, @win={{0x6, 0x1, 0x1ff, 0x70}, 0x5, 0x3, 0x0, 0x2, 0x0, 0x1}})
syz_usb_disconnect(0xffffffffffffffff)
close_range(r0, r1, 0x0)

0s ago: executing program 1 (id=4163):
epoll_create1(0x0) (async, rerun: 32)
socket$l2tp6(0xa, 0x2, 0x73) (rerun: 32)
dup(0xffffffffffffffff) (async, rerun: 64)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 64)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl(r1, 0x4048aec9, &(0x7f00000023c0)="01000000000000000100"/38) (async, rerun: 32)
ioctl(r1, 0x400caed0, &(0x7f0000002400)="0100000000000000ffffffff") (async, rerun: 32)
syz_open_procfs(0xffffffffffffffff, 0x0) (async, rerun: 64)
creat(0x0, 0xa4) (async, rerun: 64)
memfd_create(0x0, 0x3)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) (async)
r3 = socket$vsock_stream(0x28, 0x1, 0x0) (async)
syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x80000)
bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) (async)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async)
r4 = io_uring_setup(0x6ded, &(0x7f0000000200)={0x0, 0x4279, 0x8, 0x801, 0x296})
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/4095, 0xfffffffffffffff6}], 0x100000000000011a) (async)
openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x22) (async)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000013c0)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20)
listen(r3, 0x0) (async)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac0102030109021b0001000000000904000001098b7500090583", @ANYRES8], 0x0) (async)
openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0xc0000)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r6 = accept4(r3, 0x0, 0x0, 0x0)
sendto(r6, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

3 but max is 0
[  909.515942][   T25] usb 3-1: config 5 has no interface number 0
[  909.519265][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  909.519287][   T25] usb 3-1: Product: syz
[  909.519301][   T25] usb 3-1: Manufacturer: syz
[  909.519314][   T25] usb 3-1: SerialNumber: syz
[  909.816410][   T25] kobil_sct 3-1:5.203: required endpoints missing
[  909.827122][   T25] usb 3-1: USB disconnect, device number 93
[  910.093010][T19682] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link
[  910.296896][T19694] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3587'.
[  910.297916][T19693] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  910.441371][T14878] usb 2-1: new low-speed USB device number 115 using dummy_hcd
[  910.571245][T14878] usb 2-1: device descriptor read/64, error -71
[  910.611754][T19708] input: syz0 as /devices/virtual/input/input104
[  910.810666][T14878] usb 2-1: new low-speed USB device number 116 using dummy_hcd
[  910.940724][T14878] usb 2-1: device descriptor read/64, error -71
[  910.975283][ T5690] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  910.975474][ T5690] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  910.975652][ T5690] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  910.975832][ T5690] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  910.975842][ T5690] rtc rtc0: __rtc_set_alarm: err=-22
[  911.051340][T14878] usb usb2-port1: attempt power cycle
[  911.231328][ T5690] usb 3-1: new full-speed USB device number 94 using dummy_hcd
[  911.389286][ T5690] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  911.390386][ T5690] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  911.390403][ T5690] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  911.390414][ T5690] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  911.390427][ T5690] usb 3-1: config 0 interface 0 has no altsetting 0
[  911.390445][ T5690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  911.399924][T14878] usb 2-1: new low-speed USB device number 117 using dummy_hcd
[  911.402684][ T5690] usb 3-1: config 0 descriptor??
[  911.468784][T14878] usb 2-1: device descriptor read/8, error -71
[  911.720716][T14878] usb 2-1: new low-speed USB device number 118 using dummy_hcd
[  911.751456][T14878] usb 2-1: device descriptor read/8, error -71
[  911.820128][ T5690] input: HID 17ef:6047 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:17EF:6047.003D/input/input105
[  911.862554][T14878] usb usb2-port1: unable to enumerate USB device
[  911.942948][ T5690] lenovo 0003:17EF:6047.003D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0
[  912.097710][T14878] usb 3-1: USB disconnect, device number 94
[  912.208201][T19720] fido_id[19720]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  912.540761][T14878] usb 3-1: new low-speed USB device number 95 using dummy_hcd
[  912.718594][T14878] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  912.749329][T14878] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  912.749347][T14878] usb 3-1: config 0 has no interface number 0
[  912.749370][T14878] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  912.749382][T14878] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  912.749403][T14878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  912.777439][T14878] usb 3-1: config 0 descriptor??
[  912.814750][T14878] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  913.025501][T19721] iowarrior 3-1:0.1: Error -90 while submitting URB
[  913.042364][T19716] iowarrior 3-1:0.1: Error -90 while submitting URB
[  913.044433][T14878] usb 3-1: USB disconnect, device number 95
[  913.655663][T19748] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  914.110865][T14878] usb 3-1: new high-speed USB device number 96 using dummy_hcd
[  914.206660][T19775] openvswitch: netlink: Missing key (keys=d0, expected=480)
[  914.274595][T14878] usb 3-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed
[  914.275692][T14878] usb 3-1: config 253 has an invalid interface number: 130 but max is 0
[  914.275715][T14878] usb 3-1: config 253 has no interface number 0
[  914.275743][T14878] usb 3-1: config 253 interface 130 has no altsetting 0
[  914.279672][T14878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  914.279694][T14878] usb 3-1: Product: syz
[  914.279707][T14878] usb 3-1: Manufacturer: syz
[  914.279721][T14878] usb 3-1: SerialNumber: syz
[  914.510739][  T986] usb 2-1: new full-speed USB device number 119 using dummy_hcd
[  914.642973][  T986] usb 2-1: device descriptor read/64, error -71
[  914.786273][T19790] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3612'.
[  914.786304][T19790] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3612'.
[  914.786322][T19790] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3612'.
[  914.800313][T19790] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3612'.
[  914.810383][T19790] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3612'.
[  914.846972][T19790] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3612'.
[  914.846998][T19790] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3612'.
[  914.886307][T19790] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3612'.
[  914.886333][T19790] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3612'.
[  914.920878][  T986] usb 2-1: new full-speed USB device number 120 using dummy_hcd
[  915.050806][  T986] usb 2-1: device descriptor read/64, error -71
[  915.161047][  T986] usb usb2-port1: attempt power cycle
[  915.314068][T19790] __nla_validate_parse: 80 callbacks suppressed
[  915.314089][T19790] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3612'.
[  915.314112][T19790] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3612'.
[  915.359132][T19790] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3612'.
[  915.359185][T19790] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3612'.
[  915.394596][T19790] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3612'.
[  915.395389][T19790] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3612'.
[  915.425868][T19790] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3612'.
[  915.425899][T19790] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3612'.
[  915.453508][T19790] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3612'.
[  915.453538][T19790] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3612'.
[  915.500701][  T986] usb 2-1: new full-speed USB device number 121 using dummy_hcd
[  915.521764][  T986] usb 2-1: device descriptor read/8, error -71
[  915.763180][  T986] usb 2-1: new full-speed USB device number 122 using dummy_hcd
[  915.780818][T12991] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  915.780859][T12991] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  915.780887][T12991] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  915.780914][T12991] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  915.781389][  T986] usb 2-1: device descriptor read/8, error -71
[  915.789136][T14878] dvb-usb: found a 'EvolutePC TVWay+' in cold state, will try to load a firmware
[  915.824418][T14878] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  915.824468][T14878] dib0700: firmware download failed at 7 with -22
[  915.829914][T14878] usb 3-1: USB disconnect, device number 96
[  915.891165][  T986] usb usb2-port1: unable to enumerate USB device
[  916.682497][T19825] netlink: 'syz.2.3621': attribute type 4 has an invalid length.
[  916.702570][T19825] netlink: 'syz.2.3621': attribute type 4 has an invalid length.
[  916.704214][T19825] netlink: 'syz.2.3621': attribute type 4 has an invalid length.
[  916.704386][T19825] netlink: 'syz.2.3621': attribute type 4 has an invalid length.
[  916.704468][T19825] netlink: 'syz.2.3621': attribute type 4 has an invalid length.
[  916.704546][T19825] netlink: 'syz.2.3621': attribute type 4 has an invalid length.
[  916.704624][T19825] netlink: 'syz.2.3621': attribute type 4 has an invalid length.
[  916.704704][T19825] netlink: 'syz.2.3621': attribute type 4 has an invalid length.
[  916.704779][T19825] netlink: 'syz.2.3621': attribute type 4 has an invalid length.
[  916.704854][T19825] netlink: 'syz.2.3621': attribute type 4 has an invalid length.
[  922.694466][T19910] __nla_validate_parse: 66 callbacks suppressed
[  922.694480][T19910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3638'.
[  924.041142][  T986] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[  924.201590][  T986] usb 2-1: Using ep0 maxpacket: 8
[  924.203354][  T986] usb 2-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40
[  924.205142][  T986] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  924.205156][  T986] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  924.207278][  T986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  924.207292][  T986] usb 2-1: Product: syz
[  924.207300][  T986] usb 2-1: Manufacturer: syz
[  924.207307][  T986] usb 2-1: SerialNumber: syz
[  924.477312][T19938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  924.477623][T19938] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  924.511386][T19948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3645'.
[  924.704113][  T986] usb 2-1: USB disconnect, device number 123
[  925.847993][T18887] IPVS: starting estimator thread 0...
[  925.928264][T19967] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:0
[  925.937743][T19963] IPVS: using max 55 ests per chain, 132000 per kthread
[  926.240754][ T5690] usb 3-1: new high-speed USB device number 97 using dummy_hcd
[  926.390711][ T5690] usb 3-1: Using ep0 maxpacket: 32
[  926.392524][ T5690] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  926.394966][ T5690] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  926.394982][ T5690] usb 3-1: Product: syz
[  926.394994][ T5690] usb 3-1: Manufacturer: syz
[  926.395002][ T5690] usb 3-1: SerialNumber: syz
[  926.435697][ T5690] usb 3-1: config 0 descriptor??
[  926.663453][ T5616] Bluetooth: hci5: unexpected event for opcode 0x0c0d
[  927.716761][ T5690] airspy 3-1:0.0: usb_control_msg() failed -110 request 0a
[  927.716784][ T5690] airspy 3-1:0.0: Could not detect board
[  927.716841][ T5690] airspy 3-1:0.0: probe with driver airspy failed with error -110
[  928.281459][T14876] usb 2-1: new high-speed USB device number 124 using dummy_hcd
[  928.420868][T14876] usb 2-1: device descriptor read/64, error -71
[  928.690737][T14876] usb 2-1: new high-speed USB device number 125 using dummy_hcd
[  928.820647][T14876] usb 2-1: device descriptor read/64, error -71
[  928.941425][T14876] usb usb2-port1: attempt power cycle
[  929.077619][  T986] usb 3-1: USB disconnect, device number 97
[  929.290637][T14876] usb 2-1: new high-speed USB device number 126 using dummy_hcd
[  929.312512][T14876] usb 2-1: device descriptor read/8, error -71
[  929.570836][T14876] usb 2-1: new high-speed USB device number 127 using dummy_hcd
[  929.591419][T14876] usb 2-1: device descriptor read/8, error -71
[  929.711422][T14876] usb usb2-port1: unable to enumerate USB device
[  930.000626][T13197] usb 3-1: new high-speed USB device number 98 using dummy_hcd
[  930.150677][T13197] usb 3-1: Using ep0 maxpacket: 16
[  930.151970][T13197] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  930.152883][T13197] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  930.152906][T13197] usb 3-1: config 0 has no interface number 0
[  930.152947][T13197] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  930.152971][T13197] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  930.154322][T13197] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  930.154344][T13197] usb 3-1: Product: syz
[  930.154358][T13197] usb 3-1: SerialNumber: syz
[  930.156408][T13197] usb 3-1: config 0 descriptor??
[  930.166223][T13197] cm109 3-1:0.8: invalid payload size 0, expected 4
[  930.246317][T13197] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input107
[  930.372340][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  930.376221][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  930.376703][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  930.376893][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  930.377094][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  930.377297][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  930.377503][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  930.377710][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  930.377911][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  930.378118][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  930.378955][    C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  930.378987][T13197] usb 3-1: USB disconnect, device number 98
[  930.473778][T13197] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  931.191055][T13197] usb 3-1: new high-speed USB device number 99 using dummy_hcd
[  931.351792][T13197] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  931.352997][T13197] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  931.353020][T13197] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  931.356484][T13197] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  931.356507][T13197] usb 3-1: Product: syz
[  931.356521][T13197] usb 3-1: Manufacturer: syz
[  931.356535][T13197] usb 3-1: SerialNumber: syz
[  931.472263][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  931.472318][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  931.476041][T20035] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  931.605781][T13197] usb 3-1: Limiting number of CPorts to U8_MAX
[  932.370278][  T986] usb 3-1: USB disconnect, device number 99
[  932.370285][    C1] usb 3-1: failed to resubmit in-urb: -19
[  932.370687][    C1] usb 3-1: failed to resubmit arpc in-urb: -19
[  932.370725][    C1] usb 3-1: failed to resubmit arpc in-urb: -19
[  932.370764][    C1] usb 3-1: failed to resubmit in-urb: -19
[  932.370800][    C1] usb 3-1: failed to resubmit in-urb: -19
[  932.370834][    C1] usb 3-1: failed to resubmit in-urb: -19
[  932.440303][  T986] usb 3-1: failed to send ARPC request 4: -19
[  932.440476][  T986] usb 3-1: failed to execute ARPC: -19
[  932.440493][  T986] usb 3-1: failed to flush cport 0: -19
[  932.440515][  T986] greybus greybus1: 0/0:0: failed to flush host cport: -19
[  932.465850][  T986] usb 3-1: failed to send ARPC request 2: -19
[  932.465930][  T986] usb 3-1: failed to execute ARPC: -19
[  932.465948][  T986] usb 3-1: failed to quiesce cport 0: -19 (0)
[  932.465969][  T986] greybus greybus1: 0/0:0: failed to quiesce host cport: -19
[  932.466113][  T986] usb 3-1: failed to send ARPC request 3: -19
[  932.466180][  T986] usb 3-1: failed to execute ARPC: -19
[  932.466196][  T986] usb 3-1: failed to clear cport 0: -19
[  932.466213][  T986] greybus greybus1: 0/0:0: failed to clear host cport: -19
[  932.625588][T20053] input: syz0 as /devices/virtual/input/input108
[  932.828773][T20059] validate_nla: 55 callbacks suppressed
[  932.828797][T20059] netlink: 'syz.0.3685': attribute type 33 has an invalid length.
[  932.963925][T20066] deleting an unspecified loop device is not supported.
[  932.964599][T20066] kvm: requested 7542 ns i8254 timer period limited to 200000 ns
[  932.984648][T20061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3683'.
[  933.613430][T13197] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  933.614750][T20084] pimreg: entered allmulticast mode
[  933.768906][T13197] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  933.770152][T13197] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  933.770200][T13197] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  933.770242][T13197] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  933.772714][T13197] usb 2-1: config 0 descriptor??
[  933.813872][T13197] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  933.852920][T20085] bond1: option all_slaves_active: invalid value (9)
[  933.874577][T20085] bond1 (unregistering): Released all slaves
[  934.025409][T13197] usb 2-1: USB disconnect, device number 2
[  934.132000][T14876] usb 3-1: new full-speed USB device number 100 using dummy_hcd
[  934.281336][T14876] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  934.320175][T14876] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[  934.320195][T14876] usb 3-1: Product: syz
[  934.320203][T14876] usb 3-1: Manufacturer: syz
[  934.320211][T14876] usb 3-1: SerialNumber: syz
[  934.386934][T14876] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  934.789283][T20096] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3690'.
[  934.816852][T14876] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  934.816881][T14876] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[  935.296283][T14876] usb 3-1: USB disconnect, device number 100
[  935.466902][T20115] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  936.051365][T14876] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  936.200888][   T25] usb 3-1: new high-speed USB device number 101 using dummy_hcd
[  936.211660][T14876] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00
[  936.212635][T14876] usb 2-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30
[  936.212673][T14876] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  936.212696][T14876] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 64
[  936.212718][T14876] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130
[  936.212741][T14876] usb 2-1: config 0 interface 0 has no altsetting 0
[  936.212771][T14876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  936.221507][T14876] usb 2-1: config 0 descriptor??
[  936.222899][T20124] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  936.380677][   T25] usb 3-1: Using ep0 maxpacket: 32
[  936.381619][   T25] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  936.382803][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  936.382833][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  936.382868][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  936.386826][   T25] usb 3-1: config 0 descriptor??
[  936.592875][T20129] netlink: 'syz.2.3701': attribute type 1 has an invalid length.
[  936.637834][T14876] pantherlord 0003:0E8F:0003.003E: unknown main item tag 0x2
[  936.637874][T14876] pantherlord 0003:0E8F:0003.003E: unknown main item tag 0x0
[  936.637902][T14876] pantherlord 0003:0E8F:0003.003E: unknown main item tag 0x0
[  936.668550][T14876] input: HID 0e8f:0003 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0E8F:0003.003E/input/input109
[  936.803641][T20129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  936.805556][T20129] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  936.839085][T20129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  936.839887][T20129] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  936.860434][T14876] pantherlord 0003:0E8F:0003.003E: input,hidraw0: USB HID v0.00 Keyboard [HID 0e8f:0003] on usb-dummy_hcd.1-1/input0
[  936.873680][   T25] usbhid 3-1:0.0: can't add hid device: -71
[  936.873795][   T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  936.876362][   T25] usb 3-1: USB disconnect, device number 101
[  937.611568][   T31] kauditd_printk_skb: 19 callbacks suppressed
[  937.611591][   T31] audit: type=1326 audit(1792188126.510:8068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20149 comm="syz.7.3707" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8cdd9e559 code=0x7ffc0000
[  937.611635][   T31] audit: type=1326 audit(1792188126.510:8069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20149 comm="syz.7.3707" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8cdd9e559 code=0x7ffc0000
[  937.612218][   T31] audit: type=1326 audit(1792188126.520:8070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20149 comm="syz.7.3707" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe8cdd5b2bb code=0x7ffc0000
[  937.612618][   T31] audit: type=1326 audit(1792188126.520:8071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20149 comm="syz.7.3707" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fe8cdd5a9ac code=0x7ffc0000
[  937.613756][   T31] audit: type=1326 audit(1792188126.520:8072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20149 comm="syz.7.3707" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8cdd9e559 code=0x7ffc0000
[  937.613798][   T31] audit: type=1326 audit(1792188126.520:8073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20149 comm="syz.7.3707" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8cdd9e559 code=0x7ffc0000
[  937.613864][   T31] audit: type=1326 audit(1792188126.520:8074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20149 comm="syz.7.3707" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe8cdd5aa0e code=0x7ffc0000
[  937.613903][   T31] audit: type=1326 audit(1792188126.520:8075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20149 comm="syz.7.3707" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe8cdd9e559 code=0x7ffc0000
[  937.616346][   T31] audit: type=1326 audit(1792188126.520:8076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20149 comm="syz.7.3707" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8cdd9e559 code=0x7ffc0000
[  937.616413][   T31] audit: type=1326 audit(1792188126.520:8077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20149 comm="syz.7.3707" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8cdd9e559 code=0x7ffc0000
[  937.891216][ T5689] usb 2-1: reset full-speed USB device number 3 using dummy_hcd
[  937.901936][T20148] syzkaller0: entered promiscuous mode
[  937.901965][T20148] syzkaller0: entered allmulticast mode
[  938.080665][ T5689] usb 2-1: device descriptor read/64, error -32
[  938.350685][ T5689] usb 2-1: reset full-speed USB device number 3 using dummy_hcd
[  938.658115][ T5689] usb 2-1: device descriptor read/64, error -32
[  939.548688][T14876] usb 2-1: USB disconnect, device number 3
[  941.885330][T20186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3717'.
[  942.299246][T20188] bond2: option ad_actor_sys_prio: invalid value (0)
[  942.299272][T20188] bond2: option ad_actor_sys_prio: allowed values 1 - 65535
[  942.306151][T20188] bond2 (unregistering): Released all slaves
[  942.500902][ T5690] usb 3-1: new high-speed USB device number 102 using dummy_hcd
[  942.520309][T20206] warn_alloc: 1 callbacks suppressed
[  942.520327][T20206] syz.0.3723: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  942.520439][T20206] CPU: 0 UID: 0 PID: 20206 Comm: syz.0.3723 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  942.520464][T20206] Tainted: [L]=SOFTLOCKUP
[  942.520472][T20206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  942.520483][T20206] Call Trace:
[  942.520492][T20206]  <TASK>
[  942.520501][T20206]  dump_stack_lvl+0xe8/0x150
[  942.520535][T20206]  warn_alloc+0x24d/0x270
[  942.520558][T20206]  ? kasan_save_track+0x4f/0x80
[  942.520579][T20206]  ? kasan_save_track+0x3e/0x80
[  942.520604][T20206]  ? __pfx_warn_alloc+0x10/0x10
[  942.520623][T20206]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  942.520644][T20206]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  942.520682][T20206]  __vmalloc_node_range_noprof+0x127/0x1540
[  942.520725][T20206]  ? rcu_is_watching+0x16/0xb0
[  942.520755][T20206]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  942.520776][T20206]  ? __kmalloc_cache_noprof+0x321/0x600
[  942.520798][T20206]  ? __kmalloc_cache_noprof+0x14d/0x600
[  942.520820][T20206]  ? xskq_create+0x56/0x220
[  942.520845][T20206]  xskq_create+0x148/0x220
[  942.520865][T20206]  ? xsk_init_queue+0x8a/0xe0
[  942.520887][T20206]  xsk_init_queue+0x8a/0xe0
[  942.520918][T20206]  xsk_setsockopt+0x52a/0x960
[  942.520951][T20206]  ? __pfx_xsk_setsockopt+0x10/0x10
[  942.520980][T20206]  ? __pfx_aa_sk_perm+0x10/0x10
[  942.521016][T20206]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  942.521045][T20206]  ? __pfx_xsk_setsockopt+0x10/0x10
[  942.521073][T20206]  do_sock_setsockopt+0x17c/0x1b0
[  942.521095][T20206]  __x64_sys_setsockopt+0x13d/0x1b0
[  942.521121][T20206]  do_syscall_64+0x166/0x520
[  942.521142][T20206]  ? trace_irq_disable+0x3b/0x140
[  942.521165][T20206]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  942.521185][T20206]  ? clear_bhb_loop+0x70/0xc0
[  942.521210][T20206]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  942.521229][T20206] RIP: 0033:0x7fc027f9e559
[  942.521248][T20206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  942.521265][T20206] RSP: 002b:00007fc028d92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  942.521285][T20206] RAX: ffffffffffffffda RBX: 00007fc028225fa0 RCX: 00007fc027f9e559
[  942.521300][T20206] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[  942.521313][T20206] RBP: 00007fc0280358b0 R08: 0000000000000029 R09: 0000000000000000
[  942.521326][T20206] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  942.521338][T20206] R13: 00007fc028226038 R14: 00007fc028225fa0 R15: 00007fc02834fa48
[  942.521370][T20206]  </TASK>
[  942.529206][T20206] Mem-Info:
[  942.529221][T20206] active_anon:10556 inactive_anon:15801 isolated_anon:0
[  942.529221][T20206]  active_file:1485 inactive_file:58123 isolated_file:0
[  942.529221][T20206]  unevictable:0 dirty:187 writeback:0
[  942.529221][T20206]  slab_reclaimable:7984 slab_unreclaimable:107985
[  942.529221][T20206]  mapped:30925 shmem:18327 pagetables:2417
[  942.529221][T20206]  sec_pagetables:0 bounce:0
[  942.529221][T20206]  kernel_misc_reclaimable:0
[  942.529221][T20206]  free:1043428 free_pcp:16452 free_cma:0
[  942.529275][T20206] Node 0 active_anon:42224kB inactive_anon:63204kB active_file:5940kB inactive_file:232232kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123680kB dirty:728kB writeback:0kB shmem:73308kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15256kB pagetables:9532kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  942.529330][T20206] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:260kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:20kB dirty:20kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  942.529380][T20206] Node 0 DMA free:11264kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  942.529434][T20206] lowmem_reserve[]: 0 2468 2468 2468 2468
[  942.529467][T20206] Node 0 DMA32 free:440248kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:42224kB inactive_anon:63204kB active_file:5940kB inactive_file:232232kB unevictable:0kB writepending:728kB zspages:2372kB present:3129332kB managed:2527508kB mlocked:0kB bounce:0kB free_pcp:52240kB local_pcp:31804kB free_cma:0kB
[  942.529523][T20206] lowmem_reserve[]: 0 0 0 0 0
[  942.529553][T20206] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  942.529602][T20206] lowmem_reserve[]: 0 0 0 0 0
[  942.529633][T20206] Node 1 Normal free:3722200kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:260kB unevictable:0kB writepending:20kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:13568kB local_pcp:3408kB free_cma:0kB
[  942.529685][T20206] lowmem_reserve[]: 0 0 0 0 0
[  942.529716][T20206] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 11264kB
[  942.529820][T20206] Node 0 DMA32: 805*4kB (ME) 696*8kB (UME) 932*16kB (UME) 1600*32kB (UME) 1135*64kB (UME) 559*128kB (UME) 190*256kB (UME) 101*512kB (UME) 76*1024kB (UM) 17*2048kB (UM) 2*4096kB (UM) = 440276kB
[  942.529979][T20206] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  942.530076][T20206] Node 1 Normal: 7*4kB (UM) 6*8kB (UM) 4*16kB (UM) 4*32kB (UM) 4*64kB (UM) 4*128kB (UM) 4*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 2*2048kB (UM) 906*4096kB (UM) = 3722252kB
[  942.530228][T20206] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  942.532888][T20206] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  942.532918][T20206] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  942.532934][T20206] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  942.532950][T20206] 77948 total pagecache pages
[  942.532959][T20206] 20 pages in swap cache
[  942.532967][T20206] Free swap  = 121924kB
[  942.532975][T20206] Total swap = 124996kB
[  942.532984][T20206] 2097051 pages RAM
[  942.532991][T20206] 0 pages HighMem/MovableOnly
[  942.532998][T20206] 433558 pages reserved
[  942.533005][T20206] 0 pages cma reserved
[  942.722736][ T5690] usb 3-1: Using ep0 maxpacket: 16
[  942.753652][ T5690] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  942.787292][ T5690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  942.925538][ T5690] usb 3-1: config 0 descriptor??
[  943.123694][T20209] bond1: entered promiscuous mode
[  943.124130][T20209] 8021q: adding VLAN 0 to HW filter on device bond1
[  943.256031][ T5690] gspca_main: sonixj-2.14.0 probing 0471:0327
[  943.684679][T20230] syzkaller1: entered promiscuous mode
[  943.684724][T20230] syzkaller1: entered allmulticast mode
[  944.211952][ T5690] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  944.362928][ T5690] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  944.363799][ T5690] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  944.363821][ T5690] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3
[  944.363854][ T5690] usb 2-1: config 220 interface 0 has no altsetting 0
[  944.365777][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  944.365798][ T5690] usb 2-1: Product: syz
[  944.365812][ T5690] usb 2-1: Manufacturer: syz
[  944.365825][ T5690] usb 2-1: SerialNumber: syz
[  944.782112][T20243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  944.782609][T20243] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  945.142407][ T5690] uvcvideo 2-1:220.0: Found Unit with invalid ID 0
[  945.143258][ T5690] uvcvideo 2-1:220.0: probe with driver uvcvideo failed with error -22
[  945.145679][ T5690] usb 2-1: USB disconnect, device number 4
[  945.990242][T14878] usb 3-1: USB disconnect, device number 102
[  946.109885][T20251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3734'.
[  946.118653][T20251] input: syz1 as /devices/virtual/input/input110
[  947.355942][T20273] futex_wake_op: syz.6.3740 tries to shift op by -1; fix this program
[  948.480739][T14876] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  948.610626][T14876] usb 2-1: device descriptor read/64, error -71
[  948.850802][T14876] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  948.980975][T14876] usb 2-1: device descriptor read/64, error -71
[  949.090931][T14876] usb usb2-port1: attempt power cycle
[  949.443100][T14876] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  949.471445][T14876] usb 2-1: device descriptor read/8, error -71
[  949.477627][T20293] netlink: 'syz.0.3746': attribute type 1 has an invalid length.
[  949.711024][T14876] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  949.715355][T20302] FAULT_INJECTION: forcing a failure.
[  949.715355][T20302] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  949.715379][T20302] CPU: 0 UID: 0 PID: 20302 Comm: syz.7.3750 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  949.715394][T20302] Tainted: [L]=SOFTLOCKUP
[  949.715398][T20302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  949.715406][T20302] Call Trace:
[  949.715411][T20302]  <TASK>
[  949.715417][T20302]  dump_stack_lvl+0xe8/0x150
[  949.715437][T20302]  should_fail_ex+0x410/0x560
[  949.715456][T20302]  _copy_to_user+0x31/0xb0
[  949.715468][T20302]  simple_read_from_buffer+0xe1/0x170
[  949.715488][T20302]  proc_fail_nth_read+0x1bb/0x230
[  949.715501][T20302]  ? common_file_perm+0x20e/0x2b0
[  949.715519][T20302]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  949.715532][T20302]  ? rw_verify_area+0x24a/0x4c0
[  949.715544][T20302]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  949.715555][T20302]  vfs_read+0x213/0xa80
[  949.715569][T20302]  ? __pfx_poll_select_finish+0x10/0x10
[  949.715584][T20302]  ? __pfx_vfs_read+0x10/0x10
[  949.715596][T20302]  ? __pfx_set_user_sigmask+0x10/0x10
[  949.715610][T20302]  ? kmem_cache_free+0x182/0x650
[  949.715631][T20302]  ksys_read+0x150/0x270
[  949.715643][T20302]  ? __pfx_ksys_read+0x10/0x10
[  949.715659][T20302]  do_syscall_64+0x166/0x520
[  949.715672][T20302]  ? trace_irq_disable+0x3b/0x140
[  949.715685][T20302]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  949.715695][T20302]  ? clear_bhb_loop+0x70/0xc0
[  949.715708][T20302]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  949.715719][T20302] RIP: 0033:0x7fe8cdd5ed8e
[  949.715729][T20302] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  949.715739][T20302] RSP: 002b:00007fe8cec0efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  949.715752][T20302] RAX: ffffffffffffffda RBX: 00007fe8cec0f6c0 RCX: 00007fe8cdd5ed8e
[  949.715763][T20302] RDX: 000000000000000f RSI: 00007fe8cec0f0a0 RDI: 0000000000000005
[  949.715775][T20302] RBP: 00007fe8cec0f090 R08: 0000000000000000 R09: 0000000000000000
[  949.715786][T20302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  949.715797][T20302] R13: 00007fe8ce026038 R14: 00007fe8ce025fa0 R15: 00007fe8ce14fa48
[  949.715826][T20302]  </TASK>
[  949.741262][T14876] usb 2-1: device descriptor read/8, error -71
[  949.851486][T14876] usb usb2-port1: unable to enumerate USB device
[  951.210669][  T986] usb 3-1: new high-speed USB device number 103 using dummy_hcd
[  951.362463][  T986] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  951.363840][  T986] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  951.363886][  T986] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  951.363928][  T986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  951.366865][  T986] usb 3-1: config 0 descriptor??
[  951.412217][  T986] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  951.576797][ T5690] usb 3-1: USB disconnect, device number 103
[  951.720706][  T986] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  951.871455][  T986] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  951.875566][  T986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  951.875582][  T986] usb 2-1: Product: syz
[  951.875590][  T986] usb 2-1: Manufacturer: syz
[  951.875598][  T986] usb 2-1: SerialNumber: syz
[  952.523826][T20336] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  952.676643][T20327] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3759'.
[  952.997352][  T986] rtl8150 2-1:1.0: couldn't reset the device
[  952.997582][  T986] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5
[  953.136225][T20352] netlink: 140 bytes leftover after parsing attributes in process `syz.7.3767'.
[  953.136320][T20352] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3767'.
[  953.318517][T20352] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  953.800675][T20357] bond3: option all_slaves_active: invalid value (9)
[  953.803816][T20357] bond3 (unregistering): Released all slaves
[  954.071048][ T5689] usb 3-1: new high-speed USB device number 104 using dummy_hcd
[  954.222474][ T5689] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  954.223408][ T5689] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  954.223457][ T5689] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  954.224662][ T5689] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  954.226866][ T5689] usb 3-1: config 0 descriptor??
[  954.241989][ T5689] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  954.354732][ T5690] usb 2-1: USB disconnect, device number 9
[  954.459205][  T986] usb 3-1: USB disconnect, device number 104
[  954.992849][T20396] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3781'.
[  955.040653][  T986] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  955.201316][  T986] usb 2-1: Using ep0 maxpacket: 16
[  955.203783][  T986] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  955.213651][  T986] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  955.213697][  T986] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  955.227099][  T986] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  955.227124][  T986] usb 2-1: Manufacturer: syz
[  955.246070][  T986] usb 2-1: config 0 descriptor??
[  955.438151][T20408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3784'.
[  955.830837][T14878] usb 3-1: new high-speed USB device number 105 using dummy_hcd
[  955.983306][T14878] usb 3-1: Using ep0 maxpacket: 32
[  955.985514][T14878] usb 3-1: unable to get BOS descriptor or descriptor too short
[  955.985566][T14878] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  955.986552][T14878] usb 3-1: config 14 has an invalid interface number: 57 but max is 1
[  955.986575][T14878] usb 3-1: config 14 has an invalid interface number: 228 but max is 1
[  955.986595][T14878] usb 3-1: config 14 has no interface number 0
[  955.986611][T14878] usb 3-1: config 14 has no interface number 1
[  955.986673][T14878] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  955.986703][T14878] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  955.986728][T14878] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  955.986755][T14878] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  955.986780][T14878] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  955.986804][T14878] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  955.986829][T14878] usb 3-1: config 14 interface 57 has no altsetting 0
[  955.986846][T14878] usb 3-1: config 14 interface 228 has no altsetting 0
[  955.989090][T14878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  955.989112][T14878] usb 3-1: Product: syz
[  955.989127][T14878] usb 3-1: Manufacturer: syz
[  955.989141][T14878] usb 3-1: SerialNumber: syz
[  956.029645][  T986] usb 2-1: USB disconnect, device number 10
[  956.438658][T14878] legousbtower 3-1:14.57: interrupt endpoints not found
[  956.644287][T20410] xt_hashlimit: size too large, truncated to 1048576
[  956.949817][T20409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  956.965216][T14878] legousbtower 3-1:14.228: get version request failed: -71
[  956.965417][T14878] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -71
[  956.985602][T14878] usb 3-1: USB disconnect, device number 105
[  957.167398][T20444] loop4: detected capacity change from 0 to 7
[  957.168164][T20444] Dev loop4: unable to read RDB block 7
[  957.168202][T20444]  loop4: unable to read partition table
[  957.168397][T20444] loop4: partition table beyond EOD, truncated
[  957.168412][T20444] loop_reread_partitions: partition scan of loop4 (ţ被xü—źŃŕ– ) failed (rc=-5)
[  957.386620][T20454] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3798'.
[  957.450279][T20459] syzkaller1: entered promiscuous mode
[  957.450294][T20459] syzkaller1: entered allmulticast mode
[  957.579160][T20465] CIFS: Invalid mount helper version specified
[  957.598871][T20465] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  957.607739][T20466] program syz.2.3800 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  958.401247][T20483] ip_tables: iptables: counters copy to user failed while replacing table
[  958.410298][T20485] tipc: Resetting bearer <eth:syz_tun>
[  958.823868][T20493] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3809'.
[  959.130633][T14878] usb 3-1: new high-speed USB device number 106 using dummy_hcd
[  959.281443][T14878] usb 3-1: Using ep0 maxpacket: 8
[  959.282317][T14878] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  959.283715][T14878] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  959.283763][T14878] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  959.283788][T14878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  959.283811][T14878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  959.283833][T14878] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  959.288404][T14878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  959.288428][T14878] usb 3-1: Product: syz
[  959.288443][T14878] usb 3-1: Manufacturer: syz
[  959.288457][T14878] usb 3-1: SerialNumber: syz
[  959.296010][ T5690] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  959.374928][T14878] usb 3-1: config 0 descriptor??
[  959.494687][ T5690] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  959.524028][ T5690] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  959.524056][ T5690] usb 2-1: Product: syz
[  959.524071][ T5690] usb 2-1: SerialNumber: syz
[  959.551343][ T5690] usb 2-1: config 0 descriptor??
[  959.798138][ T8582] IPVS: starting estimator thread 0...
[  959.892663][T20508] IPVS: using max 35 ests per chain, 84000 per kthread
[  959.892988][T14878] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -110
[  959.893211][T14878] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5
[  960.093795][ T5690] usb 2-1: USB disconnect, device number 11
[  961.089396][T20522] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  961.481299][   T25] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  961.577830][T20527] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3820'.
[  961.631564][   T25] usb 2-1: Using ep0 maxpacket: 16
[  961.633683][   T25] usb 2-1: unable to get BOS descriptor or descriptor too short
[  961.633735][   T25] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  961.634767][   T25] usb 2-1: config index 0 descriptor too short (expected 50286, got 110)
[  961.634789][   T25] usb 2-1: config 115 has too many interfaces: 100, using maximum allowed: 32
[  961.634808][   T25] usb 2-1: config 115 has an invalid descriptor of length 0, skipping remainder of the config
[  961.634827][   T25] usb 2-1: config 115 has 0 interfaces, different from the descriptor's value: 100
[  961.708898][   T25] usb 2-1: language id specifier not provided by device, defaulting to English
[  961.762718][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=36
[  961.762751][   T25] usb 2-1: SerialNumber: syz
[  961.998549][   T25] usb 2-1: USB disconnect, device number 12
[  962.007077][   T31] kauditd_printk_skb: 35 callbacks suppressed
[  962.007088][   T31] audit: type=1326 audit(1792188150.900:8113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20521 comm="syz.1.3818" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895ff9e559 code=0x7ffc0000
[  962.007122][   T31] audit: type=1326 audit(1792188150.900:8114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20521 comm="syz.1.3818" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f895ff9e559 code=0x7ffc0000
[  962.007144][   T31] audit: type=1326 audit(1792188150.900:8115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20521 comm="syz.1.3818" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895ff9e559 code=0x7ffc0000
[  962.007171][   T31] audit: type=1326 audit(1792188150.900:8116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20521 comm="syz.1.3818" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f895ff9e559 code=0x7ffc0000
[  962.007192][   T31] audit: type=1326 audit(1792188150.900:8117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20521 comm="syz.1.3818" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895ff9e559 code=0x7ffc0000
[  962.007214][   T31] audit: type=1326 audit(1792188150.900:8118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20521 comm="syz.1.3818" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f895ff9e559 code=0x7ffc0000
[  962.007235][   T31] audit: type=1326 audit(1792188150.900:8119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20521 comm="syz.1.3818" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895ff9e559 code=0x7ffc0000
[  962.007256][   T31] audit: type=1326 audit(1792188150.900:8120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20521 comm="syz.1.3818" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f895ff9e559 code=0x7ffc0000
[  962.007276][   T31] audit: type=1326 audit(1792188150.900:8121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20521 comm="syz.1.3818" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895ff9e559 code=0x7ffc0000
[  962.007297][   T31] audit: type=1326 audit(1792188150.900:8122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20521 comm="syz.1.3818" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f895ff9e559 code=0x7ffc0000
[  962.345590][T14876] usb 3-1: USB disconnect, device number 106
[  962.690151][T20540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3823'.
[  962.995216][T20546] erspan1: entered promiscuous mode
[  963.543347][T14876] usb 3-1: new high-speed USB device number 107 using dummy_hcd
[  963.692400][T14876] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  963.695521][T14876] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  963.695578][T14876] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  963.695612][T14876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  963.703177][T14876] usb 3-1: config 0 descriptor??
[  963.709554][T14876] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  963.863049][T20572] netlink: 'syz.0.3830': attribute type 1 has an invalid length.
[  963.905949][T20572] 8021q: adding VLAN 0 to HW filter on device bond3
[  963.954767][   T25] usb 3-1: USB disconnect, device number 107
[  964.071344][T20577] netdevsim netdevsim6 netdevsim0: IPsec offload requires 128 bit authentication
[  964.230627][T13198] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  964.270921][ T5616] Bluetooth: hci2: command 0x0406 tx timeout
[  964.383699][T13198] usb 2-1: not running at top speed; connect to a high speed hub
[  964.383734][T13198] usb 2-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad
[  964.384691][T13198] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  964.386958][T13198] usb 2-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0
[  964.386980][T13198] usb 2-1: Product: syz
[  964.386989][T13198] usb 2-1: Manufacturer: syz
[  964.449700][T13198] uvcvideo 2-1:1.0: Found UVC 1.00 device syz (225a:e1d4)
[  964.667876][T20575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  964.670397][T20575] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  964.756916][T20588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  964.759048][T20588] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  964.785138][T20575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  964.785707][T20575] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  964.822215][T13198] uvcvideo 2-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  964.822750][T13198] uvcvideo 2-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26).
[  964.822800][T13198] uvcvideo 2-1:1.1: Failed to initialize the device (-71).
[  964.823458][T13198] uvcvideo 2-1:1.0: probe with driver uvcvideo failed with error -71
[  964.879971][T13198] usb 2-1: USB disconnect, device number 13
[  964.917734][T20592] ip_tables: iptables: counters copy to user failed while replacing table
[  965.057995][T20597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  965.059385][T20597] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  965.059699][T20598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  965.060133][T20598] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  965.072937][T20597] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3838'.
[  968.527201][T20650] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3853'.
[  968.620366][T20652] xt_hashlimit: size too large, truncated to 1048576
[  969.695822][T20657] ip_tables: iptables: counters copy to user failed while replacing table
[  970.391628][ T5690] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  970.553802][ T5690] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  970.556572][ T5690] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  970.556602][ T5690] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  970.556627][ T5690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  970.561319][ T5690] usb 2-1: config 0 descriptor??
[  970.572695][ T5690] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  970.862818][ T5690] usb 2-1: USB disconnect, device number 14
[  971.330831][T20686] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  971.401015][ T5689] usb 3-1: new high-speed USB device number 108 using dummy_hcd
[  971.553829][ T5689] usb 3-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00
[  971.556439][ T5689] usb 3-1: config index 0 descriptor too short (expected 69, got 51)
[  971.556501][ T5689] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  971.556532][ T5689] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  971.558485][ T5689] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  971.558508][ T5689] usb 3-1: Product: syz
[  971.558522][ T5689] usb 3-1: Manufacturer: syz
[  971.558536][ T5689] usb 3-1: SerialNumber: syz
[  971.609824][ T5689] usb 3-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[  971.792360][ T5689] usb 3-1: Error initialising Scarlett Gen 2 Mixer Driver: -90
[  971.935413][ T5689] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -90
[  972.025839][ T5689] usb 3-1: USB disconnect, device number 108
[  972.053063][T15670] udevd[15670]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  972.330677][ T5690] tipc: Node number set to 3504287745
[  973.033323][T20721] fuse: Bad value for 'fd'
[  974.619603][T20756] openvswitch: netlink: Duplicate key (type 6).
[  974.872670][   T31] kauditd_printk_skb: 13 callbacks suppressed
[  974.873152][   T31] audit: type=1326 audit(1792188163.770:8136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20763 comm="syz.7.3885" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8cdd9e559 code=0x7ffc0000
[  974.873767][   T31] audit: type=1326 audit(1792188163.780:8137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20763 comm="syz.7.3885" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe8cdd9e559 code=0x7ffc0000
[  974.879729][   T31] audit: type=1326 audit(1792188163.780:8138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20763 comm="syz.7.3885" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe8cdd9e559 code=0x7ffc0000
[  974.966414][   T31] audit: type=1326 audit(1792188163.870:8139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20763 comm="syz.7.3885" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe8cdd9e559 code=0x7ffc0000
[  974.990984][   T31] audit: type=1326 audit(1792188163.880:8140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20763 comm="syz.7.3885" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe8cdd9e559 code=0x7ffc0000
[  974.991040][   T31] audit: type=1326 audit(1792188163.890:8141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20763 comm="syz.7.3885" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe8cdd9e559 code=0x7ffc0000
[  974.991078][   T31] audit: type=1326 audit(1792188163.890:8142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20763 comm="syz.7.3885" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe8cdd9e559 code=0x7ffc0000
[  974.994630][   T31] audit: type=1326 audit(1792188163.900:8143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20763 comm="syz.7.3885" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe8cdd9e559 code=0x7ffc0000
[  974.994675][   T31] audit: type=1326 audit(1792188163.900:8144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20763 comm="syz.7.3885" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe8cdd9e559 code=0x7ffc0000
[  975.008495][   T31] audit: type=1326 audit(1792188163.900:8145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20763 comm="syz.7.3885" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe8cdd9e559 code=0x7ffc0000
[  975.899617][T20783] FAULT_INJECTION: forcing a failure.
[  975.899617][T20783] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  975.899644][T20783] CPU: 0 UID: 0 PID: 20783 Comm: syz.0.3888 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  975.899659][T20783] Tainted: [L]=SOFTLOCKUP
[  975.899664][T20783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  975.899671][T20783] Call Trace:
[  975.899677][T20783]  <TASK>
[  975.899683][T20783]  dump_stack_lvl+0xe8/0x150
[  975.899705][T20783]  should_fail_ex+0x410/0x560
[  975.899724][T20783]  _copy_to_user+0x31/0xb0
[  975.899737][T20783]  simple_read_from_buffer+0xe1/0x170
[  975.899757][T20783]  proc_fail_nth_read+0x1bb/0x230
[  975.899769][T20783]  ? common_file_perm+0x20e/0x2b0
[  975.899792][T20783]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  975.899805][T20783]  ? rw_verify_area+0x24a/0x4c0
[  975.899818][T20783]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  975.899829][T20783]  vfs_read+0x213/0xa80
[  975.899842][T20783]  ? __pfx___mutex_lock+0x10/0x10
[  975.899857][T20783]  ? __pfx_vfs_read+0x10/0x10
[  975.899868][T20783]  ? __fget_files+0x2a/0x420
[  975.899881][T20783]  ? __fget_files+0x3a2/0x420
[  975.899890][T20783]  ? __fget_files+0x2a/0x420
[  975.899903][T20783]  ksys_read+0x150/0x270
[  975.899916][T20783]  ? __pfx_ksys_read+0x10/0x10
[  975.899933][T20783]  do_syscall_64+0x166/0x520
[  975.899945][T20783]  ? trace_irq_disable+0x3b/0x140
[  975.899958][T20783]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  975.899968][T20783]  ? clear_bhb_loop+0x70/0xc0
[  975.899981][T20783]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  975.899992][T20783] RIP: 0033:0x7fc027f5ed8e
[  975.900003][T20783] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  975.900012][T20783] RSP: 002b:00007fc028d91fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  975.900025][T20783] RAX: ffffffffffffffda RBX: 00007fc028d926c0 RCX: 00007fc027f5ed8e
[  975.900033][T20783] RDX: 000000000000000f RSI: 00007fc028d920a0 RDI: 0000000000000006
[  975.900040][T20783] RBP: 00007fc028d92090 R08: 0000000000000000 R09: 0000000000000000
[  975.900046][T20783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  975.900053][T20783] R13: 00007fc028226038 R14: 00007fc028225fa0 R15: 00007fc02834fa48
[  975.900069][T20783]  </TASK>
[  976.286975][T20791] FAULT_INJECTION: forcing a failure.
[  976.286975][T20791] name failslab, interval 1, probability 0, space 0, times 0
[  976.287013][T20791] CPU: 0 UID: 0 PID: 20791 Comm: syz.2.3892 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  976.287039][T20791] Tainted: [L]=SOFTLOCKUP
[  976.287047][T20791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  976.287059][T20791] Call Trace:
[  976.287067][T20791]  <TASK>
[  976.287076][T20791]  dump_stack_lvl+0xe8/0x150
[  976.287109][T20791]  should_fail_ex+0x410/0x560
[  976.287141][T20791]  should_failslab+0xa8/0x100
[  976.287170][T20791]  __kvmalloc_node_noprof+0x176/0x820
[  976.287198][T20791]  ? __se_sys_add_key+0x289/0x420
[  976.287221][T20791]  ? __se_sys_add_key+0x289/0x420
[  976.287249][T20791]  ? memdup_user+0x99/0xd0
[  976.287276][T20791]  __se_sys_add_key+0x289/0x420
[  976.287300][T20791]  ? __pfx___se_sys_add_key+0x10/0x10
[  976.287328][T20791]  ? __x64_sys_add_key+0x20/0xc0
[  976.287351][T20791]  do_syscall_64+0x166/0x520
[  976.287373][T20791]  ? trace_irq_disable+0x3b/0x140
[  976.287395][T20791]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  976.287415][T20791]  ? clear_bhb_loop+0x70/0xc0
[  976.287437][T20791]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  976.287456][T20791] RIP: 0033:0x7faa0bd9e559
[  976.287474][T20791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  976.287490][T20791] RSP: 002b:00007faa0cc7d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  976.287511][T20791] RAX: ffffffffffffffda RBX: 00007faa0c025fa0 RCX: 00007faa0bd9e559
[  976.287525][T20791] RDX: 0000200000001540 RSI: 0000200000001500 RDI: 00002000000014c0
[  976.287539][T20791] RBP: 00007faa0cc7d090 R08: 0000000029bd835f R09: 0000000000000000
[  976.287552][T20791] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[  976.287564][T20791] R13: 00007faa0c026038 R14: 00007faa0c025fa0 R15: 00007faa0c14fa48
[  976.287595][T20791]  </TASK>
[  977.310741][ T5690] usb 3-1: new high-speed USB device number 109 using dummy_hcd
[  977.431421][T14876] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  977.472121][ T5690] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  977.473307][ T5690] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  977.473353][ T5690] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  977.473393][ T5690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  977.476900][ T5690] usb 3-1: config 0 descriptor??
[  977.534298][ T5690] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  977.582194][T14876] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  977.583148][T14876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  977.583178][T14876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64
[  977.583211][T14876] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  977.583235][T14876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  977.584928][T14876] usb 2-1: config 0 descriptor??
[  977.585509][T20814] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22
[  977.693867][T14878] usb 3-1: USB disconnect, device number 109
[  977.788493][T20814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3897'.
[  977.995656][T14876] hid-multitouch 0003:0457:07DA.003F: unknown main item tag 0x0
[  977.995699][T14876] hid-multitouch 0003:0457:07DA.003F: unknown main item tag 0x0
[  977.995723][T14876] hid-multitouch 0003:0457:07DA.003F: unknown main item tag 0x0
[  977.995747][T14876] hid-multitouch 0003:0457:07DA.003F: unknown main item tag 0x0
[  977.995772][T14876] hid-multitouch 0003:0457:07DA.003F: unknown main item tag 0x0
[  977.995795][T14876] hid-multitouch 0003:0457:07DA.003F: unknown main item tag 0x0
[  977.995820][T14876] hid-multitouch 0003:0457:07DA.003F: unknown main item tag 0x0
[  977.995843][T14876] hid-multitouch 0003:0457:07DA.003F: unknown main item tag 0x0
[  977.995868][T14876] hid-multitouch 0003:0457:07DA.003F: unknown main item tag 0x0
[  977.995892][T14876] hid-multitouch 0003:0457:07DA.003F: unknown main item tag 0x0
[  977.999215][T14876] hid-multitouch 0003:0457:07DA.003F: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.1-1/input0
[  978.261581][   T25] usb 2-1: USB disconnect, device number 15
[  978.808999][T20830] sit0: entered promiscuous mode
[  978.815612][T20830] netlink: 'syz.1.3903': attribute type 1 has an invalid length.
[  978.815627][T20830] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3903'.
[  978.949999][T20834] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  979.027658][T20834] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  979.056831][T20834] 8021q: adding VLAN 0 to HW filter on device bond2
[  979.190827][ T5690] usb 3-1: new high-speed USB device number 110 using dummy_hcd
[  979.340633][ T5690] usb 3-1: Using ep0 maxpacket: 8
[  979.341483][ T5690] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  979.342896][ T5690] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  979.342949][ T5690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  979.346783][ T5690] usb 3-1: config 0 descriptor??
[  979.394885][ T5690] gspca_main: vc032x-2.14.0 probing 046d:0892
[  979.844143][T20844] fuse: Bad value for 'fd'
[  980.272524][   T31] kauditd_printk_skb: 27 callbacks suppressed
[  980.272543][   T31] audit: type=1326 audit(1792188169.180:8173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20832 comm="syz.2.3904" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa0bd9e559 code=0x7ffe0000
[  980.522446][T20851] xt_hashlimit: size too large, truncated to 1048576
[  980.540847][ T5690] gspca_vc032x: reg_r err -110
[  980.540941][ T5690] vc032x 3-1:0.0: probe with driver vc032x failed with error -110
[  980.888097][T20861] fuse: Bad value for 'rootmode'
[  981.087319][T20867] Context (ID=0x0) not attached to queue pair (handle=0x4df:0x0)
[  981.271034][T14878] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[  981.431788][T14878] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  981.432796][T14878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  981.432826][T14878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  981.432849][T14878] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  981.432876][T14878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  981.434992][T14878] usb 2-1: config 0 descriptor??
[  981.604416][   T25] usb 3-1: USB disconnect, device number 110
[  981.976058][T14878] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  982.964663][T20896] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3923'.
[  982.965321][T20896] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3923'.
[  983.341096][ T5690] usb 2-1: reset full-speed USB device number 16 using dummy_hcd
[  983.391870][T14878] usb 3-1: new high-speed USB device number 111 using dummy_hcd
[  983.470713][ T5690] usb 2-1: device descriptor read/64, error -32
[  983.544359][T14878] usb 3-1: Using ep0 maxpacket: 32
[  983.545301][T14878] usb 3-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9
[  983.546580][T14878] usb 3-1: config 0 has an invalid interface number: 239 but max is 0
[  983.546601][T14878] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  983.546618][T14878] usb 3-1: config 0 has no interface number 0
[  983.546654][T14878] usb 3-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8
[  983.546675][T14878] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  983.546697][T14878] usb 3-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89
[  983.546716][T14878] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024
[  983.546736][T14878] usb 3-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024
[  983.546754][T14878] usb 3-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85
[  983.546772][T14878] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  983.546791][T14878] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0
[  983.546808][T14878] usb 3-1: config 0 interface 239 has no altsetting 0
[  983.549590][T14878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  983.549614][T14878] usb 3-1: Product: syz
[  983.549628][T14878] usb 3-1: Manufacturer: syz
[  983.549642][T14878] usb 3-1: SerialNumber: syz
[  983.569729][T14878] usb 3-1: config 0 descriptor??
[  983.573750][T20900] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  983.573987][T20900] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  983.637400][ T5626] Bluetooth: hci3: urb ffff888055bf2900 submission failed (90)
[  983.733779][T20902] netlink: 'syz.0.3926': attribute type 11 has an invalid length.
[  983.733802][T20902] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3926'.
[  983.800659][ T5690] usb 2-1: reset full-speed USB device number 16 using dummy_hcd
[  983.940801][ T5690] usb 2-1: device descriptor read/64, error -32
[  984.190782][ T5690] usb 2-1: reset full-speed USB device number 16 using dummy_hcd
[  984.220938][ T5690] usb 2-1: device descriptor read/8, error -32
[  984.320727][T14876] usb 3-1: USB disconnect, device number 111
[  984.760078][   T25] usb 2-1: USB disconnect, device number 16
[  984.921040][   T25] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  985.034860][T20930] tipc: Started in network mode
[  985.034889][T20930] tipc: Node identity ac1414aa, cluster identity 4711
[  985.035128][T20930] tipc: New replicast peer: 172.20.20.187
[  985.035873][T20930] tipc: Enabled bearer <udp:syz0>, priority 0
[  985.080648][   T25] usb 2-1: Using ep0 maxpacket: 16
[  985.081395][   T25] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  985.085216][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  985.085240][   T25] usb 2-1: Product: syz
[  985.085254][   T25] usb 2-1: Manufacturer: syz
[  985.085269][   T25] usb 2-1: SerialNumber: syz
[  985.127731][   T25] usb 2-1: config 0 descriptor??
[  985.136615][   T25] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  985.138472][   T25] usb 2-1: Detected FT-X
[  985.210677][ T5690] usb 3-1: new full-speed USB device number 112 using dummy_hcd
[  985.231374][T20935] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  985.373257][ T5690] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  985.375950][ T5690] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  985.375981][ T5690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  985.380148][ T5690] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  985.380171][ T5690] usb 3-1: Product: syz
[  985.380186][ T5690] usb 3-1: Manufacturer: syz
[  985.380200][ T5690] usb 3-1: SerialNumber: syz
[  985.443488][ T5690] usb 3-1: config 0 descriptor??
[  985.461691][ T5690] streamzap 3-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200
[  985.462535][   T25] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  985.462919][   T25] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  985.463575][   T25] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71
[  985.467778][   T25] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  985.523074][   T25] usb 2-1: USB disconnect, device number 17
[  985.528259][   T25] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  985.529627][   T25] ftdi_sio 2-1:0.0: device disconnected
[  986.170864][   T25] tipc: Node number set to 2886997162
[  986.906131][ T5626] Bluetooth: hci4: unexpected event for opcode 0x1003
[  987.979994][ T5690] usb 3-1: USB disconnect, device number 112
[  988.351673][ T5690] usb 3-1: new high-speed USB device number 113 using dummy_hcd
[  988.502984][ T5690] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  988.503914][ T5690] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  988.503969][ T5690] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  988.503992][ T5690] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  988.504013][ T5690] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  988.504038][ T5690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  989.113327][T20958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  989.113852][T20958] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  989.119173][ T5690] gud 3-1:1.0: Failed to get connectors (error=-5)
[  989.119205][ T5690] gud 3-1:1.0: probe with driver gud failed with error -5
[  989.120367][T20968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  989.121466][T20968] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  989.162876][T20967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  989.180617][T20967] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  989.321426][T13198] usb 3-1: USB disconnect, device number 113
[  989.416180][T20977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  989.418674][T20977] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  989.530655][ T5690] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  989.691564][ T5690] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  989.694532][ T5690] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  989.694582][ T5690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  989.694595][ T5690] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  989.694607][ T5690] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  989.694632][ T5690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  989.698038][ T5690] usb 2-1: config 0 descriptor??
[  989.771683][ T5690] hdpvr 2-1:0.0: Could not find bulk-in endpoint
[  989.771733][ T5690] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12
[  989.901600][ T5682] usb 2-1: USB disconnect, device number 18
[  990.025240][T20991] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3951'.
[  990.606933][T21005] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3955'.
[  991.742188][ T5682] usb 3-1: new high-speed USB device number 114 using dummy_hcd
[  991.760604][T14876] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  991.901642][ T5682] usb 3-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00
[  991.901686][ T5682] usb 3-1: too many configurations: 129, using maximum allowed: 8
[  991.902938][ T5682] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  991.902967][ T5682] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  991.902992][ T5682] usb 3-1: config 0 interface 0 has no altsetting 0
[  991.904165][ T5682] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  991.904193][ T5682] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  991.904217][ T5682] usb 3-1: config 0 interface 0 has no altsetting 0
[  991.905379][ T5682] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  991.905406][ T5682] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  991.905429][ T5682] usb 3-1: config 0 interface 0 has no altsetting 0
[  991.906723][ T5682] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  991.906751][ T5682] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  991.906774][ T5682] usb 3-1: config 0 interface 0 has no altsetting 0
[  991.907892][ T5682] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  991.907919][ T5682] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  991.907943][ T5682] usb 3-1: config 0 interface 0 has no altsetting 0
[  991.909220][ T5682] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  991.909248][ T5682] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  991.909272][ T5682] usb 3-1: config 0 interface 0 has no altsetting 0
[  991.911166][T14876] usb 2-1: Using ep0 maxpacket: 8
[  991.919895][ T5682] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  991.919928][ T5682] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  991.919952][ T5682] usb 3-1: config 0 interface 0 has no altsetting 0
[  991.920675][T14876] usb 2-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40
[  991.954784][T14876] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  991.954810][T14876] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  992.005636][ T5682] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  992.005668][ T5682] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  992.005691][ T5682] usb 3-1: config 0 interface 0 has no altsetting 0
[  992.005723][ T5682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  992.011654][T14876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  992.011683][T14876] usb 2-1: Product: syz
[  992.011697][T14876] usb 2-1: Manufacturer: syz
[  992.011712][T14876] usb 2-1: SerialNumber: syz
[  992.210404][ T5682] usb 3-1: config 0 descriptor??
[  992.419238][T21029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3958'.
[  992.916538][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  992.916596][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  993.019884][T21042] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3963'.
[  993.019915][T21042] netlink: 'syz.6.3963': attribute type 7 has an invalid length.
[  993.051025][T14876] usb 2-1: USB disconnect, device number 19
[  994.130655][T14876] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[  994.292442][T14876] usb 2-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40
[  994.294234][T14876] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 249, changing to 4
[  994.294268][T14876] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023
[  994.294305][T14876] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  994.296892][T14876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  994.296916][T14876] usb 2-1: Product: syz
[  994.296930][T14876] usb 2-1: Manufacturer: syz
[  994.296945][T14876] usb 2-1: SerialNumber: syz
[  994.416684][ T5682] usbhid 3-1:0.0: can't add hid device: -71
[  994.416792][ T5682] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  994.426936][ T5682] usb 3-1: USB disconnect, device number 114
[  994.553236][T14876] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  994.553659][T14876] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  994.594972][T14876] usb 2-1: USB disconnect, device number 20
[  994.626768][T15670] udevd[15670]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  994.821711][ T5682] usb 3-1: new full-speed USB device number 115 using dummy_hcd
[  994.982280][ T5682] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  994.983271][ T5682] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  994.983317][ T5682] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  994.983343][ T5682] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10
[  994.983368][ T5682] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64
[  994.983395][ T5682] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  994.983418][ T5682] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 148, setting to 64
[  994.983443][ T5682] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  994.985783][ T5682] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  994.985806][ T5682] usb 3-1: Product: syz
[  994.985821][ T5682] usb 3-1: Manufacturer: syz
[  994.985835][ T5682] usb 3-1: SerialNumber: syz
[  994.993438][ T5682] usb 3-1: config 0 descriptor??
[  994.994403][T21064] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  994.994532][T21064] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  995.009272][   T31] audit: type=1326 audit(1792188183.900:8174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21065 comm="syz.7.3970" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe8cdd9e559 code=0x0
[  995.220706][T21064] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3969'.
[  995.223639][T21064] netlink: 'syz.2.3969': attribute type 10 has an invalid length.
[  995.223671][T21064] team0: left promiscuous mode
[  995.790001][T21095] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3977'.
[  996.141269][ T5682] rc_core: IR keymap rc-snapstream-firefly not found
[  996.141287][ T5682] Registered IR keymap rc-empty
[  996.142665][ T5682] rc rc0: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  996.158963][ T5682] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input111
[  996.236238][ T5682] input: syz syz mouse as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input112
[  996.270586][T14876] usb 2-1: new full-speed USB device number 21 using dummy_hcd
[  996.282056][ T5682] usb 3-1: USB disconnect, device number 115
[  996.282120][    C1] ati_remote 3-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19
[  996.288902][ T4971] ati_remote 3-1:0.0: ati_remote_open: usb_submit_urb failed!
[  996.421641][T14876] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00
[  996.422732][T14876] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  996.422771][T14876] usb 2-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  996.422805][T14876] usb 2-1: config 0 interface 0 has no altsetting 0
[  996.422843][T14876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  996.502892][T14876] usb 2-1: config 0 descriptor??
[  996.731148][T21105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  996.731679][T21105] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  996.841024][ T5682] usb 3-1: new high-speed USB device number 116 using dummy_hcd
[  996.970755][ T5682] usb 3-1: device descriptor read/64, error -71
[  997.040460][T21124] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3984'.
[  997.054620][T14876] usbhid 2-1:0.0: can't add hid device: -71
[  997.054736][T14876] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  997.057531][T14876] usb 2-1: USB disconnect, device number 21
[  997.065248][T21124] ip6t_srh: unknown srh match flags  4000
[  997.081259][   T31] audit: type=1326 audit(1792188185.980:8175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21122 comm="syz.0.3984" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc027f9e559 code=0x7ffc0000
[  997.082094][T21123] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3984'.
[  997.082412][   T31] audit: type=1326 audit(1792188185.980:8176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21122 comm="syz.0.3984" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc027f9e559 code=0x7ffc0000
[  997.222702][ T5682] usb 3-1: new high-speed USB device number 117 using dummy_hcd
[  997.360915][ T5682] usb 3-1: device descriptor read/64, error -71
[  997.458509][T21142] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3987'.
[  997.458717][T21142] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3987'.
[  997.458740][T21142] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3987'.
[  997.459051][T21142] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3987'.
[  997.459072][T21142] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3987'.
[  997.459089][T21142] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3987'.
[  997.480157][ T5682] usb usb3-port1: attempt power cycle
[  997.801591][T21157] syz.1.3991 (21157): drop_caches: 2
[  997.821751][ T5682] usb 3-1: new high-speed USB device number 118 using dummy_hcd
[  997.838780][T21161] fuse: Bad value for 'fd'
[  997.841371][ T5682] usb 3-1: device descriptor read/8, error -71
[  997.862933][T21153] syz.1.3991 (21153): drop_caches: 2
[  997.863243][T21153] syz.1.3991 (21153): drop_caches: 2
[  997.915604][   T31] audit: type=1326 audit(1792188186.820:8177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21119 comm="syz.7.3983" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8cdd9e559 code=0x7ffc0000
[  997.915660][   T31] audit: type=1326 audit(1792188186.820:8178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21119 comm="syz.7.3983" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8cdd9e559 code=0x7ffc0000
[  997.919879][   T31] audit: type=1326 audit(1792188186.820:8179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21119 comm="syz.7.3983" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fe8cdd9e559 code=0x7ffc0000
[  997.919925][   T31] audit: type=1326 audit(1792188186.820:8180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21119 comm="syz.7.3983" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8cdd9e559 code=0x7ffc0000
[  997.919963][   T31] audit: type=1326 audit(1792188186.820:8181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21119 comm="syz.7.3983" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8cdd9e559 code=0x7ffc0000
[  997.948179][   T31] audit: type=1326 audit(1792188186.850:8182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21119 comm="syz.7.3983" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe8cdd3f8d9 code=0x7ffc0000
[  997.948741][   T31] audit: type=1326 audit(1792188186.850:8183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21119 comm="syz.7.3983" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe8cdd9e559 code=0x7ffc0000
[  998.153534][ T5682] usb 3-1: new high-speed USB device number 119 using dummy_hcd
[  998.173234][ T5682] usb 3-1: device descriptor read/8, error -71
[  998.291066][ T5682] usb usb3-port1: unable to enumerate USB device
[  998.559585][T21153] xt_TCPMSS: Only works on TCP SYN packets
[  999.759839][T21191] xt_hashlimit: size too large, truncated to 1048576
[ 1000.272188][  T986] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[ 1000.441652][  T986] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[ 1000.445375][  T986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1000.445402][  T986] usb 2-1: Product: syz
[ 1000.445417][  T986] usb 2-1: Manufacturer: syz
[ 1000.445431][  T986] usb 2-1: SerialNumber: syz
[ 1000.460353][  T986] usb 2-1: config 0 descriptor??
[ 1000.494445][  T986] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[ 1000.500305][  T986] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1000.522159][  T986] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[ 1000.522213][  T986] usb 2-1: media controller created
[ 1000.554033][  T986] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1000.639628][  T986] DVB: Unable to find symbol mt352_attach()
[ 1000.687449][  T986] DVB: Unable to find symbol nxt6000_attach()
[ 1000.687546][  T986] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[ 1000.710991][  T986] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input113
[ 1000.714365][  T986] dvb-usb: schedule remote query interval to 1000 msecs.
[ 1000.714388][  T986] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[ 1000.714406][  T986] dvb-usb: bulk message failed: -22 (7/0)
[ 1000.714421][  T986] dvb-usb: bulk message failed: -22 (7/0)
[ 1000.728438][T21199] dvb-usb: bulk message failed: -22 (7/0)
[ 1000.782543][  T986] usb 2-1: USB disconnect, device number 22
[ 1000.969623][  T986] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[ 1002.425431][T21222] syzkaller0: entered promiscuous mode
[ 1002.425729][T21222] syzkaller0: entered allmulticast mode
[ 1002.447198][T21222] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1002.457928][T21222] tipc: Resetting bearer <eth:syzkaller0>
[ 1002.460114][T21221] tipc: Resetting bearer <eth:syzkaller0>
[ 1002.516367][T21221] tipc: Disabling bearer <eth:syzkaller0>
[ 1003.159301][T21234] __nla_validate_parse: 161 callbacks suppressed
[ 1003.159325][T21234] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4011'.
[ 1003.279095][T21236] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1003.561703][T21245] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1003.561732][T21245] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1003.568190][T21245] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1003.568208][T21245] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1004.645240][   T31] kauditd_printk_skb: 51 callbacks suppressed
[ 1004.645258][   T31] audit: type=1326 audit(1792188193.550:8235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21263 comm="syz.2.4022" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa0bd9e559 code=0x7ffc0000
[ 1004.646972][   T31] audit: type=1326 audit(1792188193.550:8236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21263 comm="syz.2.4022" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa0bd9e559 code=0x7ffc0000
[ 1004.647100][   T31] audit: type=1326 audit(1792188193.550:8237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21263 comm="syz.2.4022" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa0bd9e559 code=0x7ffc0000
[ 1004.647253][   T31] audit: type=1326 audit(1792188193.550:8238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21263 comm="syz.2.4022" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa0bd9e559 code=0x7ffc0000
[ 1004.937030][T21274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4025'.
[ 1004.995710][T21278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4025'.
[ 1005.044624][   T31] audit: type=1326 audit(1792188193.950:8239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21269 comm="syz.1.4023" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f895ff9e559 code=0x0
[ 1005.400909][  T986] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[ 1005.550846][  T986] usb 2-1: Using ep0 maxpacket: 8
[ 1005.552472][  T986] usb 2-1: New USB device found, idVendor=1b3d, idProduct=9317, bcdDevice=86.14
[ 1005.553392][  T986] usb 2-1: config 104 has an invalid interface number: 179 but max is 0
[ 1005.553417][  T986] usb 2-1: config 104 has no interface number 0
[ 1005.553460][  T986] usb 2-1: config 104 interface 179 altsetting 0 endpoint 0xB has invalid maxpacket 1023, setting to 64
[ 1005.553488][  T986] usb 2-1: config 104 interface 179 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1023
[ 1005.553503][  T986] usb 2-1: config 104 interface 179 altsetting 0 has an endpoint descriptor with address 0xBB, changing to 0x8B
[ 1005.553517][  T986] usb 2-1: config 104 interface 179 altsetting 0 has a duplicate endpoint with address 0x8B, skipping
[ 1005.553530][  T986] usb 2-1: config 104 interface 179 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64
[ 1005.553544][  T986] usb 2-1: config 104 interface 179 altsetting 0 has a duplicate endpoint with address 0xB, skipping
[ 1005.553556][  T986] usb 2-1: config 104 interface 179 altsetting 0 endpoint 0xF has an invalid bInterval 203, changing to 11
[ 1005.553571][  T986] usb 2-1: config 104 interface 179 altsetting 0 has a duplicate endpoint with address 0xF, skipping
[ 1005.553583][  T986] usb 2-1: config 104 interface 179 altsetting 0 has a duplicate endpoint with address 0x9, skipping
[ 1005.553595][  T986] usb 2-1: config 104 interface 179 altsetting 0 has a duplicate endpoint with address 0xF, skipping
[ 1005.555448][  T986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1005.555471][  T986] usb 2-1: Product: syz
[ 1005.555486][  T986] usb 2-1: Manufacturer: syz
[ 1005.555500][  T986] usb 2-1: SerialNumber: syz
[ 1005.558714][T21279] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22
[ 1007.129363][T21296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1007.133200][T21296] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1007.143031][T21296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1007.143500][T21296] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1007.809903][  T986] ftdi_sio 2-1:104.179: FTDI USB Serial Device converter detected
[ 1007.815870][  T986] ftdi_sio ttyUSB0: unknown device type: 0x8614
[ 1007.858871][  T986] usb 2-1: USB disconnect, device number 23
[ 1007.928543][  T986] ftdi_sio 2-1:104.179: device disconnected
[ 1007.936271][T21309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4034'.
[ 1007.936294][T21309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4034'.
[ 1008.072941][T14876] usb 3-1: new high-speed USB device number 120 using dummy_hcd
[ 1008.236409][T14876] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[ 1008.240249][T14876] usb 3-1: config 1 has an invalid interface number: 7 but max is 0
[ 1008.240272][T14876] usb 3-1: config 1 has no interface number 0
[ 1008.240362][T14876] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xD has invalid maxpacket 8
[ 1008.240381][T14876] usb 3-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1008.281447][T14876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1008.281480][T14876] usb 3-1: Product: syz
[ 1008.281493][T14876] usb 3-1: Manufacturer: syz
[ 1008.281506][T14876] usb 3-1: SerialNumber: syz
[ 1008.292779][T21307] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1008.301653][T14876] usb 3-1: Expected 3 endpoints, found: 2
[ 1008.650856][ T5690] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[ 1008.820646][ T5690] usb 2-1: Using ep0 maxpacket: 16
[ 1008.821551][ T5690] usb 2-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00
[ 1008.822510][ T5690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 227, changing to 11
[ 1008.822544][ T5690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1008.824331][ T5690] usb 2-1: config 0 descriptor??
[ 1009.227687][ T5690] usbhid 2-1:0.0: can't add hid device: -71
[ 1009.227896][ T5690] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1009.245056][ T5690] usb 2-1: USB disconnect, device number 24
[ 1010.230852][T21338] FAULT_INJECTION: forcing a failure.
[ 1010.230852][T21338] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1010.231261][T21338] CPU: 1 UID: 0 PID: 21338 Comm: syz.7.4042 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1010.231290][T21338] Tainted: [L]=SOFTLOCKUP
[ 1010.231297][T21338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1010.231308][T21338] Call Trace:
[ 1010.231316][T21338]  <TASK>
[ 1010.231325][T21338]  dump_stack_lvl+0xe8/0x150
[ 1010.231360][T21338]  should_fail_ex+0x410/0x560
[ 1010.231395][T21338]  __kvm_read_guest_page+0x18d/0x240
[ 1010.231421][T21338]  kvm_fetch_guest_virt+0x10c/0x160
[ 1010.231446][T21338]  ? __pfx_kvm_fetch_guest_virt+0x10/0x10
[ 1010.231466][T21338]  __do_insn_fetch_bytes+0x53a/0x6c0
[ 1010.231498][T21338]  ? __pfx___do_insn_fetch_bytes+0x10/0x10
[ 1010.231540][T21338]  x86_decode_insn+0x374/0x5af0
[ 1010.231575][T21338]  ? __handle_changed_spte+0x58d/0x12e0
[ 1010.231605][T21338]  ? __handle_changed_spte+0xec8/0x12e0
[ 1010.231637][T21338]  ? __pfx_x86_decode_insn+0x10/0x10
[ 1010.231674][T21338]  ? __asan_memset+0x22/0x50
[ 1010.231695][T21338]  ? init_decode_cache+0xf3/0x160
[ 1010.231718][T21338]  ? init_emulate_ctxt+0x4c4/0x640
[ 1010.231743][T21338]  ? __pfx_init_emulate_ctxt+0x10/0x10
[ 1010.231767][T21338]  ? x86_emulate_instruction+0x2e0/0x1e70
[ 1010.231796][T21338]  x86_emulate_instruction+0x323/0x1e70
[ 1010.231838][T21338]  ? __pfx_x86_emulate_instruction+0x10/0x10
[ 1010.231863][T21338]  ? vmx_handle_exit_irqoff+0x100/0xa00
[ 1010.231887][T21338]  ? kvm_tdp_page_fault+0x2f4/0x370
[ 1010.231916][T21338]  ? __pfx_vmx_handle_exit_irqoff+0x10/0x10
[ 1010.231955][T21338]  handle_ud+0x19e/0x590
[ 1010.231981][T21338]  ? __pfx_handle_ud+0x10/0x10
[ 1010.232003][T21338]  ? __pfx_nested_vmx_reflect_vmexit+0x10/0x10
[ 1010.232038][T21338]  ? handle_exception_nmi+0x2aa/0x1260
[ 1010.232065][T21338]  ? lock_acquire+0x115/0x350
[ 1010.232086][T21338]  ? __pfx_handle_exception_nmi+0x10/0x10
[ 1010.232106][T21338]  vmx_handle_exit+0xfa4/0x16e0
[ 1010.232144][T21338]  vcpu_run+0x4ead/0x7aa0
[ 1010.232193][T21338]  ? vcpu_run+0x3616/0x7aa0
[ 1010.232248][T21338]  ? __pfx_vcpu_run+0x10/0x10
[ 1010.232266][T21338]  ? lock_acquire+0x115/0x350
[ 1010.232292][T21338]  ? __local_bh_enable_ip+0xd6/0x140
[ 1010.232325][T21338]  kvm_arch_vcpu_ioctl_run+0xe87/0x19c0
[ 1010.232348][T21338]  ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0
[ 1010.232368][T21338]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1010.232392][T21338]  kvm_vcpu_ioctl+0xa61/0xfd0
[ 1010.232419][T21338]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1010.232436][T21338]  ? hook_file_ioctl+0x1f2/0x600
[ 1010.232484][T21338]  ? __fget_files+0x2a/0x420
[ 1010.232501][T21338]  ? __fget_files+0x2a/0x420
[ 1010.232517][T21338]  ? __fget_files+0x3a2/0x420
[ 1010.232530][T21338]  ? __fget_files+0x2a/0x420
[ 1010.232549][T21338]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1010.232567][T21338]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1010.232587][T21338]  __se_sys_ioctl+0xfc/0x170
[ 1010.232612][T21338]  do_syscall_64+0x166/0x520
[ 1010.232635][T21338]  ? trace_irq_disable+0x3b/0x140
[ 1010.232657][T21338]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1010.232677][T21338]  ? clear_bhb_loop+0x70/0xc0
[ 1010.232701][T21338]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1010.232720][T21338] RIP: 0033:0x7fe8cdd9e559
[ 1010.232739][T21338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1010.232755][T21338] RSP: 002b:00007fe8cec0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1010.232776][T21338] RAX: ffffffffffffffda RBX: 00007fe8ce025fa0 RCX: 00007fe8cdd9e559
[ 1010.232789][T21338] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[ 1010.232801][T21338] RBP: 00007fe8cec0f090 R08: 0000000000000000 R09: 0000000000000000
[ 1010.232812][T21338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1010.232822][T21338] R13: 00007fe8ce026038 R14: 00007fe8ce025fa0 R15: 00007fe8ce14fa48
[ 1010.232851][T21338]  </TASK>
[ 1010.803542][  T986] usb 3-1: USB disconnect, device number 120
[ 1010.928006][T21360] bond2: option updelay: invalid value (18446744073709551615)
[ 1010.928038][T21360] bond2: option updelay: allowed values 0 - 2147483647
[ 1010.955693][T21360] bond2 (unregistering): Released all slaves
[ 1011.584418][T21377] FAULT_INJECTION: forcing a failure.
[ 1011.584418][T21377] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1011.584444][T21377] CPU: 0 UID: 0 PID: 21377 Comm: syz.6.4055 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1011.584459][T21377] Tainted: [L]=SOFTLOCKUP
[ 1011.584463][T21377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1011.584469][T21377] Call Trace:
[ 1011.584475][T21377]  <TASK>
[ 1011.584481][T21377]  dump_stack_lvl+0xe8/0x150
[ 1011.584502][T21377]  should_fail_ex+0x410/0x560
[ 1011.584521][T21377]  _copy_to_user+0x31/0xb0
[ 1011.584533][T21377]  simple_read_from_buffer+0xe1/0x170
[ 1011.584554][T21377]  proc_fail_nth_read+0x1bb/0x230
[ 1011.584571][T21377]  ? common_file_perm+0x20e/0x2b0
[ 1011.584592][T21377]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1011.584605][T21377]  ? rw_verify_area+0x24a/0x4c0
[ 1011.584618][T21377]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1011.584629][T21377]  vfs_read+0x213/0xa80
[ 1011.584642][T21377]  ? __pfx___mutex_lock+0x10/0x10
[ 1011.584657][T21377]  ? __pfx_vfs_read+0x10/0x10
[ 1011.584669][T21377]  ? __fget_files+0x2a/0x420
[ 1011.584681][T21377]  ? __fget_files+0x3a2/0x420
[ 1011.584693][T21377]  ? __fget_files+0x2a/0x420
[ 1011.584706][T21377]  ksys_read+0x150/0x270
[ 1011.584718][T21377]  ? __pfx_ksys_read+0x10/0x10
[ 1011.584735][T21377]  do_syscall_64+0x166/0x520
[ 1011.584747][T21377]  ? trace_irq_disable+0x3b/0x140
[ 1011.584761][T21377]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1011.584771][T21377]  ? clear_bhb_loop+0x70/0xc0
[ 1011.584785][T21377]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1011.584795][T21377] RIP: 0033:0x7f58d675ed8e
[ 1011.584806][T21377] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1011.584815][T21377] RSP: 002b:00007f58d49f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1011.584827][T21377] RAX: ffffffffffffffda RBX: 00007f58d49f66c0 RCX: 00007f58d675ed8e
[ 1011.584834][T21377] RDX: 000000000000000f RSI: 00007f58d49f60a0 RDI: 0000000000000006
[ 1011.584841][T21377] RBP: 00007f58d49f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1011.584847][T21377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1011.584854][T21377] R13: 00007f58d6a26038 R14: 00007f58d6a25fa0 R15: 00007f58d6b4fa48
[ 1011.584870][T21377]  </TASK>
[ 1012.498798][T21394] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4062'.
[ 1012.694217][T21401] input: syz1 as /devices/virtual/input/input115
[ 1012.712051][  T986] usb 3-1: new high-speed USB device number 121 using dummy_hcd
[ 1012.862992][  T986] usb 3-1: Using ep0 maxpacket: 32
[ 1012.865308][  T986] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1012.865358][  T986] usb 3-1: New USB device found, idVendor=2040, idProduct=b210, bcdDevice=bc.da
[ 1012.867934][  T986] usb 3-1: config 4 has an invalid interface number: 224 but max is 0
[ 1012.867969][  T986] usb 3-1: config 4 has no interface number 0
[ 1012.868000][  T986] usb 3-1: config 4 interface 224 has no altsetting 0
[ 1012.873287][  T986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1012.873311][  T986] usb 3-1: Product: syz
[ 1012.873324][  T986] usb 3-1: Manufacturer: syz
[ 1012.873339][  T986] usb 3-1: SerialNumber: syz
[ 1013.284175][  T986] dvb-usb: found a 'Hauppauge ATSC MiniCard (B210)' in cold state, will try to load a firmware
[ 1013.285451][  T986] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[ 1013.285479][  T986] dib0700: firmware download failed at 7 with -22
[ 1013.486360][T21390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1013.486827][T21390] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1013.488069][  T986] usb 3-1: USB disconnect, device number 121
[ 1013.895126][   T31] audit: type=1326 audit(1792188202.800:8240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21415 comm="syz.7.4071" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8cdd9e559 code=0x7ffc0000
[ 1013.896684][   T31] audit: type=1326 audit(1792188202.800:8241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21415 comm="syz.7.4071" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8cdd9e559 code=0x7ffc0000
[ 1013.896733][   T31] audit: type=1326 audit(1792188202.800:8242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21415 comm="syz.7.4071" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8cdd9e559 code=0x7ffc0000
[ 1013.896767][   T31] audit: type=1326 audit(1792188202.800:8244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21415 comm="syz.7.4071" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe8cdd9e559 code=0x7ffc0000
[ 1013.896805][   T31] audit: type=1326 audit(1792188202.800:8245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21415 comm="syz.7.4071" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8cdd9e559 code=0x7ffc0000
[ 1013.896843][   T31] audit: type=1326 audit(1792188202.800:8246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21415 comm="syz.7.4071" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8cdd9e559 code=0x7ffc0000
[ 1013.896881][   T31] audit: type=1326 audit(1792188202.800:8243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21415 comm="syz.7.4071" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8cdd9e559 code=0x7ffc0000
[ 1013.896921][   T31] audit: type=1326 audit(1792188202.800:8247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21415 comm="syz.7.4071" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8cdd9e559 code=0x7ffc0000
[ 1013.896962][   T31] audit: type=1326 audit(1792188202.800:8249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21415 comm="syz.7.4071" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe8cdd9e559 code=0x7ffc0000
[ 1013.897849][   T31] audit: type=1326 audit(1792188202.800:8248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21415 comm="syz.7.4071" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8cdd9e559 code=0x7ffc0000
[ 1014.721205][  T986] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[ 1014.850795][  T986] usb 2-1: device descriptor read/64, error -71
[ 1015.090832][  T986] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[ 1015.220668][  T986] usb 2-1: device descriptor read/64, error -71
[ 1015.331224][  T986] usb usb2-port1: attempt power cycle
[ 1015.332087][T21433] erspan0: left promiscuous mode
[ 1015.570609][ T5689] usb 3-1: new high-speed USB device number 122 using dummy_hcd
[ 1015.670661][  T986] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[ 1015.691050][  T986] usb 2-1: device descriptor read/8, error -71
[ 1015.722895][ T5689] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1015.722928][ T5689] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[ 1015.723783][ T5689] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1015.723797][ T5689] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1015.723826][ T5689] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1015.725602][ T5689] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1015.725615][ T5689] usb 3-1: Product: syz
[ 1015.725622][ T5689] usb 3-1: Manufacturer: syz
[ 1015.725630][ T5689] usb 3-1: SerialNumber: syz
[ 1015.933695][  T986] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[ 1015.945894][ T5689] usb 3-1: Can't get UAC3 power state for id 10
[ 1015.948174][ T5689] usb 3-1: 2:0: failed to get current value for ch 0 (-71)
[ 1015.954230][ T5689] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2)
[ 1015.954255][ T5689] usb 3-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[ 1015.954272][ T5689] usb 3-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1
[ 1015.955164][  T986] usb 2-1: device descriptor read/8, error -71
[ 1016.044423][ T5689] usb 3-1: USB disconnect, device number 122
[ 1016.061214][  T986] usb usb2-port1: unable to enumerate USB device
[ 1016.169868][ T6784] udevd[6784]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1016.831697][ T5682] usb 3-1: new high-speed USB device number 123 using dummy_hcd
[ 1016.970834][ T5682] usb 3-1: device descriptor read/64, error -71
[ 1017.220639][ T5682] usb 3-1: new high-speed USB device number 124 using dummy_hcd
[ 1017.361086][ T5682] usb 3-1: device descriptor read/64, error -71
[ 1017.415946][T21457] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4086'.
[ 1017.416081][T21457] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4086'.
[ 1017.416175][T21457] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4086'.
[ 1017.416273][T21457] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4086'.
[ 1017.416373][T21457] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4086'.
[ 1017.416468][T21457] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4086'.
[ 1017.416568][T21457] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4086'.
[ 1017.416666][T21457] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4086'.
[ 1017.416765][T21457] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4086'.
[ 1017.489386][ T5682] usb usb3-port1: attempt power cycle
[ 1017.870707][ T5682] usb 3-1: new high-speed USB device number 125 using dummy_hcd
[ 1017.902469][ T5682] usb 3-1: device descriptor read/8, error -71
[ 1018.010430][T21473] netlink: 'syz.0.4091': attribute type 11 has an invalid length.
[ 1018.141215][ T5682] usb 3-1: new high-speed USB device number 126 using dummy_hcd
[ 1018.162024][ T5682] usb 3-1: device descriptor read/8, error -71
[ 1018.272507][ T5682] usb usb3-port1: unable to enumerate USB device
[ 1018.888764][T21494] __nla_validate_parse: 56 callbacks suppressed
[ 1018.888781][T21494] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4098'.
[ 1019.108768][  T986] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[ 1019.272423][  T986] usb 2-1: Using ep0 maxpacket: 16
[ 1019.273241][  T986] usb 2-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[ 1019.274264][  T986] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1019.274329][  T986] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1019.274355][  T986] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1019.274375][  T986] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[ 1019.274400][  T986] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1019.274434][  T986] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1019.277368][  T986] usb 2-1: config 0 descriptor??
[ 1019.624415][T21513] kvm: pic: non byte write
[ 1019.722686][  T986] logitech-djreceiver 0003:046D:C53A.0041: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.1-1/input0
[ 1019.895932][T21497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1019.897042][T21497] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1019.948763][T14876] usb 2-1: USB disconnect, device number 29
[ 1020.140586][  T986] usb 3-1: new high-speed USB device number 127 using dummy_hcd
[ 1020.291101][  T986] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[ 1020.292081][  T986] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1020.292108][  T986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1020.368792][T21536] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4111'.
[ 1020.515692][  T986] qmi_wwan 3-1:1.0: cdc-wdm0: USB WDM device
[ 1020.553428][  T986] wwan wwan0: port wwan0qmi0 attached
[ 1020.742455][  T986] qmi_wwan 3-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.2-1, WWAN/QMI device, ba:61:78:3f:cb:1e
[ 1020.778108][T21547] misc userio: The device must be registered before sending interrupts
[ 1021.223501][T21545] fuse: Bad value for 'fd'
[ 1021.223754][T21545] fuse: Bad value for 'fd'
[ 1021.223998][T21545] fuse: Bad value for 'fd'
[ 1021.224226][T21545] fuse: Bad value for 'fd'
[ 1021.224472][T21545] fuse: Bad value for 'fd'
[ 1021.229175][T21545] fuse: Bad value for 'fd'
[ 1021.229449][T21545] fuse: Bad value for 'fd'
[ 1021.229697][T21545] fuse: Bad value for 'fd'
[ 1021.229943][T21545] fuse: Bad value for 'fd'
[ 1021.230168][T21545] fuse: Bad value for 'fd'
[ 1021.230399][T21545] fuse: Bad value for 'fd'
[ 1021.237633][T21545] fuse: Bad value for 'fd'
[ 1021.237892][T21545] fuse: Bad value for 'fd'
[ 1021.238114][T21545] fuse: Bad value for 'fd'
[ 1021.238350][T21545] fuse: Bad value for 'fd'
[ 1021.238576][T21545] fuse: Bad value for 'fd'
[ 1021.238798][T21545] fuse: Bad value for 'fd'
[ 1021.249953][T21545] fuse: Bad value for 'fd'
[ 1021.250202][T21545] fuse: Bad value for 'fd'
[ 1021.250428][T21545] fuse: Bad value for 'fd'
[ 1021.250729][T21545] fuse: Bad value for 'fd'
[ 1021.250954][T21545] fuse: Bad value for 'fd'
[ 1021.257828][T21545] fuse: Bad value for 'fd'
[ 1021.258107][T21545] fuse: Bad value for 'fd'
[ 1021.258365][T21545] fuse: Bad value for 'fd'
[ 1021.258599][T21545] fuse: Bad value for 'fd'
[ 1021.258820][T21545] fuse: Bad value for 'fd'
[ 1021.259043][T21545] fuse: Bad value for 'fd'
[ 1021.265602][T21545] fuse: Bad value for 'fd'
[ 1021.265855][T21545] fuse: Bad value for 'fd'
[ 1021.266078][T21545] fuse: Bad value for 'fd'
[ 1021.266301][T21545] fuse: Bad value for 'fd'
[ 1021.266529][T21545] fuse: Bad value for 'fd'
[ 1021.388799][   T25] usb 3-1: USB disconnect, device number 127
[ 1021.412892][   T25] qmi_wwan 3-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.2-1, WWAN/QMI device
[ 1021.488732][T21549] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1021.684583][T21545] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1021.792748][   T25] wwan wwan0: port wwan0qmi0 disconnected
[ 1021.927559][T21549] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1022.203932][T21573] syzkaller0: entered promiscuous mode
[ 1022.203954][T21573] syzkaller0: entered allmulticast mode
[ 1022.601277][   T25] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[ 1022.783076][   T25] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1022.801122][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1022.801138][   T25] usb 2-1: Product: syz
[ 1022.801146][   T25] usb 2-1: Manufacturer: syz
[ 1022.801154][   T25] usb 2-1: SerialNumber: syz
[ 1023.123450][T21601] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4123'.
[ 1023.183374][T21601] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1023.186882][T21601] syzkaller0: entered promiscuous mode
[ 1023.186895][T21601] syzkaller0: entered allmulticast mode
[ 1023.238491][T21601] tipc: Resetting bearer <eth:syzkaller0>
[ 1023.266874][T21599] tipc: Resetting bearer <eth:syzkaller0>
[ 1023.315605][   T25] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1023.315664][   T25] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1023.376127][T21599] tipc: Disabling bearer <eth:syzkaller0>
[ 1023.674746][T21584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1023.677263][T21584] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1024.247819][   T25] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[ 1024.247894][   T25] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1024.248347][   T25] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1024.250952][   T25] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[ 1024.304984][   T25] usb 2-1: USB disconnect, device number 30
[ 1025.420333][T21634] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4132'.
[ 1025.535607][T21634] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4132'.
[ 1025.846421][T21647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1025.861084][T14876] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[ 1026.011407][T14876] usb 2-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e
[ 1026.012552][T14876] usb 2-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config
[ 1026.017635][T14876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1026.017662][T14876] usb 2-1: Product: syz
[ 1026.017681][T14876] usb 2-1: Manufacturer: syz
[ 1026.017700][T14876] usb 2-1: SerialNumber: syz
[ 1026.084695][T14876] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state.
[ 1026.084738][T14876] dvb-usb: bulk message failed: -22 (3/0)
[ 1026.126051][T14876] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1026.129060][T14876] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0)
[ 1026.129112][T14876] usb 2-1: media controller created
[ 1026.185152][T14876] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1026.245916][T14876] DVB: Unable to find symbol mt352_attach()
[ 1026.245933][T14876] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0'
[ 1026.247004][T14876] dvb-usb: bulk message failed: -22 (3/0)
[ 1026.272913][T14876] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected.
[ 1026.299482][T21645] fuse: Unknown parameter 'Ăroup_id]00000000000000000000'
[ 1026.314780][T14876] usb 2-1: USB disconnect, device number 31
[ 1026.361843][T14876] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected.
[ 1026.678430][T21664] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1026.991008][T14876] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 1027.141717][T14876] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1027.144163][T14876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1027.150074][T14876] usb 3-1: config 0 descriptor??
[ 1027.252432][T21672] sch_fq: defrate 16 ignored.
[ 1027.375182][T21685] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1027.428549][T21685] netlink: 112 bytes leftover after parsing attributes in process `syz.7.4148'.
[ 1027.429223][T21685] netlink: 112 bytes leftover after parsing attributes in process `syz.7.4148'.
[ 1027.429783][T21685] netlink: 112 bytes leftover after parsing attributes in process `syz.7.4148'.
[ 1027.439976][T14876] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 1027.449214][T21685] netlink: 112 bytes leftover after parsing attributes in process `syz.7.4148'.
[ 1027.449801][T21685] netlink: 112 bytes leftover after parsing attributes in process `syz.7.4148'.
[ 1027.450329][T21685] netlink: 112 bytes leftover after parsing attributes in process `syz.7.4148'.
[ 1027.464465][T21685] netlink: 112 bytes leftover after parsing attributes in process `syz.7.4148'.
[ 1027.465031][T21685] netlink: 112 bytes leftover after parsing attributes in process `syz.7.4148'.
[ 1027.687277][T14876] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1
[ 1027.687305][T14876] [drm] Initialized udl on minor 1
[ 1027.770937][T14878] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[ 1027.860366][T14876] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1027.871491][T14876] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[ 1027.903921][T14876] usb 3-1: USB disconnect, device number 2
[ 1027.922030][  T986] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1027.923716][T14878] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1027.924036][  T986] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[ 1027.927687][T14878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1027.966832][T14878] usb 2-1: config 0 descriptor??
[ 1027.979289][T14878] cp210x 2-1:0.0: cp210x converter detected
[ 1028.224330][T14878] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121
[ 1028.224365][T14878] cp210x 2-1:0.0: querying part number failed
[ 1028.259027][T14878] usb 2-1: cp210x converter now attached to ttyUSB0
[ 1028.541940][   T31] kauditd_printk_skb: 71 callbacks suppressed
[ 1028.541962][   T31] audit: type=1800 audit(1792188217.450:8321): pid=21708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4154" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0
[ 1028.714056][T21711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1028.729549][T21711] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1028.760283][T21712] logitech-hidpp-device 0005:046D:B012.0042: received hid++ report of bad size (3)
[ 1028.813546][T14878] logitech-hidpp-device 0005:046D:B012.0042: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1
[ 1028.894829][T21713] fido_id[21713]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1028.895653][T21715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1028.896092][T21715] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1028.991916][T21715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1028.993980][T21715] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1029.421027][T14878] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 1029.571688][T14878] usb 3-1: Using ep0 maxpacket: 16
[ 1029.574960][T14878] usb 3-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[ 1029.576158][T14878] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1029.576206][T14878] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1029.576232][T14878] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1029.576253][T14878] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[ 1029.576279][T14878] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1029.576312][T14878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1029.618731][T14878] usb 3-1: config 0 descriptor??
[ 1029.710201][T21726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1029.725071][T21726] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1029.851919][T14878] usbhid 3-1:0.0: can't add hid device: -71
[ 1029.851981][T14878] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1029.858041][T14878] usb 3-1: USB disconnect, device number 3
[ 1029.976346][T21728] netlink: 'syz.0.4160': attribute type 11 has an invalid length.
[ 1030.567653][T21737] ------------[ cut here ]------------
[ 1030.567671][T21737] kvm_is_error_gpa(gpa) == kvm_is_error_hva(uhva)
[ 1030.567685][T21737] WARNING: arch/x86/kvm/../../../virt/kvm/pfncache.c:267 at __kvm_gpc_refresh+0x1510/0x1710, CPU#1: syz.1.4163/21737
[ 1030.593742][T21737] Modules linked in:
[ 1030.598939][T21737] CPU: 1 UID: 0 PID: 21737 Comm: syz.1.4163 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1030.609961][T21737] Tainted: [L]=SOFTLOCKUP
[ 1030.614345][T21737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1030.624475][T21737] RIP: 0010:__kvm_gpc_refresh+0x1510/0x1710
[ 1030.630364][T21737] Code: c6 05 3b fe 22 10 01 48 c7 c7 74 fa 44 8e be 43 04 00 00 48 c7 c2 c0 43 02 8c e8 3b df 62 00 e9 81 ee ff ff e8 b1 3b 87 00 90 <0f> 0b 90 bb ea ff ff ff 49 bf 00 00 00 00 00 fc ff df e9 4b f6 ff
[ 1030.650150][T21737] RSP: 0018:ffffc900033e71c0 EFLAGS: 00010293
[ 1030.656244][T21737] RAX: ffffffff8140d4cf RBX: ffff888000000000 RCX: ffff8880337cddc0
[ 1030.664250][T21737] RDX: 0000000000000000 RSI: ffff888000000000 RDI: ffff888000000000
[ 1030.672337][T21737] RBP: ffffc900033e7350 R08: ffffffff917a737f R09: 1ffffffff22f4e6f
[ 1030.680295][T21737] R10: dffffc0000000000 R11: fffffbfff22f4e70 R12: 1ffff9200067ce4c
[ 1030.688310][T21737] R13: ffff888051e11b60 R14: ffff888000000000 R15: ffffffffffffff01
[ 1030.696307][T21737] FS:  00007f895e1f66c0(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000
[ 1030.705260][T21737] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1030.711850][T21737] CR2: 00007f895e1f5ff8 CR3: 000000007d5dc000 CR4: 00000000003526f0
[ 1030.719807][T21737] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1030.727796][T21737] DR3: 0000000000000001 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1030.735803][T21737] Call Trace:
[ 1030.739073][T21737]  <TASK>
[ 1030.742035][T21737]  ? lock_acquire+0x115/0x350
[ 1030.746706][T21737]  ? kvm_gpc_refresh+0x31/0x110
[ 1030.751721][T21737]  ? __pfx___kvm_gpc_refresh+0x10/0x10
[ 1030.757187][T21737]  ? lock_acquire+0x115/0x350
[ 1030.761930][T21737]  ? lock_acquire+0x115/0x350
[ 1030.766606][T21737]  kvm_gpc_refresh+0xe1/0x110
[ 1030.771318][T21737]  ? kvm_xen_set_evtchn+0x11e/0x220
[ 1030.776502][T21737]  kvm_xen_set_evtchn+0x14f/0x220
[ 1030.781542][T21737]  kvm_xen_hvm_evtchn_send+0x120/0x1e0
[ 1030.786993][T21737]  kvm_arch_vm_ioctl+0xfad/0x1a10
[ 1030.792068][T21737]  ? __pfx_kvm_arch_vm_ioctl+0x10/0x10
[ 1030.797511][T21737]  ? __lock_acquire+0x747/0x2de0
[ 1030.802491][T21737]  ? __lock_acquire+0x747/0x2de0
[ 1030.807468][T21737]  ? lock_acquire+0x115/0x350
[ 1030.812228][T21737]  ? lock_acquire+0x115/0x350
[ 1030.816929][T21737]  ? is_bpf_text_address+0x26/0x2b0
[ 1030.822197][T21737]  ? is_bpf_text_address+0x292/0x2b0
[ 1030.827478][T21737]  ? kernel_text_address+0xa5/0xe0
[ 1030.833000][T21737]  ? __kernel_text_address+0xd/0x30
[ 1030.838630][T21737]  ? unwind_get_return_address+0x4d/0x90
[ 1030.844327][T21737]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1030.850627][T21737]  ? arch_stack_walk+0xfb/0x150
[ 1030.855517][T21737]  ? stack_trace_save+0xa9/0x100
[ 1030.860465][T21737]  ? __pfx_stack_trace_save+0x10/0x10
[ 1030.865914][T21737]  ? kasan_save_track+0x4f/0x80
[ 1030.870813][T21737]  ? stack_depot_save_flags+0x33/0x7f0
[ 1030.876266][T21737]  ? __lock_acquire+0x747/0x2de0
[ 1030.881244][T21737]  ? kasan_save_track+0x4f/0x80
[ 1030.886080][T21737]  ? kasan_save_track+0x3e/0x80
[ 1030.890970][T21737]  ? kasan_save_free_info+0x40/0x50
[ 1030.896172][T21737]  ? __kasan_slab_free+0x5c/0x80
[ 1030.901194][T21737]  ? kfree+0x1c5/0x650
[ 1030.905270][T21737]  ? tomoyo_path_number_perm+0x4ba/0x5f0
[ 1030.911024][T21737]  ? security_file_ioctl+0xc3/0x2a0
[ 1030.916244][T21737]  ? __se_sys_ioctl+0x47/0x170
[ 1030.921121][T21737]  ? do_syscall_64+0x166/0x520
[ 1030.925897][T21737]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1030.932061][T21737]  kvm_vm_ioctl+0x8f7/0xd30
[ 1030.936581][T21737]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 1030.941752][T21737]  ? kasan_quarantine_put+0xbb/0x1f0
[ 1030.947053][T21737]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1030.952733][T21737]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1030.958376][T21737]  ? do_vfs_ioctl+0x116f/0x1530
[ 1030.963311][T21737]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1030.968354][T21737]  ? hook_file_ioctl+0x1f2/0x600
[ 1030.973348][T21737]  ? __asan_memcpy+0x40/0x70
[ 1030.977952][T21737]  ? __fget_files+0x2a/0x420
[ 1030.982627][T21737]  ? __fget_files+0x2a/0x420
[ 1030.987220][T21737]  ? __fget_files+0x3a2/0x420
[ 1030.992087][T21737]  ? __fget_files+0x2a/0x420
[ 1030.996695][T21737]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1031.001701][T21737]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 1031.006745][T21737]  __se_sys_ioctl+0xfc/0x170
[ 1031.011433][T21737]  do_syscall_64+0x166/0x520
[ 1031.016057][T21737]  ? trace_irq_disable+0x3b/0x140
[ 1031.021135][T21737]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1031.027192][T21737]  ? clear_bhb_loop+0x70/0xc0
[ 1031.031903][T21737]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1031.037779][T21737] RIP: 0033:0x7f895ff9e559
[ 1031.042207][T21737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1031.061884][T21737] RSP: 002b:00007f895e1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1031.070300][T21737] RAX: ffffffffffffffda RBX: 00007f8960226090 RCX: 00007f895ff9e559
[ 1031.078656][T21737] RDX: 0000200000002400 RSI: 00000000400caed0 RDI: 0000000000000086
[ 1031.086685][T21737] RBP: 00007f89600358b0 R08: 0000000000000000 R09: 0000000000000000
[ 1031.094700][T21737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1031.102705][T21737] R13: 00007f8960226128 R14: 00007f8960226090 R15: 00007f896034fa48
[ 1031.110738][T21737]  </TASK>
[ 1031.113774][T21737] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1031.121045][T21737] CPU: 1 UID: 0 PID: 21737 Comm: syz.1.4163 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1031.131962][T21737] Tainted: [L]=SOFTLOCKUP
[ 1031.136273][T21737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1031.146333][T21737] Call Trace:
[ 1031.149610][T21737]  <TASK>
[ 1031.152533][T21737]  vpanic+0x56d/0xa60
[ 1031.156511][T21737]  ? __pfx__printk+0x10/0x10
[ 1031.161095][T21737]  ? __pfx_vpanic+0x10/0x10
[ 1031.165593][T21737]  ? is_bpf_text_address+0x292/0x2b0
[ 1031.170875][T21737]  ? is_bpf_text_address+0x26/0x2b0
[ 1031.176101][T21737]  panic+0xc5/0xd0
[ 1031.179818][T21737]  ? __pfx_panic+0x10/0x10
[ 1031.184233][T21737]  __warn+0x315/0x4c0
[ 1031.188207][T21737]  ? __kvm_gpc_refresh+0x1510/0x1710
[ 1031.193486][T21737]  ? __kvm_gpc_refresh+0x1510/0x1710
[ 1031.198769][T21737]  __report_bug+0x276/0x570
[ 1031.203271][T21737]  ? check_path+0x21/0x40
[ 1031.207621][T21737]  ? __kvm_gpc_refresh+0x1510/0x1710
[ 1031.212900][T21737]  ? __pfx___report_bug+0x10/0x10
[ 1031.217916][T21737]  ? lockdep_unlock+0x5c/0xd0
[ 1031.222581][T21737]  ? __lock_acquire+0x1511/0x2de0
[ 1031.227617][T21737]  ? __kvm_gpc_refresh+0x1510/0x1710
[ 1031.232891][T21737]  report_bug+0x16b/0x220
[ 1031.237224][T21737]  ? __kvm_gpc_refresh+0x1510/0x1710
[ 1031.242497][T21737]  ? __kvm_gpc_refresh+0x1512/0x1710
[ 1031.247771][T21737]  handle_bug+0x9c/0x200
[ 1031.252010][T21737]  exc_invalid_op+0x1a/0x50
[ 1031.256500][T21737]  asm_exc_invalid_op+0x1a/0x20
[ 1031.261337][T21737] RIP: 0010:__kvm_gpc_refresh+0x1510/0x1710
[ 1031.267226][T21737] Code: c6 05 3b fe 22 10 01 48 c7 c7 74 fa 44 8e be 43 04 00 00 48 c7 c2 c0 43 02 8c e8 3b df 62 00 e9 81 ee ff ff e8 b1 3b 87 00 90 <0f> 0b 90 bb ea ff ff ff 49 bf 00 00 00 00 00 fc ff df e9 4b f6 ff
[ 1031.286815][T21737] RSP: 0018:ffffc900033e71c0 EFLAGS: 00010293
[ 1031.292873][T21737] RAX: ffffffff8140d4cf RBX: ffff888000000000 RCX: ffff8880337cddc0
[ 1031.300832][T21737] RDX: 0000000000000000 RSI: ffff888000000000 RDI: ffff888000000000
[ 1031.308788][T21737] RBP: ffffc900033e7350 R08: ffffffff917a737f R09: 1ffffffff22f4e6f
[ 1031.316745][T21737] R10: dffffc0000000000 R11: fffffbfff22f4e70 R12: 1ffff9200067ce4c
[ 1031.324704][T21737] R13: ffff888051e11b60 R14: ffff888000000000 R15: ffffffffffffff01
[ 1031.332672][T21737]  ? __kvm_gpc_refresh+0x150f/0x1710
[ 1031.337968][T21737]  ? lock_acquire+0x115/0x350
[ 1031.342635][T21737]  ? kvm_gpc_refresh+0x31/0x110
[ 1031.347489][T21737]  ? __pfx___kvm_gpc_refresh+0x10/0x10
[ 1031.352942][T21737]  ? lock_acquire+0x115/0x350
[ 1031.357629][T21737]  ? lock_acquire+0x115/0x350
[ 1031.362306][T21737]  kvm_gpc_refresh+0xe1/0x110
[ 1031.367006][T21737]  ? kvm_xen_set_evtchn+0x11e/0x220
[ 1031.372206][T21737]  kvm_xen_set_evtchn+0x14f/0x220
[ 1031.377249][T21737]  kvm_xen_hvm_evtchn_send+0x120/0x1e0
[ 1031.382715][T21737]  kvm_arch_vm_ioctl+0xfad/0x1a10
[ 1031.387738][T21737]  ? __pfx_kvm_arch_vm_ioctl+0x10/0x10
[ 1031.393192][T21737]  ? __lock_acquire+0x747/0x2de0
[ 1031.398133][T21737]  ? __lock_acquire+0x747/0x2de0
[ 1031.403080][T21737]  ? lock_acquire+0x115/0x350
[ 1031.407751][T21737]  ? lock_acquire+0x115/0x350
[ 1031.412418][T21737]  ? is_bpf_text_address+0x26/0x2b0
[ 1031.417612][T21737]  ? is_bpf_text_address+0x292/0x2b0
[ 1031.422894][T21737]  ? kernel_text_address+0xa5/0xe0
[ 1031.428045][T21737]  ? __kernel_text_address+0xd/0x30
[ 1031.433236][T21737]  ? unwind_get_return_address+0x4d/0x90
[ 1031.438866][T21737]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1031.445020][T21737]  ? arch_stack_walk+0xfb/0x150
[ 1031.449880][T21737]  ? stack_trace_save+0xa9/0x100
[ 1031.454816][T21737]  ? __pfx_stack_trace_save+0x10/0x10
[ 1031.460199][T21737]  ? kasan_save_track+0x4f/0x80
[ 1031.465055][T21737]  ? stack_depot_save_flags+0x33/0x7f0
[ 1031.470542][T21737]  ? __lock_acquire+0x747/0x2de0
[ 1031.475517][T21737]  ? kasan_save_track+0x4f/0x80
[ 1031.480370][T21737]  ? kasan_save_track+0x3e/0x80
[ 1031.485223][T21737]  ? kasan_save_free_info+0x40/0x50
[ 1031.490419][T21737]  ? __kasan_slab_free+0x5c/0x80
[ 1031.495379][T21737]  ? kfree+0x1c5/0x650
[ 1031.499442][T21737]  ? tomoyo_path_number_perm+0x4ba/0x5f0
[ 1031.505070][T21737]  ? security_file_ioctl+0xc3/0x2a0
[ 1031.510295][T21737]  ? __se_sys_ioctl+0x47/0x170
[ 1031.515060][T21737]  ? do_syscall_64+0x166/0x520
[ 1031.519823][T21737]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1031.525926][T21737]  kvm_vm_ioctl+0x8f7/0xd30
[ 1031.530460][T21737]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 1031.535516][T21737]  ? kasan_quarantine_put+0xbb/0x1f0
[ 1031.540803][T21737]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1031.546434][T21737]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1031.552063][T21737]  ? do_vfs_ioctl+0x116f/0x1530
[ 1031.556913][T21737]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1031.561949][T21737]  ? hook_file_ioctl+0x1f2/0x600
[ 1031.566884][T21737]  ? __asan_memcpy+0x40/0x70
[ 1031.571512][T21737]  ? __fget_files+0x2a/0x420
[ 1031.576098][T21737]  ? __fget_files+0x2a/0x420
[ 1031.580680][T21737]  ? __fget_files+0x3a2/0x420
[ 1031.585358][T21737]  ? __fget_files+0x2a/0x420
[ 1031.589954][T21737]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1031.594886][T21737]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 1031.599911][T21737]  __se_sys_ioctl+0xfc/0x170
[ 1031.604500][T21737]  do_syscall_64+0x166/0x520
[ 1031.609090][T21737]  ? trace_irq_disable+0x3b/0x140
[ 1031.614111][T21737]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1031.620169][T21737]  ? clear_bhb_loop+0x70/0xc0
[ 1031.624844][T21737]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1031.630734][T21737] RIP: 0033:0x7f895ff9e559
[ 1031.635143][T21737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1031.654744][T21737] RSP: 002b:00007f895e1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1031.663169][T21737] RAX: ffffffffffffffda RBX: 00007f8960226090 RCX: 00007f895ff9e559
[ 1031.671140][T21737] RDX: 0000200000002400 RSI: 00000000400caed0 RDI: 0000000000000086
[ 1031.679110][T21737] RBP: 00007f89600358b0 R08: 0000000000000000 R09: 0000000000000000
[ 1031.687070][T21737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1031.695041][T21737] R13: 00007f8960226128 R14: 00007f8960226090 R15: 00007f896034fa48
[ 1031.703014][T21737]  </TASK>
[ 1031.706308][T21737] Kernel Offset: disabled
[ 1031.710628][T21737] Rebooting in 86400 seconds..