last executing test programs:

1m10.560122632s ago: executing program 2 (id=790):
r0 = fsopen(&(0x7f0000000040)='udf\x00', 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000840)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x80000}, 0x0)
syz_usb_connect(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120110031fcd1b08cf"], 0x0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x10)
r3 = dup(0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0)
sendfile(r3, r3, 0x0, 0xffffffff)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1)
sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x14c, r4, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb54}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}]}, @TIPC_NLA_NET={0x4}]}, 0x14c}, 0x1, 0x0, 0x0, 0x44}, 0x40811)
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r5, 0x84, 0x6d, 0x0, &(0x7f0000001040))
r6 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, 0x0)
syz_emit_ethernet(0x82, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0)
chown(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
io_setup(0x4, &(0x7f00000001c0))
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'default', 0x20, 'user:', 'trusted:', 0x20, 0x40}, 0x31, 0xfffffffffffffffc)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
dup2(0xffffffffffffffff, r8)
write(r7, 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0)

1m6.154500224s ago: executing program 2 (id=800):
r0 = memfd_create(&(0x7f0000000100)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9d\n\nc\xce^\n\xf3Q\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6)
fallocate(r0, 0x0, 0x9, 0x6a4c)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4a81, 0x0)
r2 = memfd_create(&(0x7f0000000040)='J[^$%-&\x00', 0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
connect$inet(r3, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4)
writev(r3, &(0x7f0000000300)=[{&(0x7f0000000140)="c8", 0x1}], 0x1)
sendmmsg$inet(r3, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="7f6a", 0x2}], 0x1, &(0x7f0000000540)=ANY=[], 0x30}}], 0x1, 0x4000c50)
r4 = memfd_create(&(0x7f0000000080)=']\x00', 0x6)
ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{r2, 0x0, 0x4000, 0xfffffffff0000000}, {r4, 0x0, 0x2000, 0x10000}]})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)

1m6.008283684s ago: executing program 2 (id=801):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x0, 0x28002)
r1 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000000100)={0x3, "4fc8bc392e19a9a3c952c3568746bf6abab4b183a2da923c02730fda585dcf09d914cfc46169c58b2e89d830759512341a2ab483b69b9f936345f9f9cfd21ece", {0x5, 0x10000}})
syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x2000, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r1, 0x7a98, 0x0, 0x8, 0x0, 0x15)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r4, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_FREEZE(r5, 0x400c620e, 0x0)

1m5.824936583s ago: executing program 2 (id=802):
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0xa)

1m4.835158086s ago: executing program 2 (id=805):
syslog(0x3, &(0x7f0000000200), 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb9040220080000000000000000070a000a000900142603600e1208001e0000050401d559e0e0df7fc07963acc3038ebba8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xd8}], 0x1}, 0x14)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x800}, 0x20)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8c0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x81, 0x0)
unshare(0x40000800)
syz_emit_ethernet(0x82, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@void, {0x8100, 0x5, 0x1, 0x3}}, {@generic={0x88ca, "0643bc981efd216b4edadffec1955c4c35d763b1f6294a25881376f1a1ea160ad67dca8244dddd1f7094b3c401fa5d519b58edcc9923dd07c0a38e783e849f9f879e0501e7d6d40ca90c0a7d1a852ab69158e7353167d6336c9394a2d3c25da97838428c766240cd7243a80c98cf2247"}}}, &(0x7f00000006c0)={0x1, 0x4, [0x3ab, 0xa87, 0x502, 0xad5]})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c)

1m4.291918397s ago: executing program 2 (id=806):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={<r1=>0x0, 0x72c7}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r1, 0x4, 0x1000, "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"}, 0x1008)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
bind$inet6(r2, &(0x7f00000010c0)={0xa, 0x4e24, 0xc, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000001100)={r1, @in={{0x2, 0x4e21, @empty}}, 0x2, 0x8}, 0x90)
fcntl$setflags(r2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001200)={<r4=>0x0}, &(0x7f0000001240)=0xc)
rt_sigqueueinfo(r4, 0x28, &(0x7f0000001280)={0x29, 0xfff, 0x8000})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0)
ioctl$RTC_VL_CLR(r5, 0x7014)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), r5)
sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x58, r6, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffffff7a, 0x47}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_USER_PRIO={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4000144)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000014c0)={r1, 0x3ff}, &(0x7f0000001500)=0x8)
sysinfo(&(0x7f0000001540)=""/24)
bind$alg(r5, &(0x7f0000001580)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58)
accept$alg(r5, 0x0, 0x0)
ptrace$getsig(0x4202, r4, 0x8000000000000001, &(0x7f0000001600))
sendmsg$alg(r5, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001680)="0a2ca6efc63f3465b6df330633337fe1d95838cf7fc0763c58306cc8369e5b5f3139511c16431e623c82135a1c56741ea6c9674a5be0b9f213077c0340ae8063e2b65f3556b73b4160b43015", 0x4c}, {&(0x7f0000001700)="abf6d02a2cafba70f044cfee81eb7bd6ecc02da8284e6c52a867538a1c5d76ee30e32983448e9e3541867a52d2722e69c51b2dec040cc86a9d5505bf0404c094b91367cf29", 0x45}, {&(0x7f0000001780)="a41c7668ef12c9ef94c59441eaa710fcea50b086c8ddb4517ce951114ee55266ec7b508871a7f72a22f6be6a384a24c6527274903d2b3568da398169ca72f73b141adecc3703a53a5e5f6ec5e6d51f0423bd6db8d0bd7d37936fd320b4d1c0c139f65ef4dbc48c1dd48a06c74e265ece8f76e5891bd29e613c42bda814390fafd15418e4a73fbcb1dd988664defde0309aa46044", 0x94}, {&(0x7f0000001840)="d6e99ebef90575", 0x7}, {&(0x7f0000001880)="9af8196edd644eb3836638c502de60fe", 0x10}, {&(0x7f00000018c0)="1ff300287278f85bdcbae9c32f1e07db8df7673ca01737284a27945260672dc5926531bc7af2b36692a660891116e1cf3edcdaecac81595617858fe329510837434ef273d04507d369791c0e23308e85e0c022d165b1606df774f86b55efbd439f4c4cdcbd01d9b215", 0x69}], 0x6, &(0x7f00000019c0)=[@iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @iv={0x68, 0x117, 0x2, 0x51, "b0ef9c2eea836202e0d0231ab226f013eda90b7f0b450a6b5b6936422e42b88936e54182f81879a734e7532bc172d4c4ffcdbfa8d44615495df39da21859b97b5c45ba7f9c4429bb5e3d02927f24d08b3e"}], 0x10b0, 0x54}, 0x4004080)
r7 = accept$unix(r3, &(0x7f0000002ac0)=@abs, &(0x7f0000002b40)=0x6e)
connect$unix(r7, &(0x7f0000002b80)=@file={0x1, './file0\x00'}, 0x6e)
rt_sigtimedwait(&(0x7f0000002c00)={[0x8]}, &(0x7f0000002c40), &(0x7f0000002cc0)={0x77359400}, 0x8)
ioctl$SNDRV_PCM_IOCTL_PREPARE(r5, 0x4140, 0x0)
unshare(0xa000080)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r5, 0x4008ae73, &(0x7f0000002d00)={0x6, 0x1})
ioctl$SCSI_IOCTL_DOORLOCK(r5, 0x5380)
openat$kvm(0xffffffffffffff9c, &(0x7f0000002d40), 0x8000, 0x0)
getsockname$qrtr(r5, &(0x7f0000002d80), &(0x7f0000002dc0)=0xc)
getsockopt$inet_buf(r5, 0x0, 0x29, &(0x7f0000002e00)=""/122, &(0x7f0000002e80)=0x7a)

1m3.8160328s ago: executing program 32 (id=806):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={<r1=>0x0, 0x72c7}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r1, 0x4, 0x1000, "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"}, 0x1008)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
bind$inet6(r2, &(0x7f00000010c0)={0xa, 0x4e24, 0xc, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000001100)={r1, @in={{0x2, 0x4e21, @empty}}, 0x2, 0x8}, 0x90)
fcntl$setflags(r2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001200)={<r4=>0x0}, &(0x7f0000001240)=0xc)
rt_sigqueueinfo(r4, 0x28, &(0x7f0000001280)={0x29, 0xfff, 0x8000})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0)
ioctl$RTC_VL_CLR(r5, 0x7014)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), r5)
sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x58, r6, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffffff7a, 0x47}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_USER_PRIO={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4000144)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000014c0)={r1, 0x3ff}, &(0x7f0000001500)=0x8)
sysinfo(&(0x7f0000001540)=""/24)
bind$alg(r5, &(0x7f0000001580)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58)
accept$alg(r5, 0x0, 0x0)
ptrace$getsig(0x4202, r4, 0x8000000000000001, &(0x7f0000001600))
sendmsg$alg(r5, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001680)="0a2ca6efc63f3465b6df330633337fe1d95838cf7fc0763c58306cc8369e5b5f3139511c16431e623c82135a1c56741ea6c9674a5be0b9f213077c0340ae8063e2b65f3556b73b4160b43015", 0x4c}, {&(0x7f0000001700)="abf6d02a2cafba70f044cfee81eb7bd6ecc02da8284e6c52a867538a1c5d76ee30e32983448e9e3541867a52d2722e69c51b2dec040cc86a9d5505bf0404c094b91367cf29", 0x45}, {&(0x7f0000001780)="a41c7668ef12c9ef94c59441eaa710fcea50b086c8ddb4517ce951114ee55266ec7b508871a7f72a22f6be6a384a24c6527274903d2b3568da398169ca72f73b141adecc3703a53a5e5f6ec5e6d51f0423bd6db8d0bd7d37936fd320b4d1c0c139f65ef4dbc48c1dd48a06c74e265ece8f76e5891bd29e613c42bda814390fafd15418e4a73fbcb1dd988664defde0309aa46044", 0x94}, {&(0x7f0000001840)="d6e99ebef90575", 0x7}, {&(0x7f0000001880)="9af8196edd644eb3836638c502de60fe", 0x10}, {&(0x7f00000018c0)="1ff300287278f85bdcbae9c32f1e07db8df7673ca01737284a27945260672dc5926531bc7af2b36692a660891116e1cf3edcdaecac81595617858fe329510837434ef273d04507d369791c0e23308e85e0c022d165b1606df774f86b55efbd439f4c4cdcbd01d9b215", 0x69}], 0x6, &(0x7f00000019c0)=[@iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @iv={0x68, 0x117, 0x2, 0x51, "b0ef9c2eea836202e0d0231ab226f013eda90b7f0b450a6b5b6936422e42b88936e54182f81879a734e7532bc172d4c4ffcdbfa8d44615495df39da21859b97b5c45ba7f9c4429bb5e3d02927f24d08b3e"}], 0x10b0, 0x54}, 0x4004080)
r7 = accept$unix(r3, &(0x7f0000002ac0)=@abs, &(0x7f0000002b40)=0x6e)
connect$unix(r7, &(0x7f0000002b80)=@file={0x1, './file0\x00'}, 0x6e)
rt_sigtimedwait(&(0x7f0000002c00)={[0x8]}, &(0x7f0000002c40), &(0x7f0000002cc0)={0x77359400}, 0x8)
ioctl$SNDRV_PCM_IOCTL_PREPARE(r5, 0x4140, 0x0)
unshare(0xa000080)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r5, 0x4008ae73, &(0x7f0000002d00)={0x6, 0x1})
ioctl$SCSI_IOCTL_DOORLOCK(r5, 0x5380)
openat$kvm(0xffffffffffffff9c, &(0x7f0000002d40), 0x8000, 0x0)
getsockname$qrtr(r5, &(0x7f0000002d80), &(0x7f0000002dc0)=0xc)
getsockopt$inet_buf(r5, 0x0, 0x29, &(0x7f0000002e00)=""/122, &(0x7f0000002e80)=0x7a)

8.908746886s ago: executing program 0 (id=988):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0x200, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$key(0xf, 0x3, 0x2)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0)
fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0)
removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00')

8.602789197s ago: executing program 0 (id=990):
unshare(0x68040200)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}, 0xd0})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x14, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000040)={0x0, 0x7})

8.257433428s ago: executing program 1 (id=991):
r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x1)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x2, {0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x53cf229c}, r2}}, 0x38)
ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000002600))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil)
shmctl$SHM_LOCK(r5, 0xb)
shmat(r5, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
shmctl$SHM_UNLOCK(r5, 0xc)
shmctl$IPC_INFO(r5, 0x3, &(0x7f0000000080)=""/70)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x230, 0x41, 0x107, 0x0, 0x7, {0x2, 0x7c}, [@nested={0x4, 0x31}, @nested={0x218, 0x1, 0x0, 0x1, [@nested={0x214, 0xdf, 0x0, 0x1, [@nested={0x4, 0xe0}, @nested={0x209, 0xec, 0x0, 0x1, [@generic="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"]}]}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x1}, 0x4010)
syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x1) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240), 0x13f}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x2, {0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x53cf229c}, r2}}, 0x38) (async)
ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000002600)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) (async)
shmctl$SHM_LOCK(r5, 0xb) (async)
shmat(r5, &(0x7f0000ffd000/0x1000)=nil, 0x7000) (async)
shmctl$SHM_UNLOCK(r5, 0xc) (async)
shmctl$IPC_INFO(r5, 0x3, &(0x7f0000000080)=""/70) (async)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x230, 0x41, 0x107, 0x0, 0x7, {0x2, 0x7c}, [@nested={0x4, 0x31}, @nested={0x218, 0x1, 0x0, 0x1, [@nested={0x214, 0xdf, 0x0, 0x1, [@nested={0x4, 0xe0}, @nested={0x209, 0xec, 0x0, 0x1, [@generic="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"]}]}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x1}, 0x4010) (async)

7.904046602s ago: executing program 0 (id=993):
socket$kcm(0x21, 0x2, 0x2)
r0 = gettid()
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9c010000100001040100"/19, @ANYRES32, @ANYBLOB="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"], 0x19c}}, 0x10)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r2, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401)
ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000200)={0x40, 0x17, 0x6, 0x401, 0x300, 0x4, 0x0})
pwritev(r3, 0x0, 0x0, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8240, 0x0)
read$alg(r7, &(0x7f0000000240)=""/4096, 0xfffffdef)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
write$FUSE_ATTR(r8, 0x0, 0x0)
r9 = syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340)=<r10=>0x0, &(0x7f0000000000)=<r11=>0x0)
r12 = landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0)
landlock_restrict_self(r12, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r10, r11, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80})
io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a3000c109004c000000060a010400000000000000000100000024000480200001800700010072740000140002800800014000000009080002400000000308000b40000000000900010073797a300000000014000000110001"], 0xd4}, 0x1, 0x0, 0x0, 0x800}, 0x0)

7.505324909s ago: executing program 4 (id=994):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xfffff2d6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0))
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r6, 0x11, 0xb, &(0x7f0000000080)=0x40, 0x4)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r7}, 0x10)
syz_usb_connect(0x0, 0x10e, &(0x7f0000000380)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e600030e01000006240600011005240008000d240f01000000000000a0010606241a0000000c241b000000000000ff01000424020c90"], 0x0)
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c)

7.480546265s ago: executing program 1 (id=995):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_opts(r1, 0x0, 0x1a, &(0x7f0000000280)="e9979e96f8d48ffd063f5561bfd2cc49edd0c7a0f4ad134913cbc66457f4a03eb62abd5268f705b191649b5a56be57df85da16eda342a2cc3a7425352005bb780267173938dc26b9a57f7b14a6fb1243f173ce25dbb8d5bd03115671096a927acc7621b9ebb1bd8c466285e0025e9feba9", 0x71)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x1000, &(0x7f0000e0f000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER(r5, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000844)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0)
recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0)
close(r6)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4f0000001a0000000a0000000000090000000000", @ANYRES32=0x0, @ANYRES8=r3], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x44000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf7699000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
r10 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r10, 0x0, 0x0)
r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r11, &(0x7f0000000000)=""/73, 0x49)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_write$ath9k_ep1(r10, 0x82, 0x0, 0x0)
sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r12 = socket$inet_mptcp(0x2, 0x1, 0x106)
recvmmsg(r1, &(0x7f0000005c80), 0x0, 0x20, 0x0)
listen(r12, 0xd3)
syz_emit_ethernet(0x46, &(0x7f0000000540)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd6001018f00001100f6880000000000000000000000000001ff02000000000000000000000000000100"], 0x0)

6.292134683s ago: executing program 0 (id=996):
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101840, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
fcntl$dupfd(r1, 0x406, r0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_open_procfs$pagemap(0x0, &(0x7f0000001880))
io_setup(0x4082, &(0x7f0000000380))
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @empty, 0x4}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_setup(0x25b5, &(0x7f0000001400)={0x0, 0x3ab1, 0x8000, 0x0, 0x802cd}, &(0x7f0000000000), 0x0)
r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r8, 0x2040200)
add_key$user(&(0x7f0000000e40), &(0x7f0000000e80)={'syz', 0x0}, &(0x7f0000000ec0)=':', 0x1, r8)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
ioctl$KVM_RUN(r6, 0xae80, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x32314241}})

5.472209378s ago: executing program 3 (id=999):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600), 0xfec8)
recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xe055}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680})

5.250777935s ago: executing program 3 (id=1002):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
socket$inet6(0xa, 0x2, 0x0)
fsopen(0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f00000000c0)=0xf, 0x4)
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x8000, 0x40)
setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0)
bind$can_raw(r3, &(0x7f0000000100), 0x10)
ioctl$IOMMU_GET_HW_INFO(0xffffffffffffffff, 0x3b8a, &(0x7f0000000180)={0x28, 0x0, 0x0, 0x1000, &(0x7f0000001540)=""/4096})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000894}, 0x44011)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x0)

5.15586785s ago: executing program 4 (id=1003):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10200, 0x0, 0x0, 0x1000, &(0x7f0000102000/0x1000)=nil})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5})
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x11}, 0x18)
ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000080)={0xc0, 0x0, 0x2000})
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000010700c0af00000000000010902"], 0x0)
syz_usb_connect(0x1, 0x664, &(0x7f00000006c0)={{0x12, 0x1, 0x200, 0x2b, 0x36, 0x37, 0x8, 0x404, 0x310, 0x13a7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x652, 0x2, 0xd, 0xb, 0x20, 0x8, [{{0x9, 0x4, 0x24, 0x9, 0xa, 0xf7, 0x96, 0x19, 0x40, [], [{{0x9, 0x5, 0x0, 0x0, 0x20, 0x17, 0x9, 0x40}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x4, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5}]}}, {{0x9, 0x5, 0x80, 0x10, 0x410, 0x73, 0x80, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0x4f8}]}}, {{0x9, 0x5, 0x0, 0x8, 0x200, 0x0, 0x7, 0xe, [@generic={0x7a, 0x11, "e6884f5227d7daeaebdce217606aa8d4da1c9d47e6975de1fbff18a5204f69e8471975f5d054c064f96ecfbcb142da3aca1a831a2316ad3bf762863590147090d93fc2ac8b7d1d752bdb926d04a5d9f6884391527d3c1df5f3b291d317316f8e3a6ec7be26d5d22f30dd2fec4f829e19ef4d29e49940416e"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x10}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0xf1, 0x3, 0x23, [@uac_iso={0x7, 0x25, 0x1, 0x42, 0x3, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xb, 0x81}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x3, 0x3c, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc0, 0xb543}, @generic={0x78, 0xd, "53d17921406b5b451dc682763d2f5f2a731e3bcbfe1a76452d84234f385fb3b4b7b583ef19b7660efc713b0727285eca4f01f26368085f9b96e954578d5e66ab82f070594b552a2557a5c56612129ae20fb1caaa697d42d114ff338921ccaef2b1f0ee9bbabed7e5b8f320513a886c21bd5736f3e817"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x10, 0x7, 0xe, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x3}]}}, {{0x9, 0x5, 0x7, 0xc, 0x40, 0xe, 0xe, 0x4}}, {{0x9, 0x5, 0x9, 0x2, 0x200, 0x74, 0x10, 0x6}}, {{0x9, 0x5, 0x9, 0x4, 0x8, 0x60, 0x2, 0x9}}]}}, {{0x9, 0x4, 0x1f, 0x5e, 0xd, 0xff, 0xff, 0xff, 0x3, [@generic={0xdf, 0x31, "befe1d52dbf3387e8dbfd552ee72dc7893140c72a15f378e9ea392660679210fe2d78ed94f0dbfbcac4b000a098858c883de03ca4d5eb3260f7c5e4016fc98045f22bf48803528481e071451dffa91b362ed3ef535ad4acc67dccc8108bf63b0db4137b1a4b8c58a17b10ac8c600484d010a110a07803c6f7d150af91a419089763fc09cea0a6826dbdf3a308ccf9d74e85a1ad5db8c6c7ecb5c5ae209830807e17b6473d87e01ea04f85d4632347cf0bd211aec37fb09394777443bf9cc3e82fbfca3a972d61d21d8df6981527c6e4ab586431b0731001ac569b53474"}], [{{0x9, 0x5, 0x7, 0x8, 0x20, 0xf6, 0x1, 0x0, [@generic={0xae, 0xc, "086c5e3595ec8b7d45fe7306fe53449c65f8d06330ad978ac4d979b0812e4f8706f8889d9fab7242b5cbe198fd78e0609b675ad2126b553fbf37853d7655e9610182ebcce5386fcd602216495ed90283158b091472d0259bdf3656629f696e2bbe5fee6f554f4466e82f3ca5d2ae84ed78d7a589a4adcfa1b2741be33ca28a7e1d6eb9f714a0e069c1fb01cd9ffc459fbf423beb455d10a74c94006b7353d44aee6611a43649e42a8ef56d01"}, @generic={0x58, 0x2, "b761beb34a3952c66f7a0d29650737c2d76f035b2e5b022d36bf5cc75ed9c96e1e45cbfb7f3b39769391a248419405ebd5e1b91ef2b1098c74eb8e6ad620d7929f4df504199436fa643d3205d7fb3a42d14f4dbd60a0"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x400, 0x0, 0x8, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x25}, @generic={0x9d, 0xa, "f0b05eed5b3cacc18548ced3d444f7ded68c7700a51452d25f5a7eaf37b0f0986c98be2f608c141dfb28ee1fbd3920b0fd1c953a3abe2e8552e749c60aef842608d6cd0b7febf7699f3f82039fb21119e9ec57e6fa3a3a00d40491440332b27157c2cfb6704c03b246a65ea857a60a72f48f44c803700abe77d96ea0cdb60aec1f3a7d1e5b38b10386ff339ba55428a2fbe68bf4c16219cb5b770b"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x2f, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x10, 0xd}]}}, {{0x9, 0x5, 0x4, 0x1, 0x200, 0x7, 0x9, 0x6, [@generic={0xb, 0x3, "f285d1d645b26728cb"}]}}, {{0x9, 0x5, 0x1, 0x10, 0xbbc3d2fdde58ac85, 0xf3, 0x10}}, {{0x9, 0x5, 0xc, 0x8, 0x200, 0x81, 0x2, 0x9b, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xa, 0xf801}]}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0x5, 0x5, 0x41, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x5e, 0x6}]}}, {{0x9, 0x5, 0x5, 0x3, 0x400, 0x7, 0x3, 0x1}}, {{0x9, 0x5, 0xb, 0xc, 0x3ff, 0x5, 0x6, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0xc2, 0x80, 0x200}, @generic={0x7, 0xa, "8e4a447dc8"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x200, 0x7, 0x3a, 0x1}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x80, 0x6, 0xd, [@generic={0x60, 0x22, "8d7a479551fddd16ddad6557cd71121483ab8eb2d3fe80bbfff27b4b94ee24997fcdee519d654be4fe24330a38e8d4a2bbfdc60143ce1f6a4390775a8862e5f818414ca5cc8d619a928f3e183240bb4e7c9e562b515ac8a27ab78561ff34"}, @generic={0x37, 0xa, "f1e9b7351a0bf1d50cf4c2140fa265f6c57ebe0ac7a18db3aa1c8664386c7ce791dd8abed2acdfe77530c8b9d76baccd340943b39a"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x8, 0xfc, 0x2, 0xff}}, {{0x9, 0x5, 0x80, 0x8, 0x40, 0x5, 0x4, 0x3, [@generic={0xf7, 0x2, "30195deefbae043a821194a688f65fdf9b1f036de8c0af48b55cb843fb397c60231285090828ba466ac557c48984c8ec0e3af3a5d10795a4635cc225238e6023efb60b7f7b8db5f2e00f9e6baa335f8e8760aa6e9962f85c6c6b74db148fc20722ea0bfca5965740ea8e99b1896e69c8b3051e60c0bff1adde614d6f795ea1fb01737e843e1e0d5b9d10b42e832ea5c5a65f33c6545c28ec24f16588cb7d5e910d76cc7695e0cca49aa4a11f3c3960de586b58ff79041f6527d649f0714a4e97712771c4c5d404f06b7f22345dff36beb894631e2dd779a990cc5831349e431098a0619915cf5c91df9846cb1296e18467c09fa332"}]}}]}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x0, 0x6, 0x1, 0x7, 0xff, 0x4}, 0x221, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x42b}}]})
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file5\x00', 0x1000, 0x400720)
r3 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0x2, 0x2}, 0x18, 0x0)
landlock_restrict_self(r3, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file5\x00', 0x2)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r5 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x1ff, 0x4)
r6 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2)
ioctl$VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f0000000100)=@multiplanar_mmap={0xfffffffd, 0x5, 0x4, 0x1000, 0x8, {}, {0x3, 0x2, 0xfe, 0x6, 0x2, 0x4}, 0x4, 0x1, {0x0}, 0xee71})
bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c)
close_range(r4, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0)

3.856373511s ago: executing program 1 (id=1006):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000300)='GPL\x00', 0x1c, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

3.660517983s ago: executing program 0 (id=1007):
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = semget$private(0x0, 0x5, 0x0)
semop(r2, &(0x7f0000000040)=[{0x1, 0x7fff, 0x1000}], 0x1)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0)
ioctl$SNDCTL_SEQ_SYNC(r3, 0x5101)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xe9)
r4 = gettid()
kcmp(r4, r4, 0x4, 0xffffffffffffffff, 0xffffffffffffffff)

3.551491126s ago: executing program 1 (id=1008):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
r2 = socket(0x10, 0x3, 0x6)
r3 = socket(0x10, 0x3, 0x0)
rt_sigpending(&(0x7f00000000c0), 0x8)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x70000, 0x0)
openat$cgroup_ro(r4, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x20, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [0x0, 0x0, 0x1], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}, [@TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}]}}}]}, 0x90}}, 0x20000000)
ftruncate(0xffffffffffffffff, 0x200004)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000020ac0100", @ANYBLOB="be0f000000000000000000005e00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x50)
socket$inet(0x2, 0xa, 0x4)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f0000000140)=0x2, 0x4)
ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, 0x0, 0x0, 0x1004000, 0x0, &(0x7f00000001c0)})
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000240), 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10)
r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$SG_IO(r8, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0})
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c)
sendto$inet6(r9, &(0x7f0000000000)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c)
recvmmsg(r9, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000000c0), 0x1, &(0x7f00000003c0)=""/21, 0x21}, 0x1ff}], 0x73d, 0x40000040, 0x0)

3.404179556s ago: executing program 5 (id=1009):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x20000003)
accept4(r1, 0x0, 0x0, 0x800)
shutdown(r1, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x4020, 0x0, "c3218d82c5896754d7cdb23c72887c897926a8856263b50c578ef1f9f362f16f21f5c872b1737718103bbde1a9d99011d25bbdff9c1351ba69e297337d6a5e4a948c1cbf827d6e95ad5bbfb5b3bd1929"}, 0xd8)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x1, &(0x7f00000000c0))
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000200)={0x28, 0x7, 0x0, 0x0, &(0x7f0000bd9000/0x3000)=nil, 0x3000})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, <r4=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000540)={0x48, 0x7, r4, 0x0, 0x10000, 0x0, 0xfffffffd, 0xd65ef, 0x27d104})

3.369916026s ago: executing program 4 (id=1010):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r0, &(0x7f0000000100)="aa1624a5cecf6ed7b67e19dcf4e9c871679cb9c111fb47bd5c1bf843ee4df48722fd724856a1e01b451b96948074f046a54a33de91fdea6a50e9b302a3cb41eda1e6c1845d99ebabcbd81c369cec7a6e26570b51ee53598eb1b73f316f69463558fa08a76c24bdf302590554b660f608fc1269b5905842855b35b587c239f1c74ac5ecc1a069ae65e9351ea89e622fd61e8c71a993a9558657e041decd95d3b3ffa0ea6139ad90dccf451ab0d359299cfd4bafd1e000436f8cb339da72ddea295d9de220a39127c5c1f999350ad09d3fed9f675499ff527a55a6d231d99db1a04d0bb20e81cf76497d03715715d5e5d1b557756644095dc2", 0xf8, 0x80c4, &(0x7f0000000280)={0xa, 0x4e20, 0x5, @private2}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001c00c9242bbd7000fbdbdf2507000000", @ANYRES32=r1, @ANYBLOB="80001e0a0a000200aaaaaaaaaa1b000008000f"], 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0)
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) (async)
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0)
ftruncate(0xffffffffffffffff, 0xc17a)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
accept(r0, &(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, &(0x7f0000000340)=0x80) (async)
r4 = accept(r0, &(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, &(0x7f0000000340)=0x80)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000380)={0x0, 0x36, "dfc846af92dee0afcbe0f3dbb5330ac8c5cfee8c714ba1fc648379fa0380316e173841659eb9cc1af35ae101ffe9dacd2c87d2edccad"}, &(0x7f00000003c0)=0x3e) (async)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000380)={<r5=>0x0, 0x36, "dfc846af92dee0afcbe0f3dbb5330ac8c5cfee8c714ba1fc648379fa0380316e173841659eb9cc1af35ae101ffe9dacd2c87d2edccad"}, &(0x7f00000003c0)=0x3e)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000400)=r5, 0x4)
r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f00000000c0)={0x14, 0x5, 0xd})
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000008b02"]) (async)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000008b02"])
open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) (async)
open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = socket(0x10, 0x3, 0x0)
write(r8, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24)
r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r9, 0x4)

3.018606122s ago: executing program 5 (id=1011):
r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@phonet, &(0x7f0000000080)=0x80)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000100)=0x8, 0x4) (async)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async)
getpeername$l2tp(r0, &(0x7f0000000180), &(0x7f00000001c0)=0x10)
ioctl$KVM_CAP_SYNC_REGS(r0, 0x4068aea3, &(0x7f0000000200)) (async)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000280)={0x8, @rand_addr=0x64010101, 0x4e21, 0x2, 'lblc\x00', 0x0, 0x3, 0x16}, 0x2c) (async)
mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x6, &(0x7f0000ffc000/0x1000)=nil) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x11c, r1, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x98, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_IE={0x73, 0x3, "db5ffe4012929a58d084b117773c2f4d0e7d1401266f06b4618a4e0578224b7498a9010de7df5ed5063b0d40c8746c09e8db0a8325bfad952648446d0ef80a4e1e469e807f4146b295d82ff5fea9f1e61fb145f35d4947e308230c275b285b4ad13abcd8c157bcd6636c54630ec6fa"}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x80}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_SETUP={0x5c, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_IE={0x50, 0x3, "25e108e6c8696c65b0297e3cb0f34219b21206a12076db202aa71568f911433784591757668e2acc7f243e2eb32656b2954f54875b11cb1162362bd2bf86f3af448fe672952489ab8d18b78b"}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4004091}, 0x40000) (async)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000540)={'veth0_to_bridge\x00', {0x2, 0x4e23, @remote}})
close(r0)
sendmsg(r0, &(0x7f0000001640)={&(0x7f0000000580)=@vsock={0x28, 0x0, 0x2711, @hyper}, 0x80, &(0x7f0000001600)=[{&(0x7f0000000600)="7545b5c177bf5f509cdfc36e52a42687c97ae5608e273efd0b82c88934dd706ebb0e0a449a146a76f55f29c0b5dec4a330095acf927eb7ff26a6faf00eb025b5cee95e0d3221da6381754cea31f868b18e7a6997d784ed191cc19b3cd36f063f4826076b67569a7e700fd27f92642344e36c3a0823cad188724796148b9c3f1ea1aead65bba2a0a043127d5e11bb9b6138ae5d2a5b17a457c6e08f58761b9b0969b08bd2007ce43a61d0516fd4b2c690b17564318299cfd91c0df11e427e2456e484c2ebed4c2014f831512a80bc473e317fc5ce523ddf9a92b6b2db25cc594962dc53aaabfacfa2d36330866a72e84a5e2124b199105de2b26c5f4396680428a8d2fea969ba914dfc1d385e2ba39b667a6569d02260c30dff56a44763e923257d92e9c0bf8c68508fa5da980ee6f5e7abeb5b18c2af1590e6fc148b4b03e33cc57b7df378938b9ede847c002c1cf1ee2a3bf346e93ca5ff222f0a7233756677a999c987dd75056d5b62743114036504e8390c261cac4af8c7b7f3dba39f8b7f6c3eb70c43dfa392df2f1dfa81df004de59bd3fcc2afc8e8ff870e0ac7c20c944bc40aa721811e919180e707c6410209d94bfb267d4df3097aaf4b9d94b5bbad591ae1cae1ab180c8a0f500bd15485c6765a60e3169561890d097589aedad39fa4c0aa914d777c0e4eb80c65717421e0a473a7640de225a1625a56dfcafa595adf83abcf3eb2c8e97b1a99e09c5b1a734927e3f417a95b242a904a5c1257b34e4f560a18407295e3f2bc0c500220d18d909d87d019cfde2fc6a5b5284b70d354d9aaef9100e5d2925e917597a24d1b67b143a2e4373d457c21681603becb416634dffd6a05488d41dfe69e5d1759fd2ff18ef958af1b7210ef23eba90f84722012f37ea73b87233f58f178a8b96743bb88c70d498afadfc939da202caaa695cf3743a9061d9d124a5d4c713f0230739b0eb45be12c0f9b3a532dbdbb77cc804a2fe1b6637c17cc63194c2fde02b8f99e1994230494b3338b532023dba81073277424bf1b85b635a59b8b6787444a3b0b4e02ea05a8f2ce42efde1183800c7e8b903046a7e0f21c8772b3c92b92918b0bcf44b42d690e8be4f66d38db5fc0b1fef80c13d14038be54567cbacb195a96e4ce14255d56200d2799a598321c5b693469e34833cae872b293f72b209a33bb3276fd5b89a25dc884ffbed50cffa776c339afed0c9fc98a42995ac741a65a32bbcc9daf1fcac9568d98832d01473b7e7bc1da4fb8e5176c01b6c9bbfa8f046c1d0b6e0c415650170a3b6c7dc4ac9da4083706bb85dc1599bd4db6da4d489c95c00b2b899243c39c357968bfa5b568a71d34d83c3957327cf69cc75ed1bfdcd069843c07d310c610941b0d28d37e8d3766ddd1a066e4374513bb701ba4bba95e59c3482082ca4e9f352caa952f4951de86d059a90b87c68360c3d6e6d7c4821558d78c56c3f4d4fc9736be515ee04d3ee526b00e96d8811a16f346780930e487275958ef2a67a1c1cb5dcb0569a5ecf93ba479a672d4d22e5ce0a60b09a73e3c0da811485616ef8ad40ce9d7f61bf48e9bb521cd9a3b6a46439e989f71671a1abfeb1da405b6faeeb4d2e3b6d9995aa88211d7b6f09260ad494aa4d32f2118c80f1849ab6888c34732a76cf1066a625946c8fbff0c2629e3769bb1031f12c704564cd9eaf3c32292bb2564b999198a02caa008958fdbd0047b1c18c6d6feb29899ab2e30ec55ca436c1987716e5631fde25c03e4425a3406688694b5e13bc148c02eea1a2b61c3007feddc9cc54b5178969c6c4f3e1fdd98fc819ee99860bceded3b2c3bd61a2300d68d80925da345cd45398ef0d3dbc13715e3669d5317d9eb587949b5a2490c0d6d371721211aa40cfc4b197475e19d465d56c55249b3e0f8483d8f7e4e64a3151d3bf12a8b1625c9cd3eeeb929483377fd88d6146988a6ff5edf6a4e37a9c74e3db0d773fe32191913ccffefe43d744e44318dafcf332f3e779736340c10a08747efe2d7f08b8b4c32f2617d7551fa76da2ad28c8c3a2594cf432484a269eeaee23570bd03c6888b3e0639e58abc4d652b15eda560f44c45cf674f275f59315e9cff49190d127d2d5a73fbe71503c1ccfa36d5810072c24f095068443a93723e42d40358627ee0ca80c6e970f740fa814e35c829e562e11183c126ff9201bc13126540439e0008d921c578659209971a9c9dec52513a73ae518141610099eb5553220c3a1be14e3fc9291ab09ad98f1fc8de52bcddca79fdcf456c9b3ec380d27307ecf59b9b9267c9a1e79a0615e704d8f422c8ee0e2c7da05a94b1adfd44caadbbd935f5b6c78b250fed0127b9c3dd428329e1a4e3b941726bbb295786fe3fac0f36f654bc2d6ae3f03da909df3efd68edfaec7e2fc898f5433ab79365dccf83c401c9a780c9c04af011bfc00cb0324c7ad4e1251ee147765caa3e9b84ab02380fccc63fba9dce57a61d3fbabf067ba841d3793b25da8c46a31e646fd94af4736628dcec63cc08170450746b6476e9d9f4d8236b2983361759b1dc331ad3b6a7b2ef61436f64abb18c57b6da6305382f2a2b17425198a18550f664ba5d4c0333240f5aa88238560b546584bc35a054dbe7d8ed75dd2a0f6db34445115dda0f0da47b18072e430f9a3b94aabb1c5b7d5412f1845558887fa3f5dcbdb52915be915986806c33db71b72f4a678c6f345aae14582d4ccea21f056fc4904b33c6311459a54bfb48efb58d8bdf300af4cc5b9672617faa35b575a7736e8b0eadf45c385a178602a3f896d7e3fc6300c7dcd95759d86a514e8027a0b53e4869875bede324eed3133e37f413754c8e7c10d3ef33c5be9cfa6ef914658edb2a505a474d6a8b18c405c7720c7fa82194b56a4f241e46f3b41711f79b4c3c89f3de5a12591f4ab1dceaf3b5c23c513f3b99817ffecb94584f558fb5341201b3b6100cc1a23879443829bf7ff21481370c677b29473909a60fcd6bd141a77499a0172f73e229de403a6c55a8aad557243b860cde2945d5ce617ae93fc7d1c13a26ab782f6ee294568f855d32aa451b5a6fc74c43b25c7eabd7bae0e22df3f8904b0178c4877dba4e740e9b0e6b49201f5e69da538e0f671582157546befbf9271ef48bc740628368fd1b3c9c7e178f0d75a0f6b2cd515a2206942e2199f06b94aa6145918a94308ecd2019daa6368db666012c659e710c0592b6cd7faa60cf9fa3147a4f80ff6abc125827d9dc04a337e5098e57b03b647797f3ce5f6750ba5fb5f99139d2e81f0f9b35e0d2428b5dfc49008f8c5fd3f42cd7facb3b2c1fe68fdbc04484b70d985a9709f25d0cdb30416e76168769e40bf2805e044cc69633e5a7e5b26f9cad61e592729974e945f8e904058e184dd60202ab64f08bbf048734585559c285dc343711d1df94f15328781589b1b15e980eac98e11effb7fa3b7f15cc145077d76bd8535af236ed82587c4d80a2cc9f6f56a7c45138aa7c1f8d6531bc44ea61338b7f1db15985e1f98fa3e33b4f091b525307be55a3bc3f73f44cc39fb6b44326d7da8f3a70a0d9c83bd3211995a03f9fed5edb9cc338df15fa1d0199c75e7af8175701dba5830c354000aa98e1d6e6f360e966470d9d814f732f4693feeb900a53ea7a3aec64374b4d1e607cd66b902cc18a61e9b50772f7caa565d05b7d6f83c2c7401632c04fa26c750beb9334b87dcb3455060207c39ab65b91c9be64f2f4fcd0f847d011cc6eb8c79b1135d78ee2a116fda46a34c026ceebc75e17e8389788deec9e1ab3c81043c2cddad5588e1934838da08613a7f207df88224a54e9d7dd46d558601014393147e791f55b89817d7aa6bf2c34de611bf9947cf484f67eaf911419fae380d343c9ec3d9b6d2f3701ecf906f02056a234b54f5c6abeecb0a8e38d1b874d015bce631410e26910c2d2af956f1c9e93d15987d599dd1d1df9ed616d76ab2f8200355987dced566ee10d996d7622637e065d5ff4365f2139695b5e04a3e48bb5105de8d03c45cc3ceb2d597fa95c8655a2dff77fa50e60ffc1bb8fab7ac35b3d00ad30a79236faee7c89557d0d96dc211e41108a863b14332239de8d7ddfdf0b66d29c6520216ea0566c93c4c6a7386186ce6ec12d4a08c0adf23c4bdd77acc01e2218eb57eb76bb2cc460d9b8d946d2afa01f82125e8c652774cc8c80fe93eed73475569faab438f5ca5da5d9a526a7471ed82d9a019209eb6710ed4033157ad74a20fe2395425bf8805af604a5b9e707079c1e46002149646e12bdd89be2737f1b4a3f010dc956fa5c40c5ab1b3f473ddbe33028605a407b9a260988a50a20ec4ea70877667d8c74a1b2b3a620274e0f656615cbc64e89f9602b4ac7fc045d0daa419a443f7a738d7119b3a85f24ffa95d218786f089f314c6bc93ef49364f9176011115454dffed1f962c6eb3a371381eafca6ef0b0f206d48a312390a312611eeca86b5c2107940ca0269a1a602f7e95182f630cb278f341e6ceb02bde83aea42eea9798da348138532501e4eaa38bc487e947d45af97ef304760c7928e93f25ac0b1646170a315bc9d28f87c12da533c53e14049ca935c5c2a475ea7195600fb9e962718f74aa0164b55774f33c48c2127f160bcdd9e4d76df911b76ec92bc9d576f49e8f3b7ee7fcb344ec42d47a5ea36c8a56f6a13441329925bc2f787984c3742683eadbbdf641e535bc846c3ce6e224fdfc5cfb3c06b6ccae89a0fb92d952a4b039f6858ae65a323be752a692c3f99d05022b2a1c70fe353af5617fcd0d71316aef014bc5c45c2bb08ddc07a9184b9aef326347ed4e8d0cd79d35a3a691a58bb8c45f92ff9f410153870fa96fc11222078d958b63f211440a26d0718c6765547530489da54dc08f2b37818163a623d3f8f8989cf011e3cee95d22ea50bc6b191f41c3d682d371110ce89a472a4faf32472b7a3a4410e846b26e9328004298e66082a4f315c989894cae4cf763ced1e7346b313d67e64d412c0335125e61ae6a6a8cc7fa9e44b126d3578a1d6a4b4be7d58104b6af4a747db1d7da1a09f0b443163e8eeb6b91e60c3e4c63769652b25d75b88cd543cee381184b365bb75ce406b93f57557c97fcba726770a7032ef898a5d1835af49ca433cd1d5bd2c2dc03fbaacf5925875d36a950793d9e5bb03d9991c5307de6ebcde5d1baaec9565021c3016cbfd7e89f02332dffec45090da77152064d59f22bea09fd57e41c53b15b5661820122fc7ca5b9a42f2679ceaeefec45fe235d6461e1b0d8618612f764b7381846f885bc863e51828cce5a08ff87d90ad033c9ab0d0494a2affbfc6516f81b8f69330e46e4378361129e12be1871fcf212fb9834fc983ab52a31fb9c91b8687f0fa0b375bb0c4f2616a6c1d6e64af63fc48645eda2bbbda0fc40c9421656622eec8b3512791d03047304804dce2fc947b3e8c4b12e365cf7afe1c386503b15ce052d36d7a7833af60c887f1ecadbfb1187193c2cea900d72e0319c71d9a5ec37350c0242f150e81f0ff2d63066498d51a1708d67b9f65c657ff2b6231e25631d7ca1ed7327d003a15527eaaf38751ebf5d68fbde9e6bb0bccdfb7e1e5bb157aa498cd83f4d5d26f050fe77e04d4e61588cad1d93fbb2e0af05aef3863fdf5adc4749e921c18d913eb569302b43ffa66b7b8de5d4499315efb82f75ebae8b3f9e69623369ed0f581bb2596abd783900a824f49601582941aa32842a79236de72c3bb0a0e6f58bc47136ac95a1c064b16117ab90c55889f5ac4801f77d", 0x1000}], 0x1}, 0x1) (async)
r3 = signalfd(r0, &(0x7f0000001680)={[0x7]}, 0x8)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000016c0)={{0x1, 0x1, 0x18, <r4=>r0, {0x9}}, './file0\x00'})
sendmsg$IPSET_CMD_SAVE(r4, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x34, 0x8, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4810}, 0x4008081) (async)
ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000001800)=r4) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000001840)={{0x1, 0x1, 0x18, <r5=>r0, {0x3}}, './file0\x00'})
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x28, 0x140d, 0x400, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x404080c}, 0x4008000) (async)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000001980)={0x1, @raw_data="f926746dad3c3e43d64ac0b77f20b4b74f29740fc6e4edf4cd2bc3730a0e1e6f593c9bb160a6c741b23d1ff066f871fe356aba7374c47a77caf6aef013b4a43e0b55a9bce48a8d7cd944eb4aa048e1298c3f919ff5d758cfa8228f50b67753dfcf24e8ccbe4acae6d952032b8c3630e672c5cb9f3a372253279d71999ba03e19ee71260a814ca3c827ca27f7edc1fa3757a6f248b473d72df8f66bc55e7b273115f187398d115a1c9434eaca27d2c402a2bc7be65eaf78aff96a7b27272fc7dbecc587c1d320c432"}) (async)
ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000001a80)=0x2)
r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001ac0)={0x0, 0x3, 0x10}, 0xc)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001b80)={r6, 0x58, &(0x7f0000001b00)}, 0x10)
r7 = socket$qrtr(0x2a, 0x2, 0x0)
recvfrom(r0, &(0x7f0000001bc0)=""/191, 0xbf, 0x10064, &(0x7f0000001c80)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x2, 0x1, 0x4, 0x4, {0xa, 0x4e22, 0xf, @mcast1, 0x4}}}, 0x80)
ioctl$UI_DEV_CREATE(r4, 0x5501) (async)
fcntl$setstatus(r5, 0x4, 0x40400)
setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000001d80)=@assoc_value, 0x8)

2.768083365s ago: executing program 5 (id=1012):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000340)=[{0x3, 0x3, {0x0, 0x1, 0x2}, {0x1, 0xf0, 0x1}, 0xfe}, {0x3, 0x0, {0x2, 0xf0}, {0x1}, 0xfe, 0xfd}, {0x3, 0x1, {0x1, 0x1, 0x1}, {0x2, 0x1, 0x1}, 0x1, 0xfe}, {0x0, 0x2, {0x1, 0x0, 0x1}, {0x0, 0xff, 0x1}, 0xfe}, {0x1, 0x1, {0x0, 0xff, 0x3}, {0x1}, 0xfd, 0xfe}, {0x2, 0x1, {0x2, 0xf0, 0x4}, {0x2, 0xff, 0x4}, 0x2}, {0x2, 0x3, {0x1}, {0x1, 0x1, 0x1}, 0x0, 0xff}], 0xe0)
socket$isdn(0x22, 0x3, 0x1)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
read$FUSE(r1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x134, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0xa0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd34}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x17d8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x53}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1660da69}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x825}, 0x40010)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0d03000000000000000013000000140009"], 0x28}}, 0x0)

2.746023202s ago: executing program 4 (id=1013):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
sendmsg$alg(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xe055}], 0x18}, 0x2400804c)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600), 0xfec8)
recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xe055}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680})

2.378607365s ago: executing program 5 (id=1014):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
recvmmsg(r1, &(0x7f0000004040)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000780)=""/115, 0x73}, {&(0x7f0000000940)=""/210, 0xd2}, {&(0x7f0000000a40)=""/164, 0xa4}, {&(0x7f0000000b00)=""/243, 0xf3}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000800)=""/54, 0x36}, {&(0x7f0000000c80)=""/83, 0x53}, {&(0x7f0000000d00)=""/151, 0x97}], 0x8, &(0x7f0000000e40)=""/255, 0xff}, 0x4}, {{&(0x7f0000000f40)=@nfc, 0x80, &(0x7f0000001040)=[{&(0x7f0000000fc0)=""/67, 0x43}], 0x1, &(0x7f0000001080)=""/227, 0xe3}, 0xfffffff3}, {{&(0x7f0000001180)=@tipc=@id, 0x80, &(0x7f0000001480)=[{&(0x7f0000001200)}, {&(0x7f0000001240)=""/112, 0x70}, {&(0x7f00000012c0)=""/202, 0xca}, {&(0x7f00000013c0)=""/173, 0xad}], 0x4, &(0x7f00000014c0)=""/34, 0x22}, 0x8f}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001500)=""/149, 0x95}, {&(0x7f00000015c0)=""/79, 0x4f}, {&(0x7f0000001640)=""/207, 0xcf}, {&(0x7f0000001740)=""/188, 0xbc}, {&(0x7f0000001800)=""/62, 0x3e}, {&(0x7f0000001840)=""/151, 0x97}, {&(0x7f0000001900)=""/246, 0xf6}, {&(0x7f0000001a00)}, {&(0x7f0000001a40)=""/14, 0xe}, {&(0x7f0000001a80)=""/201, 0xc9}], 0xa, &(0x7f0000001c40)=""/18, 0x12}, 0x5}, {{0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000001c80)=""/116, 0x74}, {&(0x7f0000001d00)=""/188, 0xbc}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/32, 0x20}, {&(0x7f0000002e00)=""/222, 0xde}, {&(0x7f0000002f00)=""/18, 0x12}, {&(0x7f0000002f40)=""/4096, 0x1000}], 0x7, &(0x7f0000003fc0)=""/89, 0x59}, 0x7ff}], 0x5, 0x0, &(0x7f0000004180)={0x77359400})
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', <r4=>0x0})
shutdown(0xffffffffffffffff, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r4, @ANYBLOB="080003"], 0x80}}, 0x8000)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7, 0x85}}, './file0\x00'})
sendmsg$alg(r1, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xe055}], 0x18}, 0x2400804c)
write$binfmt_script(r1, &(0x7f0000000600), 0xfec8)
recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x11}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680})

2.155991419s ago: executing program 4 (id=1015):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x48, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x34, 0x18, 0x0, 0x0, @binary="d4b5d895002b5897d0a928b277d27fc64a5f2844ce17bb27929832f12426b160310ca227257ccecadac32ca399dc611a"}]}, 0x48}}, 0x84)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e26, 0x3, 'dh\x00', 0x1, 0x7, 0x4b}, 0x2c)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@broadcast, 0x4e21, 0x10000, 0xc24, 0x0, 0xfffffffb}}, 0x44)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000200)={0x0, 0x0, 0x1, "e9"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x6, 0x6, "4dec19120344"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005ae4c41096050100f5050102030109021b0001000000000904d60001b5e145000905836f"], 0x0)
preadv(r3, &(0x7f0000000000)=[{&(0x7f0000001100)=""/4104, 0x1008}], 0x1, 0x33, 0x0)
pread64(r3, &(0x7f0000000180)=""/125, 0x7d, 0x1)
syz_usb_connect$cdc_ecm(0x6, 0x93, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x1, 0x1, 0x3, 0x40, 0x80, [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x2, {{0x7, 0x24, 0x6, 0x0, 0x0, "b693"}, {0x5, 0x24, 0x0, 0xb912}, {0xd, 0x24, 0xf, 0x1, 0x800, 0xd, 0xdeb, 0x9}, [@obex={0x5, 0x24, 0x15, 0x7}, @mdlm={0x15, 0x24, 0x12, 0x8001}, @country_functional={0x12, 0x24, 0x7, 0x7, 0x8010, [0x1, 0x7, 0x9, 0xf8cf, 0xffff, 0x8]}, @ncm={0x6, 0x24, 0x1a, 0x1, 0x2a}, @ncm={0x6, 0x24, 0x1a, 0x82, 0x19}, @mbim={0xc, 0x24, 0x1b, 0x9, 0xffff, 0x7, 0x2, 0x9, 0xe1}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x7, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x0, 0x6}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x4, 0xe5, 0x4, 0x8, 0x7}, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x480a}}]})

1.210123731s ago: executing program 0 (id=1016):
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
timerfd_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x77359400}}, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
write$UHID_INPUT(r2, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="64010101640101000000000006000000ac14143e00000000ac141415ac141421e0000001ac1414bb9a3b3ff05712aac0f49fc68c53528148334d427af4d56dc87fe23cbde10844627de5ae9346236abec662791d9e9dfc5902eda3ea6e9ab9616d7600be88b25e130c441b62452816c34c0714891f2a5487fb6129e73bf79b3ec7a1536013938df3ad532e695384cda730ab66841ada0dea2f9f713848bf2fb22c9114bd3c6a38181e5c758255af369377c8c602557fe5a58100"], 0x28)
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$sock_SIOCINQ(r4, 0x541b, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x810, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x5000000, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2247af9cd6fda14a}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0xffffffffffffff93, 0xa, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c080}, 0x2400c001)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fddbdf253100000008000100720000000c009900070000001900000008000300", @ANYRES32=r6], 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24040000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x84200, 0x140}, 0x18)
r7 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=<r8=>0x0)
timer_settime(r8, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r9, 0xc0182101, 0x0)
r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000400), 0x4400, 0x0)
preadv2(r10, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fe00}], 0x1, 0x0, 0x0, 0x2b)
close_range(r9, r9, 0x0)
ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x1})
r11 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
syz_usb_connect(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100005f8210206f0001805f99b25e659a249f664d0281e651b0fa000000f80300000258420000090501000000000000000000000000000000000000ee7d0e348c8a1809247253da6bf4306321670c6c07cd9a48114de1c9850d7029abbafffe"], 0x0)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r11, r11, r11}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha1-ssse3\x00'}})

1.066865237s ago: executing program 1 (id=1017):
unshare(0x20000400) (async)
unshare(0x10200) (async)
r0 = syz_io_uring_setup(0x3834, &(0x7f00000016c0)={0x0, 0x5a0f, 0x2006, 0x1, 0x36f}, &(0x7f0000000180), &(0x7f0000001740))
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000001780)={{0x1, 0x1, 0x18, <r1=>r0, {0x1df}}, './file0\x00'})
write$cgroup_int(r1, &(0x7f00000017c0)=0x3, 0x12) (async)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0)
unshare(0x40040580)
readv(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp6\x00')
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
read$FUSE(r2, &(0x7f0000001f80)={0x2020}, 0x2020) (async)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001200)=@nat={'nat\x00', 0x670, 0x5, 0x450, 0x210, 0x210, 0xfeffffff, 0x210, 0xe8, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6, 0x3}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@inet=@tcp={{0x30}, {[], [], 0x8, 0x0, 0x2, 0x6}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e24}}}}, {{@ip={@loopback, @rand_addr, 0xffffff00, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @port=0x4e24}}}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ipvlan1\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@multicast1, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) (async)
r4 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x1c)
pread64(r4, &(0x7f0000000200)=""/4088, 0xff8, 0x47) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
pread64(r5, &(0x7f00000000c0)=""/116, 0x74, 0x7e6aa325)

1.046289004s ago: executing program 3 (id=1018):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000300)='GPL\x00', 0x8, 0x62, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

843.490369ms ago: executing program 1 (id=1019):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1bf)
close(r2)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2}, './file1/file0\x00'})
openat$cgroup_subtree(r3, 0x0, 0x2, 0x0)
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x4000, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000240)={0x2, 0x0, 0x20006, 0xffffffff}, 0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d5800000000000004001a80140003006970766c616e310000000000000000005c"], 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0)

796.243489ms ago: executing program 3 (id=1020):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000007c0)=@broute={'broute\x00', 0x20, 0x1, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x3, 0x28, 0x1c, 'veth1_virt_wifi\x00', 'vlan0\x00', 'vlan1\x00', 'ip_vti0\x00', @remote, [0xff, 0x59740bcd435688db, 0x0, 0x0, 0x0, 0xff], @empty, [0xff, 0x0, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x1a6)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="d8000000100081044e81f782db44b904ae96ca7373e0021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67fef94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4063dc8efdb37c60fedef3d93452a92954b43370e9701ccef", 0xe8}], 0x1}, 0x20040800)

579.447214ms ago: executing program 3 (id=1021):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x20000003)
accept4(r1, 0x0, 0x0, 0x800)
shutdown(r1, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x4020, 0x0, "c3218d82c5896754d7cdb23c72887c897926a8856263b50c578ef1f9f362f16f21f5c872b1737718103bbde1a9d99011d25bbdff9c1351ba69e297337d6a5e4a948c1cbf827d6e95ad5bbfb5b3bd1929"}, 0xd8)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x1, &(0x7f00000000c0))
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000200)={0x28, 0x7, 0x0, 0x0, &(0x7f0000bd9000/0x3000)=nil, 0x3000})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, <r4=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000540)={0x48, 0x7, r4, 0x0, 0x10000, 0x0, 0xfffffffd, 0xd65ef, 0x27d104})

412.619342ms ago: executing program 5 (id=1022):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='&*,\x00', &(0x7f00000000c0)='/dev/video#\x00', 0x0)
sendto$inet(r1, &(0x7f0000000100)="1c", 0x5c, 0x0, &(0x7f0000001100)={0x2, 0x0, @private=0xfffffffc}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000300)={'sit0\x00', 0x0})
r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x80001, 0x2)
fallocate(0xffffffffffffffff, 0x4, 0x5, 0x1)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x1, 0x1, 0x2, "ce6ee5d16de249bbc297439b01784fc54e66ccf5e04ed5361e8f07a338e9819b", 0x50565559})

200.875002ms ago: executing program 3 (id=1023):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x10}, 0xc)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x7fff}, 0x1c)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="350000001a000000", @ANYRES32, @ANYBLOB="ba8164fb77393e154b762e0181a27d40babdf43ad76fe40f825888d9520fb409ebda1a47da8eb8e71f024b60", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0xd7fc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd90, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xd4, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x771, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x789], 0x1, 0x400})
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
getpeername$packet(r3, &(0x7f0000000340)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000500)={'syztnl1\x00', <r7=>r4, 0x4, 0x3, 0x7f, 0x5, 0x15, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40, 0x7, 0x7, 0xce3}})
sendmsg$nl_route(r5, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f00000016c0)=ANY=[@ANYBLOB="180100005400000126bd7000fbdbdf2507000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="000002000000000000000000000000000000000086dd000020000100", @ANYRES32=r4, @ANYBLOB="000200000a0101010000000000000000000000000800000020000100", @ANYRES32=r6, @ANYBLOB="00020100000000000000000000000000000000000000000020000100", @ANYRES32=r4, @ANYBLOB="0103030000000000000000000000ffffe000000286dd000020000100", @ANYRES32=r4, @ANYBLOB="01020300000000000000000000000000000000018edd000020000100", @ANYRES32=r4, @ANYBLOB="00000300e000000100000000000000000000000082dd000020000100", @ANYRES32=r4, @ANYBLOB="000101000a01010200000020000000000000040082dd000020000100", @ANYRES32=r7, @ANYBLOB="01000000ac1414aa00"/24], 0x118}, 0x1, 0x0, 0x0, 0x20008800}, 0x40000)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6, @broadcast}, 0x10)
r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r8, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SYNC(r8, 0x5001, 0x0)
ioctl$SNDCTL_DSP_RESET(r8, 0x5000, 0x0)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @local}, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r4, {0x7}, {0xd}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)
r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6})
write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8)
ioctl$SNDRV_PCM_IOCTL_RESET(r9, 0x4141, 0x0)

104.049693ms ago: executing program 4 (id=1024):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getresuid(0x0, &(0x7f0000000300), 0x0)
quotactl$Q_SETINFO(0xffffffff80000601, 0x0, 0x0, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301)
ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045515, &(0x7f0000000000)={0x1, 0x1})
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000002001c00"/28], 0x50)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x9, &(0x7f0000000080)=ANY=[@ANYBLOB="18060000000000000000", @ANYRES32=<r5=>r4, @ANYRESDEC=r3], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904"], 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r7, &(0x7f0000000240)={0x0, 0x22, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044848}, 0x4000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040800}, 0x0)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
syz_emit_ethernet(0x72, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r6, @ANYRESOCT=r5, @ANYRES32=r6, @ANYRES16, @ANYRES64=r7], 0x0)
syz_open_procfs(0x0, &(0x7f0000000280)='net/stat\x00')
pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r8, 0x5760, 0x5e)

0s ago: executing program 5 (id=1025):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x10, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0x10004, 0x5, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000000, 0xfffffffffffffffe, 0x20, 0x2, 0x0, 0x2004cc, 0x8000002, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x4000000000000002, 0x767], 0xeeef0000, 0x9a4c1})
ioctl(r2, 0x3af119db, &(0x7f0000000240)="6ea35348e177e3daf28f631fc9030c2a050b72c276e74114d2195bdf75614af341f14155c273edc8669a6759d556b88448ddf674ae090d983d04b502d6dc27a899962e86c0b6ab7a0eddec44c05a61")
rt_sigprocmask(0x0, &(0x7f0000000400)={[0xfffff7feffff7ffc]}, 0x0, 0x8)
r3 = gettid()
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000107d1e502d000000000001090224000100000004090400000403000200092100000001220300090581034000ee00000e3949ea638386ca06b2969ac2fdd4b192d9c842602795e3881ec57ef2f0cf0a194162"], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f0000000d40)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="0021be"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000640)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="4027100000bd83deb57d843acaa9026b5f83370778fa8e2f5b1393f543ac42"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
tkill(r3, 0x12)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = dup(r6)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x4000, 0x2000, &(0x7f0000004000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000140)="0f316526f0016600815a0e8fe858ec800000000017660fd26653242e0f7d517979800000c00f3235008000000f300f01c58fea40128c0a1c00000000300000", 0x3f}], 0x1, 0xd54cccd90f9c7753, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x6)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@newqdisc={0x114, 0x24, 0x408, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xc}, {0x4, 0xfff3}, {0xffe0, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x85}}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x7}}, @qdisc_kind_options=@q_cbq={{0x8}, {0xc4, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x9, '\x00', 0x7262, 0x32, 0x2, 0x835}}, @TCA_CBS_PARMS={0x18, 0x1, {0x3, '\x00', 0xffff3c7a, 0x7f, 0x7, 0xc}}, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x10, 0x7, 0xfffffffb, 0x3}}, @TCA_CBS_PARMS={0x18, 0x1, {0x4, '\x00', 0x8000, 0x9, 0x0, 0xfff}}, @TCA_CBS_PARMS={0x18, 0x1, {0x7, '\x00', 0x80, 0x5, 0x2, 0xfffffffc}}, @TCA_CBS_PARMS={0x18, 0x1, {0x4, '\x00', 0x8, 0x1000, 0xfffffffc}}, @TCA_CBS_PARMS={0x18, 0x1, {0x9, '\x00', 0xf, 0x8, 0xff, 0x2}}, @TCA_CBS_PARMS={0x18, 0x1, {0x29, '\x00', 0x2a, 0xffff, 0x9, 0xc}}]}}]}, 0x114}, 0x1, 0x0, 0x0, 0x440d5}, 0x240000a5)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, &(0x7f0000000580))
syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
rt_sigsuspend(&(0x7f0000000100)={[0x1]}, 0x8)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

7 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) 
[  283.043772][ T8298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  283.043785][ T8298] Call Trace:
[  283.043794][ T8298]  <TASK>
[  283.043804][ T8298]  dump_stack_lvl+0x189/0x250
[  283.043844][ T8298]  ? __pfx____ratelimit+0x10/0x10
[  283.043878][ T8298]  ? __pfx_dump_stack_lvl+0x10/0x10
[  283.043930][ T8298]  ? __pfx__printk+0x10/0x10
[  283.043954][ T8298]  ? fs_reclaim_acquire+0x7d/0x100
[  283.043989][ T8298]  should_fail_ex+0x414/0x560
[  283.044022][ T8298]  prepare_alloc_pages+0x213/0x610
[  283.044057][ T8298]  __alloc_frozen_pages_noprof+0x123/0x370
[  283.044089][ T8298]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  283.044136][ T8298]  alloc_pages_mpol+0x232/0x4a0
[  283.044164][ T8298]  alloc_pages_noprof+0xa9/0x190
[  283.044190][ T8298]  get_free_pages_noprof+0xf/0x80
[  283.044217][ T8298]  skcipher_walk_next+0x83b/0xbe0
[  283.044260][ T8298]  xts_xor_tweak+0x312/0x650
[  283.044301][ T8298]  ? __pfx_xts_xor_tweak+0x10/0x10
[  283.044329][ T8298]  ? cipher_crypt_one+0x13f/0x270
[  283.044363][ T8298]  ? af_alg_pull_tsgl+0x614/0x720
[  283.044399][ T8298]  xts_decrypt+0x290/0x3a0
[  283.044434][ T8298]  skcipher_recvmsg+0xb11/0x11c0
[  283.044488][ T8298]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  283.044522][ T8298]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  283.044569][ T8298]  ? security_socket_recvmsg+0x7e/0x2e0
[  283.044591][ T8298]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  283.044622][ T8298]  sock_recvmsg+0x229/0x270
[  283.044649][ T8298]  ____sys_recvmsg+0x1c9/0x460
[  283.044688][ T8298]  ? __pfx_____sys_recvmsg+0x10/0x10
[  283.044736][ T8298]  ? import_iovec+0x74/0xa0
[  283.044763][ T8298]  ___sys_recvmsg+0x1b5/0x510
[  283.044800][ T8298]  ? __pfx____sys_recvmsg+0x10/0x10
[  283.044857][ T8298]  ? __fget_files+0x3a0/0x420
[  283.044895][ T8298]  __x64_sys_recvmsg+0x198/0x260
[  283.044934][ T8298]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  283.044975][ T8298]  ? __pfx_ksys_write+0x10/0x10
[  283.044993][ T8298]  ? rcu_is_watching+0x15/0xb0
[  283.045018][ T8298]  ? do_syscall_64+0xbe/0x3b0
[  283.045044][ T8298]  do_syscall_64+0xfa/0x3b0
[  283.045064][ T8298]  ? lockdep_hardirqs_on+0x9c/0x150
[  283.045098][ T8298]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.045119][ T8298]  ? clear_bhb_loop+0x60/0xb0
[  283.045145][ T8298]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.045166][ T8298] RIP: 0033:0x7f7b6658e929
[  283.045185][ T8298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  283.045203][ T8298] RSP: 002b:00007f7b674e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  283.045225][ T8298] RAX: ffffffffffffffda RBX: 00007f7b667b5fa0 RCX: 00007f7b6658e929
[  283.045242][ T8298] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004
[  283.045256][ T8298] RBP: 00007f7b674e3090 R08: 0000000000000000 R09: 0000000000000000
[  283.045269][ T8298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  283.045281][ T8298] R13: 0000000000000000 R14: 00007f7b667b5fa0 R15: 00007f7b668dfa28
[  283.045315][ T8298]  </TASK>
[  283.508529][   T24] usb 4-1: Using ep0 maxpacket: 32
[  283.606600][   T24] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[  283.623804][   T24] usb 4-1: config 0 has no interface number 0
[  283.629990][   T24] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  283.698907][   T24] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  283.710280][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.743756][   T24] usb 4-1: Product: syz
[  283.748008][   T24] usb 4-1: Manufacturer: syz
[  283.752620][   T24] usb 4-1: SerialNumber: syz
[  283.777394][   T24] usb 4-1: config 0 descriptor??
[  283.798526][   T24] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  283.823239][   T24] em28xx 4-1:0.132: Video interface 132 found:
[  283.934563][ T5927] usb 3-1: new full-speed USB device number 43 using dummy_hcd
[  284.095995][ T5927] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  284.121385][ T5927] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping
[  284.143843][ T5927] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  284.169709][ T5927] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  284.181095][ T5927] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  284.196734][ T8296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  284.206106][   T24] em28xx 4-1:0.132: unknown em28xx chip ID (0)
[  284.217595][ T8296] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  284.227259][ T5927] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023
[  284.252428][ T5927] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  284.271214][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.281715][ T5927] usb 3-1: Product: syz
[  284.288473][ T5927] usb 3-1: Manufacturer: syz
[  284.293122][ T5927] usb 3-1: SerialNumber: syz
[  284.309000][   T24] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  284.323021][   T24] em28xx 4-1:0.132: board has no eeprom
[  284.393663][   T24] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  284.401680][   T24] em28xx 4-1:0.132: analog set to bulk mode.
[  284.409142][ T5926] em28xx 4-1:0.132: Registering V4L2 extension
[  284.433953][   T24] usb 4-1: USB disconnect, device number 48
[  284.441762][   T24] em28xx 4-1:0.132: Disconnecting em28xx
[  284.584876][ T8308] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  284.654404][ T5926] em28xx 4-1:0.132: Config register raw data: 0xffffffed
[  284.661860][ T5926] em28xx 4-1:0.132: AC97 chip type couldn't be determined
[  284.688179][ T5926] em28xx 4-1:0.132: No AC97 audio processor
[  284.691286][ T8308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  284.709890][ T5926] usb 4-1: Decoder not found
[  284.721953][ T5926] em28xx 4-1:0.132: failed to create media graph
[  284.731000][ T5926] em28xx 4-1:0.132: V4L2 device video103 deregistered
[  284.745500][ T8308] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  284.753003][ T5926] em28xx 4-1:0.132: Remote control support is not available for this card.
[  284.836890][   T24] em28xx 4-1:0.132: Closing input extension
[  284.910471][   T24] em28xx 4-1:0.132: Freeing device
[  284.991472][ T8308] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  285.244599][ T8345] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  285.422492][ T5927] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  285.583038][ T5927] usb 3-1: USB disconnect, device number 43
[  285.681381][ T8351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.641'.
[  285.726648][ T8351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.641'.
[  285.985043][ T8361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  286.068629][ T8361] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  286.148191][ T8361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  286.159163][ T8361] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  286.303600][   T45] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  286.455365][   T45] usb 1-1: Using ep0 maxpacket: 8
[  286.469671][   T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  286.522504][   T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  286.532564][   T45] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[  286.542677][   T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.559510][   T45] usb 1-1: config 0 descriptor??
[  286.775939][ T8377] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1124
[  287.063746][    T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  287.128038][   T45] holtek 0003:1241:5015.0008: unknown main item tag 0x0
[  287.156312][   T45] holtek 0003:1241:5015.0008: unknown main item tag 0x0
[  287.178473][   T45] holtek 0003:1241:5015.0008: unknown main item tag 0x0
[  287.195342][   T45] holtek 0003:1241:5015.0008: unknown main item tag 0x0
[  287.231930][   T45] holtek 0003:1241:5015.0008: unknown main item tag 0x0
[  287.233709][    T9] usb 5-1: Using ep0 maxpacket: 8
[  287.257886][   T45] holtek 0003:1241:5015.0008: hidraw1: USB HID vff.ff Device [HID 1241:5015] on usb-dummy_hcd.0-1/input0
[  287.258604][    T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  287.312240][    T9] usb 5-1: config 0 has no interface number 0
[  287.313622][   T45] holtek 0003:1241:5015.0008: no inputs found
[  287.330539][    T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  287.378108][    T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  287.421055][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.462362][    T9] usb 5-1: config 0 descriptor??
[  287.509035][    T9] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  288.370138][ T8401] batadv_slave_1: entered promiscuous mode
[  288.537245][ T8401] batadv_slave_1: left promiscuous mode
[  288.788954][ T8410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  288.795034][   T24] usb 5-1: USB disconnect, device number 36
[  288.830224][ T8410] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  288.946915][ T8410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  288.963972][ T5927] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  289.043154][ T8410] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.070585][ T8378] delete_channel: no stack
[  289.078310][   T24] usb 1-1: USB disconnect, device number 42
[  289.143668][ T5927] usb 4-1: Using ep0 maxpacket: 32
[  289.155709][ T5927] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  289.203874][ T5927] usb 4-1: config 1 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  289.240787][ T8413] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  289.240974][ T5927] usb 4-1: config 1 interface 0 has no altsetting 0
[  289.276674][ T5927] usb 4-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.3d
[  289.289214][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.303741][ T5927] usb 4-1: Product: syz
[  289.308361][ T5927] usb 4-1: Manufacturer: syz
[  289.317802][ T5927] usb 4-1: SerialNumber: syz
[  289.745195][ T8418] geneve2: entered promiscuous mode
[  290.514758][    T9] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  290.621792][ T8432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  290.631177][ T8432] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  290.683610][    T9] usb 3-1: Using ep0 maxpacket: 8
[  290.691081][    T9] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  290.700575][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.712718][    T9] usb 3-1: config 0 descriptor??
[  291.145959][ T8440] loop2: detected capacity change from 0 to 7
[  291.153913][ T8440] Dev loop2: unable to read RDB block 7
[  291.159576][ T8440]  loop2: AHDI p2 p3
[  291.163780][ T8440] loop2: partition table partially beyond EOD, truncated
[  291.172367][ T8440] loop2: p2 size 150995456 extends beyond EOD, truncated
[  291.282103][ T6255] udevd[6255]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  291.905730][ T5927] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input16
[  291.989863][ T5191] bcm5974 4-1:1.0: could not read from device
[  292.016174][ T5191] bcm5974 4-1:1.0: could not read from device
[  292.030474][ T5927] usb 4-1: USB disconnect, device number 49
[  292.120724][ T6255] udevd[6255]: Error opening device "/dev/input/event4": No such file or directory
[  292.156651][ T8448] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.670' sets config #1
[  292.201076][ T6255] udevd[6255]: Unable to EVIOCGABS device "/dev/input/event4"
[  292.220886][ T6255] udevd[6255]: Unable to EVIOCGABS device "/dev/input/event4"
[  292.231153][ T6255] udevd[6255]: Unable to EVIOCGABS device "/dev/input/event4"
[  292.239269][ T6255] udevd[6255]: Unable to EVIOCGABS device "/dev/input/event4"
[  293.013115][    T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  293.041656][    T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[  293.090220][    T9] asix 3-1:0.0: probe with driver asix failed with error -71
[  293.134372][ T5911] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  293.149532][    T9] usb 3-1: USB disconnect, device number 44
[  293.395617][ T5911] usb 1-1: config 8 has an invalid interface number: 29 but max is 1
[  293.453340][ T5911] usb 1-1: config 8 has an invalid interface number: 49 but max is 1
[  293.651040][ T5911] usb 1-1: config 8 has an invalid interface number: 5 but max is 1
[  293.696124][ T5911] usb 1-1: config 8 has an invalid descriptor of length 1, skipping remainder of the config
[  293.772430][ T5911] usb 1-1: config 8 has 3 interfaces, different from the descriptor's value: 2
[  293.848940][ T5911] usb 1-1: config 8 has no interface number 0
[  293.867370][ T5911] usb 1-1: config 8 has no interface number 1
[  293.881374][ T5911] usb 1-1: config 8 has no interface number 2
[  293.944851][ T5911] usb 1-1: config 8 interface 29 altsetting 7 endpoint 0xB has an invalid bInterval 231, changing to 11
[  293.973784][ T8468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  293.993668][ T5911] usb 1-1: config 8 interface 29 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  294.023706][   T24] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  294.051672][ T5911] usb 1-1: config 8 interface 29 altsetting 7 endpoint 0x5 has an invalid bInterval 227, changing to 7
[  294.052494][ T8468] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  294.127899][ T5911] usb 1-1: config 8 interface 29 altsetting 7 has a duplicate endpoint with address 0x6, skipping
[  294.157910][ T5911] usb 1-1: config 8 interface 29 altsetting 7 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[  294.163764][   T24] usb 3-1: device descriptor read/64, error -71
[  294.183643][ T5911] usb 1-1: config 8 interface 29 altsetting 7 has a duplicate endpoint with address 0xB, skipping
[  294.254432][ T5911] usb 1-1: config 8 interface 29 altsetting 7 endpoint 0xF has invalid maxpacket 20245, setting to 64
[  294.293611][ T5911] usb 1-1: config 8 interface 29 altsetting 7 has a duplicate endpoint with address 0x8, skipping
[  294.337487][ T5911] usb 1-1: config 8 interface 29 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  294.359994][ T5911] usb 1-1: config 8 interface 49 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 14
[  294.410683][ T5911] usb 1-1: too many endpoints for config 8 interface 5 altsetting 8: 57, using maximum allowed: 30
[  294.441993][ T5911] usb 1-1: config 8 interface 5 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 57
[  294.443691][   T24] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  294.488435][ T5911] usb 1-1: config 8 interface 29 has no altsetting 0
[  294.524670][ T8471] fuse: Invalid rootmode
[  294.529425][ T5911] usb 1-1: config 8 interface 49 has no altsetting 0
[  294.547769][ T8471] netlink: 84 bytes leftover after parsing attributes in process `syz.1.676'.
[  294.567418][ T5911] usb 1-1: config 8 interface 5 has no altsetting 0
[  294.600405][ T5911] usb 1-1: New USB device found, idVendor=0f11, idProduct=1042, bcdDevice=4c.43
[  294.624276][   T24] usb 3-1: device descriptor read/64, error -71
[  294.640919][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.671516][ T5911] usb 1-1: Product: syz
[  294.692011][ T5911] usb 1-1: Manufacturer: ࠐ
[  294.718819][ T5911] usb 1-1: SerialNumber: syz
[  294.744059][   T24] usb usb3-port1: attempt power cycle
[  294.762079][ T8459] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  294.903176][ T8477] loop2: detected capacity change from 0 to 7
[  294.911845][ T8477] Dev loop2: unable to read RDB block 7
[  294.919394][ T8477]  loop2: AHDI p2 p3
[  294.923401][ T8477] loop2: partition table partially beyond EOD, truncated
[  294.931609][ T8477] loop2: p2 size 150995456 extends beyond EOD, truncated
[  294.982384][ T5911] ldusb 1-1:8.29: Interrupt in endpoint not found
[  294.992977][ T6255] udevd[6255]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  295.007232][ T5911] ldusb 1-1:8.49: Interrupt in endpoint not found
[  295.035845][ T5911] ldusb 1-1:8.5: Interrupt in endpoint not found
[  295.070180][ T5911] usb 1-1: USB disconnect, device number 43
[  295.103653][   T24] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  295.131461][   T24] usb 3-1: device descriptor read/8, error -71
[  295.374399][   T24] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  295.424712][   T24] usb 3-1: device descriptor read/8, error -71
[  295.534006][   T24] usb usb3-port1: unable to enumerate USB device
[  295.813626][    T9] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  295.851143][ T8493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.682'.
[  296.153689][   T24] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  296.527349][    T9] usb 4-1: Using ep0 maxpacket: 32
[  296.545283][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  296.558570][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  296.578441][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  296.598797][    T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  296.653675][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  296.672323][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.692897][    T9] usb 4-1: Product: syz
[  296.731164][    T9] usb 4-1: Manufacturer: syz
[  296.772457][    T9] usb 4-1: SerialNumber: syz
[  296.794752][   T24] usb 5-1: Using ep0 maxpacket: 8
[  296.803421][   T24] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  296.816847][   T24] usb 5-1: config 135 has 0 interfaces, different from the descriptor's value: 1
[  296.843137][   T24] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  296.865722][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.883727][   T24] usb 5-1: Product: syz
[  296.888014][   T24] usb 5-1: Manufacturer: syz
[  296.905648][   T24] usb 5-1: SerialNumber: syz
[  296.958932][ T8502] x_tables: duplicate underflow at hook 3
[  297.139276][   T24] usb 5-1: USB disconnect, device number 37
[  297.714184][ T5911] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  297.889535][ T5911] usb 1-1: unable to get BOS descriptor or descriptor too short
[  297.903207][ T5911] usb 1-1: config 1 has an invalid interface number: 43 but max is 1
[  297.912664][ T5911] usb 1-1: config 1 has no interface number 1
[  297.926630][ T5911] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  297.929616][ T8520] loop2: detected capacity change from 0 to 7
[  297.947836][ T5911] usb 1-1: config 1 interface 0 has no altsetting 0
[  297.957131][ T8520] Dev loop2: unable to read RDB block 7
[  297.962932][ T8520]  loop2: AHDI p2 p3
[  297.970484][ T8520] loop2: partition table partially beyond EOD, truncated
[  297.971975][ T5911] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  297.977889][ T8520] loop2: p2 size 150995456 extends beyond EOD, 
[  297.987689][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.004036][ T8520] truncated
[  298.008528][ T5911] usb 1-1: Product: syz
[  298.070747][ T5911] usb 1-1: Manufacturer: syz
[  298.075482][ T5911] usb 1-1: SerialNumber: syz
[  298.257460][ T6255] udevd[6255]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  298.353820][ T5911] smsusb:smsusb_probe: board id=8, interface number 0
[  298.413113][ T5911] smsusb:smsusb_probe: board id=8, interface number 43
[  298.487862][    T9] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[  298.536450][    T9] cdc_ncm 4-1:1.0: bind() failure
[  298.563740][ T5911] usb 1-1: USB disconnect, device number 44
[  298.607897][    T9] usb 4-1: USB disconnect, device number 50
[  298.738202][   T30] kauditd_printk_skb: 114 callbacks suppressed
[  298.738222][   T30] audit: type=1326 audit(1749407098.485:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8530 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6658e929 code=0x7ffc0000
[  298.879851][   T30] audit: type=1326 audit(1749407098.495:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8530 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6658e929 code=0x7ffc0000
[  299.032444][   T30] audit: type=1326 audit(1749407098.495:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8530 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f7b6658e929 code=0x7ffc0000
[  299.130252][   T30] audit: type=1326 audit(1749407098.545:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8530 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7b6658e963 code=0x7ffc0000
[  299.277022][   T30] audit: type=1326 audit(1749407098.545:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8530 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7b6658e963 code=0x7ffc0000
[  299.373162][   T30] audit: type=1326 audit(1749407098.545:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8530 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6658e929 code=0x7ffc0000
[  299.409515][   T30] audit: type=1326 audit(1749407098.545:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8530 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6658e929 code=0x7ffc0000
[  299.456759][   T30] audit: type=1326 audit(1749407098.595:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8530 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7b6658e929 code=0x7ffc0000
[  299.490246][   T30] audit: type=1326 audit(1749407098.595:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8530 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6658e929 code=0x7ffc0000
[  299.517415][   T30] audit: type=1326 audit(1749407098.595:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8530 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6658e929 code=0x7ffc0000
[  299.643626][ T5911] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  299.817428][ T5911] usb 5-1: config 0 has no interfaces?
[  299.878294][ T5911] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  299.903650][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.972365][ T5911] usb 5-1: Product: syz
[  300.021761][ T5926] IPVS: starting estimator thread 0...
[  300.024125][ T5911] usb 5-1: Manufacturer: syz
[  300.031920][ T5911] usb 5-1: SerialNumber: syz
[  300.073061][ T8554] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2248643489 (17989147912 ns) > initial count (11631199424 ns). Using initial count to start timer.
[  300.100038][ T5911] usb 5-1: config 0 descriptor??
[  300.123642][ T8555] IPVS: using max 29 ests per chain, 69600 per kthread
[  300.277041][ T8536] fuse: Bad value for 'fd'
[  300.773739][    T9] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  300.953640][    T9] usb 1-1: Using ep0 maxpacket: 8
[  300.965195][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  300.987807][    T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[  301.010134][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[  301.041294][    T9] usb 1-1: SerialNumber: syz
[  301.051746][    T9] usb 1-1: config 0 descriptor??
[  301.060018][    T9] usb 1-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[  301.069498][    T9] usb 1-1: No valid video chain found.
[  301.253595][ T5926] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  301.262606][    T9] usb 1-1: USB disconnect, device number 45
[  301.434448][ T5926] usb 3-1: too many configurations: 255, using maximum allowed: 8
[  301.480302][ T5926] usb 3-1: unable to read config index 0 descriptor/start: -61
[  301.577943][ T5926] usb 3-1: can't read configurations, error -61
[  301.743647][ T5926] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  301.914447][ T5926] usb 3-1: too many configurations: 255, using maximum allowed: 8
[  301.929922][ T5926] usb 3-1: unable to read config index 0 descriptor/start: -61
[  301.964262][ T5926] usb 3-1: can't read configurations, error -61
[  301.976712][ T8582] FAULT_INJECTION: forcing a failure.
[  301.976712][ T8582] name failslab, interval 1, probability 0, space 0, times 0
[  302.013172][ T5926] usb usb3-port1: attempt power cycle
[  302.100950][ T8582] CPU: 0 UID: 0 PID: 8582 Comm: syz.0.707 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) 
[  302.100998][ T8582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  302.101011][ T8582] Call Trace:
[  302.101020][ T8582]  <TASK>
[  302.101029][ T8582]  dump_stack_lvl+0x189/0x250
[  302.101069][ T8582]  ? __pfx____ratelimit+0x10/0x10
[  302.101103][ T8582]  ? __pfx_dump_stack_lvl+0x10/0x10
[  302.101136][ T8582]  ? __pfx__printk+0x10/0x10
[  302.101166][ T8582]  ? __pfx___might_resched+0x10/0x10
[  302.101185][ T8582]  ? fs_reclaim_acquire+0x7d/0x100
[  302.101216][ T8582]  should_fail_ex+0x414/0x560
[  302.101251][ T8582]  should_failslab+0xa8/0x100
[  302.101277][ T8582]  __kmalloc_noprof+0xcb/0x4f0
[  302.101298][ T8582]  ? kfree+0x4d/0x440
[  302.101314][ T8582]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  302.101351][ T8582]  tomoyo_realpath_from_path+0xe3/0x5d0
[  302.101395][ T8582]  ? tomoyo_domain+0xd9/0x130
[  302.101432][ T8582]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  302.101458][ T8582]  tomoyo_path_number_perm+0x1e8/0x5a0
[  302.101488][ T8582]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  302.101533][ T8582]  ? __lock_acquire+0xab9/0xd20
[  302.101584][ T8582]  ? __fget_files+0x2a/0x420
[  302.101612][ T8582]  ? __fget_files+0x2a/0x420
[  302.101636][ T8582]  ? __fget_files+0x3a0/0x420
[  302.101659][ T8582]  ? __fget_files+0x2a/0x420
[  302.101687][ T8582]  security_file_ioctl+0xcb/0x2d0
[  302.101715][ T8582]  __se_sys_ioctl+0x47/0x170
[  302.101750][ T8582]  do_syscall_64+0xfa/0x3b0
[  302.101769][ T8582]  ? lockdep_hardirqs_on+0x9c/0x150
[  302.101792][ T8582]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.101806][ T8582]  ? clear_bhb_loop+0x60/0xb0
[  302.101823][ T8582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.101837][ T8582] RIP: 0033:0x7fe62018e929
[  302.101850][ T8582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  302.101863][ T8582] RSP: 002b:00007fe621034038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  302.101878][ T8582] RAX: ffffffffffffffda RBX: 00007fe6203b6080 RCX: 00007fe62018e929
[  302.101889][ T8582] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  302.101897][ T8582] RBP: 00007fe621034090 R08: 0000000000000000 R09: 0000000000000000
[  302.101906][ T8582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  302.101915][ T8582] R13: 0000000000000000 R14: 00007fe6203b6080 R15: 00007fe6204dfa28
[  302.101936][ T8582]  </TASK>
[  302.346918][    C0] vkms_vblank_simulate: vblank timer overrun
[  302.359409][ T8582] ERROR: Out of memory at tomoyo_realpath_from_path.
[  302.423626][ T5926] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  302.601154][ T5926] usb 3-1: too many configurations: 255, using maximum allowed: 8
[  302.685644][ T5926] usb 3-1: unable to read config index 0 descriptor/start: -61
[  302.694045][ T5926] usb 3-1: can't read configurations, error -61
[  302.833914][ T5911] usb 5-1: USB disconnect, device number 38
[  302.843671][ T5926] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  302.915291][ T5926] usb 3-1: too many configurations: 255, using maximum allowed: 8
[  302.956859][ T5926] usb 3-1: unable to read config index 0 descriptor/start: -61
[  302.974704][ T5926] usb 3-1: can't read configurations, error -61
[  302.990758][ T5926] usb usb3-port1: unable to enumerate USB device
[  303.461487][ T8603] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  303.520500][ T8603] netlink: 20 bytes leftover after parsing attributes in process `syz.1.714'.
[  304.333459][ T8619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.718'.
[  304.557031][ T8630] VFS: Mount too revealing
[  305.633721][ T5911] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  306.046776][ T5911] usb 3-1: Using ep0 maxpacket: 16
[  306.145110][ T5911] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[  306.178469][ T5911] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  306.215089][ T5911] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  306.248510][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.291628][ T5911] usb 3-1: Product: syz
[  306.313449][ T5911] usb 3-1: Manufacturer: syz
[  306.329422][ T5911] usb 3-1: SerialNumber: syz
[  306.912120][ T5911] usb 3-1: 0:2 : does not exist
[  306.953435][ T5911] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  307.066890][ T5911] usb 3-1: USB disconnect, device number 53
[  307.232658][ T7227] udevd[7227]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  307.273602][ T5926] usb 5-1: new full-speed USB device number 39 using dummy_hcd
[  307.330103][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.730'.
[  307.384102][ T8663] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  307.392837][ T5918] IPVS: starting estimator thread 0...
[  307.456430][ T8667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  307.466301][ T8667] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  307.505280][ T5926] usb 5-1: config 0 has an invalid interface number: 230 but max is 0
[  307.514507][ T5926] usb 5-1: config 0 has no interface number 0
[  307.521094][ T5926] usb 5-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  307.532152][ T8664] IPVS: using max 37 ests per chain, 88800 per kthread
[  307.545463][ T5926] usb 5-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  307.558513][ T5926] usb 5-1: config 0 interface 230 has no altsetting 0
[  307.593951][ T5926] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[  307.608858][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.618839][ T5926] usb 5-1: Product: syz
[  307.623114][ T5926] usb 5-1: Manufacturer: syz
[  307.632355][ T5926] usb 5-1: SerialNumber: syz
[  307.649063][ T5926] usb 5-1: config 0 descriptor??
[  307.663920][   T24] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  307.676395][ T8661] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  307.684359][ T8661] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  307.734202][ T5926] ums-usbat 5-1:0.230: USB Mass Storage device detected
[  307.771081][ T5926] ums-usbat 5-1:0.230: Quirks match for vid 0781 pid 0005: 1
[  307.828433][   T24] usb 4-1: Using ep0 maxpacket: 16
[  307.849750][   T24] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  307.859595][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.884276][   T24] usb 4-1: Product: syz
[  307.900959][   T24] usb 4-1: Manufacturer: syz
[  307.913591][   T24] usb 4-1: SerialNumber: syz
[  307.940557][   T24] r8152-cfgselector 4-1: Unknown version 0x0000
[  307.953927][   T24] r8152-cfgselector 4-1: config 0 descriptor??
[  307.966791][ T8678] loop2: detected capacity change from 0 to 7
[  307.978435][ T8678] Dev loop2: unable to read RDB block 7
[  307.998805][ T8678]  loop2: unable to read partition table
[  308.008983][ T8678] loop2: partition table beyond EOD, truncated
[  308.031404][ T8678] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  309.047191][ T5918] usb 1-1: new low-speed USB device number 46 using dummy_hcd
[  309.224413][ T5918] usb 1-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  309.259012][ T5918] usb 1-1: config 1 interface 0 has no altsetting 0
[  309.287009][ T5918] usb 1-1: string descriptor 0 read error: -22
[  309.293919][ T5918] usb 1-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.40
[  309.310329][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.544256][ T8693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  309.553442][ T8693] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  310.254787][ T5926] ums-usbat 5-1:0.230: probe with driver ums-usbat failed with error -5
[  310.321933][ T5926] usb 5-1: USB disconnect, device number 39
[  310.500968][    T9] r8152-cfgselector 4-1: USB disconnect, device number 51
[  310.626302][ T8714] loop2: detected capacity change from 0 to 7
[  310.645376][ T8714] Dev loop2: unable to read RDB block 7
[  310.658455][ T8714]  loop2: unable to read partition table
[  310.668703][ T8714] loop2: partition table beyond EOD, truncated
[  310.682605][ T8714] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  310.990904][ T8720] netlink: 60 bytes leftover after parsing attributes in process `syz.1.746'.
[  311.671087][ T5918] usbhid 1-1:1.0: can't add hid device: -71
[  311.689259][ T5918] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  311.736499][ T5918] usb 1-1: USB disconnect, device number 46
[  311.832837][ T8731] xt_CT: No such helper "netbios-ns"
[  312.028883][ T5927] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  312.206766][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  312.363264][ T5927] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  312.376833][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  312.403629][ T5926] usb 5-1: new low-speed USB device number 40 using dummy_hcd
[  312.413621][ T5927] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  312.469163][ T5927] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  312.488591][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.515286][ T5927] usb 3-1: config 0 descriptor??
[  312.825679][ T5926] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x82 is Bulk; changing to Interrupt
[  312.918493][ T5927] hdpvr 3-1:0.0: unexpected answer of status request, len -71
[  312.928279][ T8760] loop2: detected capacity change from 0 to 7
[  312.970976][ T5926] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x3 is Bulk; changing to Interrupt
[  312.974974][ T8760] Dev loop2: unable to read RDB block 7
[  312.985076][ T5927] hdpvr 3-1:0.0: device init failed
[  313.005603][ T5927] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12
[  313.013307][ T5926] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x3 has invalid wMaxPacketSize 0
[  313.028056][ T8760]  loop2: unable to read partition table
[  313.034276][ T8760] loop2: partition table beyond EOD, truncated
[  313.035279][ T5927] usb 3-1: USB disconnect, device number 54
[  313.056239][ T5926] usb 5-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  313.084150][ T5926] usb 5-1: config 1 interface 0 has no altsetting 0
[  313.098907][ T5926] usb 5-1: string descriptor 0 read error: -22
[  313.099477][ T8760] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  313.105835][ T5926] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  313.137621][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.167954][ T8749] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  313.178666][ T5926] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22
[  313.400627][ T8749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  313.454872][ T8761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  313.504233][ T8749] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  313.559192][ T8761] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  313.605623][ T5927] usb 5-1: USB disconnect, device number 40
[  313.883624][ T5926] usb 3-1: new full-speed USB device number 55 using dummy_hcd
[  314.045980][ T5926] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  314.063152][ T5926] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  314.096711][ T5926] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  314.133750][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.269321][ T8773] syzkaller1: tun_chr_ioctl cmd 1074025677
[  314.279284][ T8773] syzkaller1: Refused to change device type
[  314.289109][ T8773] netlink: 12 bytes leftover after parsing attributes in process `syz.4.762'.
[  314.412999][ T5926] usb 3-1: GET_CAPABILITIES returned 0
[  314.424729][ T5926] usbtmc 3-1:16.0: can't read capabilities
[  314.529285][   T30] kauditd_printk_skb: 22 callbacks suppressed
[  314.529305][   T30] audit: type=1800 audit(1749407114.275:231): pid=8780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.763" name="nullb0" dev="devtmpfs" ino=3292 res=0 errno=0
[  314.556497][    C0] vkms_vblank_simulate: vblank timer overrun
[  314.612532][ T8765] sch_fq: defrate 16 ignored.
[  314.763714][ T5926] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  314.868535][ T8789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  314.883023][ T8789] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  314.924514][ T5926] usb 5-1: Using ep0 maxpacket: 32
[  314.935247][ T5926] usb 5-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 124, changing to 10
[  314.947579][ T5926] usb 5-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  314.960931][ T5926] usb 5-1: config 1 interface 0 has no altsetting 0
[  314.973656][ T5926] usb 5-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice= 0.40
[  314.986422][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.995471][ T5926] usb 5-1: Product: syz
[  314.999885][ T5926] usb 5-1: Manufacturer: syz
[  315.024801][ T5926] usb 5-1: SerialNumber: syz
[  315.307292][ T5926] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input17
[  315.358784][ T5191] bcm5974 5-1:1.0: could not read from device
[  315.395235][ T5926] usb 5-1: USB disconnect, device number 41
[  315.414197][ T5191] bcm5974 5-1:1.0: could not read from device
[  316.655885][   T24] usb 3-1: USB disconnect, device number 55
[  316.738495][ T8814] sctp: [Deprecated]: syz.0.769 (pid 8814) Use of struct sctp_assoc_value in delayed_ack socket option.
[  316.738495][ T8814] Use struct sctp_sack_info instead
[  316.846923][ T8816] x_tables: duplicate underflow at hook 2
[  317.215610][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  317.222005][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  317.698160][ T8835] netlink: 'syz.3.775': attribute type 3 has an invalid length.
[  317.739894][ T8835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.775'.
[  317.994068][ T5918] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  318.029779][ T8842] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  318.153651][ T5918] usb 3-1: Using ep0 maxpacket: 32
[  318.173101][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  318.201306][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  318.201358][ T5918] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[  318.201383][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.224042][ T5911] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  318.243737][ T5918] usb 3-1: config 0 descriptor??
[  318.353690][ T5911] usb 1-1: device descriptor read/64, error -71
[  318.597757][ T5911] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  318.632375][ T8851] syzkaller0: tun_chr_ioctl cmd 1074025676
[  318.659250][ T8851] syzkaller0: owner set to 0
[  318.743773][ T5911] usb 1-1: device descriptor read/64, error -71
[  318.875722][ T5911] usb usb1-port1: attempt power cycle
[  318.963479][ T5918] aquacomputer_d5next 0003:0C70:F0B6.0009: unknown main item tag 0x2
[  319.006655][ T5918] aquacomputer_d5next 0003:0C70:F0B6.0009: hidraw1: USB HID vff.fc Device [HID 0c70:f0b6] on usb-dummy_hcd.2-1/input0
[  319.243687][ T5911] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  319.278161][ T5911] usb 1-1: device descriptor read/8, error -71
[  319.375149][   T24] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  319.523692][ T5911] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  319.547981][ T5911] usb 1-1: device descriptor read/8, error -71
[  319.583655][   T24] usb 4-1: Using ep0 maxpacket: 32
[  319.593095][   T24] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[  319.603445][   T24] usb 4-1: config 0 has no interface number 0
[  319.611542][   T24] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  319.628769][   T24] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  319.639940][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  319.668934][   T24] usb 4-1: Product: syz
[  319.676293][ T8874] sctp: [Deprecated]: syz.4.787 (pid 8874) Use of struct sctp_assoc_value in delayed_ack socket option.
[  319.676293][ T8874] Use struct sctp_sack_info instead
[  319.697292][ T5911] usb usb1-port1: unable to enumerate USB device
[  319.718431][   T24] usb 4-1: Manufacturer: syz
[  319.727650][   T24] usb 4-1: SerialNumber: syz
[  319.738266][   T24] usb 4-1: config 0 descriptor??
[  319.759643][   T24] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  319.775063][   T24] em28xx 4-1:0.132: Video interface 132 found:
[  320.159773][   T24] em28xx 4-1:0.132: unknown em28xx chip ID (0)
[  320.313808][ T5918] usb 3-1: reset high-speed USB device number 56 using dummy_hcd
[  320.952018][ T8892] netlink: 168 bytes leftover after parsing attributes in process `syz.0.791'.
[  321.149359][ T8894] B: renamed from veth0 (while UP)
[  321.183705][ T5918] usb 3-1: device descriptor read/64, error -71
[  321.265466][   T24] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  321.281926][   T24] em28xx 4-1:0.132: board has no eeprom
[  321.383875][   T24] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  321.392070][   T24] em28xx 4-1:0.132: analog set to bulk mode.
[  321.415691][ T5927] em28xx 4-1:0.132: Registering V4L2 extension
[  321.538092][ T5918] usb 3-1: reset high-speed USB device number 56 using dummy_hcd
[  321.611731][ T5904] usb 4-1: USB disconnect, device number 52
[  321.625925][ T5918] usb 3-1: device reset changed ep0 maxpacket size!
[  321.703899][ T5927] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-19)
[  321.716624][ T5927] em28xx 4-1:0.132: failed to trigger read from i2c address 0x48 (error=-19)
[  321.725889][ T5927] em28xx 4-1:0.132: failed to trigger read from i2c address 0x42 (error=-19)
[  321.766106][ T5904] em28xx 4-1:0.132: Disconnecting em28xx
[  321.766256][ T5927] em28xx 4-1:0.132: failed to trigger read from i2c address 0x40 (error=-19)
[  321.794649][ T5911] usb 3-1: USB disconnect, device number 56
[  321.823336][ T8899] Cannot find add_set index 0 as target
[  321.917516][ T8898] cgroup: fork rejected by pids controller in /syz3
[  322.013837][ T5911] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  322.173589][ T5911] usb 3-1: Using ep0 maxpacket: 8
[  322.187247][ T5927] em28xx 4-1:0.132: Config register raw data: 0xffffffed
[  322.299220][ T5927] em28xx 4-1:0.132: AC97 chip type couldn't be determined
[  322.373457][ T5927] em28xx 4-1:0.132: No AC97 audio processor
[  322.399444][ T5927] usb 4-1: Decoder not found
[  322.424929][ T5927] em28xx 4-1:0.132: failed to create media graph
[  322.466230][ T5927] em28xx 4-1:0.132: V4L2 device video103 deregistered
[  322.521651][ T5927] em28xx 4-1:0.132: Remote control support is not available for this card.
[  322.577948][ T5904] em28xx 4-1:0.132: Closing input extension
[  322.636026][ T5904] em28xx 4-1:0.132: Freeing device
[  323.341321][ T9014] input: syz0 as /devices/virtual/input/input18
[  324.058755][ T5904] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  324.237092][ T5904] usb 5-1: Using ep0 maxpacket: 8
[  324.246385][ T5904] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  324.266095][ T9019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.798'.
[  324.283611][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.307544][ T5904] usb 5-1: Product: syz
[  324.311776][ T5904] usb 5-1: Manufacturer: syz
[  324.351700][ T5904] usb 5-1: SerialNumber: syz
[  324.405222][ T5904] usb 5-1: config 0 descriptor??
[  324.458333][ T5904] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  324.833654][ T5926] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  324.972932][ T5911] usb 3-1: unable to get BOS descriptor or descriptor too short
[  325.003701][ T5926] usb 1-1: Using ep0 maxpacket: 16
[  325.012582][ T5911] usb 3-1: no configurations
[  325.020300][ T5911] usb 3-1: can't read configurations, error -22
[  325.022321][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  325.074734][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  325.119508][ T5926] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  325.138201][ T1117] macsec0: left allmulticast mode
[  325.144047][ T1117] macsec0: left promiscuous mode
[  325.150843][ T1117] bridge0: port 4(macsec0) entered disabled state
[  325.170513][ T5926] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  325.175725][ T1117] dummy0: left allmulticast mode
[  325.209013][ T1117] bridge0: port 3(dummy0) entered disabled state
[  325.212911][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  325.245131][ T5926] usb 1-1: config 0 descriptor??
[  325.265100][ T1117] bridge_slave_1: left allmulticast mode
[  325.286612][ T1117] bridge_slave_1: left promiscuous mode
[  325.292545][ T1117] bridge0: port 2(bridge_slave_1) entered disabled state
[  325.375203][ T1117] bridge_slave_0: left allmulticast mode
[  325.380943][ T1117] bridge_slave_0: left promiscuous mode
[  325.408960][ T1117] bridge0: port 1(bridge_slave_0) entered disabled state
[  325.442780][ T9032] sctp: [Deprecated]: syz.1.799 (pid 9032) Use of struct sctp_assoc_value in delayed_ack socket option.
[  325.442780][ T9032] Use struct sctp_sack_info instead
[  325.481464][ T9031] binder: 9030:9031 ioctl 400c620e 0 returned -14
[  325.595626][ T9035] fuse: Bad value for 'fd'
[  325.681167][ T5926] microsoft 0003:045E:07DA.000A: No inputs registered, leaving
[  325.691801][ T5926] microsoft 0003:045E:07DA.000A: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  325.705669][ T5926] microsoft 0003:045E:07DA.000A: no inputs found
[  325.712159][ T5926] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway
[  325.896123][ T5926] usb 1-1: USB disconnect, device number 51
[  325.972430][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  325.998275][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  326.016875][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  326.026515][ T1117] bridge0 (unregistering): left allmulticast mode
[  326.035673][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  326.035753][ T1117] bridge0 (unregistering): left promiscuous mode
[  326.050195][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  326.267633][ T1117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  326.278071][ T1117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  326.288692][ T1117] bond0 (unregistering): Released all slaves
[  326.581100][ T9042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  326.625339][ T9042] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  326.659471][ T9042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  326.702096][ T5904] gspca_sonixj: reg_w1 err -71
[  326.728121][ T9042] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  326.746437][ T5904] sonixj 5-1:0.0: probe with driver sonixj failed with error -71
[  326.813935][ T5904] usb 5-1: USB disconnect, device number 42
[  326.973936][    T9] usb 1-1: new full-speed USB device number 52 using dummy_hcd
[  327.165481][    T9] usb 1-1: config 0 has an invalid interface number: 69 but max is 0
[  327.167787][ T1117] hsr_slave_0: left promiscuous mode
[  327.183942][    T9] usb 1-1: config 0 has no interface number 0
[  327.190102][    T9] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  327.223640][ T1117] hsr_slave_1: left promiscuous mode
[  327.229913][ T1117] batman_adv: batadv0: Removing interface: batadv_slave_0
[  327.241722][    T9] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  327.273607][    T9] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid maxpacket 43776, setting to 64
[  327.287650][ T1117] batman_adv: batadv0: Removing interface: batadv_slave_1
[  327.317067][    T9] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  327.368798][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.400426][    T9] usb 1-1: Product: syz
[  327.419110][    T9] usb 1-1: Manufacturer: syz
[  327.427623][    T9] usb 1-1: SerialNumber: syz
[  327.449468][    T9] usb 1-1: config 0 descriptor??
[  327.462847][ T9045] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22
[  327.475974][ T9045] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22
[  327.490280][    T9] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  327.538659][    T9] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  327.713125][ T9045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.804'.
[  328.144501][ T5844] Bluetooth: hci3: command tx timeout
[  328.167740][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  328.179772][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  328.193669][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  328.203142][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  328.211242][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  328.267235][ T1117] team0 (unregistering): Port device team_slave_1 removed
[  328.310201][ T1117] team0 (unregistering): Port device team_slave_0 removed
[  328.838937][ T9039] chnl_net:caif_netlink_parms(): no params data found
[  329.122922][ T9076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  329.133079][ T9076] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  329.460070][ T5926] usb 1-1: USB disconnect, device number 52
[  329.502050][ T5926] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  329.587417][ T5926] cyberjack 1-1:0.69: device disconnected
[  330.066208][ T9039] bridge0: port 1(bridge_slave_0) entered blocking state
[  330.095958][ T9039] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.099671][ T9088] kvm: pic: non byte read
[  330.197800][ T9039] bridge_slave_0: entered allmulticast mode
[  330.229977][ T5837] Bluetooth: hci3: command tx timeout
[  330.250330][ T9039] bridge_slave_0: entered promiscuous mode
[  330.303633][ T5837] Bluetooth: hci4: command tx timeout
[  330.339095][ T9039] bridge0: port 2(bridge_slave_1) entered blocking state
[  330.397467][ T9039] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.411716][ T9039] bridge_slave_1: entered allmulticast mode
[  330.431577][ T9039] bridge_slave_1: entered promiscuous mode
[  330.523624][ T1117] IPVS: stop unused estimator thread 0...
[  330.598111][ T9039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  330.670194][ T9099] sctp: [Deprecated]: syz.0.813 (pid 9099) Use of struct sctp_assoc_value in delayed_ack socket option.
[  330.670194][ T9099] Use struct sctp_sack_info instead
[  330.697258][ T9039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  330.971925][ T9039] team0: Port device team_slave_0 added
[  331.049270][ T9039] team0: Port device team_slave_1 added
[  331.226919][ T1117] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.388549][ T9068] chnl_net:caif_netlink_parms(): no params data found
[  331.427875][ T9039] batman_adv: batadv0: Adding interface: batadv_slave_0
[  331.438401][ T9039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  331.512003][ T9039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  331.560530][ T1117] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.598021][ T9039] batman_adv: batadv0: Adding interface: batadv_slave_1
[  331.615017][ T9039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  331.648343][ T9039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  331.698505][ T1117] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.732515][ T9112] netlink: 168 bytes leftover after parsing attributes in process `syz.0.816'.
[  331.872814][ T1117] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.043697][ T5927] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  332.138135][ T9039] hsr_slave_0: entered promiscuous mode
[  332.144896][ T9039] hsr_slave_1: entered promiscuous mode
[  332.151462][ T9039] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  332.159348][ T9039] Cannot create hsr debugfs directory
[  332.183613][ T5927] usb 5-1: device descriptor read/64, error -71
[  332.211370][ T9125] netlink: 'syz.1.818': attribute type 3 has an invalid length.
[  332.303903][ T5837] Bluetooth: hci3: command tx timeout
[  332.383710][ T5837] Bluetooth: hci4: command tx timeout
[  332.403060][ T9068] bridge0: port 1(bridge_slave_0) entered blocking state
[  332.423843][ T5927] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  332.441905][ T9068] bridge0: port 1(bridge_slave_0) entered disabled state
[  332.459553][ T9068] bridge_slave_0: entered allmulticast mode
[  332.468813][ T9068] bridge_slave_0: entered promiscuous mode
[  332.520631][ T9068] bridge0: port 2(bridge_slave_1) entered blocking state
[  332.564749][ T9068] bridge0: port 2(bridge_slave_1) entered disabled state
[  332.573943][ T9068] bridge_slave_1: entered allmulticast mode
[  332.581771][ T9068] bridge_slave_1: entered promiscuous mode
[  332.584395][ T5927] usb 5-1: device descriptor read/64, error -71
[  332.734011][ T5927] usb usb5-port1: attempt power cycle
[  332.839440][ T9068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  332.921038][ T9068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  332.944853][ T9142] loop2: detected capacity change from 0 to 7
[  332.979010][ T7227] Dev loop2: unable to read RDB block 7
[  333.011101][ T7227]  loop2: unable to read partition table
[  333.073145][ T1117] bridge_slave_1: left allmulticast mode
[  333.082639][ T7227] loop2: partition table beyond EOD, truncated
[  333.090701][ T1117] bridge_slave_1: left promiscuous mode
[  333.099296][ T1117] bridge0: port 2(bridge_slave_1) entered disabled state
[  333.119769][ T9142] Dev loop2: unable to read RDB block 7
[  333.125744][ T5927] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  333.135628][ T9142]  loop2: unable to read partition table
[  333.144370][ T1117] bridge_slave_0: left allmulticast mode
[  333.150166][ T1117] bridge_slave_0: left promiscuous mode
[  333.157875][ T5927] usb 5-1: device descriptor read/8, error -71
[  333.164800][ T1117] bridge0: port 1(bridge_slave_0) entered disabled state
[  333.173030][ T9142] loop2: partition table beyond EOD, truncated
[  333.192773][ T9142] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  333.363839][    T9] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  333.423738][ T5927] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  333.475603][ T5927] usb 5-1: device descriptor read/8, error -71
[  333.548393][    T9] usb 1-1: Using ep0 maxpacket: 32
[  333.567460][    T9] usb 1-1: config 0 has an invalid interface number: 168 but max is 0
[  333.577682][    T9] usb 1-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config
[  333.594994][    T9] usb 1-1: config 0 has no interface number 0
[  333.601264][    T9] usb 1-1: config 0 interface 168 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  333.603869][ T5927] usb usb5-port1: unable to enumerate USB device
[  333.620945][    T9] usb 1-1: config 0 interface 168 has no altsetting 0
[  333.641611][    T9] usb 1-1: New USB device found, idVendor=4855, idProduct=0091, bcdDevice=3d.bd
[  333.654917][    T9] usb 1-1: New USB device strings: Mfr=255, Product=2, SerialNumber=3
[  333.663339][    T9] usb 1-1: Product: syz
[  333.675171][    T9] usb 1-1: Manufacturer: syz
[  333.679878][    T9] usb 1-1: SerialNumber: syz
[  333.696885][    T9] usb 1-1: config 0 descriptor??
[  333.737857][ T9150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  333.749753][ T9150] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  334.168510][ T1117] bond1 (unregistering): (slave geneve2): Releasing active interface
[  334.177110][ T1117] geneve2 (unregistering): left promiscuous mode
[  334.387529][ T5837] Bluetooth: hci3: command tx timeout
[  334.463711][ T5837] Bluetooth: hci4: command tx timeout
[  334.492342][ T1117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  334.515243][ T1117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  334.529016][ T1117] bond0 (unregistering): Released all slaves
[  334.558382][ T1117] bond1 (unregistering): Released all slaves
[  334.674273][ T1117] bond2 (unregistering): Released all slaves
[  334.974316][ T9068] team0: Port device team_slave_0 added
[  335.048296][ T9068] team0: Port device team_slave_1 added
[  335.180669][ T9157] sctp: [Deprecated]: syz.4.826 (pid 9157) Use of struct sctp_assoc_value in delayed_ack socket option.
[  335.180669][ T9157] Use struct sctp_sack_info instead
[  335.257622][ T9068] batman_adv: batadv0: Adding interface: batadv_slave_0
[  335.269488][ T9068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  335.296680][ T9068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  335.311452][ T9068] batman_adv: batadv0: Adding interface: batadv_slave_1
[  335.318862][ T9068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  335.345335][ T9068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  335.533988][ T1117] hsr_slave_0: left promiscuous mode
[  335.562146][ T1117] hsr_slave_1: left promiscuous mode
[  335.597983][ T1117] batman_adv: batadv0: Removing interface: batadv_slave_0
[  335.619722][ T1117] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  335.646253][ T1117] batman_adv: batadv0: Removing interface: batadv_slave_1
[  335.684788][ T9164] netlink: 'syz.4.827': attribute type 2 has an invalid length.
[  335.687344][ T1117] veth1_macvtap: left promiscuous mode
[  335.692982][ T9164] netlink: 'syz.4.827': attribute type 8 has an invalid length.
[  335.707114][ T9164] netlink: 132 bytes leftover after parsing attributes in process `syz.4.827'.
[  335.722163][ T1117] veth0_macvtap: left promiscuous mode
[  335.738803][ T1117] veth1_vlan: left promiscuous mode
[  335.762747][ T1117] veth0_vlan: left promiscuous mode
[  335.887507][ T9173] netlink: 52 bytes leftover after parsing attributes in process `syz.4.827'.
[  335.913226][ T9173] netlink: 52 bytes leftover after parsing attributes in process `syz.4.827'.
[  336.268767][    T9] usb 1-1: USB disconnect, device number 53
[  336.544117][ T5837] Bluetooth: hci4: command tx timeout
[  336.825573][    T9] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  336.985486][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  337.013340][    T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  337.023975][    T9] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=96.33
[  337.033066][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.063193][    T9] usb 1-1: config 0 descriptor??
[  337.091037][ T1117] team0 (unregistering): Port device team_slave_1 removed
[  337.139849][ T1117] team0 (unregistering): Port device team_slave_0 removed
[  337.343061][ T5904] usb 1-1: USB disconnect, device number 54
[  337.660892][ T9196] netlink: 'syz.0.832': attribute type 31 has an invalid length.
[  337.864018][ T9170] syz_tun: entered allmulticast mode
[  337.877023][ T9068] hsr_slave_0: entered promiscuous mode
[  337.883376][ T9068] hsr_slave_1: entered promiscuous mode
[  338.449130][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.836'.
[  338.509001][ T9211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  338.524125][ T9211] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  338.558005][ T9211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.837'.
[  338.570587][ T9211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.837'.
[  338.590046][ T9211] netlink: 36 bytes leftover after parsing attributes in process `syz.1.837'.
[  338.611073][ T9211] netlink: 36 bytes leftover after parsing attributes in process `syz.1.837'.
[  338.834819][ T9178] syz_tun: left allmulticast mode
[  338.934432][ T9039] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  338.952155][ T9039] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  338.981752][ T9039] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  339.008936][ T9039] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  339.083721][ T5904] usb 1-1: new full-speed USB device number 55 using dummy_hcd
[  339.212218][ T9068] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  339.239143][ T9068] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  339.273599][ T9231] netlink: 64 bytes leftover after parsing attributes in process `syz.4.839'.
[  339.326660][ T5904] usb 1-1: config 0 has an invalid interface number: 126 but max is 0
[  339.335295][ T5904] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  339.372916][ T5904] usb 1-1: config 0 has no interface number 0
[  339.382796][ T9068] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  339.403936][ T5904] usb 1-1: config 0 interface 126 has no altsetting 0
[  339.428556][ T5904] usb 1-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=df.8e
[  339.437904][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  339.461646][ T5904] usb 1-1: Product: syz
[  339.475154][ T5904] usb 1-1: Manufacturer: syz
[  339.480126][ T9068] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  339.507642][ T5904] usb 1-1: SerialNumber: syz
[  339.560638][ T5904] usb 1-1: config 0 descriptor??
[  339.582180][ T5904] zaurus 1-1:0.126: More than one union descriptor, skipping ...
[  339.591292][ T5904] zaurus 1-1:0.126: skipping garbage
[  339.599703][ T5904] usb 1-1: bad CDC descriptors
[  339.788954][    T9] usb 1-1: USB disconnect, device number 55
[  339.809718][ T9245] PKCS7: Unknown OID: [5] (bad)
[  339.815056][ T9245] PKCS7: Only support pkcs7_signedData type
[  339.921894][ T9039] 8021q: adding VLAN 0 to HW filter on device bond0
[  340.055130][ T9068] 8021q: adding VLAN 0 to HW filter on device bond0
[  340.146753][ T9039] 8021q: adding VLAN 0 to HW filter on device team0
[  340.198244][ T9068] 8021q: adding VLAN 0 to HW filter on device team0
[  340.232566][ T6810] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.239766][ T6810] bridge0: port 1(bridge_slave_0) entered forwarding state
[  340.430006][ T4527] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.437246][ T4527] bridge0: port 1(bridge_slave_0) entered forwarding state
[  340.492746][ T4527] bridge0: port 2(bridge_slave_1) entered blocking state
[  340.499989][ T4527] bridge0: port 2(bridge_slave_1) entered forwarding state
[  340.557637][ T9068] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  340.578527][ T9068] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  340.610029][ T4527] bridge0: port 2(bridge_slave_1) entered blocking state
[  340.617226][ T4527] bridge0: port 2(bridge_slave_1) entered forwarding state
[  340.703673][   T30] audit: type=1400 audit(1749407140.425:232): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=9251 comm="syz.0.841"
[  340.834798][ T9068] 8021q: adding VLAN 0 to HW filter on device batadv0
[  341.421938][ T9068] veth0_vlan: entered promiscuous mode
[  341.720736][ T9068] veth1_vlan: entered promiscuous mode
[  341.768710][ T9265] loop2: detected capacity change from 0 to 7
[  341.776852][ T9039] 8021q: adding VLAN 0 to HW filter on device batadv0
[  341.792682][ T9265] Dev loop2: unable to read RDB block 7
[  341.810827][ T9265]  loop2: unable to read partition table
[  341.830276][ T9267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  341.848411][ T9267] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  341.849675][ T9265] loop2: partition table beyond EOD, truncated
[  341.891593][ T9265] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  341.919726][ T9068] veth0_macvtap: entered promiscuous mode
[  341.958439][ T9068] veth1_macvtap: entered promiscuous mode
[  342.042187][ T9039] veth0_vlan: entered promiscuous mode
[  342.112324][ T9068] batman_adv: batadv0: Interface activated: batadv_slave_0
[  342.137169][ T9068] batman_adv: batadv0: Interface activated: batadv_slave_1
[  342.154316][ T9039] veth1_vlan: entered promiscuous mode
[  342.209311][ T9068] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  342.246660][ T9068] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  342.262535][ T9068] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  342.281530][ T9068] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  342.358094][ T9279] ip6gre1: entered promiscuous mode
[  342.392557][ T9279] ip6gre1: entered allmulticast mode
[  342.400831][ T9280] netlink: zone id is out of range
[  342.416285][ T9280] netlink: zone id is out of range
[  342.442003][ T9273] kvm: vcpu 8: requested lapic timer restore with starting count register 0x390=8 (16 ns) > initial count (10 ns). Using initial count to start timer.
[  342.467201][ T9273] kvm: apic: phys broadcast and lowest prio
[  342.468573][ T9039] veth0_macvtap: entered promiscuous mode
[  342.553066][ T9039] veth1_macvtap: entered promiscuous mode
[  342.706869][ T9039] batman_adv: batadv0: Interface activated: batadv_slave_0
[  342.728086][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  342.741152][ T9039] batman_adv: batadv0: Interface activated: batadv_slave_1
[  342.760433][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  342.787909][ T5927] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  342.848755][ T9039] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  342.865526][ T9039] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  342.893794][ T9039] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  342.903113][ T9039] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  342.914823][ T9292] netlink: 'syz.4.851': attribute type 10 has an invalid length.
[  342.922600][ T9292] netlink: 40 bytes leftover after parsing attributes in process `syz.4.851'.
[  342.941852][ T6808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  342.961044][ T9295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  342.984086][ T6808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  342.999738][ T9295] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  343.014339][ T5927] usb 1-1: config 0 has no interfaces?
[  343.026637][ T5927] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  343.062015][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  343.090848][ T5927] usb 1-1: Product: syz
[  343.104435][ T5927] usb 1-1: Manufacturer: syz
[  343.109154][ T5927] usb 1-1: SerialNumber: syz
[  343.148309][ T5927] usb 1-1: config 0 descriptor??
[  343.209077][ T6808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  343.232876][ T6808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  343.362718][   T30] audit: type=1400 audit(1749407143.115:233): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=9272 comm="syz.0.847"
[  343.374757][ T6806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  343.400660][ T6806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  344.123887][ T5918] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  344.363028][ T9328] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  344.372621][ T9328] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  344.382175][ T9328] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  344.392003][ T9328] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  345.071597][    C0] vxcan1: j1939_tp_rxtimer: 0xffff88804b8b3800: rx timeout, send abort
[  345.082858][    C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88804b8b3800: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session.
[  345.156191][ T5918] usb 4-1: unable to get BOS descriptor or descriptor too short
[  345.173725][ T5927] usb 5-1: new full-speed USB device number 47 using dummy_hcd
[  345.188332][ T5918] usb 4-1: unable to read config index 0 descriptor/start: -71
[  345.263821][ T5918] usb 4-1: can't read configurations, error -71
[  345.374332][ T5911] usb 1-1: USB disconnect, device number 56
[  345.422209][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  345.463153][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  345.514674][ T5943] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  345.536452][ T5927] usb 5-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00
[  345.653156][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.695923][ T5943] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  345.728402][ T5927] usb 5-1: config 0 descriptor??
[  345.751827][ T5943] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  345.784166][ T5943] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  345.874284][ T5943] usb 6-1: Product: syz
[  345.892802][ T5943] usb 6-1: Manufacturer: syz
[  345.912869][ T5943] usb 6-1: SerialNumber: syz
[  345.956919][ T5943] usb 6-1: config 0 descriptor??
[  346.179449][ T5943] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22
[  346.267069][ T5943] usb 6-1: USB disconnect, device number 2
[  346.349566][ T5927] acrux 0003:1A34:F705.000B: item fetching failed at offset 5/7
[  346.405713][ T5927] acrux 0003:1A34:F705.000B: parse failed
[  346.407870][ T7227] udevd[7227]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  346.422967][ T5927] acrux 0003:1A34:F705.000B: probe with driver acrux failed with error -22
[  346.440105][ T9370] netlink: 'syz.3.865': attribute type 10 has an invalid length.
[  346.477977][ T9370] netlink: 40 bytes leftover after parsing attributes in process `syz.3.865'.
[  346.494179][ T9370] dummy0: entered promiscuous mode
[  346.510621][ T9370] bridge0: port 3(dummy0) entered blocking state
[  346.554331][ T9370] bridge0: port 3(dummy0) entered disabled state
[  346.583139][ T9370] dummy0: entered allmulticast mode
[  346.590512][ T9370] bridge0: port 3(dummy0) entered blocking state
[  346.596978][ T9370] bridge0: port 3(dummy0) entered forwarding state
[  346.662893][ T5918] usb 5-1: USB disconnect, device number 47
[  347.178054][ T9390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.869'.
[  347.443745][ T5918] usb 4-1: new full-speed USB device number 55 using dummy_hcd
[  347.639269][ T5918] usb 4-1: unable to get BOS descriptor or descriptor too short
[  347.682578][ T5918] usb 4-1: not running at top speed; connect to a high speed hub
[  347.717823][ T5918] usb 4-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config
[  347.806471][ T5918] usb 4-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=f4.4a
[  347.817557][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.830417][ T5918] usb 4-1: Product: syz
[  347.835733][ T5918] usb 4-1: Manufacturer: syz
[  347.840464][ T5918] usb 4-1: SerialNumber: syz
[  348.065471][ T5918] usbsevseg 4-1:129.0: USB 7 Segment device now attached
[  348.128163][ T5918] usb 4-1: USB disconnect, device number 55
[  348.170851][ T5918] usbsevseg 4-1:129.0: USB 7 Segment now disconnected
[  349.432778][ T9425] netlink: 'syz.3.873': attribute type 12 has an invalid length.
[  350.081680][ T9437] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  350.107092][ T9437] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  350.602077][ T9446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  350.638480][ T9446] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  350.656918][ T9444] binder: 9440:9444 ioctl c0306201 200000000c00 returned -14
[  350.669912][ T9444] deleting an unspecified loop device is not supported.
[  350.679188][ T9446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  350.698268][ T9446] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  350.723953][ T9454] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  350.731225][ T9454] IPv6: NLM_F_CREATE should be set when creating new route
[  350.933864][ T5927] usb 6-1: new low-speed USB device number 3 using dummy_hcd
[  350.984393][ T9461] syz_tun: entered allmulticast mode
[  351.014855][ T9461] syz_tun: left allmulticast mode
[  351.020438][ T9463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.882'.
[  351.130014][ T5927] usb 6-1: device descriptor read/64, error -71
[  351.383725][ T5927] usb 6-1: new low-speed USB device number 4 using dummy_hcd
[  351.525176][ T5927] usb 6-1: device descriptor read/64, error -71
[  351.634672][ T5927] usb usb6-port1: attempt power cycle
[  351.984413][ T5927] usb 6-1: new low-speed USB device number 5 using dummy_hcd
[  352.034328][ T5927] usb 6-1: device descriptor read/8, error -71
[  352.043606][ T5918] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  352.139567][ T9485] No such timeout policy "syz0"
[  352.203699][ T5918] usb 5-1: Using ep0 maxpacket: 16
[  352.298295][ T5918] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  352.366096][ T5927] usb 6-1: new low-speed USB device number 6 using dummy_hcd
[  352.393388][ T5918] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  352.404360][ T5927] usb 6-1: device descriptor read/8, error -71
[  352.533241][ T5927] usb usb6-port1: unable to enumerate USB device
[  352.632628][ T5918] usb 5-1: string descriptor 0 read error: -22
[  352.653703][ T5918] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40
[  352.710970][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.773591][ T5927] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  354.939258][ T5927] usb 1-1: config 0 has no interfaces?
[  354.957460][ T5927] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  354.970321][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.010580][ T5927] usb 1-1: Product: syz
[  355.039289][ T5927] usb 1-1: Manufacturer: syz
[  355.076876][ T5927] usb 1-1: SerialNumber: syz
[  355.108520][ T5927] usb 1-1: config 0 descriptor??
[  355.407280][ T9531] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11)
[  355.413908][ T9531] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  355.430720][ T9531] vhci_hcd vhci_hcd.0: Device attached
[  355.482252][ T9531] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(14)
[  355.488879][ T9531] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  355.516434][ T9531] vhci_hcd vhci_hcd.0: Device attached
[  355.549320][ T5911] usb 5-1: USB disconnect, device number 48
[  355.713651][ T5904] usb 34-1: SetAddress Request (2) to port 0
[  355.720359][ T5904] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd
[  356.043611][ T5911] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  356.213750][ T5911] usb 5-1: Using ep0 maxpacket: 8
[  356.229589][ T5911] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  356.241366][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.258660][ T5911] usb 5-1: Product: syz
[  356.269923][ T5911] usb 5-1: Manufacturer: syz
[  356.281345][ T5911] usb 5-1: SerialNumber: syz
[  356.299231][ T5911] usb 5-1: config 0 descriptor??
[  356.316204][ T5911] gspca_main: se401-2.14.0 probing 047d:5003
[  357.352249][ T5918] IPVS: starting estimator thread 0...
[  357.397076][ T9539] vhci_hcd: connection reset by peer
[  357.402443][ T9542] vhci_hcd: connection closed
[  357.404874][ T1100] vhci_hcd: stop threads
[  357.430627][ T1100] vhci_hcd: release socket
[  357.443182][ T1100] vhci_hcd: disconnect device
[  357.458015][ T9572] IPVS: using max 28 ests per chain, 67200 per kthread
[  357.468586][ T5911] gspca_se401: write req failed req 0x57 val 0x00 error -71
[  357.496960][ T1100] vhci_hcd: stop threads
[  357.506179][ T5911] se401 5-1:0.0: probe with driver se401 failed with error -71
[  357.532386][ T1100] vhci_hcd: release socket
[  357.543452][ T5911] usb 5-1: USB disconnect, device number 49
[  357.586597][ T1100] vhci_hcd: disconnect device
[  357.734511][ T9022] usb 1-1: USB disconnect, device number 57
[  358.053786][ T5911] usb 5-1: new full-speed USB device number 50 using dummy_hcd
[  358.248578][ T5911] usb 5-1: too many configurations: 219, using maximum allowed: 8
[  358.270696][ T5911] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  358.305743][ T5911] usb 5-1: config 0 has no interfaces?
[  358.342703][ T5911] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  358.382211][ T5911] usb 5-1: config 0 has no interfaces?
[  358.412667][ T5911] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  358.468565][ T5911] usb 5-1: config 0 has no interfaces?
[  358.481506][ T5911] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  358.528695][ T9596] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  358.580931][ T5911] usb 5-1: config 0 has no interfaces?
[  358.604957][ T5911] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  358.690575][ T5911] usb 5-1: config 0 has no interfaces?
[  358.754060][ T5911] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  358.790584][ T5911] usb 5-1: config 0 has no interfaces?
[  358.800125][ T9610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  358.809058][ T9610] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  358.835364][ T5911] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  359.196938][ T9022] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  359.204727][ T5911] usb 5-1: config 0 has no interfaces?
[  359.215748][ T5911] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  359.231730][ T5911] usb 5-1: config 0 has no interfaces?
[  359.247556][ T5911] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac
[  359.257973][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=166
[  359.275407][ T5911] usb 5-1: Product: syz
[  359.339307][ T5911] usb 5-1: Manufacturer: syz
[  359.344136][ T5918] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  359.352649][ T5911] usb 5-1: SerialNumber: syz
[  359.372238][ T5911] usb 5-1: config 0 descriptor??
[  359.393394][ T9022] usb 6-1: Using ep0 maxpacket: 32
[  359.459886][ T9022] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  359.492916][ T9022] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  359.513196][ T9022] usb 6-1: New USB device found, idVendor=093a, idProduct=8001, bcdDevice= 0.00
[  359.685290][ T5918] usb 1-1: Using ep0 maxpacket: 8
[  359.694827][ T9022] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  359.771548][ T5918] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[  359.819362][ T9022] usb 6-1: config 0 descriptor??
[  359.824691][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.839804][ T5918] usb 1-1: Product: syz
[  359.853712][ T5918] usb 1-1: Manufacturer: syz
[  359.863804][ T5918] usb 1-1: SerialNumber: syz
[  359.886905][ T5918] usb 1-1: config 0 descriptor??
[  360.347709][ T9622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  360.357796][ T9022] hid-generic 0003:093A:8001.000C: unknown main item tag 0x0
[  360.377467][ T9022] hid-generic 0003:093A:8001.000C: unknown main item tag 0x0
[  360.471415][ T5918] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  360.564082][ T9622] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  360.776876][ T9022] hid-generic 0003:093A:8001.000C: hidraw1: USB HID v0.00 Device [HID 093a:8001] on usb-dummy_hcd.5-1/input0
[  360.789204][ T5904] usb 34-1: device descriptor read/8, error -110
[  361.195147][ T5904] usb usb34-port1: attempt power cycle
[  361.549874][ T9606] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1310921447 (41949486304 ns) > initial count (14193788608 ns). Using initial count to start timer.
[  361.775578][ T9645] netlink: 24 bytes leftover after parsing attributes in process `syz.1.908'.
[  361.804424][ T5904] usb usb34-port1: unable to enumerate USB device
[  361.902102][ T5927] usb 6-1: USB disconnect, device number 7
[  361.904035][ T5918] gspca_sunplus: reg_w_riv err -71
[  361.943636][ T5918] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[  362.035938][ T5918] usb 1-1: USB disconnect, device number 58
[  362.329754][ T5927] usb 5-1: USB disconnect, device number 50
[  362.460094][ T9662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.911'.
[  362.573966][ T9667] netlink: 168 bytes leftover after parsing attributes in process `syz.3.912'.
[  362.644460][ T9669] netlink: 8 bytes leftover after parsing attributes in process `syz.5.913'.
[  362.802496][ T5904] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  362.962882][ T5837] Bluetooth: hci1: ISO packet for unknown connection handle 0
[  362.981214][ T5904] usb 5-1: config index 0 descriptor too short (expected 25454, got 77)
[  363.000301][ T5904] usb 5-1: config 115 has too many interfaces: 47, using maximum allowed: 32
[  363.015084][ T5904] usb 5-1: config 115 has an invalid descriptor of length 121, skipping remainder of the config
[  363.025940][ T5904] usb 5-1: config 115 has 0 interfaces, different from the descriptor's value: 47
[  363.036848][ T9675] binder: 9674:9675 ioctl 40046210 0 returned -14
[  363.056141][ T5904] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  363.073768][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.127290][ T5904] usb 5-1: Product: syz
[  363.131544][ T5904] usb 5-1: Manufacturer: syz
[  363.156071][ T5904] usb 5-1: SerialNumber: syz
[  363.420723][ T9666] netlink: 'syz.4.911': attribute type 7 has an invalid length.
[  363.441394][ T9686] netlink: 'syz.0.916': attribute type 10 has an invalid length.
[  363.450898][ T9666] netlink: 'syz.4.911': attribute type 10 has an invalid length.
[  363.487582][ T9689] FAULT_INJECTION: forcing a failure.
[  363.487582][ T9689] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  363.503728][ T9686] netlink: 40 bytes leftover after parsing attributes in process `syz.0.916'.
[  363.513129][ T9666] bridge0: port 3(dummy0) entered disabled state
[  363.519752][ T9666] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.527262][ T9666] bridge0: port 1(bridge_slave_0) entered disabled state
[  363.543958][ T9689] CPU: 1 UID: 0 PID: 9689 Comm: syz.5.917 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) 
[  363.543990][ T9689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  363.544011][ T9689] Call Trace:
[  363.544019][ T9689]  <TASK>
[  363.544028][ T9689]  dump_stack_lvl+0x189/0x250
[  363.544067][ T9689]  ? __pfx____ratelimit+0x10/0x10
[  363.544116][ T9689]  ? __pfx_dump_stack_lvl+0x10/0x10
[  363.544148][ T9689]  ? __pfx__printk+0x10/0x10
[  363.544178][ T9689]  ? fs_reclaim_acquire+0x7d/0x100
[  363.544215][ T9689]  should_fail_ex+0x414/0x560
[  363.544249][ T9689]  prepare_alloc_pages+0x213/0x610
[  363.544284][ T9689]  __alloc_frozen_pages_noprof+0x123/0x370
[  363.544316][ T9689]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  363.544355][ T9689]  ? policy_nodemask+0x27c/0x720
[  363.544407][ T9689]  alloc_pages_mpol+0x232/0x4a0
[  363.544438][ T9689]  vma_alloc_folio_noprof+0xe4/0x200
[  363.544465][ T9689]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  363.544505][ T9689]  folio_prealloc+0x30/0x180
[  363.544539][ T9689]  do_wp_page+0x1231/0x5800
[  363.544597][ T9689]  ? __pfx_do_wp_page+0x10/0x10
[  363.544628][ T9689]  ? do_raw_spin_lock+0x121/0x290
[  363.544658][ T9689]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  363.544695][ T9689]  __handle_mm_fault+0x1144/0x5620
[  363.544736][ T9689]  ? __pfx___handle_mm_fault+0x10/0x10
[  363.544772][ T9689]  ? follow_page_pte+0xe7e/0x14b0
[  363.544809][ T9689]  handle_mm_fault+0x40a/0x8e0
[  363.544842][ T9689]  __get_user_pages+0x1af4/0x30b0
[  363.544910][ T9689]  ? __pfx___get_user_pages+0x10/0x10
[  363.544942][ T9689]  ? __gup_longterm_locked+0xbf7/0x15b0
[  363.544977][ T9689]  ? down_read_killable+0x1d1/0x350
[  363.545001][ T9689]  ? try_get_folio+0x633/0x660
[  363.545025][ T9689]  __gup_longterm_locked+0xd66/0x15b0
[  363.545065][ T9689]  ? try_grab_folio_fast+0x35b/0x4f0
[  363.545093][ T9689]  ? sanity_check_pinned_pages+0x11c8/0x12c0
[  363.545134][ T9689]  gup_fast_fallback+0x1cd4/0x2260
[  363.545165][ T9689]  ? is_bpf_text_address+0x26/0x2b0
[  363.545224][ T9689]  ? __pfx_gup_fast_fallback+0x10/0x10
[  363.545255][ T9689]  ? stack_trace_save+0x9c/0xe0
[  363.545283][ T9689]  ? stack_depot_save_flags+0x40/0x900
[  363.545314][ T9689]  ? register_lock_class+0x51/0x320
[  363.545350][ T9689]  ? pin_user_pages_fast+0x4d/0xb0
[  363.545387][ T9689]  iov_iter_extract_pages+0x35a/0x5e0
[  363.545422][ T9689]  extract_iter_to_sg+0xe46/0x24e0
[  363.545479][ T9689]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  363.545541][ T9689]  ? __asan_memset+0x22/0x50
[  363.545576][ T9689]  af_alg_get_rsgl+0x436/0x810
[  363.545626][ T9689]  aead_recvmsg+0x4cc/0x13f0
[  363.545660][ T9689]  ? __lock_acquire+0xab9/0xd20
[  363.545722][ T9689]  ? __pfx_aead_recvmsg+0x10/0x10
[  363.545763][ T9689]  ? __lock_acquire+0xab9/0xd20
[  363.545792][ T9689]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  363.545818][ T9689]  ? security_socket_recvmsg+0x7e/0x2e0
[  363.545837][ T9689]  ? __pfx_aead_recvmsg+0x10/0x10
[  363.545867][ T9689]  sock_recvmsg+0x229/0x270
[  363.545892][ T9689]  ____sys_recvmsg+0x1c9/0x460
[  363.545929][ T9689]  ? __pfx_____sys_recvmsg+0x10/0x10
[  363.545973][ T9689]  ? import_iovec+0x74/0xa0
[  363.545997][ T9689]  ___sys_recvmsg+0x1b5/0x510
[  363.546030][ T9689]  ? __pfx____sys_recvmsg+0x10/0x10
[  363.546084][ T9689]  ? __fget_files+0x3a0/0x420
[  363.546119][ T9689]  do_recvmmsg+0x307/0x770
[  363.546155][ T9689]  ? __pfx_do_recvmmsg+0x10/0x10
[  363.546196][ T9689]  ? _copy_from_user+0x94/0xb0
[  363.546235][ T9689]  __x64_sys_recvmmsg+0x1af/0x240
[  363.546267][ T9689]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  363.546294][ T9689]  ? rcu_is_watching+0x15/0xb0
[  363.546317][ T9689]  ? do_syscall_64+0xbe/0x3b0
[  363.546341][ T9689]  do_syscall_64+0xfa/0x3b0
[  363.546378][ T9689]  ? lockdep_hardirqs_on+0x9c/0x150
[  363.546410][ T9689]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  363.546431][ T9689]  ? clear_bhb_loop+0x60/0xb0
[  363.546457][ T9689]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  363.546477][ T9689] RIP: 0033:0x7fca1198e929
[  363.546497][ T9689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  363.546521][ T9689] RSP: 002b:00007fca12781038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  363.546545][ T9689] RAX: ffffffffffffffda RBX: 00007fca11bb5fa0 RCX: 00007fca1198e929
[  363.546560][ T9689] RDX: 0000000000000002 RSI: 00002000000008c0 RDI: 0000000000000004
[  363.546573][ T9689] RBP: 00007fca12781090 R08: 0000200000008000 R09: 0000000000000000
[  363.546587][ T9689] R10: 00000000000000cb R11: 0000000000000246 R12: 0000000000000001
[  363.546599][ T9689] R13: 0000000000000000 R14: 00007fca11bb5fa0 R15: 00007fca11cdfa28
[  363.546632][ T9689]  </TASK>
[  364.249173][ T9686] dummy0: entered promiscuous mode
[  364.254950][ T9686] bridge0: port 3(dummy0) entered blocking state
[  364.261402][ T9686] bridge0: port 3(dummy0) entered disabled state
[  364.268037][ T9686] dummy0: entered allmulticast mode
[  364.275586][ T9686] bridge0: port 3(dummy0) entered blocking state
[  364.282020][ T9686] bridge0: port 3(dummy0) entered forwarding state
[  364.488504][ T9695] netlink: 88 bytes leftover after parsing attributes in process `syz.5.918'.
[  364.791688][ T9710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.921'.
[  364.803241][ T5943] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  364.832339][ T9710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.921'.
[  364.978083][ T5943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  365.012506][ T5943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  365.057819][ T5943] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  365.078726][ T5943] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  365.157153][ T5943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.182260][ T5943] usb 1-1: config 0 descriptor??
[  365.361074][ T9722] SET target dimension over the limit!
[  365.381131][ T9722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  365.394942][ T9722] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  365.621607][ T5943] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving
[  365.656525][ T5943] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  365.815280][ T9022] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  365.976537][ T9022] usb 6-1: config 129 has an invalid interface number: 201 but max is 0
[  366.017501][ T9022] usb 6-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config
[  366.032587][   T10] usb 1-1: USB disconnect, device number 59
[  366.064736][ T5904] usb 5-1: USB disconnect, device number 51
[  366.092826][ T9022] usb 6-1: config 129 has no interface number 0
[  366.133084][ T9022] usb 6-1: config 129 interface 201 altsetting 1 has an endpoint descriptor with address 0xEC, changing to 0x8C
[  366.173550][ T9022] usb 6-1: config 129 interface 201 altsetting 1 endpoint 0x8C has invalid wMaxPacketSize 0
[  366.212682][ T9739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  366.227087][ T9022] usb 6-1: config 129 interface 201 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  366.238386][ T9739] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  366.276258][ T9741] FAULT_INJECTION: forcing a failure.
[  366.276258][ T9741] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  366.293325][ T9022] usb 6-1: config 129 interface 201 has no altsetting 0
[  366.315797][ T9741] CPU: 0 UID: 0 PID: 9741 Comm: syz.4.928 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) 
[  366.315832][ T9741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  366.315850][ T9741] Call Trace:
[  366.315859][ T9741]  <TASK>
[  366.315868][ T9741]  dump_stack_lvl+0x189/0x250
[  366.315907][ T9741]  ? __pfx____ratelimit+0x10/0x10
[  366.315943][ T9741]  ? __pfx_dump_stack_lvl+0x10/0x10
[  366.315976][ T9741]  ? __pfx__printk+0x10/0x10
[  366.316010][ T9741]  ? fs_reclaim_acquire+0x7d/0x100
[  366.316048][ T9741]  should_fail_ex+0x414/0x560
[  366.316083][ T9741]  prepare_alloc_pages+0x213/0x610
[  366.316120][ T9741]  __alloc_frozen_pages_noprof+0x123/0x370
[  366.316154][ T9741]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  366.316194][ T9741]  ? policy_nodemask+0x27c/0x720
[  366.316225][ T9741]  alloc_pages_mpol+0x232/0x4a0
[  366.316255][ T9741]  vma_alloc_folio_noprof+0xe4/0x200
[  366.316284][ T9741]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  366.316323][ T9741]  folio_prealloc+0x30/0x180
[  366.316349][ T9741]  do_wp_page+0x1231/0x5800
[  366.316408][ T9741]  ? __pfx_do_wp_page+0x10/0x10
[  366.316438][ T9741]  ? do_raw_spin_lock+0x121/0x290
[  366.316468][ T9741]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  366.316506][ T9741]  __handle_mm_fault+0x1144/0x5620
[  366.316549][ T9741]  ? __pfx___handle_mm_fault+0x10/0x10
[  366.316587][ T9741]  ? follow_page_pte+0xe7e/0x14b0
[  366.316619][ T9741]  handle_mm_fault+0x40a/0x8e0
[  366.316652][ T9741]  __get_user_pages+0x1af4/0x30b0
[  366.316724][ T9741]  ? __pfx___get_user_pages+0x10/0x10
[  366.316757][ T9741]  ? __gup_longterm_locked+0xbf7/0x15b0
[  366.316791][ T9741]  ? down_read_killable+0x1d1/0x350
[  366.316815][ T9741]  ? try_get_folio+0x633/0x660
[  366.316839][ T9741]  __gup_longterm_locked+0xd66/0x15b0
[  366.316879][ T9741]  ? try_grab_folio_fast+0x35b/0x4f0
[  366.316906][ T9741]  ? sanity_check_pinned_pages+0x11c8/0x12c0
[  366.316948][ T9741]  gup_fast_fallback+0x1cd4/0x2260
[  366.316980][ T9741]  ? is_bpf_text_address+0x26/0x2b0
[  366.317047][ T9741]  ? __pfx_gup_fast_fallback+0x10/0x10
[  366.317079][ T9741]  ? stack_trace_save+0x9c/0xe0
[  366.317106][ T9741]  ? stack_depot_save_flags+0x40/0x900
[  366.317138][ T9741]  ? register_lock_class+0x51/0x320
[  366.317173][ T9741]  ? pin_user_pages_fast+0x4d/0xb0
[  366.317210][ T9741]  iov_iter_extract_pages+0x35a/0x5e0
[  366.317244][ T9741]  extract_iter_to_sg+0xe46/0x24e0
[  366.317295][ T9741]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  366.317349][ T9741]  ? __asan_memset+0x22/0x50
[  366.317383][ T9741]  af_alg_get_rsgl+0x436/0x810
[  366.317434][ T9741]  aead_recvmsg+0x4cc/0x13f0
[  366.317467][ T9741]  ? __lock_acquire+0xab9/0xd20
[  366.317521][ T9741]  ? __pfx_aead_recvmsg+0x10/0x10
[  366.317552][ T9741]  ? __lock_acquire+0xab9/0xd20
[  366.317584][ T9741]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  366.317613][ T9741]  ? security_socket_recvmsg+0x7e/0x2e0
[  366.317634][ T9741]  ? __pfx_aead_recvmsg+0x10/0x10
[  366.317668][ T9741]  sock_recvmsg+0x229/0x270
[  366.317696][ T9741]  ____sys_recvmsg+0x1c9/0x460
[  366.317738][ T9741]  ? __pfx_____sys_recvmsg+0x10/0x10
[  366.317786][ T9741]  ? import_iovec+0x74/0xa0
[  366.317812][ T9741]  ___sys_recvmsg+0x1b5/0x510
[  366.317847][ T9741]  ? __pfx____sys_recvmsg+0x10/0x10
[  366.317906][ T9741]  ? __fget_files+0x3a0/0x420
[  366.317944][ T9741]  do_recvmmsg+0x307/0x770
[  366.317985][ T9741]  ? __pfx_do_recvmmsg+0x10/0x10
[  366.318038][ T9741]  ? _copy_from_user+0x94/0xb0
[  366.318080][ T9741]  __x64_sys_recvmmsg+0x1af/0x240
[  366.318114][ T9741]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  366.318143][ T9741]  ? rcu_is_watching+0x15/0xb0
[  366.318169][ T9741]  ? do_syscall_64+0xbe/0x3b0
[  366.318195][ T9741]  do_syscall_64+0xfa/0x3b0
[  366.318215][ T9741]  ? lockdep_hardirqs_on+0x9c/0x150
[  366.318248][ T9741]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  366.318269][ T9741]  ? clear_bhb_loop+0x60/0xb0
[  366.318295][ T9741]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  366.318322][ T9741] RIP: 0033:0x7f5e7218e929
[  366.318341][ T9741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  366.318360][ T9741] RSP: 002b:00007f5e72f39038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  366.318383][ T9741] RAX: ffffffffffffffda RBX: 00007f5e723b5fa0 RCX: 00007f5e7218e929
[  366.318399][ T9741] RDX: 0000000000000002 RSI: 00002000000008c0 RDI: 0000000000000004
[  366.318413][ T9741] RBP: 00007f5e72f39090 R08: 0000200000008000 R09: 0000000000000000
[  366.318432][ T9741] R10: 00000000000000cb R11: 0000000000000246 R12: 0000000000000001
[  366.318446][ T9741] R13: 0000000000000000 R14: 00007f5e723b5fa0 R15: 00007f5e724dfa28
[  366.318480][ T9741]  </TASK>
[  366.772892][    C0] vkms_vblank_simulate: vblank timer overrun
[  366.803968][ T9022] usb 6-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[  366.813068][ T9022] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.821303][ T9022] usb 6-1: Product: syz
[  366.825548][ T9022] usb 6-1: Manufacturer: syz
[  366.830177][ T9022] usb 6-1: SerialNumber: syz
[  366.974829][ T9746] netlink: 'syz.3.929': attribute type 10 has an invalid length.
[  366.993222][ T9746] netlink: 40 bytes leftover after parsing attributes in process `syz.3.929'.
[  367.003594][   T10] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  367.047301][ T9022] radioshark 6-1:129.201: Invalid radioSHARK device
[  367.053743][ T9750] netlink: 168 bytes leftover after parsing attributes in process `syz.4.930'.
[  367.054035][ T9022] radioshark 6-1:129.201: probe with driver radioshark failed with error -22
[  367.072113][ T9022] usbhid 6-1:129.201: couldn't find an input interrupt endpoint
[  367.086976][ T9022] usb 6-1: USB disconnect, device number 8
[  367.178486][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  367.191229][   T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  367.204240][   T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  367.215140][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  367.223190][   T10] usb 1-1: SerialNumber: syz
[  367.419452][ T9739] netlink: 40 bytes leftover after parsing attributes in process `syz.1.927'.
[  367.456294][   T10] usb 1-1: 0:2 : does not exist
[  367.470824][ T9739] random: crng reseeded on system resumption
[  367.493712][   T10] usb 1-1: USB disconnect, device number 60
[  367.543659][ T5943] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  367.566109][ T7227] udevd[7227]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  367.725047][ T5943] usb 4-1: Using ep0 maxpacket: 8
[  367.740623][ T5943] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  367.756940][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.769476][ T5943] usb 4-1: Product: syz
[  367.778631][ T5943] usb 4-1: Manufacturer: syz
[  367.783367][ T5943] usb 4-1: SerialNumber: syz
[  367.792915][ T5943] usb 4-1: config 0 descriptor??
[  367.935958][ T9771] sctp: [Deprecated]: syz.5.933 (pid 9771) Use of struct sctp_assoc_value in delayed_ack socket option.
[  367.935958][ T9771] Use struct sctp_sack_info instead
[  368.007385][ T5943] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  368.513825][   T24] usb 5-1: new low-speed USB device number 52 using dummy_hcd
[  368.893602][   T24] usb 5-1: device descriptor read/64, error -71
[  369.153566][   T24] usb 5-1: new low-speed USB device number 53 using dummy_hcd
[  369.333683][   T24] usb 5-1: device descriptor read/64, error -71
[  369.454269][   T24] usb usb5-port1: attempt power cycle
[  369.569304][ T5943] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  369.594744][ T5943] usb 4-1: USB disconnect, device number 56
[  369.744713][ T9809] netlink: 'syz.1.941': attribute type 10 has an invalid length.
[  369.752486][ T9809] netlink: 40 bytes leftover after parsing attributes in process `syz.1.941'.
[  369.820495][ T9809] bridge0: port 3(dummy0) entered blocking state
[  369.827063][ T9809] bridge0: port 3(dummy0) entered forwarding state
[  369.863626][   T24] usb 5-1: new low-speed USB device number 54 using dummy_hcd
[  369.901086][   T24] usb 5-1: device descriptor read/8, error -71
[  369.967591][ T9022] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  370.027975][ T9822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  370.106319][ T9822] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  370.133762][ T9022] usb 1-1: Using ep0 maxpacket: 32
[  370.144245][ T9022] usb 1-1: unable to get BOS descriptor or descriptor too short
[  370.156080][ T9022] usb 1-1: config 128 has an invalid interface number: 127 but max is 3
[  370.173705][   T24] usb 5-1: new low-speed USB device number 55 using dummy_hcd
[  370.211030][ T9022] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  370.229591][   T24] usb 5-1: device descriptor read/8, error -71
[  370.259874][ T9022] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4
[  370.285151][ T9022] usb 1-1: config 128 has no interface number 0
[  370.301445][ T9022] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  370.325485][ T9022] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  370.353158][ T9022] usb 1-1: config 128 interface 127 has no altsetting 0
[  370.368558][   T24] usb usb5-port1: unable to enumerate USB device
[  370.377615][ T9822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  370.395463][ T9022] usb 1-1: language id specifier not provided by device, defaulting to English
[  370.410513][ T9022] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  370.420787][ T9822] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  370.430120][ T9022] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  370.455397][ T9022] usb 1-1: Product: syz
[  370.455405][ T5943] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  370.479232][ T9022] usb 1-1: Manufacturer: syz
[  370.494970][ T9022] usb 1-1: SerialNumber: syz
[  370.635879][ T5943] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  370.645082][ T5943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  370.665511][ T5943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  370.690414][ T5943] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  370.703205][ T5943] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  370.721811][ T5943] usb 4-1: Manufacturer: syz
[  370.840484][   T30] audit: type=1326 audit(1749407170.495:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.1.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1011d8e929 code=0x7ffc0000
[  370.889508][   T30] audit: type=1326 audit(1749407170.495:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.1.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1011d8e929 code=0x7ffc0000
[  370.919445][ T5943] usb 4-1: config 0 descriptor??
[  370.952722][ T5943] igorplugusb 4-1:0.0: endpoint incorrect
[  371.161706][ T5943] usb 4-1: USB disconnect, device number 57
[  371.175378][   T30] audit: type=1326 audit(1749407170.495:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.1.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1011d8e929 code=0x7ffc0000
[  371.432417][   T30] audit: type=1326 audit(1749407170.625:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.1.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1011d8e929 code=0x7ffc0000
[  371.549104][   T30] audit: type=1326 audit(1749407170.625:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.1.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f1011d8e929 code=0x7ffc0000
[  371.630476][   T30] audit: type=1326 audit(1749407170.625:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.1.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1011d8e929 code=0x7ffc0000
[  371.775116][   T30] audit: type=1326 audit(1749407170.625:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.1.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f1011d8e929 code=0x7ffc0000
[  371.873736][   T30] audit: type=1326 audit(1749407170.625:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.1.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1011d8e929 code=0x7ffc0000
[  371.971797][   T30] audit: type=1326 audit(1749407170.625:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.1.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f1011d8e929 code=0x7ffc0000
[  372.071088][   T30] audit: type=1326 audit(1749407170.625:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.1.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1011d8e929 code=0x7ffc0000
[  372.181818][ T9857] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  372.204995][ T9857] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  372.495069][ T5943] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  372.659439][ T5943] usb 4-1: Using ep0 maxpacket: 16
[  372.690854][ T5943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  372.771135][ T5943] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  372.827891][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.868193][ T5943] usb 4-1: Product: syz
[  372.877436][ T5943] usb 4-1: Manufacturer: syz
[  372.904998][ T5943] usb 4-1: SerialNumber: syz
[  372.922355][ T9880] netlink: 'syz.5.954': attribute type 10 has an invalid length.
[  372.959328][ T5943] usb 4-1: config 0 descriptor??
[  372.963087][ T9022] usb 1-1: USB disconnect, device number 61
[  372.973892][ T9880] netlink: 40 bytes leftover after parsing attributes in process `syz.5.954'.
[  373.007710][ T5943] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  373.049377][ T9880] dummy0: entered promiscuous mode
[  373.051445][ T7227] udevd[7227]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  373.069986][ T5943] em28xx 4-1:0.0: DVB interface 0 found: bulk
[  373.086300][ T9880] bridge0: port 3(dummy0) entered blocking state
[  373.121736][ T9880] bridge0: port 3(dummy0) entered disabled state
[  373.148372][ T9880] dummy0: entered allmulticast mode
[  373.194843][ T9880] bridge0: port 3(dummy0) entered blocking state
[  373.201419][ T9880] bridge0: port 3(dummy0) entered forwarding state
[  373.626176][ T5943] em28xx 4-1:0.0: chip ID is em2874
[  373.843631][ T9022] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  374.037235][ T9907] Invalid logical block size (65535)
[  374.167538][ T9898] bond0: option arp_interval: invalid value (18446744073709531682)
[  374.219619][ T9898] bond0: option arp_interval: allowed values 0 - 2147483647
[  375.433439][ T5943] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  375.443779][ T5943] em28xx 4-1:0.0: board has no eeprom
[  375.530007][ T5943] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  375.540523][ T5943] em28xx 4-1:0.0: dvb set to bulk mode.
[  375.596047][ T5926] em28xx 4-1:0.0: Binding DVB extension
[  375.673698][ T5943] usb 4-1: USB disconnect, device number 58
[  375.716550][ T5943] em28xx 4-1:0.0: Disconnecting em28xx
[  375.726081][ T9933] loop2: detected capacity change from 0 to 7
[  375.777743][ T9933] Dev loop2: unable to read RDB block 7
[  375.810055][ T9933]  loop2: AHDI p2 p3
[  375.839763][ T9933] loop2: partition table partially beyond EOD, truncated
[  375.856040][ T9938] netlink: 'syz.3.969': attribute type 2 has an invalid length.
[  375.864792][ T5926] em28xx 4-1:0.0: Registering input extension
[  375.884617][ T9933] loop2: p2 size 150995456 extends beyond EOD, truncated
[  376.000281][ T6255] udevd[6255]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  376.384327][ T5844] Bluetooth: hci0: command 0x0406 tx timeout
[  376.391278][ T9914] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  376.391347][ T5156] Bluetooth: hci4: command 0x0405 tx timeout
[  376.391576][ T5926] rc_core: IR keymap rc-pinnacle-pctv-hd not found
[  376.417207][ T9943] netlink: 'syz.5.970': attribute type 10 has an invalid length.
[  376.425999][ T9943] netlink: 40 bytes leftover after parsing attributes in process `syz.5.970'.
[  376.485891][ T5926] Registered IR keymap rc-empty
[  376.520858][ T5926] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  376.582827][ T5926] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input21
[  376.636451][ T5926] em28xx 4-1:0.0: Input extension successfully initialized
[  376.662788][ T5943] em28xx 4-1:0.0: Closing input extension
[  376.703010][ T5943] em28xx 4-1:0.0: Freeing device
[  377.131043][ T9960] sctp: [Deprecated]: syz.0.971 (pid 9960) Use of struct sctp_assoc_value in delayed_ack socket option.
[  377.131043][ T9960] Use struct sctp_sack_info instead
[  377.279889][ T9914] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  377.297857][ T9914] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  377.309818][ T9914] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  377.321551][ T9914] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  377.343061][ T9914] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  377.365775][ T9914] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  377.372280][ T9914] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  377.389352][ T9914] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  377.407553][ T9914] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  377.419883][ T9914] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  377.430244][ T9914] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  377.799280][ T9973] netlink: 84 bytes leftover after parsing attributes in process `syz.0.972'.
[  377.987692][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  377.987711][   T30] audit: type=1800 audit(1749407177.685:245): pid=9973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.972" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=29754 res=0 errno=0
[  378.234564][ T9022] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  378.403570][ T9022] usb 5-1: Using ep0 maxpacket: 16
[  378.410813][ T9022] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11
[  378.420262][ T9022] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  378.440692][ T9022] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  378.461953][ T9022] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  378.472508][ T5156] Bluetooth: hci0: command 0x0406 tx timeout
[  378.493653][ T9022] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  378.503772][ T9022] usb 5-1: config 1 interface 0 has no altsetting 0
[  378.512134][ T9022] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  378.522926][ T9022] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.555661][ T9022] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[  378.628584][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  378.639949][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  378.814875][ T9022] ums-sddr09 5-1:1.0: probe with driver ums-sddr09 failed with error -22
[  378.880039][ T9022] usb 5-1: USB disconnect, device number 57
[  379.344201][ T5156] Bluetooth: hci2: command 0x0406 tx timeout
[  379.350344][ T5837] Bluetooth: hci1: command 0x0406 tx timeout
[  379.423949][ T5156] Bluetooth: hci4: command 0x0405 tx timeout
[  379.430004][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout
[  380.214069][ T5927] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  380.398469][ T5927] usb 1-1: Using ep0 maxpacket: 32
[  380.455367][ T5927] usb 1-1: config index 0 descriptor too short (expected 35577, got 27)
[  380.563873][ T5927] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  380.700752][T10014] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  380.728797][ T5927] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[  380.745855][ T5927] usb 1-1: config 1 has no interface number 0
[  380.771590][ T5927] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  380.957579][ T5927] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  381.351251][ T5927] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  381.387384][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.432787][ T5156] Bluetooth: hci1: command 0x0406 tx timeout
[  381.438999][ T5837] Bluetooth: hci2: command 0x0406 tx timeout
[  381.493322][ T5927] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[  381.503684][ T5156] Bluetooth: hci4: command 0x0405 tx timeout
[  381.504329][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout
[  381.679458][ T5927] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached
[  381.728605][T10035] netlink: 156 bytes leftover after parsing attributes in process `syz.1.984'.
[  381.896508][ T5926] usb 1-1: USB disconnect, device number 62
[  381.903767][ T5926] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[  382.240777][T10042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  382.298539][T10042] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  382.583598][ T5926] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  382.745600][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  382.767781][ T5926] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  382.787658][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.813149][ T5926] usb 6-1: Product: syz
[  382.824432][ T5926] usb 6-1: Manufacturer: syz
[  382.829056][ T5926] usb 6-1: SerialNumber: syz
[  382.884357][ T5926] usb 6-1: config 0 descriptor??
[  383.247168][T10064] netlink: zone id is out of range
[  383.284742][T10064] netlink: zone id is out of range
[  383.335003][T10064] netlink: zone id is out of range
[  383.371298][T10064] netlink: zone id is out of range
[  383.407452][T10064] netlink: zone id is out of range
[  383.438342][T10064] netlink: zone id is out of range
[  383.449000][T10064] netlink: zone id is out of range
[  383.456905][T10064] netlink: zone id is out of range
[  383.462413][T10064] netlink: zone id is out of range
[  383.473334][T10064] netlink: zone id is out of range
[  383.604884][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout
[  383.611175][ T5156] Bluetooth: hci4: command 0x0405 tx timeout
[  383.850055][T10077] netlink: 380 bytes leftover after parsing attributes in process `syz.0.993'.
[  384.220032][T10085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  384.229481][T10085] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  384.373570][ T5911] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  384.563588][ T5911] usb 5-1: Using ep0 maxpacket: 8
[  384.570352][ T5911] usb 5-1: config 135 has an invalid interface number: 230 but max is 0
[  384.597576][ T5911] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  384.625478][ T5911] usb 5-1: config 135 has no interface number 0
[  384.652550][ T5911] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  384.725709][ T5911] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  384.758770][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  384.780305][ T5911] usb 5-1: Product: syz
[  384.798652][ T5911] usb 5-1: Manufacturer: syz
[  384.811671][ T5911] usb 5-1: SerialNumber: syz
[  384.877980][ T5911] usb 5-1: Found UVC 0.00 device syz (18ec:3288)
[  384.939680][ T5911] usb 5-1: No valid video chain found.
[  385.087996][ T5911] usb 5-1: USB disconnect, device number 58
[  385.329142][ T5927] usb 6-1: USB disconnect, device number 9
[  385.393933][T10102] fuse: Unknown parameter '���modu'
[  385.478809][T10105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  385.503124][T10102] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  385.519791][T10107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  385.567502][T10105] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  385.596913][T10107] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  385.743675][ T5943] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  386.416365][T10126] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  386.673727][ T5927] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  386.834152][ T5927] usb 5-1: Using ep0 maxpacket: 16
[  386.843744][ T5927] usb 5-1: config index 0 descriptor too short (expected 65472, got 36)
[  386.853746][ T5927] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32
[  386.884777][ T5927] usb 5-1: config 255 has an invalid descriptor of length 208, skipping remainder of the config
[  386.922382][ T5927] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 255
[  386.959395][ T5927] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00
[  386.978521][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  387.273052][T10125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  387.294168][T10125] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  387.318712][ T5927] usb 5-1: string descriptor 0 read error: -71
[  387.333231][ T5927] usb 5-1: USB disconnect, device number 59
[  388.028930][T10151] netlink: 'syz.5.1009': attribute type 10 has an invalid length.
[  388.054730][T10151] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1009'.
[  388.137844][T10157] bridge_slave_0: invalid flags given to default FDB implementation
[  388.723244][T10171] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1012'.
[  388.756360][T10171] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1012'.
[  389.563800][ T5911] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  389.735891][ T5911] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  389.785830][ T5911] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3
[  389.853617][ T5911] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  389.877910][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  389.938451][ T5911] usb 5-1: config 0 descriptor??
[  390.190766][ T9022] IPVS: starting estimator thread 0...
[  390.295559][T10186] IPVS: using max 29 ests per chain, 69600 per kthread
[  390.390439][T10190] xt_TCPMSS: Only works on TCP SYN packets
[  390.403274][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1016'.
[  390.443841][   T30] audit: type=1326 audit(1749407190.195:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.0.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62018e929 code=0x7fc00000
[  390.602179][T10181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  390.602671][T10181] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  390.615270][   T30] audit: type=1326 audit(1749407190.355:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.0.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe6201858e7 code=0x7fc00000
[  390.615331][   T30] audit: type=1326 audit(1749407190.355:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.0.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe62012ab19 code=0x7fc00000
[  390.615373][   T30] audit: type=1326 audit(1749407190.355:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.0.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fe62012abdf code=0x7fc00000
[  390.615411][   T30] audit: type=1326 audit(1749407190.355:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.0.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe62018e929 code=0x7fc00000
[  390.617616][ T5911] Bluetooth: Can't get version to change to load ram patch err
[  390.617636][ T5911] Bluetooth: Loading sysconfig file failed
[  390.617663][ T5911] ath3k 5-1:0.0: probe with driver ath3k failed with error -71
[  390.620585][ T5911] usb 5-1: USB disconnect, device number 60
[  390.662155][T10204] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1020'.
[  390.833558][   T24] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  390.951263][T10211] netlink: 'syz.3.1021': attribute type 10 has an invalid length.
[  390.951290][T10211] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1021'.
[  391.015265][   T24] usb 1-1: Using ep0 maxpacket: 32
[  391.028926][   T24] usb 1-1: too many configurations: 154, using maximum allowed: 8
[  391.199044][   T24] usb 1-1: unable to read config index 0 descriptor/start: -61
[  391.216743][   T24] usb 1-1: can't read configurations, error -61
[  391.343758][   T24] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  391.358608][T10216] veth0: entered promiscuous mode
[  391.431075][   T31] INFO: task kworker/0:2:978 blocked for more than 143 seconds.
[  391.431103][   T31]       Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0
[  391.431116][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  391.431126][   T31] task:kworker/0:2     state:D stack:22184 pid:978   tgid:978   ppid:2      task_flags:0x4288060 flags:0x00004000
[  391.431185][   T31] Workqueue: usb_hub_wq hub_event
[  391.431209][   T31] Call Trace:
[  391.431217][   T31]  <TASK>
[  391.431231][   T31]  __schedule+0x16f5/0x4d00
[  391.431281][   T31]  ? schedule+0x165/0x360
[  391.431315][   T31]  ? __pfx___schedule+0x10/0x10
[  391.431361][   T31]  ? schedule+0x91/0x360
[  391.431393][   T31]  schedule+0x165/0x360
[  391.431424][   T31]  schedule_timeout+0x9a/0x270
[  391.431450][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  391.431489][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  391.431517][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  391.431545][   T31]  ? wait_for_completion+0x267/0x5d0
[  391.431577][   T31]  wait_for_completion+0x2bf/0x5d0
[  391.431622][   T31]  ? __pfx_wait_for_completion+0x10/0x10
[  391.431668][   T31]  i2c_del_adapter+0x581/0x6e0
[  391.431696][   T31]  ? up_write+0x1c4/0x420
[  391.431721][   T31]  ? __pfx_i2c_del_adapter+0x10/0x10
[  391.431746][   T31]  ? __pfx_cp2112_remove+0x10/0x10
[  391.431765][   T31]  ? sysfs_remove_group+0x23d/0x2c0
[  391.431793][   T31]  ? __pfx_cp2112_remove+0x10/0x10
[  391.431810][   T31]  cp2112_remove+0x5b/0x100
[  391.431831][   T31]  hid_device_remove+0x225/0x370
[  391.431856][   T31]  ? __pfx_hid_device_remove+0x10/0x10
[  391.431881][   T31]  device_release_driver_internal+0x46f/0x7c0
[  391.431921][   T31]  bus_remove_device+0x34d/0x410
[  391.431947][   T31]  device_del+0x511/0x8e0
[  391.431980][   T31]  ? __pfx_device_del+0x10/0x10
[  391.432012][   T31]  hid_destroy_device+0x6b/0x1b0
[  391.432039][   T31]  usbhid_disconnect+0x9f/0xc0
[  391.432067][   T31]  usb_unbind_interface+0x26b/0x8f0
[  391.432098][   T31]  ? __pfx_usb_unbind_interface+0x10/0x10
[  391.432122][   T31]  device_release_driver_internal+0x4d9/0x7c0
[  391.432154][   T31]  bus_remove_device+0x34d/0x410
[  391.432180][   T31]  device_del+0x511/0x8e0
[  391.432206][   T31]  ? kfree+0x18e/0x440
[  391.432228][   T31]  ? __pfx_device_del+0x10/0x10
[  391.432249][   T31]  ? kobject_put+0x446/0x480
[  391.432282][   T31]  usb_disable_device+0x3e9/0x8a0
[  391.432311][   T31]  usb_disconnect+0x330/0x910
[  391.432349][   T31]  hub_event+0x1cdb/0x4a00
[  391.432396][   T31]  ? do_raw_spin_lock+0x121/0x290
[  391.432423][   T31]  ? register_lock_class+0x51/0x320
[  391.432468][   T31]  ? __pfx_hub_event+0x10/0x10
[  391.432498][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  391.432542][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  391.432569][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  391.432598][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  391.432630][   T31]  process_scheduled_works+0xae1/0x17b0
[  391.432691][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  391.432739][   T31]  worker_thread+0x8a0/0xda0
[  391.432762][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  391.432799][   T31]  ? __kthread_parkme+0x7b/0x200
[  391.432830][   T31]  kthread+0x70e/0x8a0
[  391.432856][   T31]  ? __pfx_worker_thread+0x10/0x10
[  391.432874][   T31]  ? __pfx_kthread+0x10/0x10
[  391.432905][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  391.432933][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  391.432961][   T31]  ? __pfx_kthread+0x10/0x10
[  391.432985][   T31]  ret_from_fork+0x3f9/0x770
[  391.433017][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  391.433052][   T31]  ? __switch_to_asm+0x39/0x70
[  391.433071][   T31]  ? __switch_to_asm+0x33/0x70
[  391.433091][   T31]  ? __pfx_kthread+0x10/0x10
[  391.433115][   T31]  ret_from_fork_asm+0x1a/0x30
[  391.433152][   T31]  </TASK>
[  391.433270][   T31] 
[  391.433270][   T31] Showing all locks held in the system:
[  391.433282][   T31] 6 locks held by kworker/1:0/24:
[  391.433294][   T31]  #0: ffff888140adf548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  391.433359][   T31]  #1: ffffc900001e7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  391.433420][   T31]  #2: ffff888144b43198 (&dev->mutex){....}-{4:4}
[  391.472214][T10216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1023'.
[  391.477679][   T31] , at: hub_event+0x184/0x4a00
[  391.633989][   T24] usb 1-1: Using ep0 maxpacket: 32
[  391.927515][   T24] usb 1-1: too many configurations: 154, using maximum allowed: 8
[  391.941820][   T24] usb 1-1: unable to read config index 0 descriptor/start: -61
[  391.949802][   T24] usb 1-1: can't read configurations, error -61
[  391.956875][   T24] usb usb1-port1: attempt power cycle
[  392.033623][ T5943] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  392.055118][   T31]  #3: ffff888028105510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00
[  392.067306][   T31]  #4: ffff888027d4ad68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00
[  392.077360][   T31]  #5: ffffffff8eddc450 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x163/0x1750
[  392.089470][T10228] usb usb8: usbfs: process 10228 (syz.4.1024) did not claim interface 0 before use
[  392.180091][   T31] 1 lock held by khungtaskd/31:
[  392.200567][   T31]  #0: ffffffff8e13f060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  392.213856][ T5943] usb 6-1: Using ep0 maxpacket: 16
[  392.223112][ T5943] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11
[  392.232969][   T31] 6 locks held by kworker/0:2/978:
[  392.242892][   T31]  #0: 
[  392.242891][ T5943] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  392.265834][   T31] ffff888140adf548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  392.284018][ T5943] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  392.300660][   T31]  #1: ffffc90003957bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  392.303563][   T24] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  392.339361][ T5943] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  392.350805][   T31]  #2: ffff888144f10198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00
[  392.365523][ T5943] usb 6-1: config 0 descriptor??
[  392.396175][ T5926] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  392.416649][   T24] usb 1-1: Using ep0 maxpacket: 32
[  392.422370][   T24] usb 1-1: too many configurations: 154, using maximum allowed: 8
[  392.435658][   T24] usb 1-1: unable to read config index 0 descriptor/start: -61
[  392.453382][   T24] usb 1-1: can't read configurations, error -61
[  392.461005][   T31]  #3: ffff88802130b198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x910
[  392.493556][   T31]  #4: ffff888024727160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0
[  392.520005][   T31]  #5: ffff88807fed1a20 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0
[  392.549661][   T31] 3 locks held by kworker/u8:6/1100:
[  392.570052][   T31]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  392.583106][ T5926] usb 5-1: Using ep0 maxpacket: 32
[  392.598275][ T5926] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  392.622608][ T5926] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  392.631923][   T24] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  392.639596][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.653791][ T5926] usb 5-1: Product: syz
[  392.666330][ T5926] usb 5-1: Manufacturer: syz
[  392.671267][   T31]  #1: ffffc90003c7fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  392.687805][ T5926] usb 5-1: SerialNumber: syz
[  392.695372][   T24] usb 1-1: Using ep0 maxpacket: 32
[  392.718934][   T24] usb 1-1: too many configurations: 154, using maximum allowed: 8
[  392.730530][ T5926] usb 5-1: config 0 descriptor??
[  392.745634][   T31]  #2: ffffffff8f510808 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  392.779963][   T31] 2 locks held by getty/5595:
[  392.786355][   T24] usb 1-1: unable to read config index 0 descriptor/start: -61
[  392.797641][   T31]  #0: ffff888034bc20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  392.799773][ T5943] kovaplus 0003:1E7D:2D50.000E: unknown main item tag 0x0
[  392.825810][   T24] usb 1-1: can't read configurations, error -61
[  392.833219][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  392.843871][   T24] usb usb1-port1: unable to enumerate USB device
[  392.854016][   T31] 6 locks held by kworker/1:6/5943:
[  392.863811][ T5943] kovaplus 0003:1E7D:2D50.000E: unknown main item tag 0x0
[  392.870993][ T5943] kovaplus 0003:1E7D:2D50.000E: unknown main item tag 0x0
[  392.887548][   T31] 2 locks held by syz.3.1023/10215:
[  392.907888][ T5943] kovaplus 0003:1E7D:2D50.000E: hidraw1: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.5-1/input0
[  392.925714][   T31]  #0: ffff88804c20e208 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  392.949870][   T31]  #1: ffffffff8f510808 (rtnl_mutex){+.+.}-{4:4}, at: packet_release+0x482/0xce0
[  392.981184][T10228] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1024'.
[  393.041686][   T31] 2 locks held by syz.3.1023/10216:
[  393.060405][   T31]  #0: ffffffff8f510808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x331/0x710
[  393.088815][   T31]  #1: ffffffff8e144b78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  393.125733][   T31] 2 locks held by syz.4.1024/10222:
[  393.131013][   T31] 1 lock held by dhcpcd/10226:
[  393.143829][   T31]  #0: ffff888027e86258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  393.154016][   T31] 2 locks held by dhcpcd/10227:
[  393.159024][   T31]  #0: ffff888027e82258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  393.175288][   T31]  #1: ffffffff8e144b78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  393.191690][   T31] 1 lock held by dhcpcd/10229:
[  393.199162][   T31]  #0: ffff888031416258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  393.212876][   T31] 1 lock held by dhcpcd/10230:
[  393.219168][   T31]  #0: ffff88807eec4258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  393.232033][ T5943] kovaplus 0003:1E7D:2D50.000E: couldn't init struct kovaplus_device
[  393.240485][ T5943] kovaplus 0003:1E7D:2D50.000E: couldn't install mouse
[  393.258743][ T5943] kovaplus 0003:1E7D:2D50.000E: probe with driver kovaplus failed with error -5
[  393.270843][   T31] 
[  393.273410][   T31] =============================================
[  393.273410][   T31] 
[  393.363289][   T31] NMI backtrace for cpu 1
[  393.363309][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) 
[  393.363334][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  393.363347][   T31] Call Trace:
[  393.363355][   T31]  <TASK>
[  393.363364][   T31]  dump_stack_lvl+0x189/0x250
[  393.363399][   T31]  ? __wake_up_klogd+0xd9/0x110
[  393.363427][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  393.363469][   T31]  ? __pfx__printk+0x10/0x10
[  393.363504][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  393.363555][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  393.363582][   T31]  ? _printk+0xcf/0x120
[  393.363610][   T31]  ? __pfx__printk+0x10/0x10
[  393.363635][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  393.363678][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  393.363710][   T31]  watchdog+0xfee/0x1030
[  393.363740][   T31]  ? watchdog+0x1de/0x1030
[  393.363776][   T31]  kthread+0x70e/0x8a0
[  393.363803][   T31]  ? __pfx_watchdog+0x10/0x10
[  393.363830][   T31]  ? __pfx_kthread+0x10/0x10
[  393.363855][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  393.363885][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  393.363916][   T31]  ? __pfx_kthread+0x10/0x10
[  393.363940][   T31]  ret_from_fork+0x3f9/0x770
[  393.363971][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  393.364007][   T31]  ? __switch_to_asm+0x39/0x70
[  393.364027][   T31]  ? __switch_to_asm+0x33/0x70
[  393.364048][   T31]  ? __pfx_kthread+0x10/0x10
[  393.364073][   T31]  ret_from_fork_asm+0x1a/0x30
[  393.364110][   T31]  </TASK>
[  393.515892][   T31] Sending NMI from CPU 1 to CPUs 0:
[  393.521139][    C0] NMI backtrace for cpu 0
[  393.521153][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) 
[  393.521173][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  393.521184][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  393.521215][    C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 35 22 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  393.521231][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2
[  393.521246][    C0] RAX: aeb29a6c0c733000 RBX: ffffffff81976058 RCX: aeb29a6c0c733000
[  393.521260][    C0] RDX: 0000000000000001 RSI: ffffffff8d9816ba RDI: ffffffff8be28280
[  393.521272][    C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb
[  393.521285][    C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa113f0
[  393.521298][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50
[  393.521310][    C0] FS:  0000000000000000(0000) GS:ffff888125c52000(0000) knlGS:0000000000000000
[  393.521324][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  393.521336][    C0] CR2: 0000200000001008 CR3: 00000000341de000 CR4: 00000000003526f0
[  393.521351][    C0] DR0: 0000000010000007 DR1: 400000000000000c DR2: 0000000000000000
[  393.521363][    C0] DR3: 0000000000000005 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  393.521373][    C0] Call Trace:
[  393.521380][    C0]  <TASK>
[  393.521387][    C0]  default_idle+0x13/0x20
[  393.521405][    C0]  default_idle_call+0x74/0xb0
[  393.521425][    C0]  do_idle+0x1e8/0x510
[  393.521445][    C0]  ? __pfx_do_idle+0x10/0x10
[  393.521469][    C0]  cpu_startup_entry+0x44/0x60
[  393.521485][    C0]  rest_init+0x2de/0x300
[  393.521505][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[  393.521531][    C0]  start_kernel+0x47d/0x500
[  393.521551][    C0]  x86_64_start_reservations+0x24/0x30
[  393.521576][    C0]  x86_64_start_kernel+0x143/0x1c0
[  393.521599][    C0]  common_startup_64+0x13e/0x147
[  393.521626][    C0]  </TASK>
[  393.803689][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  393.810599][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) 
[  393.822099][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  393.832252][   T31] Call Trace:
[  393.835605][   T31]  <TASK>
[  393.838572][   T31]  dump_stack_lvl+0x99/0x250
[  393.843225][   T31]  ? __asan_memcpy+0x40/0x70
[  393.847865][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  393.853118][   T31]  ? __pfx__printk+0x10/0x10
[  393.857766][   T31]  panic+0x2db/0x790
[  393.861799][   T31]  ? __pfx_panic+0x10/0x10
[  393.866266][   T31]  ? nmi_backtrace_stall_check+0x433/0x440
[  393.872113][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  393.877527][   T31]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  393.883735][   T31]  watchdog+0x102d/0x1030
[  393.888125][   T31]  ? watchdog+0x1de/0x1030
[  393.892587][   T31]  kthread+0x70e/0x8a0
[  393.896702][   T31]  ? __pfx_watchdog+0x10/0x10
[  393.901410][   T31]  ? __pfx_kthread+0x10/0x10
[  393.906119][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  393.911354][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  393.916614][   T31]  ? __pfx_kthread+0x10/0x10
[  393.921265][   T31]  ret_from_fork+0x3f9/0x770
[  393.925923][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  393.931089][   T31]  ? __switch_to_asm+0x39/0x70
[  393.935890][   T31]  ? __switch_to_asm+0x33/0x70
[  393.940690][   T31]  ? __pfx_kthread+0x10/0x10
[  393.945326][   T31]  ret_from_fork_asm+0x1a/0x30
[  393.950149][   T31]  </TASK>
[  393.953526][   T31] Kernel Offset: disabled
[  393.957863][   T31] Rebooting in 86400 seconds..